This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft File: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json) Hash identifier: uWyyaakCdO8QfT30FLLpmM6Zm4OqqlGyMmTmLf73RME= Subject key identifier: 6A:B9:62:28:96:FD:81:93:F8:51:57:57:0C:4D:B1:A7:CB:4A:4B:8E Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5 Certificate issuer: /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5 Certificate serial: 019AF49C03B6AFA80796AC0D9AAA44F872D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft Manifest number: 025D Signing time: Sat 06 Dec 2025 17:00:56 +0000 Manifest this update: Sat 06 Dec 2025 17:00:56 +0000 Manifest next update: Sun 07 Dec 2025 17:00:56 +0000 Files and hashes: 1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: VWhbPzpTwor/1x+nkGMlw9e7CvAynBIUww+2YG9C2iY=) 2: BcelUhdXxacAQU97XkdcwjtJzVg.roa (hash: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:03:b6:af:a8:07:96:ac:0d:9a:aa:44:f8:72:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5 Validity Not Before: Dec 6 17:00:56 2025 GMT Not After : Dec 7 17:00:56 2025 GMT Subject: CN=6ab9622896fd8193f85157570c4db1a7cb4a4b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:01:b1:19:a1:b6:bc:f5:0c:32:bc:58:b5: 24:34:be:f3:24:38:79:40:6e:1d:f8:b3:61:01:de: b8:b1:84:80:e1:a3:95:74:1e:75:39:44:fd:5d:62: ac:c4:7a:be:27:d4:9b:9b:00:d3:25:d1:6d:da:f2: 76:03:03:2d:27:ad:1e:75:38:8d:f2:43:4e:77:d1: 3d:59:67:29:b5:6e:2b:fb:a4:90:4f:a5:06:bc:9b: 9e:20:c8:66:d4:19:52:6c:5b:e0:ba:c6:11:6a:02: 32:9e:54:d3:5e:66:d9:5f:f6:ca:98:58:b0:9e:9f: 70:5b:a8:03:7b:fa:1e:e2:e5:01:e5:a7:30:e1:86: 2c:c2:8e:03:30:60:a7:11:a7:2e:8b:2c:41:3e:61: 35:8a:e2:1e:95:22:50:f8:0a:41:fe:3a:83:b9:01: 3d:5c:22:44:36:d1:93:cf:cb:41:1a:d3:26:94:52: b7:ee:8c:fc:07:4e:51:aa:6c:8b:a4:29:c0:74:cf: c4:f7:0d:a4:c9:36:d1:d7:ed:b8:e0:28:cd:dc:e2: 83:10:9d:53:15:ec:76:bd:09:62:43:07:bc:1c:d8: 10:42:5f:a7:49:39:17:e8:9f:1a:6f:56:1c:bb:84: 1b:94:11:67:99:b7:6b:8d:2b:17:21:54:c1:c9:50: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:62:28:96:FD:81:93:F8:51:57:57:0C:4D:B1:A7:CB:4A:4B:8E X509v3 Authority Key Identifier: keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f7:74:07:62:63:97:39:9b:32:3d:89:e9:b4:59:5e:fa:82: e9:bb:f0:0d:b6:d4:a0:4d:ba:15:0f:0a:19:d2:0f:55:ed:d0: 98:c5:c4:fb:ae:f5:84:a7:4d:c6:67:26:21:d9:0e:dd:28:ea: 03:21:0a:9b:3f:4a:03:8e:bd:d3:0a:73:7d:be:8a:20:8d:1b: 9b:1d:e9:6b:a9:e2:ae:3d:93:2e:ac:02:56:c7:20:46:1b:0b: b0:30:ed:bc:c1:2f:e1:30:89:86:2a:e3:3e:50:1e:19:80:4f: b3:89:60:3f:7a:26:de:05:65:be:33:55:ec:38:49:86:9e:07: e3:fa:04:86:d7:d1:67:45:7b:fb:cf:ca:92:20:aa:47:cb:ee: b0:53:04:8d:37:fa:56:64:89:79:46:79:e6:fc:ff:9a:6b:29: 66:8d:d8:00:7e:8c:54:da:40:8c:3d:2f:ad:de:be:23:af:d0: 71:2a:ef:64:80:3a:19:bf:ec:c3:d6:10:00:da:f0:8f:cf:89: e4:ba:ea:e6:ff:d9:c3:d2:46:7d:bb:52:3c:05:7f:5f:b3:93: f0:6f:b8:72:67:2e:4d:d3:f5:e1:c3:2a:41:e6:3f:80:13:49: 57:ff:7f:2f:e2:f5:5a:fb:c4:59:6e:96:c3:25:2f:5b:02:1d: 73:2e:e5:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAO2r6gHlqwNmqpE+HLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NTg1YTJlMDhmZTQ0M2NlN2ZkMGNiZjQwNmY3YjlhZGEy YTdjYzUwHhcNMjUxMjA2MTcwMDU2WhcNMjUxMjA3MTcwMDU2WjAzMTEwLwYDVQQD Eyg2YWI5NjIyODk2ZmQ4MTkzZjg1MTU3NTcwYzRkYjFhN2NiNGE0YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA244BsRmhtrz1DDK8WLUkNL7zJDh5 QG4d+LNhAd64sYSA4aOVdB51OUT9XWKsxHq+J9SbmwDTJdFt2vJ2AwMtJ60edTiN 8kNOd9E9WWcptW4r+6SQT6UGvJueIMhm1BlSbFvgusYRagIynlTTXmbZX/bKmFiw np9wW6gDe/oe4uUB5acw4YYswo4DMGCnEacuiyxBPmE1iuIelSJQ+ApB/jqDuQE9 XCJENtGTz8tBGtMmlFK37oz8B05RqmyLpCnAdM/E9w2kyTbR1+244CjN3OKDEJ1T Fex2vQliQwe8HNgQQl+nSTkX6J8ab1Ycu4QblBFnmbdrjSsXIVTByVDkrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq5YiiW/YGT+FFXVwxNsafLSkuOMB8GA1UdIwQY MBaAFNVYWi4I/kQ85/0Mv0Bve5raKnzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUt NjI4NDAwNjcxZDBlLzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUtNjI4NDAwNjcxZDBl LzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/d0B2Jj lzmbMj2J6bRZXvqC6bvwDbbUoE26FQ8KGdIPVe3QmMXE+671hKdNxmcmIdkO3Sjq AyEKmz9KA4690wpzfb6KII0bmx3pa6nirj2TLqwCVscgRhsLsDDtvMEv4TCJhirj PlAeGYBPs4lgP3om3gVlvjNV7DhJhp4H4/oEhtfRZ0V7+8/KkiCqR8vusFMEjTf6 VmSJeUZ55vz/mmspZo3YAH6MVNpAjD0vrd6+I6/QcSrvZIA6Gb/sw9YQANrwj8+J 5Lrq5v/Zw9JGfbtSPAV/X7OT8G+4cmcuTdP14cMqQeY/gBNJV/9/L+L1WvvEWW6W wyUvWwIdcy7low== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:36 2025 by rpki-client