This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json) Hash identifier: nGnu88AzB0k3U/8an/ZXGgqbdQmfHqQnfV2xkzoVNCQ= Subject key identifier: 41:67:73:1B:88:5E:21:4A:D9:7C:79:CD:EE:9E:39:01:07:8E:21:45 Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6 Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6 Certificate serial: 019B1081B3535661087B6F910A2D1FDC4CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 03:01:34 +0000 Manifest this update: Fri 12 Dec 2025 03:01:34 +0000 Manifest next update: Sat 13 Dec 2025 03:01:34 +0000 Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: x9Jtbp70G9vVpWD/XKHrRB2A4e8tBb1UUDA8WwvFX24=) 2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=) 3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:b3:53:56:61:08:7b:6f:91:0a:2d:1f:dc:4c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6 Validity Not Before: Dec 12 03:01:34 2025 GMT Not After : Dec 13 03:01:34 2025 GMT Subject: CN=4167731b885e214ad97c79cdee9e3901078e2145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:15:4d:ed:fa:e5:ab:70:3d:8e:1c:8f:50: 1c:fd:0b:3e:bf:7b:10:3c:22:2e:2c:24:b2:b6:7a: ae:d3:37:c4:20:07:15:3a:05:3c:9b:62:9e:2e:e5: bb:94:00:5d:fe:de:bc:9d:ff:2c:c4:8d:5b:c1:37: 23:ae:56:fd:7d:63:e6:79:30:b2:1d:b5:51:24:51: e3:47:6d:6e:29:ad:35:90:56:88:cf:14:20:2d:9a: 8c:72:81:61:10:5d:4d:e6:cd:c1:bc:73:83:76:72: 96:23:85:06:79:ce:d0:e1:1c:e1:2f:11:ae:77:d5: da:99:af:86:f6:84:c9:df:6a:f3:40:7d:2e:f6:7e: 31:9c:0a:31:7f:65:c1:13:6f:54:3e:32:fd:68:c8: 7e:81:82:6d:a6:e6:16:d4:74:60:75:c8:1a:21:50: 12:94:aa:01:b6:7c:74:02:50:fb:31:a3:2e:bc:38: e1:87:d2:c1:6c:3a:3f:63:d4:3f:92:10:2d:cb:a3: 00:8d:8f:5f:df:65:fd:bb:6a:c9:2b:85:9f:d9:c6: 33:7b:45:ac:13:e1:3b:aa:21:d9:c3:6a:f0:81:0f: 07:70:f4:8d:86:20:4c:11:50:ab:a5:a7:3c:9f:5e: a7:a8:78:05:fa:21:ed:4a:14:5c:64:2e:72:24:97: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:67:73:1B:88:5E:21:4A:D9:7C:79:CD:EE:9E:39:01:07:8E:21:45 X509v3 Authority Key Identifier: keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:97:c7:34:8b:c9:a2:4b:75:a9:8f:1b:3e:23:78:97:7c:05: 40:19:69:2c:a7:fc:ce:e2:1e:75:6e:56:f7:14:97:17:16:e5: e5:f9:2b:6d:d8:dd:10:b8:a0:ba:f7:c9:a5:6e:c6:16:11:30: a4:c7:2d:4b:ec:1b:2d:20:36:33:b0:27:ee:c0:46:ca:2d:ee: 9f:ce:4b:0b:ad:15:2d:7e:5e:9b:e1:42:76:61:ea:b6:df:91: df:ea:de:e4:db:2a:7e:41:02:62:f9:56:41:0e:7e:7c:8b:1d: b6:58:c7:6e:4b:cb:85:39:17:c9:5d:f9:ed:b9:3d:f7:3d:37: 15:6a:10:c5:d4:62:dc:a6:ba:78:27:74:22:90:03:4e:a4:c6: 9e:8c:0c:b7:43:29:41:a9:5a:eb:87:f0:04:81:ed:bd:7d:88: fb:93:0d:dc:eb:81:f0:8c:46:db:d9:f2:91:4e:89:f0:d2:d4: f3:12:7c:72:cc:04:e5:ff:fc:3f:9f:0c:16:36:da:2a:dc:6e: 0a:cb:3c:45:af:8f:74:07:5c:64:ae:4c:a6:93:64:5d:d0:41: ff:29:40:cc:f4:f1:d1:42:e3:63:f2:70:8b:61:57:4a:87:a6: 4c:d6:d9:99:eb:b7:12:47:7d:2e:b0:a9:a0:b4:51:8d:08:d1: 97:07:52:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgbNTVmEIe2+RCi0f3EzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh NDg4YjYwHhcNMjUxMjEyMDMwMTM0WhcNMjUxMjEzMDMwMTM0WjAzMTEwLwYDVQQD Eyg0MTY3NzMxYjg4NWUyMTRhZDk3Yzc5Y2RlZTllMzkwMTA3OGUyMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kAVTe365atwPY4cj1Ac/Qs+v3sQ PCIuLCSytnqu0zfEIAcVOgU8m2KeLuW7lABd/t68nf8sxI1bwTcjrlb9fWPmeTCy HbVRJFHjR21uKa01kFaIzxQgLZqMcoFhEF1N5s3BvHODdnKWI4UGec7Q4RzhLxGu d9Xama+G9oTJ32rzQH0u9n4xnAoxf2XBE29UPjL9aMh+gYJtpuYW1HRgdcgaIVAS lKoBtnx0AlD7MaMuvDjhh9LBbDo/Y9Q/khAty6MAjY9f32X9u2rJK4Wf2cYze0Ws E+E7qiHZw2rwgQ8HcPSNhiBMEVCrpac8n16nqHgF+iHtShRcZC5yJJfLTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFncxuIXiFK2Xx5ze6eOQEHjiFFMB8GA1UdIwQY MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt YjMwMTYyZTNjY2MwLzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJfHNIvJ okt1qY8bPiN4l3wFQBlpLKf8zuIedW5W9xSXFxbl5fkrbdjdELiguvfJpW7GFhEw pMctS+wbLSA2M7An7sBGyi3un85LC60VLX5em+FCdmHqtt+R3+re5NsqfkECYvlW QQ5+fIsdtljHbkvLhTkXyV357bk99z03FWoQxdRi3Ka6eCd0IpADTqTGnowMt0Mp Qala64fwBIHtvX2I+5MN3OuB8IxG29nykU6J8NLU8xJ8cswE5f/8P58MFjbaKtxu Css8Ra+PdAdcZK5MppNkXdBB/ylAzPTx0ULjY/Jwi2FXSoemTNbZmeu3Ekd9LrCp oLRRjQjRlwdSIQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:38:18 2025 by rpki-client