This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json) Hash identifier: cS5J8mG/egdp5gld8ytjRwSPgkgjUytFg3tAJ44miNQ= Subject key identifier: 28:F4:02:7F:8A:83:08:77:CA:19:D2:7A:61:13:12:71:94:F2:E2:41 Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Certificate serial: 019B2E8B285ED82A0F9ADA424226DEFAE589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft Manifest number: 1566 Signing time: Wed 17 Dec 2025 23:00:30 +0000 Manifest this update: Wed 17 Dec 2025 23:00:30 +0000 Manifest next update: Thu 18 Dec 2025 23:00:30 +0000 Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: 1vCutpbLfhaG/O50KdfHz+RB/BSI7YCyCyoN4spPvW4=) 2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:28:5e:d8:2a:0f:9a:da:42:42:26:de:fa:e5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Validity Not Before: Dec 17 23:00:30 2025 GMT Not After : Dec 18 23:00:30 2025 GMT Subject: CN=28f4027f8a830877ca19d27a6113127194f2e241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:11:df:1f:7a:1b:5a:df:80:4e:4e:8c:06: 18:f2:a2:94:42:72:bc:cb:6a:19:d3:47:81:eb:11: d7:75:d4:e6:97:b6:15:5a:d2:fa:95:f3:e1:84:56: 75:53:86:aa:9a:6c:e5:fc:f6:8c:3d:13:29:d0:a6: dd:46:1f:ee:4a:4f:a7:22:79:c7:01:f3:f8:63:e2: 29:66:63:f1:99:42:6c:f5:a7:9f:80:72:a1:40:1f: 6e:7f:aa:3c:d6:71:82:aa:e0:14:c2:32:94:fc:3d: 55:8a:48:f7:a0:32:eb:4d:00:5f:33:33:eb:95:bb: 44:36:7e:e4:6d:7b:5c:ac:f9:7a:3f:a8:14:d5:bb: 67:f0:f0:e3:f8:13:f0:ae:54:b6:94:6d:cc:3f:77: 04:7a:7b:51:2c:99:b0:b6:c0:41:c0:a2:dc:d3:6f: 36:5a:a6:c8:cf:cf:f5:c3:c6:43:17:4f:ea:28:be: b2:d5:7f:e2:ca:c4:98:1b:13:81:dc:5b:00:43:0c: 04:18:ac:f6:bf:23:77:8e:d9:f9:c8:28:c1:fb:48: b7:af:9a:ad:53:ac:d2:d7:29:15:9c:6c:a7:19:4d: 89:04:7d:c4:94:fd:fa:4b:3c:de:b1:fa:21:55:a6: 3e:1a:43:fa:f0:4a:df:92:bf:d7:70:ad:4f:0b:62: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F4:02:7F:8A:83:08:77:CA:19:D2:7A:61:13:12:71:94:F2:E2:41 X509v3 Authority Key Identifier: keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5e:45:e1:a9:22:59:8b:22:cd:f7:bf:9f:29:8b:76:59:3a: ed:37:00:0a:c2:e3:4c:a7:6f:4e:26:45:49:c3:a8:27:b7:ed: da:8c:af:86:83:25:50:67:5c:ab:59:6c:e4:79:d6:19:cd:d6: 90:d5:b8:02:79:fd:e6:e0:ec:8c:bc:f4:cb:97:ec:d3:1f:89: ad:cd:07:9f:ea:51:01:e3:1d:af:9f:08:20:26:c1:bd:bc:60: 56:89:f0:89:c3:db:c2:5d:c3:80:de:8f:fa:ef:bb:99:eb:84: c1:30:a1:58:21:85:c3:bd:b0:f3:02:5e:e9:b3:4f:a8:27:02: 04:66:ce:cb:d9:da:98:65:11:e7:74:e4:7a:c9:29:ba:ca:c5: f8:2a:28:a6:7d:bb:1c:c1:dc:99:25:2e:8e:9f:cb:9b:6e:0e: 3b:7c:1c:aa:09:e2:10:a0:ba:19:0e:34:61:b8:8f:5a:db:46: 09:7d:ad:69:36:dd:e2:1f:c5:d9:00:7c:03:42:08:c2:80:62: 1b:b0:2f:ff:b4:5c:fd:92:e9:11:74:e9:77:de:67:f3:6d:03: 93:c7:83:32:75:89:00:3a:2b:fe:21:ce:32:f4:d5:3c:ec:c4: 17:39:71:d7:c0:45:45:be:fa:34:be:cb:95:9f:9b:ad:98:8d: 90:75:77:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuiyhe2CoPmtpCQibe+uWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2 ZDI1YTEwHhcNMjUxMjE3MjMwMDMwWhcNMjUxMjE4MjMwMDMwWjAzMTEwLwYDVQQD EygyOGY0MDI3ZjhhODMwODc3Y2ExOWQyN2E2MTEzMTI3MTk0ZjJlMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXgR3x96G1rfgE5OjAYY8qKUQnK8 y2oZ00eB6xHXddTml7YVWtL6lfPhhFZ1U4aqmmzl/PaMPRMp0KbdRh/uSk+nInnH AfP4Y+IpZmPxmUJs9aefgHKhQB9uf6o81nGCquAUwjKU/D1Vikj3oDLrTQBfMzPr lbtENn7kbXtcrPl6P6gU1btn8PDj+BPwrlS2lG3MP3cEentRLJmwtsBBwKLc0282 WqbIz8/1w8ZDF0/qKL6y1X/iysSYGxOB3FsAQwwEGKz2vyN3jtn5yCjB+0i3r5qt U6zS1ykVnGynGU2JBH3ElP36SzzesfohVaY+GkP68Erfkr/XcK1PC2KOhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj0An+Kgwh3yhnSemETEnGU8uJBMB8GA1UdIwQY MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc15F4aki WYsizfe/nymLdlk67TcACsLjTKdvTiZFScOoJ7ft2oyvhoMlUGdcq1ls5HnWGc3W kNW4Ann95uDsjLz0y5fs0x+Jrc0Hn+pRAeMdr58IICbBvbxgVonwicPbwl3DgN6P +u+7meuEwTChWCGFw72w8wJe6bNPqCcCBGbOy9namGUR53TkeskpusrF+Coopn27 HMHcmSUujp/Lm24OO3wcqgniEKC6GQ40YbiPWttGCX2taTbd4h/F2QB8A0IIwoBi G7Av/7Rc/ZLpEXTpd95n820Dk8eDMnWJADor/iHOMvTVPOzEFzlx18BFRb76NL7L lZ+brZiNkHV39g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:00 2025 by rpki-client