This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json) Hash identifier: nLR4KgSxi3avNxwFWKqe0qVGArJCTLUwZnWCyoA8uec= Subject key identifier: 2D:5E:FF:49:1A:75:3C:78:6E:C9:3E:2D:00:92:1B:2C:7A:31:5F:1B Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7 Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7 Certificate serial: 019AF12DBC586DC9A46EE49355B478EF6B9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=) 2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: M5UIvh4+iFVczVoG4au4Isn9AltP9ZpYDBSqcGyx/TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bc:58:6d:c9:a4:6e:e4:93:55:b4:78:ef:6b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7 Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=2d5eff491a753c786ec93e2d00921b2c7a315f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:ee:71:07:c3:a0:e0:b4:8b:35:2d:5b:ea: 1d:9a:4b:19:15:e2:07:8f:b5:bc:69:0c:91:3b:e7: 5d:fd:bb:c8:b2:e5:a2:3a:06:50:a4:3f:6f:9c:d4: d3:31:00:c6:14:6a:c6:79:3e:98:0e:5d:98:af:61: 38:cb:a0:70:67:70:8d:39:da:00:74:e8:18:ff:bf: e1:71:d7:82:d4:1d:e1:20:98:72:9b:9d:48:df:aa: 36:50:7b:26:0d:b4:4d:42:6b:92:50:4a:0b:54:ae: bf:7b:df:b8:23:c2:82:45:b3:a2:5e:6d:36:ae:43: dc:c5:1e:b4:7c:e9:79:ba:81:a5:4f:82:00:78:92: 17:b1:ab:23:c8:7a:fc:bd:87:ef:e0:d1:23:49:23: b7:e2:bd:bc:7e:bf:ee:92:eb:1a:0f:9d:19:4a:e4: db:73:7e:c5:b1:51:13:a1:50:b8:d0:10:ae:97:62: 3d:3a:74:40:1a:a4:77:f8:e3:9f:d7:37:29:84:d9: be:07:63:4b:e9:86:2a:f6:48:0b:f3:3e:be:61:df: 3f:a6:1b:57:97:9e:45:f3:45:5c:3c:aa:71:88:28: fd:2b:db:8c:ad:f0:36:e4:62:ef:a3:64:b4:b7:3d: d6:3e:5b:66:ee:c8:f7:ee:0a:57:05:ad:53:22:e6: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5E:FF:49:1A:75:3C:78:6E:C9:3E:2D:00:92:1B:2C:7A:31:5F:1B X509v3 Authority Key Identifier: keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:50:b4:16:e7:4e:be:05:71:47:38:65:a1:55:46:cb:82:dd: e3:48:ec:b5:e1:18:08:72:26:c7:12:0f:2a:bc:7b:2d:ce:0e: 78:27:f3:ef:c0:b4:08:ce:fa:a2:9b:cb:b4:45:bf:69:8b:d8: 3a:00:87:1e:ed:32:5d:2a:ba:d9:04:c4:2f:64:5f:d8:63:72: 7a:35:cf:86:ce:6d:8a:ba:a1:2d:41:bd:c9:0c:14:a2:4b:9c: 78:46:ae:81:3e:06:26:de:07:72:61:3c:53:88:f3:71:96:46: 15:3b:bf:f2:3f:88:75:61:5d:7e:38:0f:41:67:a8:51:5a:09: f9:7b:ec:ee:0e:9d:99:59:6d:0a:ea:ac:b2:0e:4e:d2:11:95: e0:53:34:e2:c3:a6:02:7c:08:fc:b6:81:a8:2c:e7:29:2f:29: 57:d1:22:b9:e9:29:05:2f:67:19:20:75:e1:c6:1f:43:28:35: 23:f1:bb:aa:8a:00:5b:f8:f3:f0:a1:17:29:06:d9:64:25:fd: cd:0f:05:dd:b9:50:c9:68:40:4d:52:98:0b:5e:1f:09:74:9b: 64:ce:71:9a:e7:11:9f:67:e7:92:ca:95:92:eb:25:f0:68:2e: e0:9b:95:59:78:ba:92:cd:86:38:ec:03:bc:47:50:ad:01:56: e7:bb:75:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbxYbcmkbuSTVbR472ueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz YjYwYTcwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EygyZDVlZmY0OTFhNzUzYzc4NmVjOTNlMmQwMDkyMWIyYzdhMzE1ZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUDucQfDoOC0izUtW+odmksZFeIH j7W8aQyRO+dd/bvIsuWiOgZQpD9vnNTTMQDGFGrGeT6YDl2Yr2E4y6BwZ3CNOdoA dOgY/7/hcdeC1B3hIJhym51I36o2UHsmDbRNQmuSUEoLVK6/e9+4I8KCRbOiXm02 rkPcxR60fOl5uoGlT4IAeJIXsasjyHr8vYfv4NEjSSO34r28fr/ukusaD50ZSuTb c37FsVEToVC40BCul2I9OnRAGqR3+OOf1zcphNm+B2NL6YYq9kgL8z6+Yd8/phtX l55F80VcPKpxiCj9K9uMrfA25GLvo2S0tz3WPltm7sj37gpXBa1TIubzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1e/0kadTx4bsk+LQCSGyx6MV8bMB8GA1UdIwQY MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1 LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFC0FudO vgVxRzhloVVGy4Ld40jsteEYCHImxxIPKrx7Lc4OeCfz78C0CM76opvLtEW/aYvY OgCHHu0yXSq62QTEL2Rf2GNyejXPhs5tirqhLUG9yQwUokuceEaugT4GJt4HcmE8 U4jzcZZGFTu/8j+IdWFdfjgPQWeoUVoJ+Xvs7g6dmVltCuqssg5O0hGV4FM04sOm AnwI/LaBqCznKS8pV9EiuekpBS9nGSB14cYfQyg1I/G7qooAW/jz8KEXKQbZZCX9 zQ8F3blQyWhATVKYC14fCXSbZM5xmucRn2fnksqVkusl8Ggu4JuVWXi6ks2GOOwD vEdQrQFW57t1zA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:19 2025 by rpki-client