This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json) Hash identifier: XZrge9PBo8JLN4psCMzMLP0oeyCPypR9YJzaTn19cco= Subject key identifier: 23:C4:09:D7:AF:A7:AA:E0:42:79:D4:92:4E:80:93:E3:CB:0F:AE:61 Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Certificate serial: 019B59084794919AE43D172D6130018FE679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 05:01:13 +0000 Manifest this update: Fri 26 Dec 2025 05:01:13 +0000 Manifest next update: Sat 27 Dec 2025 05:01:13 +0000 Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 1Cj4aZ3KZmVkQ8ZTRRGQJEFY2sns7K1BuMH5k0WyBqE=) 2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:47:94:91:9a:e4:3d:17:2d:61:30:01:8f:e6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Validity Not Before: Dec 26 05:01:13 2025 GMT Not After : Dec 27 05:01:13 2025 GMT Subject: CN=23c409d7afa7aae04279d4924e8093e3cb0fae61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:d4:f6:99:81:72:22:b9:99:ca:96:3a:03: 7e:00:fe:3c:ed:2a:06:5b:ae:8f:99:5a:b6:44:6a: c2:d9:75:bf:81:97:53:e2:ee:8f:1c:86:92:c0:c0: a0:95:68:dd:a2:2c:bb:5e:65:da:fd:44:09:d4:db: cd:c4:e6:bb:cb:9e:10:ce:06:a8:15:20:af:d5:8e: 74:49:1a:00:c6:f1:f2:b7:8f:31:ca:bc:6e:d3:de: a2:5f:34:6b:b3:f0:e9:60:6e:6e:71:55:a8:c9:91: 68:ac:d2:80:73:cb:c7:66:54:6c:86:a6:e3:3f:a5: fe:7f:68:4c:d5:03:bd:73:71:c2:03:42:75:0b:8a: e0:8f:ee:07:4b:2d:25:ee:ce:71:fd:d2:20:f4:c3: f6:12:3c:d8:ed:bb:7e:26:79:3d:dd:e2:b6:94:46: 5d:38:10:72:16:a7:13:6d:bd:46:29:9f:19:04:d7: 08:fa:16:eb:dd:1d:83:c6:60:07:3d:fa:e8:09:4a: 39:bd:9d:60:81:3d:2c:fe:c8:76:a9:20:ac:ca:92: ca:66:ad:1c:52:a8:63:51:5f:bd:16:b7:7b:9e:fb: bf:e5:02:7a:0f:64:e0:54:fc:c2:70:e0:39:ed:8d: cf:4b:ec:a5:de:3c:e6:df:02:35:12:05:07:50:f1: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C4:09:D7:AF:A7:AA:E0:42:79:D4:92:4E:80:93:E3:CB:0F:AE:61 X509v3 Authority Key Identifier: keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:09:36:08:93:b1:4a:07:6f:70:00:26:25:0b:f9:f7:fc:a1: 0e:35:f6:9c:64:ac:c6:e7:74:3e:8d:30:e3:c5:35:b0:5e:d9: f7:24:1c:55:0d:05:cc:49:fc:b0:70:e5:6b:f4:cb:83:9b:c0: 50:dd:e2:49:6f:59:22:a9:3d:3b:02:86:a5:ba:28:34:8d:3c: 01:53:ac:9e:38:a2:c7:08:fb:04:6d:4f:8b:eb:d3:07:f9:9f: 37:ba:4a:4f:4c:51:27:d1:4f:c6:71:3e:af:52:87:9b:b2:32: 6f:de:1d:bc:8a:a5:f1:36:f0:3e:79:ac:10:fb:a2:83:ab:b6: ad:9d:ad:ed:bf:94:f3:57:72:3f:3a:df:6a:2d:b5:ae:b3:32: 91:60:ab:04:79:b9:58:eb:71:1e:96:71:de:c7:91:3d:ed:9c: 93:bf:00:72:8b:bc:5d:3d:dd:48:a0:f5:12:76:e7:01:92:91: 5b:f7:31:2a:dc:cc:d2:a4:e8:a2:01:05:34:ba:36:8d:ab:50: b5:02:24:7c:cc:58:b7:11:6f:a2:19:e9:71:98:d7:59:31:24: 09:f4:56:0d:65:fe:af:73:e4:84:8a:ad:72:5c:49:aa:ae:b5: c0:7e:c9:ad:0a:a3:b7:d5:b0:a1:40:83:21:20:7c:7e:65:2e: ce:0c:5e:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCEeUkZrkPRctYTABj+Z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk N2JjNzUwHhcNMjUxMjI2MDUwMTEzWhcNMjUxMjI3MDUwMTEzWjAzMTEwLwYDVQQD EygyM2M0MDlkN2FmYTdhYWUwNDI3OWQ0OTI0ZTgwOTNlM2NiMGZhZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8jU9pmBciK5mcqWOgN+AP487SoG W66PmVq2RGrC2XW/gZdT4u6PHIaSwMCglWjdoiy7XmXa/UQJ1NvNxOa7y54Qzgao FSCv1Y50SRoAxvHyt48xyrxu096iXzRrs/DpYG5ucVWoyZForNKAc8vHZlRshqbj P6X+f2hM1QO9c3HCA0J1C4rgj+4HSy0l7s5x/dIg9MP2EjzY7bt+Jnk93eK2lEZd OBByFqcTbb1GKZ8ZBNcI+hbr3R2DxmAHPfroCUo5vZ1ggT0s/sh2qSCsypLKZq0c UqhjUV+9Frd7nvu/5QJ6D2TgVPzCcOA57Y3PS+yl3jzm3wI1EgUHUPHa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPECdevp6rgQnnUkk6Ak+PLD65hMB8GA1UdIwQY MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgk2CJOx SgdvcAAmJQv59/yhDjX2nGSsxud0Po0w48U1sF7Z9yQcVQ0FzEn8sHDla/TLg5vA UN3iSW9ZIqk9OwKGpbooNI08AVOsnjiixwj7BG1Pi+vTB/mfN7pKT0xRJ9FPxnE+ r1KHm7Iyb94dvIql8TbwPnmsEPuig6u2rZ2t7b+U81dyPzrfai21rrMykWCrBHm5 WOtxHpZx3seRPe2ck78Acou8XT3dSKD1EnbnAZKRW/cxKtzM0qToogEFNLo2jatQ tQIkfMxYtxFvohnpcZjXWTEkCfRWDWX+r3PkhIqtclxJqq61wH7JrQqjt9WwoUCD ISB8fmUuzgxeNw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client