This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json) Hash identifier: F95nYI+tLEKEvYf6QQip8u3YqNNth7XKUaSd+XEB73g= Subject key identifier: 9B:C2:20:0D:95:E6:76:32:C4:32:C0:A0:3C:63:BD:85:D6:FD:89:BA Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Certificate serial: 019AF0F5EFB45089684D5E9FF0B1B5B2FFB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft Manifest number: 04B4 Signing time: Sat 06 Dec 2025 00:00:40 +0000 Manifest this update: Sat 06 Dec 2025 00:00:40 +0000 Manifest next update: Sun 07 Dec 2025 00:00:40 +0000 Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: VhAT7+vr5lXC8Dm3Iyb9paudYOOONb082xXoZ8reJ88=) 2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ef:b4:50:89:68:4d:5e:9f:f0:b1:b5:b2:ff:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Validity Not Before: Dec 6 00:00:40 2025 GMT Not After : Dec 7 00:00:40 2025 GMT Subject: CN=9bc2200d95e67632c432c0a03c63bd85d6fd89ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:eb:25:2a:35:c0:81:a4:e7:25:97:09:92: 4e:27:13:81:26:70:36:ed:77:30:77:ae:94:b4:f2: ab:4b:ba:51:3a:42:e3:ab:22:3c:5a:85:4e:aa:a0: 7f:e1:22:24:11:f7:e6:77:55:21:d6:3f:22:84:c0: ae:0e:75:b6:47:83:3e:68:ed:b5:52:32:6f:0a:25: ad:0d:46:6d:2d:45:84:0d:64:b9:61:5a:77:db:5d: 14:d4:44:aa:fb:13:bd:71:ba:81:60:0b:dd:43:c0: 31:a1:cb:d4:76:1d:b1:ae:1e:59:cf:5a:78:01:3f: cb:01:dc:83:79:b1:8a:1e:4c:0d:07:ff:c4:ad:60: 73:ce:52:e9:a4:b4:17:c5:43:da:de:ac:31:20:6d: 5d:5f:9e:f6:3b:61:a6:0a:00:27:db:08:1e:91:82: cc:ab:89:1f:6b:cd:ad:de:50:3f:65:8f:57:a4:d9: 38:74:db:de:5b:c6:5b:4a:f5:10:db:ac:a6:df:d3: a4:b1:61:50:ba:47:45:0c:93:19:b8:5c:68:63:83: 7e:d8:3b:47:54:83:3d:2e:63:8b:d2:16:fc:9a:a5: e6:81:01:1d:9f:c8:9a:fd:4c:a4:f7:f3:f5:14:12: 05:fa:19:d5:cd:67:3b:50:95:2d:20:c5:7f:49:ba: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:20:0D:95:E6:76:32:C4:32:C0:A0:3C:63:BD:85:D6:FD:89:BA X509v3 Authority Key Identifier: keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4e:5a:dc:0d:90:60:b8:bb:c9:c7:7b:54:c8:8e:c6:06:09: 69:ad:26:3a:de:66:8b:47:30:85:6d:f0:76:d1:23:56:42:e2: 49:27:50:f0:17:97:52:14:e3:b9:62:73:a9:e2:58:88:12:fe: 0a:58:94:dd:fe:55:a4:b0:96:8a:29:ff:0a:7e:c2:d7:81:f9: e4:fd:7d:0e:e3:76:d3:4c:13:3b:06:dd:fe:5d:e0:c8:a1:0b: f5:c1:82:60:7c:fb:f4:ea:46:6d:bc:b0:33:8e:ac:96:a3:3d: 81:78:64:83:07:6b:8a:ea:ae:68:ea:ea:43:6a:eb:08:9a:e4: de:fe:76:17:a3:85:ec:da:78:b7:15:92:41:81:75:24:29:02: 83:cb:b0:76:20:8c:59:ae:d9:51:8f:d4:04:45:de:1e:29:0c: cb:be:97:fc:0f:4e:88:3b:fb:ee:15:c8:88:80:4a:66:2e:1a: ec:8e:2b:d7:44:30:df:60:d2:38:23:15:11:18:3c:45:4e:76: 64:06:5f:e4:cd:6a:20:8e:40:05:11:d0:8d:7f:39:e2:c4:32: 2e:89:6c:4c:11:84:bb:e1:f6:42:f2:be:c9:81:66:ac:78:b9: 17:50:e4:15:8a:1d:74:f9:3f:29:fd:2c:57:c3:b1:21:7e:90: a2:d2:f0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9e+0UIloTV6f8LG1sv+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NWU1NjExNzg4MTQyYjMxNTQyOGFlNTFmNjdjYmJhY2Y4 MGI3ZTgwHhcNMjUxMjA2MDAwMDQwWhcNMjUxMjA3MDAwMDQwWjAzMTEwLwYDVQQD Eyg5YmMyMjAwZDk1ZTY3NjMyYzQzMmMwYTAzYzYzYmQ4NWQ2ZmQ4OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38PrJSo1wIGk5yWXCZJOJxOBJnA2 7Xcwd66UtPKrS7pROkLjqyI8WoVOqqB/4SIkEffmd1Uh1j8ihMCuDnW2R4M+aO21 UjJvCiWtDUZtLUWEDWS5YVp3210U1ESq+xO9cbqBYAvdQ8AxocvUdh2xrh5Zz1p4 AT/LAdyDebGKHkwNB//ErWBzzlLppLQXxUPa3qwxIG1dX572O2GmCgAn2wgekYLM q4kfa82t3lA/ZY9XpNk4dNveW8ZbSvUQ26ym39OksWFQukdFDJMZuFxoY4N+2DtH VIM9LmOL0hb8mqXmgQEdn8ia/Uyk9/P1FBIF+hnVzWc7UJUtIMV/Sbp54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvCIA2V5nYyxDLAoDxjvYXW/Ym6MB8GA1UdIwQY MBaAFNVeVhF4gUKzFUKK5R9ny7rPgLfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQt ODNjN2RiNzU5NmZlLzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQtODNjN2RiNzU5NmZl LzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE5a3A2Q YLi7ycd7VMiOxgYJaa0mOt5mi0cwhW3wdtEjVkLiSSdQ8BeXUhTjuWJzqeJYiBL+ CliU3f5VpLCWiin/Cn7C14H55P19DuN200wTOwbd/l3gyKEL9cGCYHz79OpGbbyw M46slqM9gXhkgwdriuquaOrqQ2rrCJrk3v52F6OF7Np4txWSQYF1JCkCg8uwdiCM Wa7ZUY/UBEXeHikMy76X/A9OiDv77hXIiIBKZi4a7I4r10Qw32DSOCMVERg8RU52 ZAZf5M1qII5ABRHQjX854sQyLolsTBGEu+H2QvK+yYFmrHi5F1DkFYoddPk/Kf0s V8OxIX6QotLwWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:32 2025 by rpki-client