This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json) Hash identifier: rg/czUHpCjDnaK6HWPlI1ZqJIXr2cW0dkOiuU6edsTo= Subject key identifier: 65:04:BC:56:65:C6:1B:BD:25:06:40:A4:BB:9C:DE:0F:D5:5A:88:00 Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Certificate serial: 019B5907A53D0E6DF9715B907B77A50119FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft Manifest number: 1393 Signing time: Fri 26 Dec 2025 05:00:31 +0000 Manifest this update: Fri 26 Dec 2025 05:00:31 +0000 Manifest next update: Sat 27 Dec 2025 05:00:31 +0000 Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: RF6s4mNSKrhFhYb4rsoObI3IblRDN2MLEW1tocPkLMI=) 2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:a5:3d:0e:6d:f9:71:5b:90:7b:77:a5:01:19:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Validity Not Before: Dec 26 05:00:31 2025 GMT Not After : Dec 27 05:00:31 2025 GMT Subject: CN=6504bc5665c61bbd250640a4bb9cde0fd55a8800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:c6:1f:cf:ce:16:58:cd:3f:4a:61:6c:95: 85:7d:2b:8f:e1:40:d5:57:cb:c6:4b:8f:52:b5:5f: 2d:06:62:a3:9c:8c:ba:1d:67:e4:39:4b:7f:39:eb: 46:88:ef:01:16:24:9f:78:e0:9c:5d:0f:69:19:bf: 69:1c:f6:85:22:61:90:ea:0a:54:ad:33:bc:7b:2c: 2a:2e:d1:4b:5c:95:57:76:e7:1a:a3:e5:58:e2:20: 19:56:48:4f:ff:65:5d:4c:f7:b3:c3:a0:6e:92:1d: 0d:f3:8f:6b:1a:d1:2c:99:ec:2c:82:96:e6:ae:e3: a4:ea:50:5f:96:19:50:8f:01:ed:40:7d:63:b5:26: b0:18:5b:18:5a:db:4d:23:f1:7a:50:7d:60:8f:ed: 50:58:74:49:2f:48:da:4c:b3:16:01:b5:21:dd:f3: 97:1a:3d:c2:18:91:07:ee:e7:17:6e:f1:23:cf:a1: d3:0b:cb:c6:26:9c:85:0b:11:05:73:fb:60:b7:fe: b9:2e:38:b3:0b:c6:c8:c5:63:79:1b:6f:27:96:77: 78:30:b2:ff:14:54:e2:95:f1:96:6e:bd:d7:ac:25: 34:f1:95:f3:de:95:18:d7:6b:24:19:c0:1a:ec:da: 84:4e:f2:ae:0b:9a:c9:9f:76:aa:84:28:e8:17:f8: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:04:BC:56:65:C6:1B:BD:25:06:40:A4:BB:9C:DE:0F:D5:5A:88:00 X509v3 Authority Key Identifier: keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:23:6b:79:67:5e:5e:d8:de:2a:a6:9e:db:07:63:9a:fb:e1: c5:7c:6c:f8:b0:b3:6d:ec:f1:05:e5:4d:79:69:a7:aa:cc:82: 08:b3:05:7c:ac:b8:d9:27:07:5e:82:21:d6:07:87:81:d1:fe: 9c:f8:de:00:51:2d:0d:4f:fe:d3:99:d9:df:a9:73:85:f8:de: 95:c0:6c:1d:b1:7d:6d:43:e2:e9:86:8d:0b:66:91:ce:54:a7: dd:af:dd:ba:28:27:fa:14:6c:a3:bc:bf:d1:15:db:d5:49:b4: c9:e2:c0:21:a2:4f:f8:28:7f:01:c2:d5:62:f7:31:45:de:2e: 6b:72:68:ec:15:35:ec:c8:d5:de:9b:83:31:1b:df:7e:53:05: 3c:b8:8c:03:2a:ae:66:f5:0a:af:0b:60:c7:ca:11:b1:83:7e: ff:25:eb:7d:b6:dd:ad:18:f5:e7:00:7f:47:6a:6b:bc:1c:5c: 5e:d2:45:73:03:8e:d2:a1:25:d2:00:5e:fe:5c:ce:a6:02:5d: 25:8c:fe:55:44:83:a7:6b:d2:a2:ff:99:8f:75:b7:ef:4e:2f: 17:81:5e:73:9b:3d:73:f1:68:d0:1b:c2:16:b6:d2:07:41:46: 6b:c5:39:13:f7:19:48:5d:3b:53:da:c2:2d:35:53:38:d8:97: 22:f2:1e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB6U9Dm35cVuQe3elARn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw ZWVkMDMwHhcNMjUxMjI2MDUwMDMxWhcNMjUxMjI3MDUwMDMxWjAzMTEwLwYDVQQD Eyg2NTA0YmM1NjY1YzYxYmJkMjUwNjQwYTRiYjljZGUwZmQ1NWE4ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxezGH8/OFljNP0phbJWFfSuP4UDV V8vGS49StV8tBmKjnIy6HWfkOUt/OetGiO8BFiSfeOCcXQ9pGb9pHPaFImGQ6gpU rTO8eywqLtFLXJVXducao+VY4iAZVkhP/2VdTPezw6Bukh0N849rGtEsmewsgpbm ruOk6lBflhlQjwHtQH1jtSawGFsYWttNI/F6UH1gj+1QWHRJL0jaTLMWAbUh3fOX Gj3CGJEH7ucXbvEjz6HTC8vGJpyFCxEFc/tgt/65LjizC8bIxWN5G28nlnd4MLL/ FFTilfGWbr3XrCU08ZXz3pUY12skGcAa7NqETvKuC5rJn3aqhCjoF/ht6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUEvFZlxhu9JQZApLuc3g/VWogAMB8GA1UdIwQY MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCNreWde XtjeKqae2wdjmvvhxXxs+LCzbezxBeVNeWmnqsyCCLMFfKy42ScHXoIh1geHgdH+ nPjeAFEtDU/+05nZ36lzhfjelcBsHbF9bUPi6YaNC2aRzlSn3a/duign+hRso7y/ 0RXb1Um0yeLAIaJP+Ch/AcLVYvcxRd4ua3Jo7BU17MjV3puDMRvfflMFPLiMAyqu ZvUKrwtgx8oRsYN+/yXrfbbdrRj15wB/R2prvBxcXtJFcwOO0qEl0gBe/lzOpgJd JYz+VUSDp2vSov+Zj3W3704vF4Fec5s9c/Fo0BvCFrbSB0FGa8U5E/cZSF07U9rC LTVTONiXIvIedA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:53 2025 by rpki-client