This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json) Hash identifier: 1DBxhQZJof5M2gAY7U5oLcz8qhAAQ+j31wGo/JoTwAc= Subject key identifier: 5E:6B:63:27:81:D4:A3:26:8E:3B:44:36:62:7A:6D:8F:33:3F:07:7E Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Certificate serial: 019B239A137B262A33FF17B6C36705CEB92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft Manifest number: 170D Signing time: Mon 15 Dec 2025 20:00:58 +0000 Manifest this update: Mon 15 Dec 2025 20:00:58 +0000 Manifest next update: Tue 16 Dec 2025 20:00:58 +0000 Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=) 2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: theZb01q7pgoxFrluKMOBZHCJlwLhJqQHb9SUJ8GkUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:13:7b:26:2a:33:ff:17:b6:c3:67:05:ce:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Validity Not Before: Dec 15 20:00:58 2025 GMT Not After : Dec 16 20:00:58 2025 GMT Subject: CN=5e6b632781d4a3268e3b4436627a6d8f333f077e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:3c:04:64:5d:9d:a8:d0:48:7d:de:ce:93: d9:84:2f:8d:17:22:e7:73:da:34:de:9d:13:43:08: 83:32:fa:6d:6b:d7:9a:0d:3c:99:4a:73:de:bd:4c: 92:57:f2:41:ef:7a:1c:ce:8e:2b:21:66:0e:86:94: 64:17:e1:a6:48:1d:1f:31:d4:69:76:d1:81:30:f7: 14:27:f9:63:cd:c3:61:e9:15:07:33:5f:37:15:6f: 78:38:25:b7:2c:53:96:79:d7:57:35:a9:d5:1f:90: 7f:30:64:fa:10:1c:6d:6a:1e:f7:d5:ec:9b:f1:3b: 33:b9:3a:74:fc:d8:51:30:f6:ce:a2:bb:b9:c5:94: 71:08:a6:6f:7a:f5:5b:08:ea:f8:3d:4a:80:5b:b4: ef:7a:16:d4:d9:d2:de:8b:50:58:5b:38:be:02:a9: 52:35:da:5f:71:d8:02:ec:db:78:ec:38:a9:43:c1: fd:5f:9a:42:34:ae:12:99:d4:90:e3:13:5e:d7:7e: a1:6b:90:88:51:50:a6:11:d8:ff:04:42:19:7a:ef: e1:ab:cb:15:a8:7e:a1:33:d9:33:85:80:c6:b2:2b: 1c:93:ad:e6:ac:27:b6:62:58:d3:52:b7:4f:38:89: 8b:2d:bf:81:b4:2c:26:41:3f:39:1d:a2:bb:b7:df: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6B:63:27:81:D4:A3:26:8E:3B:44:36:62:7A:6D:8F:33:3F:07:7E X509v3 Authority Key Identifier: keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:36:eb:ca:2c:64:21:38:9f:37:43:75:9e:81:9e:d9:20:9c: 26:38:a6:f7:77:5d:b0:a6:ae:cf:14:b5:23:1d:69:bc:de:95: 9a:15:5c:cd:65:02:45:ab:3f:b2:c9:78:b6:f8:f2:d1:03:1a: 22:72:4f:60:12:2f:77:59:84:d0:a1:62:b5:c5:ff:86:2e:1a: 20:06:e3:48:60:3d:37:11:80:bf:78:59:8b:45:c1:85:3a:a4: 95:70:36:62:31:d7:b0:72:34:72:a5:f6:b7:14:03:22:9d:8f: 07:29:22:67:8d:88:2b:e6:87:99:e7:81:9c:80:c7:39:ee:4a: 11:e7:ff:42:5d:43:0a:77:f3:d0:02:86:ad:e4:4f:63:0b:b9: 48:7b:38:ff:de:8e:09:12:86:6a:02:56:9a:68:7d:a8:bc:79: 10:3a:05:b1:34:ef:8d:22:bd:54:e3:3e:7f:7b:07:22:99:5b: ee:15:76:9b:69:cc:47:e1:fd:be:c1:67:79:5b:f3:94:20:38: a2:1d:9d:0a:46:d0:f6:8d:e9:aa:f4:bd:74:8b:dd:dd:18:55: 95:c0:58:e7:00:c9:c2:d7:07:c2:2a:eb:e2:7f:d8:00:6d:07: a9:65:05:c2:b5:4a:d4:ab:69:2e:2f:02:4d:28:9b:40:57:73: e5:cb:8a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmhN7Jioz/xe2w2cFzrksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNWQ0MTBmNDI1ZDM1ZTc0ZDQ1NmY3Zjg3YmFlOGVkOTJi M2M4MjkwHhcNMjUxMjE1MjAwMDU4WhcNMjUxMjE2MjAwMDU4WjAzMTEwLwYDVQQD Eyg1ZTZiNjMyNzgxZDRhMzI2OGUzYjQ0MzY2MjdhNmQ4ZjMzM2YwNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkk8BGRdnajQSH3ezpPZhC+NFyLn c9o03p0TQwiDMvpta9eaDTyZSnPevUySV/JB73oczo4rIWYOhpRkF+GmSB0fMdRp dtGBMPcUJ/ljzcNh6RUHM183FW94OCW3LFOWeddXNanVH5B/MGT6EBxtah731eyb 8TszuTp0/NhRMPbOoru5xZRxCKZvevVbCOr4PUqAW7TvehbU2dLei1BYWzi+AqlS NdpfcdgC7Nt47DipQ8H9X5pCNK4SmdSQ4xNe136ha5CIUVCmEdj/BEIZeu/hq8sV qH6hM9kzhYDGsisck63mrCe2YljTUrdPOImLLb+BtCwmQT85HaK7t99MpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5rYyeB1KMmjjtENmJ6bY8zPwd+MB8GA1UdIwQY MBaAFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt NjkzNGNhZmI2YmNkLzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk LzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzbryixk ITifN0N1noGe2SCcJjim93ddsKauzxS1Ix1pvN6VmhVczWUCRas/ssl4tvjy0QMa InJPYBIvd1mE0KFitcX/hi4aIAbjSGA9NxGAv3hZi0XBhTqklXA2YjHXsHI0cqX2 txQDIp2PBykiZ42IK+aHmeeBnIDHOe5KEef/Ql1DCnfz0AKGreRPYwu5SHs4/96O CRKGagJWmmh9qLx5EDoFsTTvjSK9VOM+f3sHIplb7hV2m2nMR+H9vsFneVvzlCA4 oh2dCkbQ9o3pqvS9dIvd3RhVlcBY5wDJwtcHwirr4n/YAG0HqWUFwrVK1KtpLi8C TSibQFdz5cuKcw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:45:59 2025 by rpki-client