This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json) Hash identifier: KHgaHKP6y1DY6ZOifR/UF7HqH86tQF3p4Atr/lqiMRM= Subject key identifier: 10:71:91:F8:09:FF:92:33:49:AF:49:68:05:30:33:27:8A:5E:B9:D5 Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66 Certificate serial: 019B30E7D12867DC301AEFE56649CC05B17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft Manifest number: 14A9 Signing time: Thu 18 Dec 2025 10:00:57 +0000 Manifest this update: Thu 18 Dec 2025 10:00:57 +0000 Manifest next update: Fri 19 Dec 2025 10:00:57 +0000 Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: 20gYspK2+clTtL2k6GbCJPWjU8OCgWo6KFUnzwTY3vg=) 2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:d1:28:67:dc:30:1a:ef:e5:66:49:cc:05:b1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66 Validity Not Before: Dec 18 10:00:57 2025 GMT Not After : Dec 19 10:00:57 2025 GMT Subject: CN=107191f809ff923349af4968053033278a5eb9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:92:4b:b0:08:42:45:23:70:11:60:22:26: 6e:cb:64:d9:f1:50:ad:d4:db:16:1e:f5:58:77:43: a6:30:7f:6b:4f:d6:16:1d:62:f8:0a:7c:4f:e9:66: fb:fc:47:e6:e9:49:41:cc:e3:b5:d8:97:f1:47:b4: 09:cb:c0:82:4b:81:c0:29:ce:17:95:21:84:25:96: cf:33:96:15:18:ca:fb:c1:e8:61:4d:07:a7:ae:d6: b4:ee:8f:ec:eb:31:7f:57:4a:71:bf:60:08:13:20: a5:c8:50:3d:85:38:1b:79:fb:91:6f:da:be:85:ef: d1:45:c4:84:5f:bc:9b:e0:e8:60:5c:42:04:62:b4: 93:d9:2d:0a:41:4a:f1:76:25:da:0b:1c:17:c7:5a: cc:47:91:40:5e:f5:44:27:43:fe:63:8b:d7:0b:5e: c4:cd:4f:45:cc:56:dc:0d:8c:bc:f8:e0:86:b3:b5: fb:3a:94:d0:7c:4a:0b:01:10:e9:2a:bb:25:08:f4: 25:1c:a1:c8:6f:57:be:c9:9d:c1:f1:a7:1c:58:8a: af:f2:74:da:da:42:36:38:2b:b8:cc:e1:4f:4a:68: c3:e8:a7:d9:d5:74:1d:d3:04:f5:03:78:7b:4f:ae: 0f:85:9b:cd:8c:94:55:f1:b6:d6:01:28:ae:44:29: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:91:F8:09:FF:92:33:49:AF:49:68:05:30:33:27:8A:5E:B9:D5 X509v3 Authority Key Identifier: keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dc:34:1c:ef:23:8a:75:b2:93:f6:6e:1e:d5:33:e8:56:23: 07:bb:f8:21:7e:d1:30:03:f9:f6:ec:7a:97:3c:c0:fa:86:8a: 24:02:14:f0:4f:c2:81:88:63:e6:ff:ce:2d:d6:e7:0b:58:64: 92:65:02:42:cb:35:72:b4:c6:01:28:ab:76:40:c6:7e:d6:d6: f1:5c:c6:80:ee:7b:9d:d4:37:33:6c:2b:2e:81:f9:59:25:be: 3d:4b:af:67:b7:9e:68:0b:78:31:a7:40:56:06:59:61:85:29: 73:54:22:66:ca:93:be:24:42:06:90:9e:c0:1b:36:13:4f:f2: 19:01:77:d2:61:67:d2:a1:8b:eb:9f:61:4d:be:e9:52:e7:d9: 89:25:03:45:a0:d5:f6:a0:f2:f1:b9:07:91:14:cb:8b:04:c8: a2:7b:69:ef:09:fb:f0:b8:d0:46:64:84:0f:61:b3:98:b2:4e: fc:f3:e0:ca:b6:41:49:42:4e:8a:c0:f9:b1:79:77:0a:7e:6e: 50:49:49:1e:04:8f:fc:02:a8:16:82:ad:d0:6f:3a:86:df:72: 96:aa:ad:fa:7b:0f:db:8d:c8:87:f5:06:4a:dc:ee:ba:04:04: aa:f7:84:b7:db:d5:e0:77:dd:78:3b:da:c0:01:9f:bf:bb:f4: 08:50:b7:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw59EoZ9wwGu/lZknMBbF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj YWJkNjYwHhcNMjUxMjE4MTAwMDU3WhcNMjUxMjE5MTAwMDU3WjAzMTEwLwYDVQQD EygxMDcxOTFmODA5ZmY5MjMzNDlhZjQ5NjgwNTMwMzMyNzhhNWViOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjCSS7AIQkUjcBFgIiZuy2TZ8VCt 1NsWHvVYd0OmMH9rT9YWHWL4CnxP6Wb7/Efm6UlBzOO12JfxR7QJy8CCS4HAKc4X lSGEJZbPM5YVGMr7wehhTQenrta07o/s6zF/V0pxv2AIEyClyFA9hTgbefuRb9q+ he/RRcSEX7yb4OhgXEIEYrST2S0KQUrxdiXaCxwXx1rMR5FAXvVEJ0P+Y4vXC17E zU9FzFbcDYy8+OCGs7X7OpTQfEoLARDpKrslCPQlHKHIb1e+yZ3B8accWIqv8nTa 2kI2OCu4zOFPSmjD6KfZ1XQd0wT1A3h7T64PhZvNjJRV8bbWASiuRCn3awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBxkfgJ/5IzSa9JaAUwMyeKXrnVMB8GA1UdIwQY MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt NDA1YjBiZGEyYzI2LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2 LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdw0HO8j inWyk/ZuHtUz6FYjB7v4IX7RMAP59ux6lzzA+oaKJAIU8E/CgYhj5v/OLdbnC1hk kmUCQss1crTGASirdkDGftbW8VzGgO57ndQ3M2wrLoH5WSW+PUuvZ7eeaAt4MadA VgZZYYUpc1QiZsqTviRCBpCewBs2E0/yGQF30mFn0qGL659hTb7pUufZiSUDRaDV 9qDy8bkHkRTLiwTIontp7wn78LjQRmSED2GzmLJO/PPgyrZBSUJOisD5sXl3Cn5u UElJHgSP/AKoFoKt0G86ht9ylqqt+nsP243Ih/UGStzuugQEqveEt9vV4HfdeDva wAGfv7v0CFC3tQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:53:53 2025 by rpki-client