This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft File: d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json) Hash identifier: kORNvr6i48rY8sZ27bqo5OPafCwHJtwG+kfyGqxoWz4= Subject key identifier: C8:74:CE:F1:B3:D1:1B:B6:17:67:73:6E:D9:34:1C:A5:75:38:0B:2E Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0 Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0 Certificate serial: 019B35A0EA827C9368734D1CA1722762D886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft Manifest number: 07AB Signing time: Fri 19 Dec 2025 08:01:36 +0000 Manifest this update: Fri 19 Dec 2025 08:01:36 +0000 Manifest next update: Sat 20 Dec 2025 08:01:36 +0000 Files and hashes: 1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=) 2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: XbKps37i3If3xhpLSOBXuB2TREONbMzPUQ/QDB5DXbQ=) 3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=) 4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:ea:82:7c:93:68:73:4d:1c:a1:72:27:62:d8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0 Validity Not Before: Dec 19 08:01:36 2025 GMT Not After : Dec 20 08:01:36 2025 GMT Subject: CN=c874cef1b3d11bb61767736ed9341ca575380b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:e8:11:73:a2:06:8b:69:3f:fc:83:e7:59: f2:4f:54:74:f8:e7:77:e0:5e:dc:f9:84:8a:05:dd: 10:70:0d:cf:b0:aa:5d:9f:bd:96:9a:d4:53:94:0a: 77:b4:40:b5:f4:e6:65:5b:06:a8:2a:d3:e0:10:05: 19:58:18:44:b5:18:5e:2b:94:81:9e:8d:0a:b7:bd: 6d:70:5a:32:58:a9:0a:d2:42:6f:c0:37:85:ae:55: b7:f1:73:6c:53:46:67:af:38:15:91:a4:06:d3:0e: 96:d2:33:42:11:fd:18:b2:79:46:9a:aa:fd:b2:da: 83:f6:95:ce:38:78:64:df:f0:0a:a0:aa:84:5a:ac: 1a:2c:10:d7:c5:17:e3:2f:ca:4d:6a:f3:d7:9b:b2: 3b:9c:d3:e0:ba:fa:b6:33:4d:d7:df:56:44:c8:74: 19:a8:34:d4:27:98:14:ab:5a:3a:5e:2b:5b:a7:24: 26:54:92:86:ed:d2:aa:0d:1f:8c:19:5e:b3:c3:15: fa:9f:a8:ba:0d:80:fd:a8:ca:87:e9:e0:5c:9f:ff: 23:19:14:a1:c0:14:40:2d:fb:03:f6:10:1e:17:0d: 16:cd:02:26:a1:d4:6c:aa:f7:30:c0:4d:0b:28:f7: 10:fe:8a:cb:d3:5d:4a:48:2c:99:33:79:25:9b:17: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:CE:F1:B3:D1:1B:B6:17:67:73:6E:D9:34:1C:A5:75:38:0B:2E X509v3 Authority Key Identifier: keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:2e:44:42:01:43:4b:94:8a:17:b4:57:a4:9f:3a:c3:05:72: 53:71:ce:30:d3:9d:e0:91:60:38:74:d7:84:99:bd:7a:90:1c: 57:e0:6d:49:2b:3a:38:57:84:db:04:c0:f4:e2:2a:f2:e5:8c: 27:43:23:5a:a3:7c:a0:15:1c:9c:c5:57:c0:8f:8d:69:26:92: b0:6f:6d:6f:f6:72:30:64:31:10:b1:ad:d4:9a:ed:57:33:e3: 80:bc:4f:e4:5d:b2:83:a0:48:6d:ef:ef:da:fe:77:ee:47:02: d7:c7:e2:14:e0:21:82:a9:95:87:b7:93:bf:c6:ad:3e:35:eb: d2:7f:8c:8c:cd:eb:d7:03:fe:62:56:98:0d:bd:bd:37:06:26: 3f:65:7b:3b:c3:27:9b:5f:93:2e:39:34:fd:1c:b6:3a:c1:cd: 9e:73:b6:62:ab:37:8c:76:1d:24:92:52:c7:ff:de:9e:5e:c8: 81:f4:44:b4:f3:27:a3:60:c0:bd:b6:91:85:5b:ea:3f:d0:1c: b7:f3:e1:c9:98:32:ed:69:f9:3f:db:6f:90:04:9e:66:b9:4f: 51:9c:7a:bb:5a:65:af:c3:38:00:2d:aa:8b:d4:57:62:af:b3: 3f:a2:42:17:85:da:1f:24:2d:8b:f3:9a:66:d5:83:77:28:af: 2f:65:14:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oOqCfJNoc00coXInYtiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2 MTE2ZjAwHhcNMjUxMjE5MDgwMTM2WhcNMjUxMjIwMDgwMTM2WjAzMTEwLwYDVQQD EyhjODc0Y2VmMWIzZDExYmI2MTc2NzczNmVkOTM0MWNhNTc1MzgwYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW/oEXOiBotpP/yD51nyT1R0+Od3 4F7c+YSKBd0QcA3PsKpdn72WmtRTlAp3tEC19OZlWwaoKtPgEAUZWBhEtRheK5SB no0Kt71tcFoyWKkK0kJvwDeFrlW38XNsU0ZnrzgVkaQG0w6W0jNCEf0YsnlGmqr9 stqD9pXOOHhk3/AKoKqEWqwaLBDXxRfjL8pNavPXm7I7nNPguvq2M03X31ZEyHQZ qDTUJ5gUq1o6XitbpyQmVJKG7dKqDR+MGV6zwxX6n6i6DYD9qMqH6eBcn/8jGRSh wBRALfsD9hAeFw0WzQImodRsqvcwwE0LKPcQ/orL011KSCyZM3klmxf64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh0zvGz0Ru2F2dzbtk0HKV1OAsuMB8GA1UdIwQY MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt ZTAyMWY4Y2U2YzUxLzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsC5EQgFD S5SKF7RXpJ86wwVyU3HOMNOd4JFgOHTXhJm9epAcV+BtSSs6OFeE2wTA9OIq8uWM J0MjWqN8oBUcnMVXwI+NaSaSsG9tb/ZyMGQxELGt1JrtVzPjgLxP5F2yg6BIbe/v 2v537kcC18fiFOAhgqmVh7eTv8atPjXr0n+MjM3r1wP+YlaYDb29NwYmP2V7O8Mn m1+TLjk0/Ry2OsHNnnO2Yqs3jHYdJJJSx//enl7IgfREtPMno2DAvbaRhVvqP9Ac t/PhyZgy7Wn5P9tvkASeZrlPUZx6u1plr8M4AC2qi9RXYq+zP6JCF4XaHyQti/Oa ZtWDdyivL2UUug== -----END CERTIFICATE-----Generated at Fri Dec 19 13:16:34 2025 by rpki-client