This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json) Hash identifier: R9d/clxYGTGw/x6luEw4lQrkdM7ZLfJba0UQEv1ShqU= Subject key identifier: 26:5E:1B:D8:2C:10:D0:CE:5C:50:7C:0E:96:35:80:22:FC:C5:FB:EC Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785 Certificate serial: 019AF12D68408F329BD4327C444883636A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft Manifest number: 02A5 Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: RilsRCH7sGSoKdjr3Ix44kc8itDjYhYTUh0nrilqq/k=) 2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:68:40:8f:32:9b:d4:32:7c:44:48:83:63:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=265e1bd82c10d0ce5c507c0e96358022fcc5fbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:60:a6:15:78:e0:27:10:df:49:b2:9c:1b: f3:8c:59:80:e3:cf:1f:8d:ab:7a:13:e6:05:38:d6: cf:c7:e3:2e:2b:ea:b9:e8:31:6b:97:2e:5a:b3:55: d3:d8:fc:1d:b6:db:2d:10:d7:c8:85:6b:b6:cb:a7: a8:08:40:28:73:c8:c7:c7:25:c3:3c:37:73:f0:7e: 31:f2:ec:d7:55:25:d8:ae:f2:36:06:99:66:38:d0: d4:77:1a:12:47:e3:37:11:4a:5c:0a:3e:f5:1d:6e: 8b:59:97:3e:1d:de:99:10:ea:41:af:e2:30:e0:52: 01:0f:fb:da:6d:3e:38:51:db:5f:73:82:61:c8:9b: ba:24:9e:44:09:3b:73:62:0f:f6:89:3a:27:78:22: e5:42:81:d6:67:8b:60:f2:8f:6e:b7:a6:b0:58:91: c6:1d:f1:40:7b:8f:ce:66:87:ca:a4:0e:26:ac:9b: 04:92:d1:44:cf:f7:e1:37:f8:47:64:c1:38:b2:06: e9:5e:54:1b:0f:9b:89:7f:76:3b:eb:ad:d6:76:42: 9e:71:e7:ed:18:75:d8:73:e8:ed:bb:d8:0f:8f:a2: b3:b2:f2:89:48:b9:81:05:94:8d:0d:77:53:95:ff: 69:f4:bf:52:6b:00:e9:60:3d:af:5a:44:45:6e:9e: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5E:1B:D8:2C:10:D0:CE:5C:50:7C:0E:96:35:80:22:FC:C5:FB:EC X509v3 Authority Key Identifier: keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9a:2b:43:81:e4:91:1c:a6:fc:88:4c:c5:5c:de:01:16:58: ae:ae:ad:5a:f1:92:6f:ac:be:be:0d:b0:50:f7:a2:47:de:6b: a8:38:4e:98:3b:b7:87:99:1b:4c:b4:a9:84:ae:82:f1:7b:df: d6:81:59:2b:a7:28:55:4d:1f:5c:04:c6:49:fa:27:59:cc:1c: ae:41:72:c3:5a:50:0c:85:87:19:f4:69:8e:61:1c:97:ba:95: 76:e4:d4:2f:58:c7:ea:a9:b3:b7:0b:b7:8b:bd:b9:42:a0:6d: ac:fb:4b:4b:76:f5:c6:a9:e8:3f:a2:d1:4a:49:eb:0f:a0:e5: ac:d7:5b:bd:88:5b:3c:6e:8a:ea:e2:aa:bf:22:49:58:9e:72: d8:2c:e3:ab:40:b3:86:1a:1e:ac:92:2b:e9:1a:c0:47:95:14: 8d:bd:0f:96:d9:bc:32:d4:26:f5:de:ed:db:b9:30:1e:db:7e: 22:6a:7e:fe:e8:19:ad:e3:7d:69:7d:6f:ff:0a:f3:a0:4d:92: cb:35:5c:3f:71:04:6b:92:61:a5:ee:18:37:66:91:98:3c:77: 1b:82:e0:5f:16:e1:76:10:08:55:e8:f5:43:21:bb:78:a5:e0: cc:d3:02:03:99:eb:ba:f3:95:be:9f:5f:70:d9:1a:f3:10:0f: ae:4c:04:42 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLWhAjzKb1DJ8REiDY2pRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ViZTJhOTA2ZGQ1ODcwMTI1OTkyMDljMzFjZTEwZjI5 ZDU3ODUwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EygyNjVlMWJkODJjMTBkMGNlNWM1MDdjMGU5NjM1ODAyMmZjYzVmYmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O1gphV44CcQ30mynBvzjFmA488f jat6E+YFONbPx+MuK+q56DFrly5as1XT2PwdttstENfIhWu2y6eoCEAoc8jHxyXD PDdz8H4x8uzXVSXYrvI2BplmONDUdxoSR+M3EUpcCj71HW6LWZc+Hd6ZEOpBr+Iw 4FIBD/vabT44Udtfc4JhyJu6JJ5ECTtzYg/2iToneCLlQoHWZ4tg8o9ut6awWJHG HfFAe4/OZofKpA4mrJsEktFEz/fhN/hHZME4sgbpXlQbD5uJf3Y7663WdkKeceft GHXYc+jtu9gPj6KzsvKJSLmBBZSNDXdTlf9p9L9SawDpYD2vWkRFbp6itwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCZeG9gsENDOXFB8DpY1gCL8xfvsMB8GA1UdIwQY MBaAFPg+viqQbdWHASWZIJwxzhDynVeFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ENi1LcEJ0MVljQkpaa2duREhPRVBLZFY0VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJl LTQ1MjNhMGUyYjg0NC8xLzEtRDYtS3BCdDFZY0JKWmtnbkRIT0VQS2RWNFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJmLzFmNjFhYy0wMmZlLTRlNGMtODUyZS00NTIzYTBlMmI4 NDQvMS8xLUQ2LUtwQnQxWWNCSlprZ25ESE9FUEtkVjRVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJor Q4HkkRym/IhMxVzeARZYrq6tWvGSb6y+vg2wUPeiR95rqDhOmDu3h5kbTLSphK6C 8Xvf1oFZK6coVU0fXATGSfonWcwcrkFyw1pQDIWHGfRpjmEcl7qVduTUL1jH6qmz twu3i725QqBtrPtLS3b1xqnoP6LRSknrD6DlrNdbvYhbPG6K6uKqvyJJWJ5y2Czj q0CzhhoerJIr6RrAR5UUjb0Pltm8MtQm9d7t27kwHtt+Imp+/ugZreN9aX1v/wrz oE2SyzVcP3EEa5Jhpe4YN2aRmDx3G4LgXxbhdhAIVej1QyG7eKXgzNMCA5nruvOV vp9fcNka8xAPrkwEQg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:30 2025 by rpki-client