This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json) Hash identifier: pxRwulJlblll+jcbiSjVAWrXlveEJMNNBWC2NnCH+vs= Subject key identifier: C2:07:16:B7:96:4A:94:CF:2D:BB:C1:12:91:10:63:51:0E:46:CF:B3 Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Certificate serial: 019B0E92F10576A8E27B014D749DECDA4F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft Manifest number: 04E9 Signing time: Thu 11 Dec 2025 18:01:09 +0000 Manifest this update: Thu 11 Dec 2025 18:01:09 +0000 Manifest next update: Fri 12 Dec 2025 18:01:09 +0000 Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: +5vFgWyp2k9Wmw5uW1PrxItFT64uaRU19Y0iRHKsCoI=) 2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:f1:05:76:a8:e2:7b:01:4d:74:9d:ec:da:4f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Validity Not Before: Dec 11 18:01:09 2025 GMT Not After : Dec 12 18:01:09 2025 GMT Subject: CN=c20716b7964a94cf2dbbc112911063510e46cfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:3f:5a:10:35:1f:c4:47:ab:e2:e7:21:dd: 25:05:ae:89:8a:1c:17:7b:14:95:d3:7a:58:6c:5b: a6:0b:fe:b1:8a:20:ea:16:b4:cd:6d:f2:9f:1f:19: c1:4c:5b:1c:4f:94:f6:b5:88:1c:ff:da:2f:2f:cc: 22:84:93:03:0b:c9:02:d2:17:84:bb:4d:04:94:0d: cb:3c:8f:71:fc:54:fc:fd:76:ed:bc:ce:c1:32:de: eb:ee:01:b0:03:19:3c:99:8f:f0:e5:7d:b6:40:23: 7f:8a:31:29:46:93:e8:91:41:32:21:d8:5c:e4:0a: 73:7d:98:3a:a3:ec:3c:2c:8a:71:5a:29:b5:31:3c: 2e:ed:8d:ef:95:29:da:60:43:88:26:aa:0f:7a:16: 67:c0:3f:13:3f:43:54:9e:3f:12:79:76:11:bf:00: 49:4d:f5:8b:9b:60:c2:a0:26:ed:cc:8f:53:6d:00: 01:5f:92:bc:ae:b4:85:1d:b3:8c:7f:88:9d:5b:9a: dc:84:bb:5c:3f:08:d5:b9:e0:de:47:79:5d:76:ab: c2:b9:ad:1d:37:b6:33:d7:8a:19:36:4f:35:a0:80: 69:21:03:3a:2f:ff:5f:0c:47:c3:7a:d6:25:ee:ae: d8:61:0f:19:f7:b9:9e:68:19:98:1a:8b:36:7e:c6: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:07:16:B7:96:4A:94:CF:2D:BB:C1:12:91:10:63:51:0E:46:CF:B3 X509v3 Authority Key Identifier: keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:89:79:36:ba:6c:47:f4:47:21:7d:0f:e5:25:f2:0d:ad:46: 6f:4c:c6:1f:e0:3d:6e:a2:74:9d:fa:8a:34:b5:75:cc:89:49: 83:63:d6:c3:7b:da:70:49:f7:a8:b8:75:48:36:26:b1:f1:d4: ff:5a:a0:6d:f1:27:86:84:a8:f6:d9:34:7d:cf:63:ad:e7:95: 14:c1:7e:29:f7:69:ba:c8:08:3d:38:d9:e6:49:7c:c4:c0:07: e8:45:93:ee:d0:66:75:5f:fe:ad:43:67:42:6e:51:e1:c4:92: 00:7a:58:01:c9:66:e4:e9:c7:25:98:7b:83:03:d2:58:b2:d0: 06:16:8a:43:db:8a:70:85:91:2b:3d:e2:8a:4c:30:9c:3a:d1: bb:cb:0f:86:95:3e:25:5b:cc:72:49:81:a6:7d:19:aa:2f:3e: ef:c3:48:ad:f5:1a:6f:bf:f4:e3:28:19:78:3a:98:44:b7:1a: af:b4:f7:36:70:97:05:bf:09:2c:df:e5:d1:23:58:60:7e:2d: 0e:fa:94:1b:1d:4b:c0:43:06:c5:1c:94:80:b7:93:f4:71:43: 58:20:c0:5e:01:0e:85:62:23:b9:f5:dc:6e:8e:8c:15:64:ae: 02:69:3d:c6:70:ee:6c:f1:2d:90:45:bf:ef:aa:f3:f2:9b:c5: 6b:a4:b2:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkvEFdqjiewFNdJ3s2k+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0 ZTZkMzAwHhcNMjUxMjExMTgwMTA5WhcNMjUxMjEyMTgwMTA5WjAzMTEwLwYDVQQD EyhjMjA3MTZiNzk2NGE5NGNmMmRiYmMxMTI5MTEwNjM1MTBlNDZjZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ8/WhA1H8RHq+LnId0lBa6JihwX exSV03pYbFumC/6xiiDqFrTNbfKfHxnBTFscT5T2tYgc/9ovL8wihJMDC8kC0heE u00ElA3LPI9x/FT8/XbtvM7BMt7r7gGwAxk8mY/w5X22QCN/ijEpRpPokUEyIdhc 5ApzfZg6o+w8LIpxWim1MTwu7Y3vlSnaYEOIJqoPehZnwD8TP0NUnj8SeXYRvwBJ TfWLm2DCoCbtzI9TbQABX5K8rrSFHbOMf4idW5rchLtcPwjVueDeR3lddqvCua0d N7Yz14oZNk81oIBpIQM6L/9fDEfDetYl7q7YYQ8Z97meaBmYGos2fsY4LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIHFreWSpTPLbvBEpEQY1EORs+zMB8GA1UdIwQY MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYl5Nrps R/RHIX0P5SXyDa1Gb0zGH+A9bqJ0nfqKNLV1zIlJg2PWw3vacEn3qLh1SDYmsfHU /1qgbfEnhoSo9tk0fc9jreeVFMF+KfdpusgIPTjZ5kl8xMAH6EWT7tBmdV/+rUNn Qm5R4cSSAHpYAclm5OnHJZh7gwPSWLLQBhaKQ9uKcIWRKz3iikwwnDrRu8sPhpU+ JVvMckmBpn0Zqi8+78NIrfUab7/04ygZeDqYRLcar7T3NnCXBb8JLN/l0SNYYH4t DvqUGx1LwEMGxRyUgLeT9HFDWCDAXgEOhWIjufXcbo6MFWSuAmk9xnDubPEtkEW/ 76rz8pvFa6SySQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:00:08 2025 by rpki-client