This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json) Hash identifier: 1S5T4qdIlAJLbclYe7P6TqpocRcjM02z7BUBl3nk58g= Subject key identifier: 00:D5:86:8B:85:5C:89:2A:51:BE:0C:5A:28:87:DE:DF:95:B8:5C:EC Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c Certificate serial: 019AF1646510CF4B34820007DD0CD71DD8F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft Manifest number: 0742 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: ZdUC64TQL469HWumdlH3NNf9twK8PrDqp0oiDhlfpxA=) 2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:65:10:cf:4b:34:82:00:07:dd:0c:d7:1d:d8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=00d5868b855c892a51be0c5a2887dedf95b85cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:9a:31:ab:29:ce:f4:38:1d:62:9f:fb:c7: 7a:aa:31:e2:20:51:70:2c:7e:7f:ce:58:7d:19:b8: ea:68:b2:81:a0:71:a5:76:b4:40:a1:f9:1a:e5:12: eb:41:fa:59:12:65:01:55:16:90:14:ad:ec:70:87: 77:d6:13:73:bc:68:70:e9:af:e0:c6:65:76:4f:26: ca:82:38:2e:cb:46:c5:98:4b:34:bf:f0:a5:23:17: 03:1f:c6:0c:f9:fc:ff:78:e4:78:bb:0b:54:17:59: c5:d4:0c:8e:50:17:85:cb:ca:a5:d7:fc:90:68:25: a1:e4:b5:66:22:42:69:4a:7f:ad:17:b5:35:a7:24: eb:42:d3:9b:c2:df:42:db:22:54:7d:55:61:ff:79: 11:9f:6c:7b:d1:a9:1b:38:4d:1d:16:43:57:69:73: 4f:41:be:c0:7c:88:a4:3d:8b:4b:25:c4:f5:cc:e0: 10:69:be:2f:00:a4:62:64:cd:57:9e:7c:58:71:d8: 45:77:46:56:ce:89:dc:c6:fc:52:18:29:58:43:f5: e0:58:ef:b4:34:48:2a:15:6e:9d:74:79:34:4e:3d: f8:5b:cd:af:1f:cb:f4:b1:b4:c2:12:80:db:79:c9: da:ce:7e:17:61:68:92:43:f7:c2:c5:52:bb:39:a0: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:86:8B:85:5C:89:2A:51:BE:0C:5A:28:87:DE:DF:95:B8:5C:EC X509v3 Authority Key Identifier: keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0a:7f:1b:07:ab:cf:db:45:6b:26:6b:00:8d:8f:51:37:7a: 16:7e:20:19:67:51:74:ba:be:08:b2:f6:c4:2e:38:ad:8a:6b: b2:f1:15:7e:06:f0:28:f2:f2:6b:b9:84:89:28:bc:a7:ea:7b: 3b:66:dd:75:bc:81:00:d0:c2:2b:a0:2e:74:d9:32:10:ab:16: a4:5a:56:bb:d9:d6:aa:68:ba:6d:49:35:ca:a4:60:bd:11:ba: b3:27:02:d0:66:74:1c:65:1e:30:8a:91:b2:07:72:72:d8:c3: b6:11:0c:68:1b:e1:be:8a:80:b0:75:d0:55:b6:aa:e5:c1:b1: d3:a4:ce:27:86:1f:ed:57:d4:5e:ca:4f:bc:99:a9:13:c0:0f: 47:69:88:b3:97:9c:00:ec:ab:10:9f:7f:4a:da:0b:ae:ac:fd: c0:b9:06:fa:8a:ae:29:22:11:e5:cd:95:bc:6d:0d:16:08:c5: 91:e0:db:bb:1f:6a:94:56:33:c8:55:77:d4:5c:1a:30:97:bf: b3:ca:37:50:85:17:e6:e3:e8:61:85:a1:94:b6:ad:b4:1e:38: 19:4e:33:39:08:37:1f:f0:63:d9:e0:bc:e7:bb:8f:d4:f5:c7: 1e:d4:7e:62:b4:1c:f6:3c:79:05:ef:9a:ea:eb:09:47:44:fe: 08:97:cc:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGUQz0s0ggAH3QzXHdj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy OTU5OWMwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD EygwMGQ1ODY4Yjg1NWM4OTJhNTFiZTBjNWEyODg3ZGVkZjk1Yjg1Y2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1GaMaspzvQ4HWKf+8d6qjHiIFFw LH5/zlh9GbjqaLKBoHGldrRAofka5RLrQfpZEmUBVRaQFK3scId31hNzvGhw6a/g xmV2TybKgjguy0bFmEs0v/ClIxcDH8YM+fz/eOR4uwtUF1nF1AyOUBeFy8ql1/yQ aCWh5LVmIkJpSn+tF7U1pyTrQtObwt9C2yJUfVVh/3kRn2x70akbOE0dFkNXaXNP Qb7AfIikPYtLJcT1zOAQab4vAKRiZM1XnnxYcdhFd0ZWzoncxvxSGClYQ/XgWO+0 NEgqFW6ddHk0Tj34W82vH8v0sbTCEoDbecnazn4XYWiSQ/fCxVK7OaCtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADVhouFXIkqUb4MWiiH3t+VuFzsMB8GA1UdIwQY MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt M2RjZWNiY2EzNzAyLzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAp/Gwer z9tFayZrAI2PUTd6Fn4gGWdRdLq+CLL2xC44rYprsvEVfgbwKPLya7mEiSi8p+p7 O2bddbyBANDCK6AudNkyEKsWpFpWu9nWqmi6bUk1yqRgvRG6sycC0GZ0HGUeMIqR sgdyctjDthEMaBvhvoqAsHXQVbaq5cGx06TOJ4Yf7VfUXspPvJmpE8APR2mIs5ec AOyrEJ9/StoLrqz9wLkG+oquKSIR5c2VvG0NFgjFkeDbux9qlFYzyFV31FwaMJe/ s8o3UIUX5uPoYYWhlLattB44GU4zOQg3H/Bj2eC857uP1PXHHtR+YrQc9jx5Be+a 6usJR0T+CJfMtw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:40 2025 by rpki-client