This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json) Hash identifier: sGrAR3IlQVB3apsbSL87r+Dt14WtJwzDHO4TxrJ0ksU= Subject key identifier: 6B:DC:DD:CC:D0:F2:3A:24:62:15:2D:86:BE:C3:65:F5:C7:35:F5:D4 Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Certificate serial: 019AF0BF9EC1D8728EDF447F0B8702711E16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft Manifest number: 1546 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: AXeSxbUraUzEPDKBYFh49YF2X2r6+Nio7NRD5I8fbng=) 2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9e:c1:d8:72:8e:df:44:7f:0b:87:02:71:1e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=6bdcddccd0f23a2462152d86bec365f5c735f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:3a:ff:92:4c:ac:78:13:1b:01:46:ac:45: 15:b8:1f:05:57:ce:57:a9:db:be:a7:e5:94:4e:1d: ee:48:a6:9c:bc:e2:3b:70:ab:5e:9c:0d:f6:1c:3f: df:31:69:66:1b:6c:51:8d:aa:ec:b3:75:ca:91:e1: 42:f9:e1:ec:db:64:0e:55:23:b2:76:20:f2:88:d3: fa:62:46:56:ad:7f:d7:f6:de:77:cf:ee:a1:ff:7f: 4e:a1:68:5d:72:9e:b5:57:c1:5c:cf:8c:0e:e8:66: 1e:c6:47:58:4d:fe:de:9a:97:c4:aa:3c:43:ec:71: 1a:52:1c:0a:29:3d:6f:dd:e6:45:61:33:d2:45:1f: 25:1b:28:9b:e1:4a:2c:03:e6:a7:d6:8c:6b:02:0a: 11:7f:34:68:db:d7:81:f9:0e:99:df:17:af:1b:16: a5:d7:ff:8e:20:0d:ef:d5:b7:e7:c7:22:8e:30:0c: 3f:6b:48:f0:3b:3c:0c:29:2d:41:90:45:f3:db:c2: ad:8a:f6:40:2e:71:ff:b5:28:06:03:d7:00:f1:59: 6a:b3:e1:5e:6d:9e:73:e5:b2:59:9e:17:bb:da:68: 66:81:44:8d:fb:6a:d6:d5:7f:63:6c:d9:34:ca:58: 92:ee:f7:c5:cb:86:f0:61:fd:1f:26:25:0e:b3:c2: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DC:DD:CC:D0:F2:3A:24:62:15:2D:86:BE:C3:65:F5:C7:35:F5:D4 X509v3 Authority Key Identifier: keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0e:dd:6d:97:c6:49:53:fa:19:06:e0:25:91:94:2e:5e:8a: cf:44:bb:be:f0:6c:9c:da:34:d1:fd:be:a7:0b:da:12:d8:6f: 8f:21:46:b7:0a:41:a5:2f:57:c9:27:d3:9e:5a:35:be:5e:a3: 30:93:4d:37:48:69:42:b5:09:2c:c7:83:f3:65:8a:29:d3:ba: af:4e:58:20:17:a8:be:94:c2:d9:65:8a:8f:76:76:20:76:56: e1:7a:e6:3a:f4:2c:a1:e9:4e:47:1b:06:10:6f:45:1c:0b:83: dc:2a:67:5e:ca:b0:31:8d:b6:d3:c6:88:2a:15:6e:1f:33:2e: b8:a0:99:8f:9d:06:82:40:c5:6b:82:81:21:37:55:67:0a:43: ed:cf:d5:ef:99:d4:76:85:6a:4a:0f:41:5d:c8:03:bd:16:06: b9:93:14:39:12:5e:b8:3c:66:ea:98:72:30:97:fd:ea:f8:ca: 1b:5b:ae:94:06:9a:3e:72:d9:17:12:d3:a3:3e:31:d5:a4:b5: 14:ee:ea:06:c2:59:17:d7:dd:62:11:13:28:1e:d4:a8:9a:2c: 58:4a:e5:27:a3:4b:6e:d6:c4:5b:e3:fc:47:cb:16:cb:d0:43: 26:64:a3:08:15:29:4e:a2:b3:71:bb:70:0a:96:e8:fb:14:a4: 4e:83:8b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv57B2HKO30R/C4cCcR4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2 ZDI1YTEwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD Eyg2YmRjZGRjY2QwZjIzYTI0NjIxNTJkODZiZWMzNjVmNWM3MzVmNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQ6/5JMrHgTGwFGrEUVuB8FV85X qdu+p+WUTh3uSKacvOI7cKtenA32HD/fMWlmG2xRjarss3XKkeFC+eHs22QOVSOy diDyiNP6YkZWrX/X9t53z+6h/39OoWhdcp61V8Fcz4wO6GYexkdYTf7empfEqjxD 7HEaUhwKKT1v3eZFYTPSRR8lGyib4UosA+an1oxrAgoRfzRo29eB+Q6Z3xevGxal 1/+OIA3v1bfnxyKOMAw/a0jwOzwMKS1BkEXz28KtivZALnH/tSgGA9cA8Vlqs+Fe bZ5z5bJZnhe72mhmgUSN+2rW1X9jbNk0yliS7vfFy4bwYf0fJiUOs8KupwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvc3czQ8jokYhUthr7DZfXHNfXUMB8GA1UdIwQY MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQ7dbZfG SVP6GQbgJZGULl6Kz0S7vvBsnNo00f2+pwvaEthvjyFGtwpBpS9XySfTnlo1vl6j MJNNN0hpQrUJLMeD82WKKdO6r05YIBeovpTC2WWKj3Z2IHZW4XrmOvQsoelORxsG EG9FHAuD3CpnXsqwMY2208aIKhVuHzMuuKCZj50GgkDFa4KBITdVZwpD7c/V75nU doVqSg9BXcgDvRYGuZMUORJeuDxm6phyMJf96vjKG1uulAaaPnLZFxLToz4x1aS1 FO7qBsJZF9fdYhETKB7UqJosWErlJ6NLbtbEW+P8R8sWy9BDJmSjCBUpTqKzcbtw Cpbo+xSkToOLTw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:02 2025 by rpki-client