This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json) Hash identifier: 4YjR4rzneUVgYOTGe2gQVXBktryuHKKAs2TacJGGG8w= Subject key identifier: B4:6A:50:38:B5:10:A5:51:8F:9E:70:8A:C7:C5:E5:93:06:13:8F:F3 Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba Certificate serial: 019AF42E5878472A32B05F91C888A323D113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft Manifest number: 1585 Signing time: Sat 06 Dec 2025 15:01:09 +0000 Manifest this update: Sat 06 Dec 2025 15:01:09 +0000 Manifest next update: Sun 07 Dec 2025 15:01:09 +0000 Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=) 2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: XPZO6YVXeEHyqRMj/HP+cJMxpd4jF7/1qvkrJDkhWKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:58:78:47:2a:32:b0:5f:91:c8:88:a3:23:d1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba Validity Not Before: Dec 6 15:01:09 2025 GMT Not After : Dec 7 15:01:09 2025 GMT Subject: CN=b46a5038b510a5518f9e708ac7c5e59306138ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:ff:75:9b:4b:41:16:41:68:cb:25:67:22: e7:c3:ee:b0:d6:25:6e:84:df:14:39:a9:f4:80:76: 61:bb:e5:d1:c1:c6:16:44:c6:a4:ae:bf:95:83:4f: dc:62:80:3b:43:8d:be:bf:0a:f2:2c:49:77:1b:eb: 31:99:89:d0:25:80:4f:d4:7d:a1:3a:50:14:99:8c: a0:17:7e:76:6d:b5:62:d3:eb:9a:a7:36:3d:83:9e: 6e:28:38:92:c7:bb:20:80:2c:50:2c:9a:bb:42:fe: 72:20:6e:7b:b0:17:1a:fe:79:45:22:1a:d8:63:d6: 04:f2:ad:bc:0a:aa:bf:92:df:b1:e1:25:4f:c5:6e: 8d:bf:d1:2f:df:e5:41:95:a6:f7:8a:1b:61:3b:71: 3d:df:f9:3d:44:af:07:13:5d:6f:90:94:57:0b:96: 76:56:dd:d7:77:f0:16:39:21:24:0c:1e:8c:9d:d1: 8e:c2:5c:c1:d4:03:21:92:2f:e3:ac:43:7f:2e:f0: 4f:aa:44:12:8b:3c:ff:54:b9:c3:3a:95:66:40:a9: a6:aa:2a:5b:32:c4:66:00:c6:88:cd:dd:98:8a:6c: 65:d1:c0:8d:77:a2:95:cf:e9:46:ac:e9:54:d2:52: fb:9c:68:91:96:19:cc:09:ee:b2:8b:14:64:3e:1a: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6A:50:38:B5:10:A5:51:8F:9E:70:8A:C7:C5:E5:93:06:13:8F:F3 X509v3 Authority Key Identifier: keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:0d:c0:43:55:f8:9c:bd:fa:25:d1:eb:04:00:8f:0b:a7: 01:e7:09:2b:36:cb:20:1a:0d:5a:85:87:18:47:31:1e:43:bb: 22:0f:a7:77:c7:cb:ad:4f:58:0d:8a:fa:17:cf:fd:6f:a2:c8: b1:9c:2b:76:50:de:57:67:fc:7b:8a:32:2a:55:45:2a:25:1e: 61:78:51:89:6a:75:88:98:53:e2:43:5d:9c:5e:2b:5e:08:e3: 9e:22:cc:82:8a:6e:21:39:1d:24:45:72:57:ee:71:88:dd:44: 5a:5f:04:e9:81:31:f6:48:52:23:aa:f6:f4:b1:bf:3c:90:49: de:4c:34:f8:50:50:80:fa:bf:94:5d:87:e9:85:56:59:a6:96: 0d:fe:03:89:e8:3c:f1:a8:ef:11:87:ea:22:bc:e3:a3:d8:79: 3f:60:f7:64:27:75:73:f4:e0:5d:4b:10:25:f7:8d:04:ab:23: 44:c9:07:dd:af:cf:46:a5:5e:9d:d1:e0:4a:54:12:6a:4e:f3: 56:53:59:8b:16:ec:5c:f2:2b:56:d0:92:21:ca:24:5b:f4:84: 0b:53:49:9b:fb:83:a6:cd:b0:76:4b:e1:7f:a1:3e:a3:8a:18: b2:92:31:06:ba:19:32:af:9f:dd:0b:39:f7:ae:54:58:81:ed: bc:62:49:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Llh4RyoysF+RyIijI9ETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk NzJmYmEwHhcNMjUxMjA2MTUwMTA5WhcNMjUxMjA3MTUwMTA5WjAzMTEwLwYDVQQD EyhiNDZhNTAzOGI1MTBhNTUxOGY5ZTcwOGFjN2M1ZTU5MzA2MTM4ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTX/dZtLQRZBaMslZyLnw+6w1iVu hN8UOan0gHZhu+XRwcYWRMakrr+Vg0/cYoA7Q42+vwryLEl3G+sxmYnQJYBP1H2h OlAUmYygF352bbVi0+uapzY9g55uKDiSx7sggCxQLJq7Qv5yIG57sBca/nlFIhrY Y9YE8q28Cqq/kt+x4SVPxW6Nv9Ev3+VBlab3ihthO3E93/k9RK8HE11vkJRXC5Z2 Vt3Xd/AWOSEkDB6MndGOwlzB1AMhki/jrEN/LvBPqkQSizz/VLnDOpVmQKmmqipb MsRmAMaIzd2Yimxl0cCNd6KVz+lGrOlU0lL7nGiRlhnMCe6yixRkPhoo9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRqUDi1EKVRj55wisfF5ZMGE4/zMB8GA1UdIwQY MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3 LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFENwENV +Jy9+iXR6wQAjwunAecJKzbLIBoNWoWHGEcxHkO7Ig+nd8fLrU9YDYr6F8/9b6LI sZwrdlDeV2f8e4oyKlVFKiUeYXhRiWp1iJhT4kNdnF4rXgjjniLMgopuITkdJEVy V+5xiN1EWl8E6YEx9khSI6r29LG/PJBJ3kw0+FBQgPq/lF2H6YVWWaaWDf4Dieg8 8ajvEYfqIrzjo9h5P2D3ZCd1c/TgXUsQJfeNBKsjRMkH3a/PRqVendHgSlQSak7z VlNZixbsXPIrVtCSIcokW/SEC1NJm/uDps2wdkvhf6E+o4oYspIxBroZMq+f3Qs5 965UWIHtvGJJlA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:17 2025 by rpki-client