This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json) Hash identifier: JAMDPHEdCB52ruyDzvk8iEw2xyLuWxrABS7RWa8kpCQ= Subject key identifier: 1D:01:6C:60:44:7B:1A:D5:93:E8:7D:FE:C8:25:8C:A9:F0:DF:17:D0 Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Certificate serial: 019B43928551BE42BDCE607FE1617778BD90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 01:00:34 +0000 Manifest this update: Mon 22 Dec 2025 01:00:34 +0000 Manifest next update: Tue 23 Dec 2025 01:00:34 +0000 Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=) 2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: KAGYggJW/CznLMtk2MhRsvD3Cqia3xepPjTUhKqQcBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:85:51:be:42:bd:ce:60:7f:e1:61:77:78:bd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Validity Not Before: Dec 22 01:00:34 2025 GMT Not After : Dec 23 01:00:34 2025 GMT Subject: CN=1d016c60447b1ad593e87dfec8258ca9f0df17d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:b3:14:fd:37:79:6d:cf:a3:c7:4b:a3:f6: e8:1b:67:b9:79:b8:93:c9:9d:17:ec:a8:42:17:89: 32:11:12:06:df:0e:96:37:8b:bc:ac:05:6c:da:e8: 10:70:7c:76:d0:50:84:42:4b:a4:b2:39:8b:c6:08: b0:04:9f:91:a5:09:ec:ee:fb:3a:51:4a:cf:70:ed: 03:a9:e5:80:d2:df:de:c7:68:a0:a9:a0:b3:b9:3a: 0f:a6:9f:a5:15:d8:ff:45:ea:b1:3b:73:cb:53:5d: d9:7a:24:1b:2c:e5:4e:02:2e:82:c5:a7:de:1b:93: ec:9b:7a:96:37:3e:68:96:1e:06:e9:27:93:6f:4d: 1e:d2:d3:5a:7a:47:56:3c:0f:20:3d:75:98:4e:ce: 00:77:c6:3b:89:af:b3:eb:de:91:2e:a8:8c:66:e9: d5:d6:4e:95:69:07:20:77:03:b0:40:0b:0e:f4:cd: 41:eb:83:3b:ae:0c:76:6b:17:6c:7e:20:de:af:24: 9a:dd:3b:bb:d4:e0:40:0d:95:e0:31:71:4c:a9:32: d6:4a:9b:9b:bb:6c:dd:aa:20:27:8a:38:15:40:5a: 4b:b6:30:4a:46:54:90:27:59:6e:0e:36:fb:0b:1c: 96:81:ea:c4:f8:7e:ad:11:41:db:93:90:78:40:d1: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:6C:60:44:7B:1A:D5:93:E8:7D:FE:C8:25:8C:A9:F0:DF:17:D0 X509v3 Authority Key Identifier: keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a5:49:5b:9a:7a:52:d2:82:c4:ed:2c:0f:78:56:fa:45:5e: 96:a0:2c:6b:0e:6c:61:65:3b:18:e7:fd:ba:b8:cb:fa:0c:b0: 96:8f:a5:42:b1:56:8d:ac:b1:78:16:9d:f7:9f:83:ba:d5:4f: c5:03:8c:cd:70:d0:41:bd:64:33:ee:3d:77:f0:87:08:60:c6: e9:58:50:a8:8c:83:f9:ac:7f:5d:4e:b3:07:2e:b6:d6:8f:de: 75:f2:f2:ae:51:84:09:e1:65:f7:f7:f8:e2:cb:cb:d5:ea:a6: 5e:0b:71:04:7c:4e:11:8c:ca:51:6d:28:e4:6e:36:b7:2c:f4: 23:76:a9:70:8b:b6:69:be:c4:0c:27:38:58:5a:db:d3:99:e0: a9:2e:55:4d:8b:3f:4f:3d:2a:3c:96:b9:8a:5a:89:46:f8:b0: 8d:75:7f:57:e2:25:a2:bb:40:64:46:2a:9e:cc:4d:8e:89:a3: 44:76:71:98:52:63:dd:af:4f:e0:cb:13:18:90:b2:0b:8b:38: a9:88:c2:b9:4e:a2:06:8a:f2:47:7b:c0:df:d5:33:cd:0f:86: d0:88:76:42:90:d9:6f:1a:b4:65:81:5f:5e:1e:32:5a:80:27: 17:03:7b:c5:8b:84:ff:e2:6e:d5:98:0e:ca:02:b6:23:13:43: 5e:bb:26:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkoVRvkK9zmB/4WF3eL2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGRhMmFkMDk4YzZhNzgxNGZiMjU4YjQ2OWIwZDg0Y2Uy NGM0YTcwHhcNMjUxMjIyMDEwMDM0WhcNMjUxMjIzMDEwMDM0WjAzMTEwLwYDVQQD EygxZDAxNmM2MDQ0N2IxYWQ1OTNlODdkZmVjODI1OGNhOWYwZGYxN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIezFP03eW3Po8dLo/boG2e5ebiT yZ0X7KhCF4kyERIG3w6WN4u8rAVs2ugQcHx20FCEQkuksjmLxgiwBJ+RpQns7vs6 UUrPcO0DqeWA0t/ex2igqaCzuToPpp+lFdj/ReqxO3PLU13ZeiQbLOVOAi6Cxafe G5Psm3qWNz5olh4G6SeTb00e0tNaekdWPA8gPXWYTs4Ad8Y7ia+z696RLqiMZunV 1k6VaQcgdwOwQAsO9M1B64M7rgx2axdsfiDerySa3Tu71OBADZXgMXFMqTLWSpub u2zdqiAnijgVQFpLtjBKRlSQJ1luDjb7CxyWgerE+H6tEUHbk5B4QNGoHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0BbGBEexrVk+h9/sgljKnw3xfQMB8GA1UdIwQY MBaAFHfdoq0JjGp4FPsli0abDYTOJMSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2Mt ODE0NzZkYmFiMTQ0LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2MtODE0NzZkYmFiMTQ0 LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaVJW5p6 UtKCxO0sD3hW+kVelqAsaw5sYWU7GOf9urjL+gywlo+lQrFWjayxeBad95+DutVP xQOMzXDQQb1kM+49d/CHCGDG6VhQqIyD+ax/XU6zBy621o/edfLyrlGECeFl9/f4 4svL1eqmXgtxBHxOEYzKUW0o5G42tyz0I3apcIu2ab7EDCc4WFrb05ngqS5VTYs/ Tz0qPJa5ilqJRviwjXV/V+IlortAZEYqnsxNjomjRHZxmFJj3a9P4MsTGJCyC4s4 qYjCuU6iBoryR3vA39UzzQ+G0Ih2QpDZbxq0ZYFfXh4yWoAnFwN7xYuE/+Ju1ZgO ygK2IxNDXrsmGg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:19:11 2025 by rpki-client