This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json) Hash identifier: uv5rGhCIY1TXjRzIwyvl22MzGS9Q3pOLrdmLOjzYms0= Subject key identifier: A6:CE:AC:02:6C:36:11:3C:D5:DE:4B:20:5B:CC:DB:1A:FB:65:05:31 Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9 Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9 Certificate serial: 019AF2400CF61BB29F8FB2A6D1FF2C8A52C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft Manifest number: 06AA Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: ldqEIfqKNu7arCxq2MriJp7P0+oIJmavbP4g7kIEH08=) 2: ul-xO-5mZZApWQIPteBxrXhy3Gg.roa (hash: Xgcb4gBJ+LBlJQi0BqbRaMDSR7lxsJ55H3PWqex5WBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0c:f6:1b:b2:9f:8f:b2:a6:d1:ff:2c:8a:52:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=a6ceac026c36113cd5de4b205bccdb1afb650531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:b0:18:18:56:84:54:7e:30:a0:17:27:f1: 00:69:71:a2:2a:ea:25:b3:26:50:76:31:a9:b1:53: 66:24:1c:d7:26:a5:f9:f3:e6:cf:bd:7a:ba:77:f7: 86:40:93:37:62:22:3f:e0:b1:1f:d1:62:06:12:a6: 4e:a5:5b:4d:47:d4:50:df:c5:b8:44:93:b9:4e:02: 00:68:de:d7:dd:64:92:c3:30:a1:2b:ac:37:dc:04: 6f:53:15:9b:41:26:88:b0:eb:96:e9:59:a9:99:c2: 4b:ad:27:2b:4e:85:13:6c:68:91:73:cb:ee:45:44: 03:73:d7:d8:bd:05:2e:32:a4:a5:66:84:57:d5:ec: f8:73:cc:8c:24:90:26:0b:a9:b4:ca:26:cc:88:d6: 97:cc:63:0c:6d:e6:63:80:6c:ea:87:a0:19:21:46: 8a:71:30:b7:ed:4a:2a:e0:c4:8b:9a:d2:5e:dc:3b: 7d:89:81:de:53:55:9f:9d:37:e3:e9:4d:cf:02:dc: 2c:eb:6f:ff:62:e7:03:07:c3:ea:af:1d:c3:d3:fa: 38:9c:79:18:50:b4:f3:01:ad:17:09:de:f2:cc:bd: f7:b5:fb:91:e9:57:7a:e2:20:26:dd:1f:b4:2c:7a: 3e:4a:59:86:69:2f:b1:c9:70:c6:86:00:c0:b6:9b: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CE:AC:02:6C:36:11:3C:D5:DE:4B:20:5B:CC:DB:1A:FB:65:05:31 X509v3 Authority Key Identifier: keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:ab:d2:7c:af:7f:a5:ab:d7:78:c6:20:68:6e:b8:65:78:2c: 72:38:1f:b0:af:b5:7d:31:df:10:a4:38:01:c3:d5:24:c7:94: 17:4e:a5:14:49:6b:43:4e:c8:b1:18:71:35:bb:c4:28:da:17: 39:f8:c0:31:3a:c1:89:3f:b9:eb:7f:c6:58:f9:57:86:d7:eb: 09:81:1a:c9:46:35:8e:2d:24:fd:67:c8:05:0f:e9:84:42:04: d6:49:3b:31:2d:54:2c:dc:94:bb:7d:ca:a2:a0:85:63:9d:61: cc:2b:5b:56:4c:3a:77:f0:5b:a4:64:fd:08:a4:06:26:f3:d2: b9:ce:b0:11:27:b4:85:00:d0:d9:31:8e:36:7c:3e:4e:58:38: 35:0e:26:a8:1b:e7:37:9b:f9:cf:06:84:5b:a3:ac:e5:1b:7e: 1f:e8:8e:39:73:71:e0:38:d8:80:5b:b0:6a:c8:f2:f7:92:e3: a8:3a:4c:fa:df:5c:40:34:10:54:67:91:7a:6d:72:d5:15:f5: 45:67:8c:5d:44:75:55:9a:6e:4a:0b:e7:2b:a2:be:37:80:25: 59:e4:22:f9:5a:a9:c5:16:94:be:b2:cc:00:cc:fd:2e:b1:44: b2:44:15:bc:ad:68:bb:59:73:b7:eb:77:f5:c3:b7:d8:86:e3: 9d:b5:55:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAz2G7Kfj7Km0f8silLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTI2NTg5YzUxOTRmMWU1ZmJiOWZkYzUxNjY3ZGFmMDU2 MmQ2ZDkwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EyhhNmNlYWMwMjZjMzYxMTNjZDVkZTRiMjA1YmNjZGIxYWZiNjUwNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaiwGBhWhFR+MKAXJ/EAaXGiKuol syZQdjGpsVNmJBzXJqX58+bPvXq6d/eGQJM3YiI/4LEf0WIGEqZOpVtNR9RQ38W4 RJO5TgIAaN7X3WSSwzChK6w33ARvUxWbQSaIsOuW6VmpmcJLrScrToUTbGiRc8vu RUQDc9fYvQUuMqSlZoRX1ez4c8yMJJAmC6m0yibMiNaXzGMMbeZjgGzqh6AZIUaK cTC37Uoq4MSLmtJe3Dt9iYHeU1WfnTfj6U3PAtws62//YucDB8Pqrx3D0/o4nHkY ULTzAa0XCd7yzL33tfuR6Vd64iAm3R+0LHo+SlmGaS+xyXDGhgDAtps+XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbOrAJsNhE81d5LIFvM2xr7ZQUxMB8GA1UdIwQY MBaAFAdSZYnFGU8eX7uf3FFmfa8FYtbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNWE3NzQtODU1My00NDE0LWFjM2Mt ZGQxNzBjMWZkMzNjLzEvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNWE3NzQtODU1My00NDE0LWFjM2MtZGQxNzBjMWZkMzNj LzEvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKvSfK9/ pavXeMYgaG64ZXgscjgfsK+1fTHfEKQ4AcPVJMeUF06lFElrQ07IsRhxNbvEKNoX OfjAMTrBiT+563/GWPlXhtfrCYEayUY1ji0k/WfIBQ/phEIE1kk7MS1ULNyUu33K oqCFY51hzCtbVkw6d/BbpGT9CKQGJvPSuc6wESe0hQDQ2TGONnw+Tlg4NQ4mqBvn N5v5zwaEW6Os5Rt+H+iOOXNx4DjYgFuwasjy95LjqDpM+t9cQDQQVGeRem1y1RX1 RWeMXUR1VZpuSgvnK6K+N4AlWeQi+VqpxRaUvrLMAMz9LrFEskQVvK1ou1lzt+t3 9cO32IbjnbVVnw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:27 2025 by rpki-client