This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json) Hash identifier: E86aSOpqyozimTUfjBIMr+tQMDPMeW6xntVzVZG5zXw= Subject key identifier: EA:60:D8:D3:40:8A:27:CB:62:96:BC:DD:76:97:69:CC:44:68:99:4A Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49 Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49 Certificate serial: 019B34C54D886FFC8C3E33135A5E063E85B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:01:44 +0000 Manifest this update: Fri 19 Dec 2025 04:01:44 +0000 Manifest next update: Sat 20 Dec 2025 04:01:44 +0000 Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: 5AX53cGNftQwt0LdHoPIK6NhYWger0oQUkq/MXlLg+I=) 2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:4d:88:6f:fc:8c:3e:33:13:5a:5e:06:3e:85:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49 Validity Not Before: Dec 19 04:01:44 2025 GMT Not After : Dec 20 04:01:44 2025 GMT Subject: CN=ea60d8d3408a27cb6296bcdd769769cc4468994a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:64:ce:83:b3:6c:66:42:f6:00:e6:33:bf: e7:fb:4c:be:23:1d:1b:81:72:e8:7b:76:1d:86:df: 63:8a:90:ca:17:46:bc:89:b6:71:a2:53:a4:ce:f5: 5d:40:e0:11:02:83:ce:dc:10:99:b8:97:62:c4:d7: d8:cf:44:44:ab:e7:8e:13:74:a3:ee:c6:4c:2d:c8: 83:83:fa:25:55:96:5e:c7:7c:dd:da:7d:3a:b4:e0: d8:3e:3f:6a:25:19:63:f5:e6:3e:6f:b2:67:c4:b4: c6:61:c4:08:65:f8:60:d5:8c:5b:dd:87:32:20:d6: ef:fd:0b:e1:50:64:22:ea:82:3e:1b:6b:33:75:7a: 3b:a9:d1:7c:33:69:fd:ec:ba:2d:1b:77:ee:1f:08: f6:29:74:37:2b:ef:0f:3c:37:ef:d8:cb:1e:53:c5: 60:0d:2a:1a:e4:41:75:71:b8:b7:12:72:d1:86:4f: 1e:d9:dc:61:b9:63:b9:72:b5:b7:bf:e1:8d:a3:96: 11:51:00:12:c5:0d:d9:72:39:ca:ea:2f:0a:4b:c1: 22:75:24:63:e4:eb:25:44:90:c7:c6:86:3f:90:5c: d0:74:85:3a:b7:74:80:48:b7:ab:ec:ea:37:e2:0f: 2e:6b:10:28:81:05:c7:03:d8:88:78:4c:d3:2b:5a: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:60:D8:D3:40:8A:27:CB:62:96:BC:DD:76:97:69:CC:44:68:99:4A X509v3 Authority Key Identifier: keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:b8:db:45:01:e9:f7:e1:5e:ea:88:85:c7:1c:f0:b7:e5: 24:42:76:95:dd:41:33:a8:15:8c:c2:b5:8e:6b:39:84:04:06: 11:18:fe:22:7f:ba:f5:3a:41:9c:86:52:a3:9b:e9:01:c7:47: cd:94:81:30:99:6f:cd:01:13:96:15:be:65:7b:15:fe:b0:67: 57:89:ab:d3:39:9d:b4:36:f5:91:fb:3c:7b:62:fd:52:f0:75: 17:46:5c:2e:88:19:36:46:27:cf:48:73:b8:a1:63:40:95:9e: 6f:8b:db:14:30:69:b2:18:19:cb:28:0d:0b:bd:76:b3:fb:af: 0d:d4:fa:04:b9:4a:95:a4:e2:ee:72:e4:48:36:07:b7:d3:16: 70:ec:ad:3a:6b:3d:0b:7e:be:07:3d:bb:ba:a2:c4:29:05:0d: cf:22:be:1b:22:b0:a8:99:0b:32:09:c6:b4:b8:ad:98:c3:8a: e2:c1:9c:ed:47:40:6a:d5:27:fa:d7:53:6a:9b:96:96:ab:6d: 98:45:bd:01:e1:7c:8b:14:1a:38:ce:fb:73:d5:29:2e:5d:dc: 9a:b0:3f:b6:de:bf:da:21:4b:8a:52:21:65:9c:bc:c9:ba:6d: 43:39:b7:28:85:75:e1:8f:a5:01:7c:06:d5:fe:f3:f2:03:31: 7d:c8:33:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xU2Ib/yMPjMTWl4GPoW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjIzMmFhMjQzMWNhNGRlNWQ4MjUyYTNjOWNjNmJiNjMw ZDFkNDkwHhcNMjUxMjE5MDQwMTQ0WhcNMjUxMjIwMDQwMTQ0WjAzMTEwLwYDVQQD EyhlYTYwZDhkMzQwOGEyN2NiNjI5NmJjZGQ3Njk3NjljYzQ0Njg5OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluRkzoOzbGZC9gDmM7/n+0y+Ix0b gXLoe3Ydht9jipDKF0a8ibZxolOkzvVdQOARAoPO3BCZuJdixNfYz0REq+eOE3Sj 7sZMLciDg/olVZZex3zd2n06tODYPj9qJRlj9eY+b7JnxLTGYcQIZfhg1Yxb3Ycy INbv/QvhUGQi6oI+G2szdXo7qdF8M2n97LotG3fuHwj2KXQ3K+8PPDfv2MseU8Vg DSoa5EF1cbi3EnLRhk8e2dxhuWO5crW3v+GNo5YRUQASxQ3ZcjnK6i8KS8EidSRj 5OslRJDHxoY/kFzQdIU6t3SASLer7Oo34g8uaxAogQXHA9iIeEzTK1o6IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpg2NNAiifLYpa83XaXacxEaJlKMB8GA1UdIwQY MBaAFNWyMqokMcpN5dglKjycxrtjDR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgt N2VhNTkyZjliMjllLzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgtN2VhNTkyZjliMjll LzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8a420UB 6ffhXuqIhccc8LflJEJ2ld1BM6gVjMK1jms5hAQGERj+In+69TpBnIZSo5vpAcdH zZSBMJlvzQETlhW+ZXsV/rBnV4mr0zmdtDb1kfs8e2L9UvB1F0ZcLogZNkYnz0hz uKFjQJWeb4vbFDBpshgZyygNC712s/uvDdT6BLlKlaTi7nLkSDYHt9MWcOytOms9 C36+Bz27uqLEKQUNzyK+GyKwqJkLMgnGtLitmMOK4sGc7UdAatUn+tdTapuWlqtt mEW9AeF8ixQaOM77c9UpLl3cmrA/tt6/2iFLilIhZZy8ybptQzm3KIV14Y+lAXwG 1f7z8gMxfcgzKQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:01:27 2025 by rpki-client