This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json) Hash identifier: 3wpX0I278qwhWOhxhYTLq16UcIRuNetnzzJDKR+ajyw= Subject key identifier: A6:89:21:D0:E6:1F:0C:55:DB:6F:01:D8:0B:06:84:C3:B3:EC:01:76 Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27 Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327 Certificate serial: 019AF12D993C8174A63EA9A1A1D417172BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft Manifest number: 12B2 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: FW+KLzinqNc90ya2pAUwqHZ9RA3aM9v6yibIG2zG/P8=) 2: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (hash: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:99:3c:81:74:a6:3e:a9:a1:a1:d4:17:17:2b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=a68921d0e61f0c55db6f01d80b0684c3b3ec0176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:91:fc:39:3a:31:9c:6a:3e:ef:fe:d9:29: a6:cf:dc:75:da:bd:40:3a:fa:3a:54:e6:a1:5e:c1: d0:7f:1d:28:4a:a3:81:3e:09:7e:58:1c:6e:25:2f: 2d:69:43:5b:a2:39:4d:c8:5b:df:48:bc:13:4a:b8: 6a:36:39:04:40:7d:50:ee:14:f7:d0:7b:d8:b3:c3: f2:72:13:7f:ce:31:b3:ff:b2:27:f7:67:58:c1:af: 4f:77:3e:76:97:f2:be:6e:43:49:36:f1:a7:a4:cd: 97:eb:14:9d:17:df:33:6c:c0:b5:c5:55:cc:30:79: 3f:98:ac:fc:f9:46:b2:16:55:2f:72:40:e5:fb:5c: f5:2a:97:21:6b:d1:c3:c5:14:ce:ed:f4:8d:e0:56: 22:4b:a0:14:30:25:c6:69:91:16:eb:99:7f:61:de: 93:9b:07:e0:35:59:22:f4:58:c3:a4:37:fa:13:13: 6e:56:4c:88:a7:34:24:62:53:cc:ca:65:d3:a8:d2: 09:11:93:9d:e7:6a:40:6c:ff:a2:8f:97:83:8f:64: d5:2b:7c:02:63:a8:17:9a:f0:c6:a6:67:e9:89:e0: 95:c9:0c:3c:19:c3:e7:65:74:38:5d:7e:1c:14:97: df:6b:7c:ba:d6:b4:18:3b:27:d8:c9:fa:29:c6:39: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:21:D0:E6:1F:0C:55:DB:6F:01:D8:0B:06:84:C3:B3:EC:01:76 X509v3 Authority Key Identifier: keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a1:ee:54:aa:13:77:f6:6a:21:18:e4:c4:ea:51:28:06:78: 54:f1:1d:3c:5f:3f:1f:c5:3c:80:c0:d7:8a:60:11:13:cf:96: b1:d6:ca:4e:c9:65:f3:20:27:0c:b3:71:03:ca:89:32:79:4d: 07:0d:07:ac:9e:4b:19:ee:32:06:35:d3:9a:c7:43:85:49:dc: ad:1e:23:ad:53:ba:78:1f:71:a1:f2:2e:d5:2f:ed:f3:87:66: 9c:c1:b1:81:d7:96:9b:6d:33:3b:6f:77:6d:23:de:44:e3:d0: 50:38:ce:2d:bd:de:da:b8:83:e8:b5:b2:f7:21:d1:3a:35:4b: 37:d3:00:67:1b:ba:bb:4e:56:c1:07:48:0e:ff:2e:41:f8:66: 55:4b:f6:2c:2a:07:c8:7c:ae:2f:35:16:67:97:f2:db:4c:6a: 94:d0:7e:32:19:14:94:6e:f1:35:3f:a9:f7:9d:38:48:62:fd: 3c:51:67:08:70:2b:ad:2e:96:47:03:17:79:e2:d3:59:ba:02: 59:f9:a7:6f:8d:a0:1b:f9:4e:d7:4d:73:68:82:79:4c:8c:86: c1:da:2c:c8:ac:c6:c9:01:fa:87:30:e8:2b:a8:c0:2a:53:27: e7:27:33:98:41:94:15:62:ef:87:5e:6d:74:4e:5c:cd:fb:e8: 30:80:40:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZk8gXSmPqmhodQXFyv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OWQzYjhiMDQ0ZjFkMzVmZjI3MTkwYjc1NzVmMzA4MDZi MTEzMjcwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EyhhNjg5MjFkMGU2MWYwYzU1ZGI2ZjAxZDgwYjA2ODRjM2IzZWMwMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCaR/Dk6MZxqPu/+2Smmz9x12r1A Ovo6VOahXsHQfx0oSqOBPgl+WBxuJS8taUNbojlNyFvfSLwTSrhqNjkEQH1Q7hT3 0HvYs8PychN/zjGz/7In92dYwa9Pdz52l/K+bkNJNvGnpM2X6xSdF98zbMC1xVXM MHk/mKz8+UayFlUvckDl+1z1Kpcha9HDxRTO7fSN4FYiS6AUMCXGaZEW65l/Yd6T mwfgNVki9FjDpDf6ExNuVkyIpzQkYlPMymXTqNIJEZOd52pAbP+ij5eDj2TVK3wC Y6gXmvDGpmfpieCVyQw8GcPnZXQ4XX4cFJffa3y61rQYOyfYyfopxjla+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaJIdDmHwxV228B2AsGhMOz7AF2MB8GA1UdIwQY MBaAFNWdO4sETx01/ycZC3V18wgGsRMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOTQzZTktZTAzYi00ZDdiLThjODkt NWIzNzMyZjQ4MDgxLzEvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mOTQzZTktZTAzYi00ZDdiLThjODktNWIzNzMyZjQ4MDgx LzEvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKHuVKoT d/ZqIRjkxOpRKAZ4VPEdPF8/H8U8gMDXimARE8+WsdbKTsll8yAnDLNxA8qJMnlN Bw0HrJ5LGe4yBjXTmsdDhUncrR4jrVO6eB9xofIu1S/t84dmnMGxgdeWm20zO293 bSPeROPQUDjOLb3e2riD6LWy9yHROjVLN9MAZxu6u05WwQdIDv8uQfhmVUv2LCoH yHyuLzUWZ5fy20xqlNB+MhkUlG7xNT+p9504SGL9PFFnCHArrS6WRwMXeeLTWboC Wfmnb42gG/lO101zaIJ5TIyGwdosyKzGyQH6hzDoK6jAKlMn5yczmEGUFWLvh15t dE5czfvoMIBAIg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:08 2025 by rpki-client