This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json) Hash identifier: PkC2PcFjdR/W3kIr+xRVVpcRsDsjhYymKICGV6mjoiI= Subject key identifier: 37:70:43:B7:78:CB:74:90:AF:14:63:FB:27:0C:5E:98:EB:8E:78:26 Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8 Certificate serial: 019AF276FAC1DE1A93FAC04F5831FFB1E774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: xQoE8ZG2RI5dQFZN+ByrI2u8JzflJM+u/vKwR/+l6jI=) 2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=) 3: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (hash: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=) 4: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fa:c1:de:1a:93:fa:c0:4f:58:31:ff:b1:e7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8 Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=377043b778cb7490af1463fb270c5e98eb8e7826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:f4:c5:68:f1:ff:65:d4:cf:5d:86:fd:15: ec:66:bc:05:66:9e:66:68:fd:74:94:eb:94:7b:f3: a5:23:2b:2b:c3:00:68:cf:e3:1f:ba:5b:df:47:1c: 5c:24:b6:ed:29:1d:4b:35:21:49:fe:55:3c:ea:cc: 65:85:2b:fb:d3:29:78:51:9a:43:be:df:a5:3a:d8: 6a:a5:a1:b1:ac:12:e0:e4:d9:94:58:1f:a3:9a:4c: 69:82:f5:93:26:35:2d:1a:fc:6e:fb:b6:8c:dc:67: 31:fe:be:eb:a8:7d:de:e1:3f:e7:f3:a7:34:9f:71: 96:90:6b:20:11:38:b0:54:d8:5b:ad:dd:eb:e3:3b: fd:f0:b8:df:eb:06:1d:10:24:ac:5f:3a:5d:0a:0f: f1:8b:3d:48:26:2d:44:51:49:67:e2:9d:07:84:4d: 5c:14:2d:50:af:17:2b:12:9b:94:d8:02:4c:9b:dd: 64:09:3e:6b:70:c8:9b:02:e7:b7:f6:25:91:e7:47: 8f:69:e4:d3:24:aa:8f:0c:76:28:02:5c:d2:e6:5b: 2c:82:1e:b5:c1:e3:16:a0:83:24:6b:a1:73:02:49: 2d:2a:57:e8:24:11:83:9b:bc:58:16:f8:41:09:15: 7c:a5:9f:c1:2d:e5:a3:5d:37:71:f6:a1:36:29:dc: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:43:B7:78:CB:74:90:AF:14:63:FB:27:0C:5E:98:EB:8E:78:26 X509v3 Authority Key Identifier: keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:2a:54:36:ee:d8:41:4c:00:9a:e7:5a:d9:0f:3c:6e:b2: 8c:e8:62:e5:25:ba:45:3f:1a:a8:e7:f9:7e:00:ed:98:c1:f6: 45:45:1b:92:d9:a0:2e:14:d2:4e:24:7f:4e:b5:2f:3f:af:be: a4:c3:33:21:90:bf:df:c7:91:79:66:02:1d:41:74:d2:7f:d7: c8:ab:49:ef:c3:b6:42:df:9f:06:63:d1:1a:8f:1b:84:cd:32: 9b:f4:e0:34:44:68:36:f6:42:46:42:71:91:07:d1:8a:7f:43: 32:d9:20:92:08:b1:3c:b9:9a:9c:b6:c7:cb:bf:cb:59:d5:51: 19:77:2f:61:2b:3d:e8:a0:d9:cc:c1:8f:3d:39:5e:42:bd:b3: ea:50:9f:ce:27:8b:1e:cf:26:b7:72:ea:81:b6:95:ec:64:97: 90:bf:cd:44:2d:bb:fa:67:ee:59:d8:13:13:7c:52:ce:63:2a: 51:87:1b:5a:54:71:99:ef:5d:45:bd:4e:4e:04:21:e7:44:2e: 89:a9:ba:4c:3e:63:b5:b9:23:4a:b4:a8:e3:75:f0:80:a8:a5: 19:73:4e:8b:64:60:6c:18:8d:db:ad:78:70:9c:f0:95:79:57: 70:9b:c0:e8:61:b0:66:a5:94:14:a1:87:23:53:79:1f:c1:dc: cf:0e:b5:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvrB3hqT+sBPWDH/sed0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy ODMwYTgwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EygzNzcwNDNiNzc4Y2I3NDkwYWYxNDYzZmIyNzBjNWU5OGViOGU3ODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/0xWjx/2XUz12G/RXsZrwFZp5m aP10lOuUe/OlIysrwwBoz+MfulvfRxxcJLbtKR1LNSFJ/lU86sxlhSv70yl4UZpD vt+lOthqpaGxrBLg5NmUWB+jmkxpgvWTJjUtGvxu+7aM3Gcx/r7rqH3e4T/n86c0 n3GWkGsgETiwVNhbrd3r4zv98Ljf6wYdECSsXzpdCg/xiz1IJi1EUUln4p0HhE1c FC1QrxcrEpuU2AJMm91kCT5rcMibAue39iWR50ePaeTTJKqPDHYoAlzS5lssgh61 weMWoIMka6FzAkktKlfoJBGDm7xYFvhBCRV8pZ/BLeWjXTdx9qE2KdxXvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdwQ7d4y3SQrxRj+ycMXpjrjngmMB8GA1UdIwQY MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt YTVjZDgxYjVlMDBiLzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm0qVDbu 2EFMAJrnWtkPPG6yjOhi5SW6RT8aqOf5fgDtmMH2RUUbktmgLhTSTiR/TrUvP6++ pMMzIZC/38eReWYCHUF00n/XyKtJ78O2Qt+fBmPRGo8bhM0ym/TgNERoNvZCRkJx kQfRin9DMtkgkgixPLmanLbHy7/LWdVRGXcvYSs96KDZzMGPPTleQr2z6lCfzieL Hs8mt3LqgbaV7GSXkL/NRC27+mfuWdgTE3xSzmMqUYcbWlRxme9dRb1OTgQh50Qu iam6TD5jtbkjSrSo43XwgKilGXNOi2RgbBiN2614cJzwlXlXcJvA6GGwZqWUFKGH I1N5H8Hczw61+g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:23 2025 by rpki-client