This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json) Hash identifier: 7EWxmV2cJWBHyEm+MrEytzh6cVw8rc2+TFfvReAXuA0= Subject key identifier: D5:83:60:9C:25:38:EA:D1:91:EF:A4:AE:03:9D:16:76:58:E7:53:2E Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Certificate serial: 019AF2771186726529701A09E2DCFE39071A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: yQBsgWVN7ShYoZcntgugdGT7q0MoBTJHAbpc5is3kOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:11:86:72:65:29:70:1a:09:e2:dc:fe:39:07:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=d583609c2538ead191efa4ae039d167658e7532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:50:3c:9b:05:6a:44:b4:3d:28:b8:c1:50: 2f:6b:af:17:2e:bd:7d:d6:9b:83:fe:da:b9:68:40: 4a:ca:6f:8a:30:3c:59:4a:77:d7:47:19:82:e6:5b: bf:96:a4:3e:7f:ca:0e:4b:60:20:d0:3a:7b:b3:2a: 4e:82:fb:5e:49:1c:25:f5:72:43:4a:1a:57:7d:44: 61:21:c8:2d:12:61:10:41:35:35:93:5c:86:4f:8a: f8:e7:ac:e9:9a:bb:9b:91:f6:56:8c:df:79:cc:73: 07:47:b9:bd:59:6b:09:6c:03:0e:4c:bc:0a:ef:ff: 9c:88:e2:8f:10:b6:43:5b:fa:af:0e:9b:71:95:80: 78:81:31:2a:8f:48:e1:cc:42:42:48:7d:62:e4:02: d2:79:43:3a:63:72:a7:25:9b:07:7a:e7:25:cb:ba: b7:80:46:8b:49:50:96:ea:3e:6b:78:77:18:e8:80: d0:f3:bc:95:6b:00:e8:2b:6e:56:7d:d2:f0:50:91: c1:ff:5a:87:e6:9d:29:7e:a5:d4:b1:ce:b9:73:10: ea:03:93:55:fc:ed:5d:05:28:fb:5d:bd:0b:b2:46: e2:9e:a6:72:eb:5a:54:39:34:f8:93:37:b4:7a:ad: e8:5a:d8:e3:15:05:8a:ed:88:0a:91:8f:2e:6b:39: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:60:9C:25:38:EA:D1:91:EF:A4:AE:03:9D:16:76:58:E7:53:2E X509v3 Authority Key Identifier: keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0f:ce:23:71:ad:50:89:90:31:f7:b8:0d:bd:81:50:a5:61: cb:bf:ea:43:4c:05:d2:be:86:2d:77:0c:3e:52:c3:cc:89:6c: 7f:e1:29:3b:9b:bd:d0:ee:2e:93:9b:7f:ae:4d:40:73:6e:99: 22:97:59:2f:34:60:8b:2f:3e:e9:f6:5b:a2:dd:45:25:f9:9d: d6:75:77:a7:43:04:09:86:57:d7:6d:c0:16:51:ab:25:e5:63: 22:49:e7:cb:72:dc:f9:70:5f:d1:fd:a4:b8:94:f3:1b:cd:b4: b5:c1:30:63:6c:25:07:55:17:57:8f:a2:33:d0:9c:ba:41:04: c5:98:96:09:31:c8:9e:a9:09:8f:b4:63:72:3f:b4:47:eb:4a: f6:91:47:c5:4a:f1:aa:8d:bc:c7:d6:13:1c:96:d5:46:38:e2: 1c:1f:aa:d8:cb:7f:34:dc:ab:c3:ce:c5:4b:e7:41:e8:27:1f: 60:3f:5c:1e:02:26:33:da:57:e7:93:25:d7:1a:08:a9:89:b3: 0a:a5:30:0b:81:12:88:f9:75:e1:5b:19:fb:5d:d7:61:09:5b: 96:e1:b2:a1:05:54:88:ad:f3:c8:4f:fc:0d:f4:96:11:76:0c: b1:dc:82:37:a7:60:71:f1:23:49:93:d7:69:8e:f6:bc:69:ac: b1:cc:de:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxGGcmUpcBoJ4tz+OQcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NmZlMmMwY2ZkNzY5MTA0NGVlMzc4NDVjZmNmNTRlMWE4 NDk5NzQwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhkNTgzNjA5YzI1MzhlYWQxOTFlZmE0YWUwMzlkMTY3NjU4ZTc1MzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8xQPJsFakS0PSi4wVAva68XLr19 1puD/tq5aEBKym+KMDxZSnfXRxmC5lu/lqQ+f8oOS2Ag0Dp7sypOgvteSRwl9XJD ShpXfURhIcgtEmEQQTU1k1yGT4r456zpmrubkfZWjN95zHMHR7m9WWsJbAMOTLwK 7/+ciOKPELZDW/qvDptxlYB4gTEqj0jhzEJCSH1i5ALSeUM6Y3KnJZsHeucly7q3 gEaLSVCW6j5reHcY6IDQ87yVawDoK25WfdLwUJHB/1qH5p0pfqXUsc65cxDqA5NV /O1dBSj7Xb0LskbinqZy61pUOTT4kze0eq3oWtjjFQWK7YgKkY8uaznbWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWDYJwlOOrRke+krgOdFnZY51MuMB8GA1UdIwQY MBaAFNVv4sDP12kQRO43hFz89U4ahJl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYt MDEwN2VjMzNlNWI3LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYtMDEwN2VjMzNlNWI3 LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWA/OI3Gt UImQMfe4Db2BUKVhy7/qQ0wF0r6GLXcMPlLDzIlsf+EpO5u90O4uk5t/rk1Ac26Z IpdZLzRgiy8+6fZbot1FJfmd1nV3p0MECYZX123AFlGrJeVjIknny3Lc+XBf0f2k uJTzG820tcEwY2wlB1UXV4+iM9CcukEExZiWCTHInqkJj7Rjcj+0R+tK9pFHxUrx qo28x9YTHJbVRjjiHB+q2Mt/NNyrw87FS+dB6CcfYD9cHgImM9pX55Ml1xoIqYmz CqUwC4ESiPl14VsZ+13XYQlbluGyoQVUiK3zyE/8DfSWEXYMsdyCN6dgcfEjSZPX aY72vGmssczeiw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:51 2025 by rpki-client