This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json) Hash identifier: yAI5M0DIRbPp0cNiK1S7RRtTqQDyuZ8EFnLJY4JezdM= Subject key identifier: A6:4C:31:80:9C:E8:0D:DA:46:02:29:76:48:0A:12:C0:3F:03:F1:6D Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Certificate serial: 019B300C0AC3344C8A54B0FC6CFA580874B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 06:00:54 +0000 Manifest this update: Thu 18 Dec 2025 06:00:54 +0000 Manifest next update: Fri 19 Dec 2025 06:00:54 +0000 Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: ov+O7/hpkugR9rIp4qt7cvmQJTmmAywvTLzHYN5+zWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:0a:c3:34:4c:8a:54:b0:fc:6c:fa:58:08:74:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Validity Not Before: Dec 18 06:00:54 2025 GMT Not After : Dec 19 06:00:54 2025 GMT Subject: CN=a64c31809ce80dda46022976480a12c03f03f16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:63:12:34:54:78:b6:a4:2b:12:6f:b2:8a: 7d:71:39:43:58:9b:11:f4:63:f5:a1:d4:7b:f1:8d: 95:69:48:75:9f:d7:6e:ca:ff:87:6c:78:ae:b8:81: 31:a9:bd:d8:fe:21:99:81:82:d3:e0:70:a6:d6:0b: c5:1d:31:5a:21:d7:73:ab:fe:a9:54:af:5e:c3:4e: 21:95:cf:52:1d:5c:0e:84:5c:90:10:c0:b1:8d:96: ce:ac:91:0f:34:11:aa:5e:3b:28:f6:c5:fd:d8:e2: 9a:57:9d:2e:f5:4f:27:8b:68:51:05:cd:7d:21:19: a1:d8:5f:02:60:f5:c7:0e:9e:4e:67:3f:2a:14:31: b9:e6:8f:f1:2a:07:91:60:04:be:7d:48:73:70:c5: 49:17:74:5c:e9:ba:ed:29:7c:59:9e:b1:88:4d:aa: 79:d1:0c:1f:a9:5f:0b:8f:3e:07:24:90:ff:7a:4e: af:e5:57:b4:00:d6:49:13:16:82:57:f3:8d:93:f0: 84:cc:17:00:1c:78:d2:8b:e8:50:8b:b4:06:cb:61: fa:18:06:b6:9b:b0:cd:15:4e:63:8c:b1:30:b7:07: 00:95:e9:d8:3a:f6:61:2a:67:08:d1:9e:58:07:80: 77:82:b3:74:34:07:88:13:b0:ba:2f:00:d7:37:24: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:31:80:9C:E8:0D:DA:46:02:29:76:48:0A:12:C0:3F:03:F1:6D X509v3 Authority Key Identifier: keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:36:ab:3d:e9:0f:94:d4:1c:fa:78:26:b4:2f:94:99:63:d0: 49:5d:ba:4c:3d:c4:a1:6c:a5:ae:2a:4d:d9:66:be:80:8a:91: 48:00:f7:b0:b2:bc:d7:d5:d0:b1:18:66:a5:d2:fc:e7:84:6b: 83:e5:6a:2e:2e:86:4f:c7:37:a0:f2:a8:51:53:9f:91:d0:d1: 55:50:bd:85:ae:17:eb:66:45:00:31:38:eb:f7:e2:dc:33:46: c5:93:c3:f3:c1:31:fa:48:00:98:4a:bb:83:a2:da:98:8b:0a: cb:e6:73:ad:4a:fc:45:4e:73:a6:f3:3e:30:43:79:46:e8:e2: ee:63:9f:81:65:96:57:0f:b0:db:5d:58:b1:39:72:7e:c9:1f: 85:82:0e:84:f2:28:d4:72:bf:f3:4a:bf:b4:ed:92:bf:05:21: 4b:64:05:e5:69:bb:1a:06:92:0e:8d:04:b1:a6:04:12:9a:58: a3:1b:aa:61:0a:16:46:dd:33:3e:03:7f:b6:05:14:b3:d1:96: e9:45:e7:01:52:7e:92:67:75:50:48:70:40:ab:6d:ab:8d:d8: ff:fc:53:6c:84:c1:47:ae:3c:e0:25:62:1a:50:43:2f:aa:87: 8a:ef:34:ec:c3:a3:5d:8f:22:45:ad:90:cd:a3:fc:0f:63:f8: 9a:ed:d7:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDArDNEyKVLD8bPpYCHSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NTc3NTJhMDgxYTc3OGZjMWQyY2VlMWIwZDZhYTQ1ZDUx YTJjNDkwHhcNMjUxMjE4MDYwMDU0WhcNMjUxMjE5MDYwMDU0WjAzMTEwLwYDVQQD EyhhNjRjMzE4MDljZTgwZGRhNDYwMjI5NzY0ODBhMTJjMDNmMDNmMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSNjEjRUeLakKxJvsop9cTlDWJsR 9GP1odR78Y2VaUh1n9duyv+HbHiuuIExqb3Y/iGZgYLT4HCm1gvFHTFaIddzq/6p VK9ew04hlc9SHVwOhFyQEMCxjZbOrJEPNBGqXjso9sX92OKaV50u9U8ni2hRBc19 IRmh2F8CYPXHDp5OZz8qFDG55o/xKgeRYAS+fUhzcMVJF3Rc6brtKXxZnrGITap5 0QwfqV8Ljz4HJJD/ek6v5Ve0ANZJExaCV/ONk/CEzBcAHHjSi+hQi7QGy2H6GAa2 m7DNFU5jjLEwtwcAlenYOvZhKmcI0Z5YB4B3grN0NAeIE7C6LwDXNyReXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZMMYCc6A3aRgIpdkgKEsA/A/FtMB8GA1UdIwQY MBaAFNdXdSoIGnePwdLO4bDWqkXVGixJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMt YjQxYWQxMDY5YTNjLzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMtYjQxYWQxMDY5YTNj LzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTarPekP lNQc+ngmtC+UmWPQSV26TD3EoWylripN2Wa+gIqRSAD3sLK819XQsRhmpdL854Rr g+VqLi6GT8c3oPKoUVOfkdDRVVC9ha4X62ZFADE46/fi3DNGxZPD88Ex+kgAmEq7 g6LamIsKy+ZzrUr8RU5zpvM+MEN5Ruji7mOfgWWWVw+w211YsTlyfskfhYIOhPIo 1HK/80q/tO2SvwUhS2QF5Wm7GgaSDo0EsaYEEppYoxuqYQoWRt0zPgN/tgUUs9GW 6UXnAVJ+kmd1UEhwQKttq43Y//xTbITBR6484CViGlBDL6qHiu807MOjXY8iRa2Q zaP8D2P4mu3XjQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:54 2025 by rpki-client