This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft File: 19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json) Hash identifier: pABCIXPDL7Ijf2JQSFi8zqmfebizDVy+7I05xQLQOcE= Subject key identifier: 0C:A9:D2:0F:2C:77:91:64:82:F8:F7:C4:D6:40:82:79:5B:25:B7:FE Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Certificate serial: 019AF5AEC11F8A3371BA9EACAFB7584574D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft Manifest number: 0A80 Signing time: Sat 06 Dec 2025 22:01:01 +0000 Manifest this update: Sat 06 Dec 2025 22:01:01 +0000 Manifest next update: Sun 07 Dec 2025 22:01:01 +0000 Files and hashes: 1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: zN7Brjb9R5ww3I5ha3jyxGCPg6hbin8Z7hxcbPH6/oo=) 2: n54-V6R69Zbq8jSQEWdfXQAauKs.roa (hash: 7adElCmMmz9gs9syq0xK+Ax2i+eejhFJcT8zpbTEy5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c1:1f:8a:33:71:ba:9e:ac:af:b7:58:45:74:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Validity Not Before: Dec 6 22:01:01 2025 GMT Not After : Dec 7 22:01:01 2025 GMT Subject: CN=0ca9d20f2c77916482f8f7c4d64082795b25b7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:3c:aa:a4:43:5f:6b:5a:a8:51:3b:ff:6b: b6:cd:0e:e2:a2:7f:d6:58:b5:9d:72:28:fe:f5:74: ce:b4:8d:99:1f:ea:81:fc:f5:76:65:69:d2:1f:03: 9b:cc:97:ea:36:6b:e1:43:d9:b7:13:93:f4:cd:d3: 52:4c:99:97:cf:7e:66:52:39:cd:38:d9:a3:33:38: 1a:49:e5:84:3a:21:41:41:13:3a:84:20:10:7e:f2: d2:3d:97:8f:89:a3:80:26:1b:8c:d9:17:dc:f6:af: ab:4e:08:c7:cb:cc:be:51:3b:2a:10:31:6f:61:00: 02:fb:a6:87:ae:73:5d:1b:62:1a:8e:46:ff:df:52: 27:50:2e:59:39:82:99:1d:4e:5c:c0:a1:be:7f:bf: 3b:a6:fb:0e:9a:62:1b:3e:bd:26:d4:23:aa:f3:67: ec:75:65:7e:28:99:e4:c1:e9:d5:1f:c8:cb:64:e9: bf:a2:50:99:cb:67:37:7b:42:ee:ed:73:2e:0a:5d: e7:f4:7d:43:23:00:ac:b9:b8:4e:d8:dc:2c:07:26: a7:c6:59:87:85:ae:41:6c:9c:8f:c5:3b:62:9d:14: 83:be:56:65:14:0d:4a:b0:87:be:d2:5d:ea:9a:07: 1d:83:ae:11:83:d2:47:95:39:16:9c:c0:73:31:21: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:D2:0F:2C:77:91:64:82:F8:F7:C4:D6:40:82:79:5B:25:B7:FE X509v3 Authority Key Identifier: keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2b:72:98:b1:5e:22:cd:bb:62:7e:3a:b9:e8:32:8f:03:ed: 12:de:3a:74:a8:02:34:eb:7b:cb:0a:51:0d:77:a7:af:d4:78: 8d:14:0d:23:e0:55:72:61:fd:d4:c5:d0:6d:20:12:86:cf:a7: bb:eb:20:78:50:66:b5:cb:3a:8a:f8:82:a8:1d:49:53:ec:15: 94:49:fc:0a:b3:12:08:2a:96:3c:f1:f6:15:6b:7d:0d:40:84: 4d:31:8a:6f:d5:f2:80:f0:c5:b7:c2:c6:7f:aa:c9:08:bb:5b: 93:91:d8:41:9d:c2:43:f1:25:c3:d2:5b:a4:39:00:3f:2c:8e: 64:f7:65:1f:7f:d0:98:3a:75:53:53:11:6c:69:59:07:9d:02: a6:c5:d0:1e:1e:54:99:6f:08:e8:e5:d8:35:78:0e:a9:ab:61: b6:c3:9d:90:e7:ca:2b:ed:ce:0a:4a:5d:d5:6d:1c:f2:60:d0: 52:3e:8a:cb:cc:06:1b:e4:d2:71:28:61:93:fe:6d:88:8b:6f: a3:e4:bc:4c:f7:3f:45:41:6f:93:46:cc:39:c6:fe:60:0e:ac: 8b:e3:23:ca:3d:13:f3:d4:d6:9d:a1:53:8e:f7:3e:52:14:86: 18:cc:b8:c7:2a:83:a5:ae:a8:69:57:19:71:20:19:15:a9:79: af:92:00:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsEfijNxup6sr7dYRXTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZGIxMzJiNDdjOGVkZDgzZmVkMDJkNTYxZTc1MDYwNGMy MGIxZjgwHhcNMjUxMjA2MjIwMTAxWhcNMjUxMjA3MjIwMTAxWjAzMTEwLwYDVQQD EygwY2E5ZDIwZjJjNzc5MTY0ODJmOGY3YzRkNjQwODI3OTViMjViN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww88qqRDX2taqFE7/2u2zQ7ion/W WLWdcij+9XTOtI2ZH+qB/PV2ZWnSHwObzJfqNmvhQ9m3E5P0zdNSTJmXz35mUjnN ONmjMzgaSeWEOiFBQRM6hCAQfvLSPZePiaOAJhuM2Rfc9q+rTgjHy8y+UTsqEDFv YQAC+6aHrnNdG2Iajkb/31InUC5ZOYKZHU5cwKG+f787pvsOmmIbPr0m1COq82fs dWV+KJnkwenVH8jLZOm/olCZy2c3e0Lu7XMuCl3n9H1DIwCsubhO2NwsByanxlmH ha5BbJyPxTtinRSDvlZlFA1KsIe+0l3qmgcdg64Rg9JHlTkWnMBzMSGJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyp0g8sd5Fkgvj3xNZAgnlbJbf+MB8GA1UdIwQY MBaAFNfbEytHyO3YP+0C1WHnUGBMILH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTkt YTA0NjAzNzA5NTE5LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTktYTA0NjAzNzA5NTE5 LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASytymLFe Is27Yn46uegyjwPtEt46dKgCNOt7ywpRDXenr9R4jRQNI+BVcmH91MXQbSAShs+n u+sgeFBmtcs6iviCqB1JU+wVlEn8CrMSCCqWPPH2FWt9DUCETTGKb9XygPDFt8LG f6rJCLtbk5HYQZ3CQ/Elw9JbpDkAPyyOZPdlH3/QmDp1U1MRbGlZB50CpsXQHh5U mW8I6OXYNXgOqathtsOdkOfKK+3OCkpd1W0c8mDQUj6Ky8wGG+TScShhk/5tiItv o+S8TPc/RUFvk0bMOcb+YA6si+Mjyj0T89TWnaFTjvc+UhSGGMy4xyqDpa6oaVcZ cSAZFal5r5IABA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:17:49 2025 by rpki-client