This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft File: 1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json) Hash identifier: 89M6nlkBU24LIIGqxyABdMh0Ys0sQd12D7r0AOrzgaA= Subject key identifier: 89:45:7E:CC:A5:78:5C:50:D4:51:9F:6D:07:11:33:B1:43:94:68:FF Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C Certificate issuer: /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c Certificate serial: 019B18A84C343D38057941D04463FBB6DF7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft Manifest number: 1772 Signing time: Sat 13 Dec 2025 17:00:41 +0000 Manifest this update: Sat 13 Dec 2025 17:00:41 +0000 Manifest next update: Sun 14 Dec 2025 17:00:41 +0000 Files and hashes: 1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: hKl6SExGghfVXkpDEVujqi7ah0lHxNYio0q728EhLe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:4c:34:3d:38:05:79:41:d0:44:63:fb:b6:df:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c Validity Not Before: Dec 13 17:00:41 2025 GMT Not After : Dec 14 17:00:41 2025 GMT Subject: CN=89457ecca5785c50d4519f6d071133b1439468ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:51:0b:72:13:cf:94:6c:e4:ef:52:28:10: e5:7e:b6:eb:06:ee:b4:88:33:11:86:a1:29:b6:1f: f6:01:2d:0d:aa:e3:1e:04:22:f5:9f:62:51:c5:e1: 23:ff:2f:08:d2:13:3a:71:2d:02:84:c6:80:b3:22: 52:91:ae:6c:15:10:20:88:1d:f5:65:62:4f:c7:43: 3f:b1:d3:8f:a9:0b:4d:aa:74:1d:da:a4:92:10:ae: 0a:4d:54:7b:12:8c:f1:12:fe:a0:ed:60:b9:4f:e0: 18:db:40:6e:61:8c:fe:7f:89:b9:9f:d5:1f:ad:37: ee:df:01:64:8a:27:f5:35:f1:83:45:5a:0f:7f:4f: 74:1c:7e:fe:52:9f:25:eb:8c:24:b0:69:54:5e:27: a2:27:ee:65:cb:fc:fa:ca:36:b5:f9:98:d6:0d:d6: ac:99:89:72:ca:f2:b1:85:c0:42:3a:a2:a1:bb:93: e3:75:a9:3c:bc:af:7e:fb:24:57:fc:d3:1e:f1:c8: 2e:a5:1b:07:f1:d8:34:38:da:4d:51:d4:f8:43:da: 86:04:c2:3b:8b:d0:88:3b:43:a8:09:7b:ae:55:ab: 22:47:28:72:2a:c7:01:4c:bb:90:e2:9d:76:40:7e: 97:1b:3b:bf:b4:eb:d3:33:25:5e:e3:c4:08:74:e9: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:7E:CC:A5:78:5C:50:D4:51:9F:6D:07:11:33:B1:43:94:68:FF X509v3 Authority Key Identifier: keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0f:b1:36:94:3a:45:57:e8:bd:57:4f:1c:29:83:b8:76:6c: 35:47:3a:63:c6:53:df:e3:1d:70:81:6f:38:7d:e3:69:ff:66: 70:3f:e4:e9:5a:90:61:ad:db:29:ee:cc:2e:db:a1:50:d2:21: 90:0e:31:21:e2:d7:37:96:fe:3a:3a:58:be:de:24:bd:81:84: f0:29:5a:ee:a4:bd:a0:ab:c9:9a:b8:08:3e:0e:ac:88:a7:ae: 21:b4:bf:53:98:d7:a2:e3:ba:6c:bb:2d:d1:58:32:89:32:92: 56:83:10:57:a4:b4:fa:a7:3d:40:39:84:a5:48:ba:47:53:a2: 08:42:cc:5c:8b:86:cc:f1:51:ec:c0:ed:35:32:0b:f2:89:0f: 69:7c:a7:31:90:c0:f6:85:5d:77:02:97:18:0e:92:23:3e:8a: 91:6a:dc:13:97:11:64:15:65:22:a2:d7:5c:32:04:4e:0a:dc: 5f:fc:ea:df:53:8b:1b:8b:d5:c7:c1:26:8e:ce:d2:97:03:c9: a2:92:c1:5e:e0:f3:64:89:00:ec:8b:c4:c9:d3:67:97:de:aa: b3:4b:fb:05:5a:22:13:38:df:50:e1:ca:b9:3b:10:a2:9a:8b: ad:a3:1d:ac:5d:cf:cc:9b:38:c4:b7:fd:cc:c3:b9:7c:b0:69: 11:4b:28:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqEw0PTgFeUHQRGP7tt99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2 YTcwNWMwHhcNMjUxMjEzMTcwMDQxWhcNMjUxMjE0MTcwMDQxWjAzMTEwLwYDVQQD Eyg4OTQ1N2VjY2E1Nzg1YzUwZDQ1MTlmNmQwNzExMzNiMTQzOTQ2OGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApINRC3ITz5Rs5O9SKBDlfrbrBu60 iDMRhqEpth/2AS0NquMeBCL1n2JRxeEj/y8I0hM6cS0ChMaAsyJSka5sFRAgiB31 ZWJPx0M/sdOPqQtNqnQd2qSSEK4KTVR7EozxEv6g7WC5T+AY20BuYYz+f4m5n9Uf rTfu3wFkiif1NfGDRVoPf090HH7+Up8l64wksGlUXieiJ+5ly/z6yja1+ZjWDdas mYlyyvKxhcBCOqKhu5Pjdak8vK9++yRX/NMe8cgupRsH8dg0ONpNUdT4Q9qGBMI7 i9CIO0OoCXuuVasiRyhyKscBTLuQ4p12QH6XGzu/tOvTMyVe48QIdOmB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlFfsyleFxQ1FGfbQcRM7FDlGj/MB8GA1UdIwQY MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA+xNpQ6 RVfovVdPHCmDuHZsNUc6Y8ZT3+MdcIFvOH3jaf9mcD/k6VqQYa3bKe7MLtuhUNIh kA4xIeLXN5b+OjpYvt4kvYGE8Cla7qS9oKvJmrgIPg6siKeuIbS/U5jXouO6bLst 0VgyiTKSVoMQV6S0+qc9QDmEpUi6R1OiCELMXIuGzPFR7MDtNTIL8okPaXynMZDA 9oVddwKXGA6SIz6KkWrcE5cRZBVlIqLXXDIETgrcX/zq31OLG4vVx8Emjs7SlwPJ opLBXuDzZIkA7IvEydNnl96qs0v7BVoiEzjfUOHKuTsQopqLraMdrF3PzJs4xLf9 zMO5fLBpEUsotg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:04:22 2025 by rpki-client