This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json) Hash identifier: y5R1S3p1qSRje/V7/VEAQ+d9qombsDiVGpM3XcrZu6I= Subject key identifier: ED:7E:3D:DF:34:3F:49:12:CA:69:30:A6:79:E5:4D:C1:12:32:F4:E1 Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87 Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187 Certificate serial: 019B59769ECE4EE8F608F7D3987AB1C2B215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:01:44 +0000 Manifest this update: Fri 26 Dec 2025 07:01:44 +0000 Manifest next update: Sat 27 Dec 2025 07:01:44 +0000 Files and hashes: 1: 5Od0XxOLXqRNBzSujCFvI1DQ_2U.roa (hash: pV6XWWVsE11w5zGYB+1LqJTS7UdxegBz6SJzFBXmujU=) 2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: RmGllYvOO4Dq8RLzovty2+xYldy5Saphp6q9MRnySDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:9e:ce:4e:e8:f6:08:f7:d3:98:7a:b1:c2:b2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187 Validity Not Before: Dec 26 07:01:44 2025 GMT Not After : Dec 27 07:01:44 2025 GMT Subject: CN=ed7e3ddf343f4912ca6930a679e54dc11232f4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:5c:d9:5b:7f:3e:fd:8b:3c:89:7e:2d:4d: 13:8a:94:15:f8:0f:7d:20:e1:56:58:b4:01:b6:e8: 89:e0:22:f8:13:2b:15:06:10:89:82:c1:9b:9c:e3: 7a:c6:4a:6f:96:91:e4:68:94:e0:f7:aa:02:b4:2b: 3c:98:78:2d:8c:54:03:b7:b2:1b:84:fa:65:97:32: 16:2c:13:b8:85:a6:54:d8:00:02:15:b9:94:dd:1b: fd:b6:e0:fd:ca:53:78:19:7c:15:7b:90:80:bc:4d: 9e:a7:ef:97:0c:46:0c:13:22:ef:10:49:4a:00:7f: 6e:04:4c:ea:f9:25:61:0e:17:f3:15:61:01:12:0b: 79:74:d7:a0:3a:c7:b6:23:cb:55:ad:a4:03:eb:e6: c1:4b:a4:db:8e:ce:35:33:e1:15:0c:63:6c:47:c4: 65:d2:e6:48:9b:36:7f:ba:ab:2b:75:94:1e:ae:1c: 6d:fd:aa:94:94:c8:72:7c:01:df:a6:d0:8c:8a:25: e4:52:85:cf:56:32:bd:f0:41:2a:74:b1:4c:ff:bf: 29:b1:41:55:b5:bc:9d:3e:f2:34:d1:9d:20:5e:1e: 5c:7b:2c:80:82:21:ba:2b:87:35:8a:42:9f:e4:77: c5:cd:ea:e1:49:55:95:2a:54:1c:1c:06:d4:74:35: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7E:3D:DF:34:3F:49:12:CA:69:30:A6:79:E5:4D:C1:12:32:F4:E1 X509v3 Authority Key Identifier: keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:18:29:97:02:a5:c1:1e:bf:2b:b1:95:1f:78:89:6a:76:d7: 07:73:f6:93:5f:73:20:f6:19:ba:d8:cc:53:6e:81:6a:40:a3: d0:51:81:0c:c5:bf:b9:51:22:95:e8:1f:26:89:ae:04:a0:81: dc:5f:02:ba:00:8b:0a:f4:47:1f:b7:e0:cd:33:9b:65:d2:5d: d9:8c:b6:bc:4e:70:7d:34:ac:c9:77:ca:25:be:d0:91:4e:dd: 18:fe:bd:1e:3f:54:2c:4d:67:16:8b:a3:b0:ca:de:66:c9:19: 0c:9d:d8:e0:ab:a1:2b:ed:a1:5d:f2:4b:27:ef:49:cc:f4:7a: 55:fd:86:0a:6b:00:90:ff:10:9c:4b:9b:8a:09:56:89:9f:04: b0:2b:24:08:53:cf:6a:97:4a:78:f0:0e:c5:73:82:05:33:d1: 33:2b:67:ad:aa:c1:27:7a:44:91:2f:f5:1e:b8:9e:d0:77:d8: 06:55:e6:b0:ae:8e:39:d2:09:13:a7:19:b1:6c:ba:49:b1:c7: 43:98:20:9e:5d:a1:a6:74:48:24:db:fc:3a:b1:3b:a5:f0:0b: dc:d3:1c:97:41:4d:90:df:36:c5:e3:17:30:50:3a:ed:19:31: 24:1b:6a:59:24:0b:73:3c:1c:60:04:4b:d6:e4:51:18:d1:1c: 52:f1:0c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdp7OTuj2CPfTmHqxwrIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTQ4MzY1NWIzNWEyYjg0NzE4NWY2ODljOGZkMTYwMWRj YzcxODcwHhcNMjUxMjI2MDcwMTQ0WhcNMjUxMjI3MDcwMTQ0WjAzMTEwLwYDVQQD EyhlZDdlM2RkZjM0M2Y0OTEyY2E2OTMwYTY3OWU1NGRjMTEyMzJmNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy9c2Vt/Pv2LPIl+LU0TipQV+A99 IOFWWLQBtuiJ4CL4EysVBhCJgsGbnON6xkpvlpHkaJTg96oCtCs8mHgtjFQDt7Ib hPpllzIWLBO4haZU2AACFbmU3Rv9tuD9ylN4GXwVe5CAvE2ep++XDEYMEyLvEElK AH9uBEzq+SVhDhfzFWEBEgt5dNegOse2I8tVraQD6+bBS6Tbjs41M+EVDGNsR8Rl 0uZImzZ/uqsrdZQerhxt/aqUlMhyfAHfptCMiiXkUoXPVjK98EEqdLFM/78psUFV tbydPvI00Z0gXh5ceyyAgiG6K4c1ikKf5HfFzerhSVWVKlQcHAbUdDVYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1+Pd80P0kSymkwpnnlTcESMvThMB8GA1UdIwQY MBaAFHUUg2VbNaK4RxhfaJyP0WAdzHGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQt YTdmYjM2Y2MyZmUzLzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQtYTdmYjM2Y2MyZmUz LzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhgplwKl wR6/K7GVH3iJanbXB3P2k19zIPYZutjMU26BakCj0FGBDMW/uVEilegfJomuBKCB 3F8CugCLCvRHH7fgzTObZdJd2Yy2vE5wfTSsyXfKJb7QkU7dGP69Hj9ULE1nFouj sMreZskZDJ3Y4KuhK+2hXfJLJ+9JzPR6Vf2GCmsAkP8QnEubiglWiZ8EsCskCFPP apdKePAOxXOCBTPRMytnrarBJ3pEkS/1Hrie0HfYBlXmsK6OOdIJE6cZsWy6SbHH Q5ggnl2hpnRIJNv8OrE7pfAL3NMcl0FNkN82xeMXMFA67RkxJBtqWSQLczwcYARL 1uRRGNEcUvEMgA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:03 2025 by rpki-client