This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json) Hash identifier: xC+FHNA2jNsvDbCtK/sGQ6WIV4cHQcHAVMAV48c8gso= Subject key identifier: E2:BD:07:0D:62:3A:79:DC:98:12:28:C4:51:01:FD:1E:4D:C2:B9:89 Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Certificate serial: 019AF19B69FBF349B258F292D1AEDE81CA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft Manifest number: 063A Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: b6XoXBFm4EuTvQerUhn5KpQMeaSAogxwIX96PXUSMwc=) 2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:fb:f3:49:b2:58:f2:92:d1:ae:de:81:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=e2bd070d623a79dc981228c45101fd1e4dc2b989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fb:ce:97:5c:4e:f6:5b:4b:0a:68:60:44:d2: 57:09:61:92:f1:00:41:cf:0c:1c:12:f2:a8:b1:02: d4:77:ad:c4:e2:e6:23:dc:86:94:ba:f5:c9:83:fa: 81:b3:18:7f:24:24:86:29:21:a1:6b:f7:e0:15:86: 7e:3c:5b:9c:e7:8a:bd:03:89:ba:60:22:fc:2f:43: 8d:07:66:7b:f7:4d:ef:82:1d:60:b6:b1:20:3d:bd: f8:06:29:e8:9d:f3:c6:e0:02:96:b2:1b:14:ca:a2: 06:9a:ac:77:6d:48:be:2d:47:3f:f7:68:b0:23:7b: 39:c0:29:35:bc:8b:89:8c:4c:d5:a8:dd:08:bc:31: 49:30:84:8b:ba:63:ab:0f:24:1a:aa:38:21:14:fa: 44:f7:36:7f:ee:ce:2c:15:e0:5c:10:a3:51:54:db: a6:f3:86:79:3d:f9:ce:47:9d:28:f7:b8:6e:95:d6: b9:8e:e2:32:ca:50:31:a1:9f:9d:39:0f:d9:98:38: 62:85:64:77:ff:ea:58:65:84:5d:d8:f5:b1:7c:8b: 7e:ed:f4:1e:ab:41:5b:d1:30:eb:2e:3f:25:50:97: af:1b:1e:bc:30:4e:37:c6:92:06:41:79:68:15:a7: 3c:39:09:b2:61:4d:bb:7c:1c:66:0e:b3:3c:ac:e4: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BD:07:0D:62:3A:79:DC:98:12:28:C4:51:01:FD:1E:4D:C2:B9:89 X509v3 Authority Key Identifier: keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ca:a1:d2:b2:4a:6f:f7:3e:8f:20:e9:2c:2e:28:a4:58:88: 78:29:c3:7c:a4:2b:a7:f5:77:23:ed:a2:3d:a1:37:c2:fe:fd: 7d:c5:24:10:24:0b:fa:da:41:bc:03:2d:ee:3d:38:31:37:52: 07:5d:eb:32:07:31:21:3f:5f:e4:95:e3:19:0a:f9:b6:76:d6: ac:6a:aa:6a:59:5c:aa:f6:27:82:24:40:a2:4d:e5:54:c2:45: 10:31:c0:02:05:14:3b:13:e0:68:50:3d:29:76:89:54:d2:f8: b1:3b:40:63:b7:38:93:a2:0e:23:fe:12:b2:53:2a:07:99:a9: 7b:7b:96:7b:df:ed:d4:65:d2:3c:42:a0:a5:98:3a:84:33:e8: fd:5e:88:8b:88:d6:96:9f:31:98:a0:f3:a2:a8:34:b5:46:2c: 08:13:e7:52:13:62:5f:12:73:09:90:34:77:ae:f2:4b:57:07: 26:73:d0:4b:74:2b:03:32:d7:6a:93:94:4b:48:52:33:c2:80: 3e:be:51:52:35:2f:a0:b1:44:6d:b2:6a:a6:f0:f5:df:a5:c0: e7:57:0a:93:7c:41:1d:e6:89:92:17:94:35:ae:9a:ec:46:0d: 15:47:65:a4:b2:f4:a4:81:5f:e2:20:2e:54:80:26:a0:01:50: ea:63:dc:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2n780myWPKS0a7egcqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2E1NWQyZTNiOTE2M2NjNDg4YjZmN2FiZTYyZWIyNmU3 YThjMzgwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EyhlMmJkMDcwZDYyM2E3OWRjOTgxMjI4YzQ1MTAxZmQxZTRkYzJiOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fvOl1xO9ltLCmhgRNJXCWGS8QBB zwwcEvKosQLUd63E4uYj3IaUuvXJg/qBsxh/JCSGKSGha/fgFYZ+PFuc54q9A4m6 YCL8L0ONB2Z7903vgh1gtrEgPb34BinonfPG4AKWshsUyqIGmqx3bUi+LUc/92iw I3s5wCk1vIuJjEzVqN0IvDFJMISLumOrDyQaqjghFPpE9zZ/7s4sFeBcEKNRVNum 84Z5PfnOR50o97hulda5juIyylAxoZ+dOQ/ZmDhihWR3/+pYZYRd2PWxfIt+7fQe q0Fb0TDrLj8lUJevGx68ME43xpIGQXloFac8OQmyYU27fBxmDrM8rOQW5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK9Bw1iOnncmBIoxFEB/R5NwrmJMB8GA1UdIwQY MBaAFNTKVdLjuRY8xIi296vmLrJueow4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2Et YTRmMDEyOTNjYzA1LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2EtYTRmMDEyOTNjYzA1 LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcqh0rJK b/c+jyDpLC4opFiIeCnDfKQrp/V3I+2iPaE3wv79fcUkECQL+tpBvAMt7j04MTdS B13rMgcxIT9f5JXjGQr5tnbWrGqqallcqvYngiRAok3lVMJFEDHAAgUUOxPgaFA9 KXaJVNL4sTtAY7c4k6IOI/4SslMqB5mpe3uWe9/t1GXSPEKgpZg6hDPo/V6Ii4jW lp8xmKDzoqg0tUYsCBPnUhNiXxJzCZA0d67yS1cHJnPQS3QrAzLXapOUS0hSM8KA Pr5RUjUvoLFEbbJqpvD136XA51cKk3xBHeaJkheUNa6a7EYNFUdlpLL0pIFf4iAu VIAmoAFQ6mPcdA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:51 2025 by rpki-client