This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json) Hash identifier: aAUq/00hbHtc3qEmqG6s1WbQC0BF6t2+I5uZ7d5uU9M= Subject key identifier: 58:F1:27:F4:10:1C:00:24:DD:73:4E:3F:10:64:EB:A2:5B:6F:74:9F Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260 Certificate serial: 019AF1647FE88D3B042E313FBDBCD6A6B57F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft Manifest number: 024E Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: PaJJYApKd5fU8CC3pdfTthNrdIhSaDImoY2TmQcCbK8=) 2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7f:e8:8d:3b:04:2e:31:3f:bd:bc:d6:a6:b5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=58f127f4101c0024dd734e3f1064eba25b6f749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:97:d0:44:75:59:e4:8d:65:c8:e9:19:23: 67:ee:33:cf:93:c4:74:4e:78:b8:96:ec:51:af:07: cf:4d:64:73:89:a6:3a:c2:8a:13:9a:b9:f8:12:35: 82:30:b3:da:55:d0:67:2a:fd:fe:5b:11:ab:48:14: b8:f5:83:f3:9f:2e:39:cb:5a:58:7e:9d:b5:df:56: 47:a1:52:c9:78:4e:9f:61:cc:b9:11:3e:da:a0:f7: 91:fa:b6:de:46:5d:fb:ad:8b:1d:e1:46:3a:46:3c: 12:7e:c8:42:14:a5:b2:89:ea:0f:08:39:43:02:dc: 14:7b:38:ef:0b:93:8b:16:37:eb:0c:ff:24:42:9f: b0:45:f5:66:20:c7:c2:3b:50:88:11:ae:11:f2:63: 45:66:63:ef:50:86:0f:ef:1d:74:9c:9a:92:b9:15: f6:29:e1:bf:9c:03:24:55:e1:a7:46:23:32:1f:5f: 1f:ca:09:62:6e:fe:40:a6:9c:b4:bc:fb:a0:83:67: be:6a:6e:b5:06:a8:0a:9e:91:ae:49:c7:07:15:72: 43:38:aa:29:8f:da:d3:92:83:6d:8c:72:59:f8:35: c5:57:c6:74:d2:75:a4:cd:e8:cf:ba:0f:0c:f4:d9: b0:86:6c:c8:fd:9b:ab:de:13:8f:32:8f:f3:11:4b: 17:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F1:27:F4:10:1C:00:24:DD:73:4E:3F:10:64:EB:A2:5B:6F:74:9F X509v3 Authority Key Identifier: keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cc:0f:34:d9:6c:0d:7c:d3:d5:65:86:f5:39:62:0a:33:db: 52:11:52:eb:0f:ed:a5:b0:34:1b:77:80:1c:bf:44:20:c6:31: 71:ff:e4:4c:35:0a:a5:39:ec:85:d0:40:3f:f4:b3:3a:9f:84: d3:55:71:7d:57:47:64:42:2a:e4:a0:18:80:68:03:b4:6c:60: e4:0d:74:09:8c:08:fc:57:d5:8a:ed:0a:98:c8:ba:66:37:34: a6:b4:ce:f3:43:4e:a2:39:8f:2e:7d:78:e9:26:66:60:8c:4d: 5f:f1:a5:ed:cc:f7:e7:af:a5:06:6b:f3:41:8b:8d:28:a2:2d: ad:c4:00:d7:3b:e7:c4:a2:26:f9:88:d7:7c:43:e6:b0:c2:39: dc:05:12:7e:84:01:ea:1b:f5:5e:ea:37:29:cc:33:d3:f4:ee: 4f:80:bd:63:75:e3:f7:79:a5:b6:fe:c5:2a:7c:ab:d8:1a:55: 3a:88:f4:29:9c:51:6b:0f:fa:2d:fc:f2:7f:55:7c:08:d9:ed: 48:fc:43:7f:84:b3:df:15:9f:82:1c:db:b5:a7:20:16:88:37: e2:dc:42:6d:d8:a0:b2:2d:c3:32:87:43:e1:7e:73:bc:94:ca: b1:8b:be:a0:d4:30:6b:23:a3:7b:d2:1f:a9:54:c6:9b:86:f5: 97:e2:5e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH/ojTsELjE/vbzWprV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw NjkyNjAwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD Eyg1OGYxMjdmNDEwMWMwMDI0ZGQ3MzRlM2YxMDY0ZWJhMjViNmY3NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn+X0ER1WeSNZcjpGSNn7jPPk8R0 Tni4luxRrwfPTWRziaY6wooTmrn4EjWCMLPaVdBnKv3+WxGrSBS49YPzny45y1pY fp2131ZHoVLJeE6fYcy5ET7aoPeR+rbeRl37rYsd4UY6RjwSfshCFKWyieoPCDlD AtwUezjvC5OLFjfrDP8kQp+wRfVmIMfCO1CIEa4R8mNFZmPvUIYP7x10nJqSuRX2 KeG/nAMkVeGnRiMyH18fyglibv5Appy0vPugg2e+am61BqgKnpGuSccHFXJDOKop j9rTkoNtjHJZ+DXFV8Z00nWkzejPug8M9NmwhmzI/Zur3hOPMo/zEUsXdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjxJ/QQHAAk3XNOPxBk66Jbb3SfMB8GA1UdIwQY MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncwPNNls DXzT1WWG9TliCjPbUhFS6w/tpbA0G3eAHL9EIMYxcf/kTDUKpTnshdBAP/SzOp+E 01VxfVdHZEIq5KAYgGgDtGxg5A10CYwI/FfViu0KmMi6Zjc0prTO80NOojmPLn14 6SZmYIxNX/Gl7cz356+lBmvzQYuNKKItrcQA1zvnxKIm+YjXfEPmsMI53AUSfoQB 6hv1Xuo3Kcwz0/TuT4C9Y3Xj93mltv7FKnyr2BpVOoj0KZxRaw/6Lfzyf1V8CNnt SPxDf4Sz3xWfghzbtacgFog34txCbdigsi3DModD4X5zvJTKsYu+oNQwayOje9If qVTGm4b1l+Je9g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:49 2025 by rpki-client