This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json) Hash identifier: ZPwUyjR/Ca2FNZ9teRv8ZnBb5bbmarc24xxfKrdvliQ= Subject key identifier: AC:71:E1:4A:B8:B5:53:9F:86:0C:FD:32:E2:AF:10:AD:C4:34:C6:47 Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Certificate serial: 019B2FD4C171C7457FB556A25B5A95F36A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 05:00:30 +0000 Manifest this update: Thu 18 Dec 2025 05:00:30 +0000 Manifest next update: Fri 19 Dec 2025 05:00:30 +0000 Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: 5jnYh5C9CHQEVVU7brfthNsG4Ko+gHRQT2t0lQlZc8M=) 2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:c1:71:c7:45:7f:b5:56:a2:5b:5a:95:f3:6a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Validity Not Before: Dec 18 05:00:30 2025 GMT Not After : Dec 19 05:00:30 2025 GMT Subject: CN=ac71e14ab8b5539f860cfd32e2af10adc434c647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a6:be:4c:9b:8c:79:40:cd:f8:52:49:77:97: 52:18:29:e8:7c:06:4c:ef:c9:73:eb:3e:46:eb:b4: 3e:d7:60:cf:8e:95:80:1c:e3:cb:90:6b:90:49:28: da:4f:73:9e:05:85:97:3a:8b:ee:0a:e0:a8:e6:d1: 03:12:8e:be:b9:81:11:38:e2:e5:cb:fb:42:47:f2: 22:b7:13:a3:3a:62:a7:2e:25:f1:fc:76:26:b2:1f: 14:fd:8c:e3:53:f5:97:0d:b2:8b:04:af:86:00:1c: fd:4f:6d:a7:20:d7:97:c1:7a:86:af:b5:af:61:eb: a7:5d:b7:c7:fe:d3:55:e9:9b:1c:19:e0:a3:da:11: b2:61:26:50:15:26:c5:5a:93:27:0e:6d:c3:9e:ef: be:dd:58:6a:2a:d4:67:90:1d:52:26:37:ac:d4:65: 7e:1f:78:00:85:e3:dd:6a:5e:a1:cd:e6:6e:35:ee: 38:52:6c:b6:fc:dd:5f:7b:1c:48:48:95:4e:c6:77: 2b:cb:46:1f:1a:0e:af:0e:8a:c5:b4:1c:82:6c:6c: 37:7a:9c:0c:eb:2b:90:b1:c4:d1:cf:f2:ee:63:33: cb:9b:6c:a9:e6:1d:e5:e4:b1:9f:7e:58:c9:29:84: f9:35:ad:d3:cb:91:a1:41:da:aa:18:15:43:cd:a7: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:E1:4A:B8:B5:53:9F:86:0C:FD:32:E2:AF:10:AD:C4:34:C6:47 X509v3 Authority Key Identifier: keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:36:6d:c3:da:ba:06:5e:18:61:6b:2d:20:41:e0:58:02:57: 0a:0a:90:c6:cb:42:26:e6:19:93:0b:24:69:07:a6:e3:e7:73: a2:68:4c:d6:0b:4b:df:46:18:07:4a:ac:7e:f4:2b:a7:89:c6: 55:fe:e6:94:df:42:e8:ad:67:7b:df:6c:45:41:44:e2:df:1b: ef:a2:df:45:63:fa:c2:b4:3d:16:e2:0f:7e:cf:10:92:9b:2e: 32:f9:6c:e8:ae:aa:b3:9e:df:df:be:89:b2:50:ec:1e:b0:6c: b1:19:06:2f:f9:26:c8:c6:21:63:17:84:e1:80:bd:70:ab:bc: 48:0e:21:f1:91:72:3a:d6:63:0c:01:51:ac:66:d2:d5:ea:7f: 67:e9:0c:5e:89:b8:e4:f3:78:2e:cc:d1:c4:5f:ce:cc:df:73: a3:08:ee:01:ee:ae:6f:bb:ac:9d:8f:8f:af:4a:4b:57:0b:30: 9a:78:fe:60:44:50:af:a7:53:35:4a:d9:d6:92:dd:90:92:8e: a9:1a:06:28:77:14:62:54:c9:3f:a2:e4:dc:85:05:13:b8:2b: 36:12:2e:0c:d7:f7:13:1a:f2:7d:ef:c1:42:f5:44:8f:54:45: fa:08:53:e6:2c:28:d3:96:3d:a0:15:b8:7f:60:7b:3b:31:c5: 41:1c:f1:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1MFxx0V/tVaiW1qV82oLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1 NjNkODIwHhcNMjUxMjE4MDUwMDMwWhcNMjUxMjE5MDUwMDMwWjAzMTEwLwYDVQQD EyhhYzcxZTE0YWI4YjU1MzlmODYwY2ZkMzJlMmFmMTBhZGM0MzRjNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ka+TJuMeUDN+FJJd5dSGCnofAZM 78lz6z5G67Q+12DPjpWAHOPLkGuQSSjaT3OeBYWXOovuCuCo5tEDEo6+uYEROOLl y/tCR/IitxOjOmKnLiXx/HYmsh8U/YzjU/WXDbKLBK+GABz9T22nINeXwXqGr7Wv YeunXbfH/tNV6ZscGeCj2hGyYSZQFSbFWpMnDm3Dnu++3VhqKtRnkB1SJjes1GV+ H3gAhePdal6hzeZuNe44Umy2/N1fexxISJVOxncry0YfGg6vDorFtByCbGw3epwM 6yuQscTRz/LuYzPLm2yp5h3l5LGffljJKYT5Na3Ty5GhQdqqGBVDzafldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxx4Uq4tVOfhgz9MuKvEK3ENMZHMB8GA1UdIwQY MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTZtw9q6 Bl4YYWstIEHgWAJXCgqQxstCJuYZkwskaQem4+dzomhM1gtL30YYB0qsfvQrp4nG Vf7mlN9C6K1ne99sRUFE4t8b76LfRWP6wrQ9FuIPfs8QkpsuMvls6K6qs57f376J slDsHrBssRkGL/kmyMYhYxeE4YC9cKu8SA4h8ZFyOtZjDAFRrGbS1ep/Z+kMXom4 5PN4LszRxF/OzN9zowjuAe6ub7usnY+Pr0pLVwswmnj+YERQr6dTNUrZ1pLdkJKO qRoGKHcUYlTJP6Lk3IUFE7grNhIuDNf3Exryfe/BQvVEj1RF+ghT5iwo05Y9oBW4 f2B7OzHFQRzxMg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:11 2025 by rpki-client