This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json) Hash identifier: ysX6AuSEOMAApQqereCAC924UlrFzOS0Cg5U1t1C9sU= Subject key identifier: BD:66:7C:64:4E:45:C8:6C:31:DE:A5:AF:D2:25:4C:4B:58:1E:8F:E7 Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Certificate serial: 019B360E5B332A6C5794E97E959262B2BF61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft Manifest number: 114D Signing time: Fri 19 Dec 2025 10:01:09 +0000 Manifest this update: Fri 19 Dec 2025 10:01:09 +0000 Manifest next update: Sat 20 Dec 2025 10:01:09 +0000 Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: VC51yVBdc5SfhlXUbs2w5V8MmFqa51gQkXFknN5SjhE=) 2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:5b:33:2a:6c:57:94:e9:7e:95:92:62:b2:bf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Validity Not Before: Dec 19 10:01:09 2025 GMT Not After : Dec 20 10:01:09 2025 GMT Subject: CN=bd667c644e45c86c31dea5afd2254c4b581e8fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:c7:27:37:5e:e0:05:0e:e9:eb:12:cf:1d: 9a:6d:f5:50:27:bd:59:85:16:ae:f7:a1:95:e3:1c: d1:b6:25:6b:22:35:7d:62:bd:5e:c8:f1:86:34:90: 49:19:10:98:0e:d3:8b:40:66:b6:87:5b:42:e5:6e: 9e:a8:83:57:ba:cf:c6:7f:ec:aa:73:69:3c:58:92: da:27:8d:f4:a8:85:a7:81:b3:ea:54:d6:27:5f:57: 5d:5d:21:20:37:62:cd:f6:c2:d9:39:46:1b:b4:f0: f0:6a:6d:c6:61:5a:83:43:ef:ef:89:1d:5f:b9:21: 41:e7:5e:c7:6a:d5:52:38:df:b4:6b:93:bd:54:aa: cd:fc:9e:ae:34:1a:ce:20:cb:3b:a6:0a:94:a8:2f: 75:e0:bc:22:73:a1:18:16:0e:92:f1:96:1e:ac:06: 55:23:50:bd:b5:d3:43:30:1c:17:78:51:19:e3:88: c8:24:f2:18:cc:f2:44:ae:1e:c8:00:df:21:a5:1b: 93:9e:2d:c7:78:2a:38:7d:ba:a8:2d:0d:7e:00:66: 04:05:81:ec:3f:42:01:80:96:1c:37:a5:ef:36:a9: 26:c4:07:e7:6d:d9:d8:ed:5b:d1:0e:d3:dd:84:64: 68:36:59:02:f7:a0:c1:93:49:66:0a:2c:74:dd:21: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:66:7C:64:4E:45:C8:6C:31:DE:A5:AF:D2:25:4C:4B:58:1E:8F:E7 X509v3 Authority Key Identifier: keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:36:8a:c9:37:87:96:87:eb:8f:f1:f9:f2:13:b8:6f:3b:71: 2d:07:83:54:39:71:24:49:01:98:4e:3d:bf:3f:99:7b:ff:ff: 2a:6b:ea:4f:97:8c:83:11:95:70:b4:93:0c:c9:d2:13:6f:a9: 0f:b1:a9:58:6a:70:59:9f:ab:98:42:0e:75:54:aa:a8:b7:a7: 5d:64:18:57:49:51:d7:65:83:73:da:b4:63:36:00:41:e4:3d: 67:08:85:ee:90:22:02:37:d7:ba:48:3f:86:d9:51:af:fb:d4: 5d:9a:18:8e:ee:d8:74:10:7f:f1:1d:3d:82:87:41:09:b3:b9: 26:9f:40:ff:21:28:61:b0:db:eb:15:09:d9:9e:d8:ce:cd:1c: 68:99:30:40:f0:26:ae:87:79:e2:01:2f:4b:5f:e7:7b:ad:ef: 88:ad:fc:9c:ab:81:d7:3f:06:5a:5d:b0:c7:1e:7b:74:e3:e3: dc:36:0b:b6:c7:cc:cf:95:6c:df:d6:2a:9e:6e:26:e2:3a:b0: c3:11:f7:38:6e:c8:d2:28:d7:c5:0e:1d:c3:06:78:a0:6d:fd: e9:b1:a3:62:75:73:07:42:9e:ea:c8:2b:44:3c:13:07:2d:c7: 7c:70:91:fc:19:a4:17:e5:d4:ec:ba:fc:c3:be:4c:2a:a6:2f: 54:82:b6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlszKmxXlOl+lZJisr9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm MmRhZDAwHhcNMjUxMjE5MTAwMTA5WhcNMjUxMjIwMTAwMTA5WjAzMTEwLwYDVQQD EyhiZDY2N2M2NDRlNDVjODZjMzFkZWE1YWZkMjI1NGM0YjU4MWU4ZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rLHJzde4AUO6esSzx2abfVQJ71Z hRau96GV4xzRtiVrIjV9Yr1eyPGGNJBJGRCYDtOLQGa2h1tC5W6eqINXus/Gf+yq c2k8WJLaJ430qIWngbPqVNYnX1ddXSEgN2LN9sLZOUYbtPDwam3GYVqDQ+/viR1f uSFB517HatVSON+0a5O9VKrN/J6uNBrOIMs7pgqUqC914Lwic6EYFg6S8ZYerAZV I1C9tdNDMBwXeFEZ44jIJPIYzPJErh7IAN8hpRuTni3HeCo4fbqoLQ1+AGYEBYHs P0IBgJYcN6XvNqkmxAfnbdnY7VvRDtPdhGRoNlkC96DBk0lmCix03SFDEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1mfGRORchsMd6lr9IlTEtYHo/nMB8GA1UdIwQY MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDaKyTeH lofrj/H58hO4bztxLQeDVDlxJEkBmE49vz+Ze///KmvqT5eMgxGVcLSTDMnSE2+p D7GpWGpwWZ+rmEIOdVSqqLenXWQYV0lR12WDc9q0YzYAQeQ9ZwiF7pAiAjfXukg/ htlRr/vUXZoYju7YdBB/8R09godBCbO5Jp9A/yEoYbDb6xUJ2Z7Yzs0caJkwQPAm rod54gEvS1/ne63viK38nKuB1z8GWl2wxx57dOPj3DYLtsfMz5Vs39Yqnm4m4jqw wxH3OG7I0ijXxQ4dwwZ4oG396bGjYnVzB0Ke6sgrRDwTBy3HfHCR/BmkF+XU7Lr8 w75MKqYvVIK2gQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:54:53 2025 by rpki-client