This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json) Hash identifier: djbqZGNYpq8nDSN++Rdm7vRY0QAwC2ZvLoonj36Ge0k= Subject key identifier: BE:85:86:A2:F2:49:D7:01:F1:4F:60:0A:D8:4E:FA:66:27:CD:32:58 Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377 Certificate serial: 019B5A1AFD699954F23BA8973B6BE8F36781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft Manifest number: 1686 Signing time: Fri 26 Dec 2025 10:01:16 +0000 Manifest this update: Fri 26 Dec 2025 10:01:16 +0000 Manifest next update: Sat 27 Dec 2025 10:01:16 +0000 Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: Vkc0KI8HyI0UW5wr+Fe44rMYxcmf6HNk4Nj5eglaqxc=) 2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:fd:69:99:54:f2:3b:a8:97:3b:6b:e8:f3:67:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f554afe672744742b4e35027b402e8613c20377 Validity Not Before: Dec 26 10:01:16 2025 GMT Not After : Dec 27 10:01:16 2025 GMT Subject: CN=be8586a2f249d701f14f600ad84efa6627cd3258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:d5:51:06:22:da:d0:f2:d1:b7:9c:1e:6f: bd:83:c4:bd:5d:0e:13:6a:08:d8:58:53:e2:f2:1d: 1c:bb:21:55:36:82:64:b6:05:99:f9:5a:69:23:51: c6:c1:6f:f5:0a:07:0d:b5:08:37:78:df:68:36:48: d2:82:3f:ab:f4:ad:37:19:ef:75:15:f4:7f:03:b5: d6:47:bb:90:69:42:69:8e:65:e3:7f:c8:9f:1e:ab: 14:fe:9a:32:01:73:c9:61:bc:6a:a6:5c:f6:0f:ae: c8:ec:f9:50:54:e7:75:cb:45:57:d7:55:5a:41:14: ca:94:bf:47:09:40:e5:67:ce:27:0c:43:12:ca:2e: b6:41:0b:3c:ba:68:e0:06:2c:b5:8c:44:85:41:d7: fa:c0:20:9e:60:29:33:f0:d6:77:88:f1:82:ea:2b: 71:32:c7:11:c5:a2:1d:1c:77:de:89:68:2a:97:8e: b1:dd:57:fa:14:2d:cc:c8:ae:0a:b4:c1:3c:ee:f8: 41:03:16:c7:d9:c7:68:16:5b:cc:23:12:cc:84:9f: fa:39:2c:cf:94:7a:88:59:66:8b:a3:57:37:c1:35: 47:ef:5b:44:30:f2:3f:c6:d8:b1:68:b2:13:88:6a: 56:1d:40:3b:8c:17:07:94:bb:c8:64:83:80:79:f1: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:86:A2:F2:49:D7:01:F1:4F:60:0A:D8:4E:FA:66:27:CD:32:58 X509v3 Authority Key Identifier: keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:a0:63:a1:71:d5:6c:f0:19:1b:a4:48:b5:ca:69:d5:3e: b5:f1:b5:ca:1c:15:a5:a2:d8:28:01:fb:d5:a8:ca:b3:92:93: 1c:cc:cd:00:02:4d:f4:c8:b8:60:1a:77:06:f6:26:ce:1a:84: 99:0e:5b:c4:74:d0:f8:20:87:a0:a9:c7:11:26:95:98:a0:ca: 80:d4:bd:dc:13:63:b1:81:9b:1f:0d:93:17:cc:8a:18:3c:90: fc:75:53:32:af:a6:1d:23:f7:51:79:bc:9b:03:ba:6e:10:f4: 34:4c:4f:54:c5:3e:c3:ca:d2:56:ea:4a:7f:2f:27:fa:af:2e: 5b:96:08:d7:d5:3f:c9:74:e3:97:0f:f1:b4:94:a1:55:e0:0d: 15:08:22:cc:04:b1:1a:eb:d8:35:4e:6f:ba:cc:76:b4:27:64: a3:dc:c2:91:d2:41:e6:bc:38:b1:82:1b:3d:33:bc:92:f0:11: d5:eb:1f:29:a0:85:01:f0:86:23:67:c1:58:42:84:1a:9b:18: 5d:58:d7:2e:55:07:7f:69:74:9f:b6:9c:8f:d6:5d:0b:ae:50: 1a:9f:1b:ba:2e:d1:74:46:cd:f9:a8:f5:a1:e8:47:f2:b9:61: 5f:ff:a9:4a:e9:bf:dd:09:ee:de:41:79:ca:2e:75:71:89:07: 63:8f:66:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGv1pmVTyO6iXO2vo82eBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj MjAzNzcwHhcNMjUxMjI2MTAwMTE2WhcNMjUxMjI3MTAwMTE2WjAzMTEwLwYDVQQD EyhiZTg1ODZhMmYyNDlkNzAxZjE0ZjYwMGFkODRlZmE2NjI3Y2QzMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUbVUQYi2tDy0becHm+9g8S9XQ4T agjYWFPi8h0cuyFVNoJktgWZ+VppI1HGwW/1CgcNtQg3eN9oNkjSgj+r9K03Ge91 FfR/A7XWR7uQaUJpjmXjf8ifHqsU/poyAXPJYbxqplz2D67I7PlQVOd1y0VX11Va QRTKlL9HCUDlZ84nDEMSyi62QQs8umjgBiy1jESFQdf6wCCeYCkz8NZ3iPGC6itx MscRxaIdHHfeiWgql46x3Vf6FC3MyK4KtME87vhBAxbH2cdoFlvMIxLMhJ/6OSzP lHqIWWaLo1c3wTVH71tEMPI/xtixaLITiGpWHUA7jBcHlLvIZIOAefHbAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6FhqLySdcB8U9gCthO+mYnzTJYMB8GA1UdIwQY MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjCgY6Fx 1WzwGRukSLXKadU+tfG1yhwVpaLYKAH71ajKs5KTHMzNAAJN9Mi4YBp3BvYmzhqE mQ5bxHTQ+CCHoKnHESaVmKDKgNS93BNjsYGbHw2TF8yKGDyQ/HVTMq+mHSP3UXm8 mwO6bhD0NExPVMU+w8rSVupKfy8n+q8uW5YI19U/yXTjlw/xtJShVeANFQgizASx GuvYNU5vusx2tCdko9zCkdJB5rw4sYIbPTO8kvAR1esfKaCFAfCGI2fBWEKEGpsY XVjXLlUHf2l0n7acj9ZdC65QGp8bui7RdEbN+aj1oehH8rlhX/+pSum/3Qnu3kF5 yi51cYkHY49mdA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:01 2025 by rpki-client