This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json) Hash identifier: r/gD7a7tRDOFsbHHwDVpewq90HxUYNFEEQ2RUViRkn8= Subject key identifier: 2C:D6:0D:AD:5F:EA:AE:BB:33:AB:0F:3A:8F:62:AF:D8:6E:41:44:44 Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19 Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19 Certificate serial: 019B2F67D2C15248256070E3D8F812CFC244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft Manifest number: 050A Signing time: Thu 18 Dec 2025 03:01:31 +0000 Manifest this update: Thu 18 Dec 2025 03:01:31 +0000 Manifest next update: Fri 19 Dec 2025 03:01:31 +0000 Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: cKBEY1EaXk66ImyrQ/tjzBCYhyccG3aXrJ0g8NZ4XGY=) 2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:d2:c1:52:48:25:60:70:e3:d8:f8:12:cf:c2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19 Validity Not Before: Dec 18 03:01:31 2025 GMT Not After : Dec 19 03:01:31 2025 GMT Subject: CN=2cd60dad5feaaebb33ab0f3a8f62afd86e414444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:f5:3d:04:2f:b6:5e:fb:44:14:5e:38:39: 46:e5:9e:af:8e:4f:4e:75:21:76:e3:71:1a:67:19: 53:9b:80:99:7e:18:42:aa:3b:1b:46:ca:b1:b2:a9: bb:11:b3:a4:6b:33:88:6b:e0:14:ae:1e:01:0a:3e: 68:89:bd:d7:39:33:7e:95:25:d1:f9:7b:10:be:95: ee:df:f3:f7:8d:43:97:a2:ee:49:ab:d6:94:02:00: 07:47:7a:7c:b6:98:da:63:36:9c:a1:81:f5:46:dd: 6e:49:4b:e4:db:c4:eb:d3:61:c1:42:05:e3:43:11: 40:53:34:04:8b:7c:78:2f:fd:c2:f3:b1:65:ec:1f: f1:a2:24:f6:84:d1:a0:ec:08:04:7a:1d:00:03:f5: 39:74:e4:94:b5:a5:2a:45:13:c3:53:35:a5:a4:6e: 5c:b3:12:a5:27:76:3a:66:1a:e5:3e:e5:7b:5c:fa: 64:c7:98:a7:1f:19:4b:86:77:08:16:9f:50:8f:1e: 4a:d8:69:e0:64:f0:cd:f7:72:2b:bb:0d:0b:71:98: cf:7b:70:85:63:d8:cf:b2:5b:c2:cd:0a:90:45:93: 81:28:47:cc:5c:8a:4d:d9:ae:1f:24:07:5b:f3:e3: 85:78:41:6c:3b:40:09:ab:39:81:b4:c9:43:aa:ea: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:0D:AD:5F:EA:AE:BB:33:AB:0F:3A:8F:62:AF:D8:6E:41:44:44 X509v3 Authority Key Identifier: keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:14:f7:d2:b6:ab:ea:a7:ee:4e:4e:21:44:25:b9:63:b6: e5:8c:54:56:82:18:12:59:6e:20:b3:e3:ab:b5:51:1b:a9:19: f1:54:c1:a4:21:9f:9e:a3:e8:ea:f1:66:d1:42:ef:67:ab:83: 60:8f:6b:a8:16:5d:7a:d1:17:22:56:81:ec:19:d7:f9:c1:ac: 02:b7:eb:46:c8:a4:50:a1:e9:10:13:68:84:0e:0b:b6:55:18: 68:df:6a:c6:6b:76:40:cd:da:b4:ed:ad:9f:0d:ee:22:f8:98: 2f:92:cc:ab:85:63:00:aa:73:33:a7:40:a9:71:cd:00:9c:23: f3:80:ad:ca:a9:08:58:16:84:ee:16:33:d1:44:4f:a2:1c:4b: 73:aa:10:47:76:e6:fb:83:db:8e:5b:e1:9c:81:ba:b6:a6:61: de:35:92:b8:45:dd:a8:da:09:6b:28:b0:d9:9b:c2:5c:0f:12: 7e:ca:ec:69:91:6e:e5:44:d4:0a:2d:d6:7a:1e:f7:af:da:7c: 6b:72:c0:2b:ca:bd:c9:03:25:0c:37:6c:a7:c9:14:7f:14:34: a3:6f:72:c5:fd:f0:37:d2:ae:e3:78:40:00:a3:61:50:f1:74: 0e:e1:1a:99:58:b5:45:81:28:38:63:76:d8:e8:a6:4c:5b:b0: 59:5d:1d:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ9LBUkglYHDj2PgSz8JEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzM2ZDVlNzRmMWY4YjdkYjEzMjlmMDBiYjg1NzI0MWFl NzRkMTkwHhcNMjUxMjE4MDMwMTMxWhcNMjUxMjE5MDMwMTMxWjAzMTEwLwYDVQQD EygyY2Q2MGRhZDVmZWFhZWJiMzNhYjBmM2E4ZjYyYWZkODZlNDE0NDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9z1PQQvtl77RBReODlG5Z6vjk9O dSF243EaZxlTm4CZfhhCqjsbRsqxsqm7EbOkazOIa+AUrh4BCj5oib3XOTN+lSXR +XsQvpXu3/P3jUOXou5Jq9aUAgAHR3p8tpjaYzacoYH1Rt1uSUvk28Tr02HBQgXj QxFAUzQEi3x4L/3C87Fl7B/xoiT2hNGg7AgEeh0AA/U5dOSUtaUqRRPDUzWlpG5c sxKlJ3Y6ZhrlPuV7XPpkx5inHxlLhncIFp9Qjx5K2GngZPDN93Iruw0LcZjPe3CF Y9jPslvCzQqQRZOBKEfMXIpN2a4fJAdb8+OFeEFsO0AJqzmBtMlDquqDnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzWDa1f6q67M6sPOo9ir9huQUREMB8GA1UdIwQY MBaAFNQzbV508fi32xMp8Au4VyQa500ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYt MmRkMjUxODRiMGQwLzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYtMmRkMjUxODRiMGQw LzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqEU99K2 q+qn7k5OIUQluWO25YxUVoIYElluILPjq7VRG6kZ8VTBpCGfnqPo6vFm0ULvZ6uD YI9rqBZdetEXIlaB7BnX+cGsArfrRsikUKHpEBNohA4LtlUYaN9qxmt2QM3atO2t nw3uIviYL5LMq4VjAKpzM6dAqXHNAJwj84CtyqkIWBaE7hYz0URPohxLc6oQR3bm +4PbjlvhnIG6tqZh3jWSuEXdqNoJayiw2ZvCXA8SfsrsaZFu5UTUCi3Weh73r9p8 a3LAK8q9yQMlDDdsp8kUfxQ0o29yxf3wN9Ku43hAAKNhUPF0DuEamVi1RYEoOGN2 2OimTFuwWV0dJw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:04:47 2025 by rpki-client