This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json) Hash identifier: 3NmjXoTI+0JTasFQZIdFoLhzQ9JIXmOhFHxiHMUiFtA= Subject key identifier: 56:88:2C:4B:43:FB:50:97:4E:E5:2E:95:C5:39:64:18:31:39:62:FC Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58 Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58 Certificate serial: 019AF3F775666C3DE59FCCE3C3040879C5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:12 +0000 Manifest this update: Sat 06 Dec 2025 14:01:12 +0000 Manifest next update: Sun 07 Dec 2025 14:01:12 +0000 Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: HuXRt2rYwQ/3RARzMK+PCKJdnK7tCTEqsI/sXYdwFJM=) 2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:75:66:6c:3d:e5:9f:cc:e3:c3:04:08:79:c5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58 Validity Not Before: Dec 6 14:01:12 2025 GMT Not After : Dec 7 14:01:12 2025 GMT Subject: CN=56882c4b43fb50974ee52e95c5396418313962fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:1e:31:d3:5e:82:96:8c:6f:43:2c:49:4c: de:41:79:e2:4d:c0:d9:cd:fe:50:19:ec:1d:97:12: a3:01:7a:0f:46:19:5d:c2:8d:15:83:c6:42:bd:c7: ac:cf:df:ae:4b:ac:ee:f3:86:21:7d:3a:17:de:5c: ae:0a:bd:83:54:7e:92:97:52:1c:87:8d:13:59:39: 9c:1b:3a:ec:db:92:8a:d1:f5:20:f9:f7:6f:79:dd: 9c:24:3e:81:d2:60:34:c3:ff:5d:77:ed:36:f1:56: d7:72:11:0a:7d:c0:72:57:ec:8b:32:d2:36:2d:56: db:92:45:c9:4f:ed:ff:21:88:04:48:74:96:d3:02: 51:89:35:c5:c8:9a:8f:78:a8:6c:45:42:11:f6:46: cd:0e:b6:96:56:49:a8:b8:df:26:f8:9b:dc:fc:6a: 35:7d:eb:e2:5f:2e:21:f6:dc:6d:e7:e3:ff:fd:ae: 6f:c5:49:8f:31:f5:c0:0b:07:8b:dc:f1:2e:2c:64: 1c:1b:2f:24:de:43:a2:b2:a9:a3:7f:91:c5:f4:73: fb:b0:f4:25:0c:a2:14:c3:51:ee:83:91:ac:60:f8: db:d7:14:96:20:c6:d4:a7:c4:b3:44:3c:bd:f4:44: 02:97:4c:1c:ce:53:06:e2:e4:db:6e:9b:ef:1f:40: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:88:2C:4B:43:FB:50:97:4E:E5:2E:95:C5:39:64:18:31:39:62:FC X509v3 Authority Key Identifier: keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:12:5b:be:83:7a:54:5d:c9:d1:b8:eb:49:f1:dc:61:14:86: 98:7c:aa:42:7a:2b:c7:5c:06:a3:73:29:3f:07:fd:7d:24:b3: c0:58:86:2a:b5:fb:0a:57:e0:ca:49:01:e4:de:bd:fc:16:73: 34:8b:f9:62:a6:32:40:64:60:3d:d3:d6:95:2f:15:c7:94:c7: 11:3b:6d:df:a1:97:d2:35:a0:40:23:a8:67:03:1d:40:89:41: da:ab:9b:a2:07:73:18:b2:ff:76:88:c6:d4:2c:25:1d:23:ac: 19:e5:54:1b:f8:c1:ed:a8:0f:28:d9:fc:d4:1e:72:56:24:3c: 69:2a:68:b8:d1:55:bd:51:1c:31:05:0d:98:a2:0e:49:bd:77: d3:93:38:77:8b:9b:7f:05:6e:08:cd:95:5c:62:3b:40:28:10: a6:13:3f:36:19:1c:15:da:e8:3f:71:7d:76:c5:9d:07:76:76: 72:b4:4d:b2:54:72:74:a0:fd:77:f4:69:90:b5:16:2f:13:ba: 54:86:fc:d5:b6:90:17:60:e5:b1:2f:d4:27:0d:32:d7:f0:9b: c2:a5:93:a9:bf:3c:0d:c0:ef:b9:67:63:c5:ef:da:a1:fa:aa: b7:46:f2:22:cd:2c:f7:07:d8:32:df:18:bf:12:01:4a:02:de: ed:48:8f:5e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrz93VmbD3ln8zjwwQIecWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGYyZjJlMjFiYzk4ZDBjNjFiMmMxNGMwZWUwMTlkMzMx ZWFlNTgwHhcNMjUxMjA2MTQwMTEyWhcNMjUxMjA3MTQwMTEyWjAzMTEwLwYDVQQD Eyg1Njg4MmM0YjQzZmI1MDk3NGVlNTJlOTVjNTM5NjQxODMxMzk2MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRUeMdNegpaMb0MsSUzeQXniTcDZ zf5QGewdlxKjAXoPRhldwo0Vg8ZCvcesz9+uS6zu84YhfToX3lyuCr2DVH6Sl1Ic h40TWTmcGzrs25KK0fUg+fdved2cJD6B0mA0w/9dd+028VbXchEKfcByV+yLMtI2 LVbbkkXJT+3/IYgESHSW0wJRiTXFyJqPeKhsRUIR9kbNDraWVkmouN8m+Jvc/Go1 feviXy4h9txt5+P//a5vxUmPMfXACweL3PEuLGQcGy8k3kOisqmjf5HF9HP7sPQl DKIUw1Hug5GsYPjb1xSWIMbUp8SzRDy99EQCl0wczlMG4uTbbpvvH0A7NQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFaILEtD+1CXTuUulcU5ZBgxOWL8MB8GA1UdIwQY MBaAFPlPLy4hvJjQxhssFMDuAZ0zHq5YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VOHZMaUc4bU5ER0d5d1V3TzRCblRNZXJsZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZGUwZDE2LTJmMjQtNGM1My04NGI4 LTVkOTdiMTlmYTU5NS8xLzEtVTh2TGlHOG1OREdHeXdVd080Qm5UTWVybGcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUxL2RlMGQxNi0yZjI0LTRjNTMtODRiOC01ZDk3YjE5ZmE1 OTUvMS8xLVU4dkxpRzhtTkRHR3l3VXdPNEJuVE1lcmxnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhJb voN6VF3J0bjrSfHcYRSGmHyqQnorx1wGo3MpPwf9fSSzwFiGKrX7ClfgykkB5N69 /BZzNIv5YqYyQGRgPdPWlS8Vx5THETtt36GX0jWgQCOoZwMdQIlB2qubogdzGLL/ dojG1CwlHSOsGeVUG/jB7agPKNn81B5yViQ8aSpouNFVvVEcMQUNmKIOSb1305M4 d4ubfwVuCM2VXGI7QCgQphM/NhkcFdroP3F9dsWdB3Z2crRNslRydKD9d/RpkLUW LxO6VIb81baQF2DlsS/UJw0y1/CbwqWTqb88DcDvuWdjxe/aofqqt0byIs0s9wfY Mt8YvxIBSgLe7UiPXg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:47 2025 by rpki-client