This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft File: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json) Hash identifier: NwWrW4b4R4fI7jSpSuE+BayEhrJJhzYwu2SaTd/wu/8= Subject key identifier: F3:2B:21:91:C3:60:E4:C3:3E:38:5F:F5:CA:F8:5A:E3:CA:7A:32:D1 Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41 Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341 Certificate serial: 019AF389DE4EE6F86F80304F24E9BE940E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:01:30 +0000 Manifest this update: Sat 06 Dec 2025 12:01:30 +0000 Manifest next update: Sun 07 Dec 2025 12:01:30 +0000 Files and hashes: 1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: evbx9MpduQShETUNoCmZuOfHPuVlczhkqQ80llNAKhU=) 2: zZd3gJy36oVWVgmrpGXSBEMHa_E.roa (hash: pKDeM3EslRORlEnCyv6iQ4XZ7Q0avsrweW8tC90yBl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:de:4e:e6:f8:6f:80:30:4f:24:e9:be:94:0e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341 Validity Not Before: Dec 6 12:01:30 2025 GMT Not After : Dec 7 12:01:30 2025 GMT Subject: CN=f32b2191c360e4c33e385ff5caf85ae3ca7a32d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:0d:ee:5e:55:17:4f:8b:25:1e:64:63:b5: d3:21:ef:58:47:3d:9c:bc:fb:9c:ea:79:6c:4f:31: a1:9d:67:fb:09:ce:e4:59:c4:63:db:ee:31:82:04: 84:b0:2b:2a:8c:e8:91:bf:ad:ae:9d:2a:81:be:fe: 82:34:b1:9a:98:75:40:39:67:0d:8d:7c:1c:eb:b0: 76:6e:1d:00:e9:95:e2:0b:da:46:fa:f2:1a:d8:35: 9a:61:c1:a1:ee:6b:5d:17:93:56:93:9c:a5:68:3c: 6f:4b:7b:67:33:42:c7:13:b5:83:d0:d0:e7:38:fa: b4:c7:4f:22:cc:73:8e:30:ad:f7:5c:f3:9d:57:be: 74:bd:b7:ca:df:96:55:35:ac:88:a3:15:c1:f1:59: 3e:b7:19:f6:71:b1:e9:11:c5:f3:c4:20:21:15:3b: d4:29:5a:27:7e:bf:59:23:1c:68:68:3b:5b:f0:fc: b4:b9:2b:a4:fd:21:82:c4:e1:b0:76:78:a6:98:80: f7:2c:59:5d:be:72:54:34:26:89:b5:36:06:25:c2: 5e:4b:c2:00:b7:af:16:86:9f:a1:e2:c4:49:25:de: 7f:5b:ba:52:04:80:f7:36:a4:e2:ef:d7:c8:2c:ae: b8:1a:46:04:08:cf:a2:8d:3c:ea:a8:64:56:16:8f: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:21:91:C3:60:E4:C3:3E:38:5F:F5:CA:F8:5A:E3:CA:7A:32:D1 X509v3 Authority Key Identifier: keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:17:87:c4:67:a9:d4:5c:68:5f:3d:75:28:27:ff:b5:b9:2c: 05:76:0c:00:ee:ed:4a:92:c2:af:ec:be:b6:98:6e:48:8b:16: 46:c6:0b:2f:f4:94:fa:fb:e0:03:fb:dc:d1:1e:e3:46:76:3c: c9:ab:84:79:d3:e5:28:22:bd:8d:6b:cb:c4:06:d9:77:bb:a6: 33:f5:ae:a5:3b:b2:63:30:32:3f:c0:39:4c:5f:00:a9:d3:f7: c8:fc:b9:9e:d4:45:99:05:c6:e4:22:72:94:b0:45:41:12:c6: b7:d8:c1:a5:64:e7:79:58:1d:d5:a6:ac:6a:e6:81:a2:09:9c: 4b:86:f9:51:f0:35:81:1a:5f:3e:90:43:22:fd:7f:b9:a9:20: 80:43:ab:d4:78:a6:74:12:33:b4:84:eb:db:19:5e:33:86:a7: 19:a0:89:27:d8:3c:de:d6:66:47:1f:79:ff:06:76:dc:4d:fc: 91:a7:43:43:83:de:7c:f2:94:91:19:31:7a:b1:06:78:b7:17: 4a:a5:ae:71:89:53:ef:c5:81:d7:b9:a0:96:c0:97:d8:19:26: dd:4b:44:bd:f2:45:a7:6e:44:eb:fa:69:a8:dd:7a:96:f0:7d: b3:e6:b5:96:c4:d4:90:ba:29:cb:3b:5c:d1:a7:4d:d1:ed:a3: f9:db:e1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzid5O5vhvgDBPJOm+lA6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzdjNGVhYjVjMDc5NDhjYmY0NGE4YTAxYzZhODI3ZmRh ZTkzNDEwHhcNMjUxMjA2MTIwMTMwWhcNMjUxMjA3MTIwMTMwWjAzMTEwLwYDVQQD EyhmMzJiMjE5MWMzNjBlNGMzM2UzODVmZjVjYWY4NWFlM2NhN2EzMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJYN7l5VF0+LJR5kY7XTIe9YRz2c vPuc6nlsTzGhnWf7Cc7kWcRj2+4xggSEsCsqjOiRv62unSqBvv6CNLGamHVAOWcN jXwc67B2bh0A6ZXiC9pG+vIa2DWaYcGh7mtdF5NWk5ylaDxvS3tnM0LHE7WD0NDn OPq0x08izHOOMK33XPOdV750vbfK35ZVNayIoxXB8Vk+txn2cbHpEcXzxCAhFTvU KVonfr9ZIxxoaDtb8Py0uSuk/SGCxOGwdnimmID3LFldvnJUNCaJtTYGJcJeS8IA t68Whp+h4sRJJd5/W7pSBID3NqTi79fILK64GkYECM+ijTzqqGRWFo+oZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMrIZHDYOTDPjhf9cr4WuPKejLRMB8GA1UdIwQY MBaAFNTHxOq1wHlIy/RKigHGqCf9rpNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2Ut OGQ1MjVhNTYzZTYxLzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2UtOGQ1MjVhNTYzZTYx LzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxeHxGep 1FxoXz11KCf/tbksBXYMAO7tSpLCr+y+tphuSIsWRsYLL/SU+vvgA/vc0R7jRnY8 yauEedPlKCK9jWvLxAbZd7umM/WupTuyYzAyP8A5TF8AqdP3yPy5ntRFmQXG5CJy lLBFQRLGt9jBpWTneVgd1aasauaBogmcS4b5UfA1gRpfPpBDIv1/uakggEOr1Him dBIztITr2xleM4anGaCJJ9g83tZmRx95/wZ23E38kadDQ4PefPKUkRkxerEGeLcX SqWucYlT78WB17mglsCX2Bkm3UtEvfJFp25E6/ppqN16lvB9s+a1lsTUkLopyztc 0adN0e2j+dvhYw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:57 2025 by rpki-client