This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json) Hash identifier: nzfn3YS9LwLtAekoYmhVZ0aOXSD5OPFGGgElEWl7wDs= Subject key identifier: 71:34:91:AE:63:24:FE:46:E1:85:0C:87:82:4A:FD:32:18:7F:17:3E Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba Certificate serial: 019B3BA2790A0D61594A2C59B9B5DF1E13F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft Manifest number: 15AA Signing time: Sat 20 Dec 2025 12:01:02 +0000 Manifest this update: Sat 20 Dec 2025 12:01:02 +0000 Manifest next update: Sun 21 Dec 2025 12:01:02 +0000 Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=) 2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: f3Vst/Z6TmFBhyWgubpzVqG6f4SdpKkqk+fOj2zcvxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:79:0a:0d:61:59:4a:2c:59:b9:b5:df:1e:13:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba Validity Not Before: Dec 20 12:01:02 2025 GMT Not After : Dec 21 12:01:02 2025 GMT Subject: CN=713491ae6324fe46e1850c87824afd32187f173e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:82:05:58:4e:a6:c8:db:34:e9:dc:10:a0: 3f:df:98:9f:75:a0:2d:03:32:9a:f0:95:30:1c:6c: dc:c7:4d:a4:d3:68:6c:1f:2d:b2:db:24:6f:60:9c: d9:82:b7:cb:a4:0f:69:79:01:39:04:2a:c6:56:30: 2f:bd:61:41:8d:6c:2a:92:c3:f1:d6:94:e4:ba:e2: 39:ec:da:cd:44:e3:c0:e1:76:d3:cf:f2:42:26:d0: d9:d0:3e:95:16:91:d6:f0:61:0a:f9:f1:aa:cc:45: 86:43:31:b7:30:59:9b:c7:82:33:2c:81:17:27:d4: 74:09:d6:90:d8:fc:6d:52:b3:22:78:21:8d:c3:cd: 07:89:18:58:22:b8:1c:bb:74:24:76:34:0e:53:be: ba:cf:87:76:be:10:87:26:3e:7c:0d:7f:98:4e:e7: 51:4b:96:68:ff:38:08:6a:b7:7a:89:67:49:d8:aa: a9:e7:ab:eb:db:36:0d:74:f2:4d:a1:00:e4:34:d4: 4f:2b:94:be:6d:a1:f7:63:75:41:11:50:85:13:59: 32:3e:3a:22:da:7d:27:8c:12:d4:08:66:1c:43:57: a2:61:73:6e:31:93:ce:14:15:9d:e9:55:0b:4d:12: 50:21:9a:6b:4b:e8:6c:4d:6f:7f:1e:16:05:08:ed: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:91:AE:63:24:FE:46:E1:85:0C:87:82:4A:FD:32:18:7F:17:3E X509v3 Authority Key Identifier: keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ec:cf:5c:9e:46:b5:c7:e0:04:f1:3e:d4:d6:9b:a6:ec:19: c6:43:dd:1f:90:df:f7:63:90:d6:90:3d:11:f6:c1:81:d3:38: c6:00:94:e2:95:fc:73:45:cd:80:8a:d5:5d:d4:88:66:0f:52: 54:50:62:9e:7d:de:5d:3f:11:f1:6a:33:4c:83:6a:65:7f:9a: 09:da:dc:eb:99:81:a3:e7:cc:01:9b:4a:04:2c:ea:9f:32:fc: ec:3e:86:5c:24:28:d3:98:11:da:69:dc:7c:31:ff:5d:9a:c6: c5:35:df:34:32:c7:5e:22:41:6a:ea:84:70:92:cc:d2:0f:e5: 53:db:3c:2b:ce:0a:13:da:a4:e5:c8:36:24:d1:15:5a:20:81: 0c:9a:56:06:38:1f:06:e2:f1:a8:69:c7:04:af:47:ac:3b:61: a1:72:2b:db:da:8d:59:3d:17:ab:0e:bf:78:24:dd:62:80:36: 49:19:fe:87:30:df:12:23:83:fd:c6:30:52:99:f7:b1:39:55: c8:e8:5b:a4:50:d6:62:ea:77:82:8c:b0:5d:6e:01:fa:6f:3f: 58:fd:a5:ea:e4:9b:43:d5:34:84:1f:40:2c:7d:24:51:17:cb: 57:82:e8:bb:85:4b:99:7c:f9:94:d0:52:58:6e:2a:e5:04:7c: c2:e8:b5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onkKDWFZSixZubXfHhP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk NzJmYmEwHhcNMjUxMjIwMTIwMTAyWhcNMjUxMjIxMTIwMTAyWjAzMTEwLwYDVQQD Eyg3MTM0OTFhZTYzMjRmZTQ2ZTE4NTBjODc4MjRhZmQzMjE4N2YxNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHGCBVhOpsjbNOncEKA/35ifdaAt AzKa8JUwHGzcx02k02hsHy2y2yRvYJzZgrfLpA9peQE5BCrGVjAvvWFBjWwqksPx 1pTkuuI57NrNROPA4XbTz/JCJtDZ0D6VFpHW8GEK+fGqzEWGQzG3MFmbx4IzLIEX J9R0CdaQ2PxtUrMieCGNw80HiRhYIrgcu3QkdjQOU766z4d2vhCHJj58DX+YTudR S5Zo/zgIard6iWdJ2Kqp56vr2zYNdPJNoQDkNNRPK5S+baH3Y3VBEVCFE1kyPjoi 2n0njBLUCGYcQ1eiYXNuMZPOFBWd6VULTRJQIZprS+hsTW9/HhYFCO25ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE0ka5jJP5G4YUMh4JK/TIYfxc+MB8GA1UdIwQY MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3 LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOzPXJ5G tcfgBPE+1NabpuwZxkPdH5Df92OQ1pA9EfbBgdM4xgCU4pX8c0XNgIrVXdSIZg9S VFBinn3eXT8R8WozTINqZX+aCdrc65mBo+fMAZtKBCzqnzL87D6GXCQo05gR2mnc fDH/XZrGxTXfNDLHXiJBauqEcJLM0g/lU9s8K84KE9qk5cg2JNEVWiCBDJpWBjgf BuLxqGnHBK9HrDthoXIr29qNWT0Xqw6/eCTdYoA2SRn+hzDfEiOD/cYwUpn3sTlV yOhbpFDWYup3goywXW4B+m8/WP2l6uSbQ9U0hB9ALH0kURfLV4Lou4VLmXz5lNBS WG4q5QR8wui1qw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:14:37 2025 by rpki-client