This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json) Hash identifier: cuAhqRX+zZVBODKcaWAEmXmw5QmDpl8FE4viEwVCItI= Subject key identifier: 9F:8D:DA:BE:CF:9B:03:E0:75:20:5E:E3:3E:76:EE:03:9B:5D:58:0D Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65 Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465 Certificate serial: 019B3D2322F38FCB93494D3523DCA5CA0D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft Manifest number: 0E18 Signing time: Sat 20 Dec 2025 19:01:11 +0000 Manifest this update: Sat 20 Dec 2025 19:01:11 +0000 Manifest next update: Sun 21 Dec 2025 19:01:11 +0000 Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: F5Bv8u6SNiCsImS++JEuz21lCXraBMg4OWQ5iOslwXI=) 2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=) 3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:22:f3:8f:cb:93:49:4d:35:23:dc:a5:ca:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465 Validity Not Before: Dec 20 19:01:11 2025 GMT Not After : Dec 21 19:01:11 2025 GMT Subject: CN=9f8ddabecf9b03e075205ee33e76ee039b5d580d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:ce:4e:5b:76:c4:3a:c7:97:bd:8d:97:3c: 2b:16:44:cf:9e:26:01:b1:5e:40:7c:57:2f:fc:b7: 26:d4:3b:42:21:84:f1:e8:71:69:96:f9:bb:1d:f7: cb:f1:7f:b9:1f:85:1c:f9:5e:c1:70:30:5e:6c:2a: 8b:9e:76:0c:12:e3:eb:51:37:0a:9c:53:d8:b7:ec: 23:dc:da:cc:95:54:31:f4:75:26:8a:b3:e7:12:cc: 3e:05:93:e4:c8:fd:cb:6a:d2:8b:70:cf:8d:01:f6: 6f:3b:2e:0f:22:87:82:3b:c8:fd:4a:5f:bb:dd:a1: 32:6a:b4:d2:4e:f8:d0:39:fd:8c:81:80:08:09:e5: 87:8c:4a:ff:19:42:3a:87:0f:63:d8:bb:b9:89:77: 0d:1d:34:1f:18:75:06:7d:87:00:d9:1c:11:80:88: 55:05:b0:74:87:be:6b:d9:4d:87:50:d3:20:eb:03: 90:3e:7f:15:28:3a:17:02:88:0d:9a:06:a0:98:8d: a7:15:1d:14:63:07:36:89:72:83:09:31:1f:66:5c: 92:7c:c9:5e:22:9a:74:f4:4c:cb:ff:82:27:24:6e: cc:23:f0:3c:c8:b7:58:51:a6:9f:40:e4:65:2d:4c: 1a:ef:46:66:74:d9:3f:d9:f3:84:86:24:dd:89:89: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8D:DA:BE:CF:9B:03:E0:75:20:5E:E3:3E:76:EE:03:9B:5D:58:0D X509v3 Authority Key Identifier: keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:da:c0:47:2f:a3:f2:d4:3c:6a:85:ec:ec:18:6a:59:b4:67: c8:d4:64:e0:30:8d:19:a2:28:c9:63:db:62:ae:ae:96:c4:a1: f6:66:24:73:ab:c5:c5:d6:58:d6:16:6e:3c:04:b3:91:88:83: 93:c5:ee:5e:96:94:0a:13:99:8f:d9:2d:54:a8:31:fe:6f:b4: fa:ca:fe:d7:93:27:af:38:66:68:46:7b:c2:5e:9d:6e:a1:cb: de:74:80:b1:e9:f3:2e:5b:45:8d:70:03:a7:51:90:9f:4d:92: 76:85:60:2d:14:11:b2:00:60:3d:e4:75:7f:8f:16:a1:18:ef: 6a:a7:91:81:25:31:ab:c0:b2:ea:13:98:91:c5:7f:51:f0:0f: ba:9c:88:de:9d:89:e0:27:02:22:1a:f0:56:5f:8e:ca:24:8a: c6:1b:fa:d3:4f:62:c6:c5:69:54:bb:82:49:6a:e1:29:ed:a0: d4:72:25:0a:72:46:31:03:0b:36:fd:1f:87:c2:30:e6:e4:6c: 44:79:0d:53:2f:56:4d:3d:c4:30:55:e0:60:2d:ff:86:b3:2f: 76:6e:dc:ae:90:1a:f9:59:da:c8:65:69:f1:cb:01:d0:66:cc: 90:9b:43:3c:6b:f3:dc:9c:ba:58:9b:73:90:50:bd:0e:61:19: 04:5b:d4:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyLzj8uTSU01I9ylyg0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDkwMmEwN2ZjN2Q0OGUwZGIyOWJmZmJlM2FiMTA1NDNm YzE0NjUwHhcNMjUxMjIwMTkwMTExWhcNMjUxMjIxMTkwMTExWjAzMTEwLwYDVQQD Eyg5ZjhkZGFiZWNmOWIwM2UwNzUyMDVlZTMzZTc2ZWUwMzliNWQ1ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpXOTlt2xDrHl72NlzwrFkTPniYB sV5AfFcv/Lcm1DtCIYTx6HFplvm7HffL8X+5H4Uc+V7BcDBebCqLnnYMEuPrUTcK nFPYt+wj3NrMlVQx9HUmirPnEsw+BZPkyP3LatKLcM+NAfZvOy4PIoeCO8j9Sl+7 3aEyarTSTvjQOf2MgYAICeWHjEr/GUI6hw9j2Lu5iXcNHTQfGHUGfYcA2RwRgIhV BbB0h75r2U2HUNMg6wOQPn8VKDoXAogNmgagmI2nFR0UYwc2iXKDCTEfZlySfMle Ipp09EzL/4InJG7MI/A8yLdYUaafQORlLUwa70ZmdNk/2fOEhiTdiYlvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+N2r7PmwPgdSBe4z527gObXVgNMB8GA1UdIwQY MBaAFNXZAqB/x9SODbKb/746sQVD/BRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEt YTZjZWMyNWI4MDA2LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEtYTZjZWMyNWI4MDA2 LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdrARy+j 8tQ8aoXs7BhqWbRnyNRk4DCNGaIoyWPbYq6ulsSh9mYkc6vFxdZY1hZuPASzkYiD k8XuXpaUChOZj9ktVKgx/m+0+sr+15MnrzhmaEZ7wl6dbqHL3nSAsenzLltFjXAD p1GQn02SdoVgLRQRsgBgPeR1f48WoRjvaqeRgSUxq8Cy6hOYkcV/UfAPupyI3p2J 4CcCIhrwVl+OyiSKxhv6009ixsVpVLuCSWrhKe2g1HIlCnJGMQMLNv0fh8Iw5uRs RHkNUy9WTT3EMFXgYC3/hrMvdm7crpAa+VnayGVp8csB0GbMkJtDPGvz3Jy6WJtz kFC9DmEZBFvUtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:40 2025 by rpki-client