This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json) Hash identifier: 4v6ORosKWYT28CNL3BLXxTVF/Hm2T1nk0JJsxblMVJs= Subject key identifier: 0E:AB:DD:00:85:0A:EC:A3:9F:57:F3:CC:EE:3A:B7:78:06:80:2E:45 Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53 Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453 Certificate serial: 019AF2AD3BE2CEE01BBD1C80331A991339FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft Manifest number: 01CA Signing time: Sat 06 Dec 2025 08:00:30 +0000 Manifest this update: Sat 06 Dec 2025 08:00:30 +0000 Manifest next update: Sun 07 Dec 2025 08:00:30 +0000 Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: Z2onSUsqu0ms1Owtj/dPO0E3frkKVASxkB2BcHd3xd4=) 2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=) 3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3b:e2:ce:e0:1b:bd:1c:80:33:1a:99:13:39:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453 Validity Not Before: Dec 6 08:00:30 2025 GMT Not After : Dec 7 08:00:30 2025 GMT Subject: CN=0eabdd00850aeca39f57f3ccee3ab77806802e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9a:3a:20:8a:d0:14:c4:a8:e4:9b:18:66:61: 8a:8a:bf:d5:73:3e:d3:e1:cd:1a:d8:a4:f4:ae:d8: a9:e4:fb:1c:e1:2d:fe:94:05:b8:b4:1f:0a:87:b5: 69:80:bd:dc:0c:a2:05:1e:d0:0c:ea:42:ab:21:52: f6:58:cc:da:72:77:73:e0:e6:61:e4:16:cc:2f:8a: 83:dd:11:b8:86:a9:a2:69:4b:94:50:d1:32:69:be: a8:e9:37:92:e2:a9:b1:7d:37:05:3f:13:93:da:ab: 5b:71:65:d7:12:05:aa:cd:cb:dd:a1:b7:b5:2e:dc: 3b:cd:12:1b:06:45:9d:e2:62:15:8e:a9:b0:6b:3e: 34:16:b1:f7:f1:a1:5f:c4:02:2c:54:e9:9a:01:33: 54:04:44:1f:53:08:da:d3:0f:da:3e:b0:f4:ec:d5: b0:9e:ca:38:39:47:35:5a:45:df:30:d0:5c:75:77: 42:b2:aa:e9:50:f7:3a:35:03:ef:8c:16:2a:01:2a: 62:3d:4d:b3:00:64:6f:62:fc:71:c9:c9:84:6a:4c: fd:39:88:ed:99:32:e2:46:ea:e2:3d:22:0a:41:66: 19:39:ba:56:2c:86:b7:98:0d:c9:68:4f:e0:2e:a1: 6d:63:d7:f7:7d:7f:ff:d0:4b:9c:cd:48:2d:cb:e8: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AB:DD:00:85:0A:EC:A3:9F:57:F3:CC:EE:3A:B7:78:06:80:2E:45 X509v3 Authority Key Identifier: keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e4:c6:fc:e2:14:67:da:46:9a:df:a6:80:cd:b0:cc:81:96: 6c:c8:07:1c:91:b2:88:67:01:a2:01:8c:33:4b:a6:19:5a:9a: 7d:67:68:b7:6c:8f:56:2f:49:91:cc:97:ed:27:03:ae:e3:30: 2e:d8:6b:99:87:38:17:56:b0:72:7f:b4:bf:ca:6f:fa:b5:98: 82:42:af:b4:f7:27:88:3e:7f:72:8d:5d:93:39:36:53:8f:37: 9e:ee:f5:5b:51:2a:6a:32:a0:43:46:de:a7:59:bd:69:b9:44: a8:ec:4c:99:47:32:38:e6:e7:85:e3:47:cd:f6:4e:bc:e5:22: 7a:aa:b0:55:32:8c:c7:41:8b:98:81:e6:6e:25:15:6e:dc:da: 53:ec:4b:45:f5:f7:eb:a4:a1:64:38:de:0d:56:56:fc:7d:e3: 3b:69:a9:20:74:47:19:cb:1b:c6:b0:27:42:99:ff:8c:46:a4: 11:c2:60:fd:a4:e3:9c:5a:2f:c5:f4:98:5a:85:12:0d:0b:dc: cc:7e:30:fa:95:cb:db:21:05:71:fc:6c:31:06:6d:93:f6:5e: 58:07:7c:99:34:f6:83:f1:4c:e2:b3:dc:41:9a:f6:0b:21:a7: 2d:3d:61:b0:72:5e:d0:ce:25:88:13:64:0b:a1:ea:49:05:1f: ac:76:70:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTvizuAbvRyAMxqZEzn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTU5MzI5NjBmM2MxNzRkNDk1N2FiZTlmNWFiMjk1MjY0 ZDU0NTMwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD EygwZWFiZGQwMDg1MGFlY2EzOWY1N2YzY2NlZTNhYjc3ODA2ODAyZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7po6IIrQFMSo5JsYZmGKir/Vcz7T 4c0a2KT0rtip5Psc4S3+lAW4tB8Kh7VpgL3cDKIFHtAM6kKrIVL2WMzacndz4OZh 5BbML4qD3RG4hqmiaUuUUNEyab6o6TeS4qmxfTcFPxOT2qtbcWXXEgWqzcvdobe1 Ltw7zRIbBkWd4mIVjqmwaz40FrH38aFfxAIsVOmaATNUBEQfUwja0w/aPrD07NWw nso4OUc1WkXfMNBcdXdCsqrpUPc6NQPvjBYqASpiPU2zAGRvYvxxycmEakz9OYjt mTLiRuriPSIKQWYZObpWLIa3mA3JaE/gLqFtY9f3fX//0EuczUgty+j6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6r3QCFCuyjn1fzzO46t3gGgC5FMB8GA1UdIwQY MBaAFNUVkylg88F01JV6vp9aspUmTVRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjkt MTNmNjViNTQzY2M0LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjktMTNmNjViNTQzY2M0 LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceTG/OIU Z9pGmt+mgM2wzIGWbMgHHJGyiGcBogGMM0umGVqafWdot2yPVi9JkcyX7ScDruMw LthrmYc4F1awcn+0v8pv+rWYgkKvtPcniD5/co1dkzk2U483nu71W1EqajKgQ0be p1m9ablEqOxMmUcyOObnheNHzfZOvOUieqqwVTKMx0GLmIHmbiUVbtzaU+xLRfX3 66ShZDjeDVZW/H3jO2mpIHRHGcsbxrAnQpn/jEakEcJg/aTjnFovxfSYWoUSDQvc zH4w+pXL2yEFcfxsMQZtk/ZeWAd8mTT2g/FM4rPcQZr2CyGnLT1hsHJe0M4liBNk C6HqSQUfrHZw+g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:45 2025 by rpki-client