This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft File: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft (raw, json) Hash identifier: M8J0Cjvwb0+F1JEuzmMTsfhvSjviLbn/Epy20KFJIKc= Subject key identifier: AD:5E:3F:3D:AF:7F:27:0A:01:92:E7:B1:BD:FF:A5:A2:D7:48:50:B3 Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19 Certificate issuer: /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319 Certificate serial: 019AF19B7D508F5E6F6836730EF2B84F4454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft Manifest number: 01EB Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl (hash: FXD7RMK5QcTp7kOLhOhf2EKOiGLcFWkwuUv6U133j9U=) 2: B0-8lZYraEx150X3g22rWD-3L8I.roa (hash: 6NnoqG71xZV/7Tl4SVNDBKlXoHQBrNWRbnGwKyVzpAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7d:50:8f:5e:6f:68:36:73:0e:f2:b8:4f:44:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=ad5e3f3daf7f270a0192e7b1bdffa5a2d74850b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:3d:93:4f:12:de:78:62:d8:8c:24:f0:ad: 57:75:5c:ec:74:ff:17:d6:10:cd:78:e5:66:30:66: 44:c0:1c:22:34:44:57:c3:85:31:c3:f4:c7:c6:c6: 9d:ea:85:b0:d7:9f:af:a4:61:de:ff:6f:c3:0c:e4: d5:91:1c:5b:19:72:c4:06:f1:93:83:52:fb:50:8c: 7f:39:ab:b5:5e:9c:40:66:31:ec:4a:0c:f3:20:67: 9a:80:36:e7:6c:c9:8e:b6:ec:bb:6e:e0:db:4d:6b: b6:7c:03:07:bf:04:fe:3b:3d:d3:cf:15:90:a9:dc: 95:7f:72:ac:89:e9:f0:4d:b0:e9:55:0e:89:be:e2: 99:47:f9:ab:5e:5f:76:d8:7d:40:29:95:22:d3:1e: 5c:0b:8a:8a:6b:11:99:fb:67:0c:fa:ba:56:14:93: 19:22:59:fc:ec:4d:b5:9c:13:7b:1e:b0:e5:d3:11: f4:05:08:d1:25:54:05:40:6c:88:ee:36:6c:38:d8: d8:f9:15:cb:35:6a:b8:50:24:71:d3:55:cd:dc:f8: 9d:f5:ef:04:84:01:60:9f:de:21:e1:c6:34:81:41: c1:cd:43:28:9a:1e:82:95:70:08:32:53:c1:8a:dc: a5:6c:04:73:98:d9:5e:1f:c5:f0:d6:ca:36:48:be: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5E:3F:3D:AF:7F:27:0A:01:92:E7:B1:BD:FF:A5:A2:D7:48:50:B3 X509v3 Authority Key Identifier: keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6c:50:53:24:01:2a:46:7d:6e:5c:9d:7a:3d:48:bf:17:93: a1:2b:0d:77:3e:00:9a:86:99:64:22:09:21:04:30:6a:b0:e8: b9:07:d4:5e:e2:56:b2:fc:6e:98:bd:07:6a:a4:f0:d1:9d:9f: 86:40:2c:e6:2b:f6:a0:14:c1:1e:ac:9b:d6:0d:d2:d5:02:a9: d4:96:3f:56:90:bc:fa:5c:a3:1f:2e:14:40:24:dc:51:b1:be: 30:30:b6:fc:7f:aa:76:b4:95:c1:cc:df:81:d1:f1:91:d2:5c: 3c:d3:5c:65:1e:c8:87:91:6e:83:5c:fb:37:21:d0:a5:a1:b2: 3d:db:77:c9:0d:83:b3:45:bc:78:ef:6b:2f:c6:74:be:4f:9c: d9:6c:11:34:ea:ce:88:b5:a1:44:83:5d:b3:d5:94:54:bd:c1: 84:71:79:af:a8:0f:e8:7f:ca:57:9a:ba:bf:9d:4f:c2:37:da: ab:70:f0:ea:fc:3b:8b:49:f8:e1:14:05:ff:0c:81:b4:b0:10: 32:ed:2e:4a:27:74:a3:b9:85:29:b3:1e:80:cd:0a:d3:7f:f6: 6d:c1:65:01:d6:30:a1:bb:ad:6f:77:54:79:45:e2:41:09:f4: c5:b3:36:04:cc:d2:1d:bf:c0:4c:0a:3a:c3:ee:d0:0b:76:17: be:b5:18:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm31Qj15vaDZzDvK4T0RUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmJmNTAwNDg0MGMzM2I2YjFmMjEwOWRjMjQ5YmY1YjM5 MGYzMTkwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD EyhhZDVlM2YzZGFmN2YyNzBhMDE5MmU3YjFiZGZmYTVhMmQ3NDg1MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTI9k08S3nhi2Iwk8K1XdVzsdP8X 1hDNeOVmMGZEwBwiNERXw4Uxw/THxsad6oWw15+vpGHe/2/DDOTVkRxbGXLEBvGT g1L7UIx/Oau1XpxAZjHsSgzzIGeagDbnbMmOtuy7buDbTWu2fAMHvwT+Oz3TzxWQ qdyVf3KsienwTbDpVQ6JvuKZR/mrXl922H1AKZUi0x5cC4qKaxGZ+2cM+rpWFJMZ Iln87E21nBN7HrDl0xH0BQjRJVQFQGyI7jZsONjY+RXLNWq4UCRx01XN3Pid9e8E hAFgn94h4cY0gUHBzUMomh6ClXAIMlPBitylbARzmNleH8Xw1so2SL59kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1ePz2vfycKAZLnsb3/paLXSFCzMB8GA1UdIwQY MBaAFNZr9QBIQMM7ax8hCdwkm/WzkPMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjct ZjViOTkyNGQ2Y2YxLzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjctZjViOTkyNGQ2Y2Yx LzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWxQUyQB KkZ9blydej1IvxeToSsNdz4AmoaZZCIJIQQwarDouQfUXuJWsvxumL0HaqTw0Z2f hkAs5iv2oBTBHqyb1g3S1QKp1JY/VpC8+lyjHy4UQCTcUbG+MDC2/H+qdrSVwczf gdHxkdJcPNNcZR7Ih5Fug1z7NyHQpaGyPdt3yQ2Ds0W8eO9rL8Z0vk+c2WwRNOrO iLWhRINds9WUVL3BhHF5r6gP6H/KV5q6v51Pwjfaq3Dw6vw7i0n44RQF/wyBtLAQ Mu0uSid0o7mFKbMegM0K03/2bcFlAdYwobutb3dUeUXiQQn0xbM2BMzSHb/ATAo6 w+7QC3YXvrUY+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:05 2025 by rpki-client