This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json) Hash identifier: feYojnluD6YH3G9E4NoOqRBKihAwXIEizevwBpkDsgE= Subject key identifier: 23:7B:1E:CE:84:08:3F:19:21:26:75:49:E7:DA:4B:50:4F:1E:7B:60 Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19 Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19 Certificate serial: 019AF19AF1982C35B326C041DF354C60E0D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft Manifest number: 04EA Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: OjmDg6QgbUTse3Xyh0kRSTvLw8BZXVebKRJKM/r08ig=) 2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f1:98:2c:35:b3:26:c0:41:df:35:4c:60:e0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=237b1ece84083f1921267549e7da4b504f1e7b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:83:15:a9:b7:84:a8:32:67:9f:13:c7:d1: 99:84:82:da:c1:5b:17:23:a6:bd:30:6e:c7:06:a9: 43:80:05:00:1c:68:dc:3d:a6:47:ea:12:88:9c:ce: 23:ff:11:d6:fa:50:3a:e6:a5:1c:44:d8:84:ef:c4: 37:36:5a:54:bc:29:49:5c:f4:c8:4a:07:7f:a0:1f: 9c:60:3d:44:d0:5a:a2:23:2d:23:92:da:b4:49:96: f5:2b:19:d8:5f:40:0c:2a:31:f0:c9:df:96:61:19: 14:79:4a:a2:95:73:b1:aa:9b:ab:6d:88:b5:3b:59: 36:55:ed:3a:9c:4c:ab:ce:46:33:95:2a:09:bb:e5: 37:c7:f9:f0:0e:85:97:b8:16:49:69:73:e2:26:bd: e0:9d:54:69:a6:73:d1:db:a5:af:ed:07:89:1c:e3: 04:c8:cc:a8:db:36:39:0c:e5:7f:1d:14:08:99:88: bf:11:59:0b:33:43:3b:e1:34:2e:b2:6c:b7:9e:ff: 80:6e:f3:9a:1f:1e:b9:0a:e8:37:e5:e4:e8:fc:9c: 09:5c:43:a2:b7:e3:92:ca:4e:f2:ed:75:9a:03:34: 45:5c:60:f3:be:d4:5e:6c:fa:f3:ab:46:b3:0a:85: 81:3f:70:cd:33:0a:55:f6:f3:c1:d0:da:98:8f:a8: d0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:1E:CE:84:08:3F:19:21:26:75:49:E7:DA:4B:50:4F:1E:7B:60 X509v3 Authority Key Identifier: keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:94:7b:72:bf:65:35:7e:c1:6a:2a:b0:5b:91:1b:2a:f3:f6: e2:ba:ad:7a:4d:3e:b6:01:44:08:c9:a7:61:b9:7c:ca:d2:78: 6f:bf:32:ac:4c:06:4c:59:f0:a4:79:67:2f:54:22:8c:93:e5: 80:d0:d3:0d:b8:8a:80:3e:29:eb:a8:6d:c8:b5:21:0e:69:c4: 71:a0:29:f4:db:15:9b:27:bd:e0:ef:00:06:07:81:d4:bf:64: 10:4a:ff:c3:fd:72:19:32:d0:d5:a9:ab:d2:8e:da:c5:c7:42: ad:42:da:42:b2:6f:d2:09:fb:b3:c1:94:0e:50:e1:ed:fd:46: ca:46:7a:7c:3e:1d:a2:e1:7d:ac:47:de:da:6f:52:ac:ea:bd: d9:9d:25:40:96:d0:b0:01:f6:79:d0:96:3d:72:de:09:10:29: b0:ec:ee:bd:c1:3b:d1:ce:6d:b2:b9:7f:cc:d2:d3:58:76:e7: 31:da:2f:02:7f:f4:3d:27:db:60:ac:4e:e1:5d:cd:63:9f:17: 2a:6d:ab:51:fa:7a:fa:b7:61:f5:77:98:b2:f0:ae:51:8c:cb: 12:d6:2f:65:84:74:ea:b4:8a:42:9c:92:8d:89:a4:98:69:d3: 3f:2e:82:28:0f:46:c6:0b:0f:7d:8b:67:bc:eb:74:56:1e:c4: be:83:a5:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvGYLDWzJsBB3zVMYODVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzM2ZDVlNzRmMWY4YjdkYjEzMjlmMDBiYjg1NzI0MWFl NzRkMTkwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EygyMzdiMWVjZTg0MDgzZjE5MjEyNjc1NDllN2RhNGI1MDRmMWU3YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvODFam3hKgyZ58Tx9GZhILawVsX I6a9MG7HBqlDgAUAHGjcPaZH6hKInM4j/xHW+lA65qUcRNiE78Q3NlpUvClJXPTI Sgd/oB+cYD1E0FqiIy0jktq0SZb1KxnYX0AMKjHwyd+WYRkUeUqilXOxqpurbYi1 O1k2Ve06nEyrzkYzlSoJu+U3x/nwDoWXuBZJaXPiJr3gnVRppnPR26Wv7QeJHOME yMyo2zY5DOV/HRQImYi/EVkLM0M74TQusmy3nv+AbvOaHx65Cug35eTo/JwJXEOi t+OSyk7y7XWaAzRFXGDzvtRebPrzq0azCoWBP3DNMwpV9vPB0NqYj6jQOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN7Hs6ECD8ZISZ1SefaS1BPHntgMB8GA1UdIwQY MBaAFNQzbV508fi32xMp8Au4VyQa500ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYt MmRkMjUxODRiMGQwLzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYtMmRkMjUxODRiMGQw LzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJR7cr9l NX7BaiqwW5EbKvP24rqtek0+tgFECMmnYbl8ytJ4b78yrEwGTFnwpHlnL1QijJPl gNDTDbiKgD4p66htyLUhDmnEcaAp9NsVmye94O8ABgeB1L9kEEr/w/1yGTLQ1amr 0o7axcdCrULaQrJv0gn7s8GUDlDh7f1GykZ6fD4douF9rEfe2m9SrOq92Z0lQJbQ sAH2edCWPXLeCRApsOzuvcE70c5tsrl/zNLTWHbnMdovAn/0PSfbYKxO4V3NY58X Km2rUfp6+rdh9XeYsvCuUYzLEtYvZYR06rSKQpySjYmkmGnTPy6CKA9GxgsPfYtn vOt0Vh7EvoOlwA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:58 2025 by rpki-client