This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json) Hash identifier: 2zWssxVV0zE5xwCGC3eFpRiPLOPH/8+ZOPciNZB8Rrc= Subject key identifier: F0:6F:19:3D:15:03:64:8A:D3:BB:9D:E2:38:3A:46:29:62:E5:F8:4E Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d Certificate serial: 019AF2094899A95838F5779E3D0D7F4D1558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: JNXKtIwYneNpotfcginyCkwv7rjGoKqE4XrcEB46aa0=) 2: Oic624JnJmz9lkyUCkfkxynrzXU.roa (hash: reuQNdNLE9OYq59c7HheLuUPxQ+GdUmZR0j+FA5WU8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:48:99:a9:58:38:f5:77:9e:3d:0d:7f:4d:15:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=f06f193d1503648ad3bb9de2383a462962e5f84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:15:60:54:fa:f5:ec:be:cb:dc:63:0f:38: 3f:dc:70:53:8d:86:ca:90:9c:3e:cc:ed:fd:c6:1f: ea:a3:61:3e:e9:3e:4b:71:c8:cc:6c:ca:97:ca:1c: 32:cd:e0:5a:1c:ae:1e:f9:c6:6b:8e:94:5d:84:ff: c7:a8:2c:d6:ac:0f:7c:56:4e:8a:9e:f2:38:65:b0: 46:9f:c8:45:ce:78:64:1a:bd:8e:8f:9e:48:4b:9d: 54:be:15:19:6d:02:c9:1c:76:f2:51:78:60:1a:22: 41:6d:7c:39:70:de:92:9f:1b:8d:6a:e3:c4:50:80: b8:ef:f7:cd:2c:61:4f:6b:97:6b:9e:c0:f4:87:70: ec:13:aa:d9:27:70:03:12:0c:af:9c:d8:96:46:70: fe:41:e4:30:61:4b:11:35:86:2b:6d:1e:cf:93:fd: 99:26:f2:d9:3a:5d:2c:f9:12:ee:62:14:9b:ad:17: 39:5d:84:5d:7e:3a:2f:59:99:28:fc:f7:63:9a:4c: 07:94:86:d5:a6:c5:c8:10:40:33:a4:25:34:ab:49: 6c:0d:3e:86:81:57:a5:d3:13:8c:c3:d3:45:44:36: 62:8f:fd:64:a4:82:50:07:9e:39:1b:66:ad:c8:dd: 34:22:77:76:d6:f3:1b:01:30:b8:99:ab:3c:f9:4d: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:19:3D:15:03:64:8A:D3:BB:9D:E2:38:3A:46:29:62:E5:F8:4E X509v3 Authority Key Identifier: keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:92:38:56:be:45:41:63:2b:03:6a:2b:fd:45:8d:11:59:1e: 08:16:08:4a:f6:00:f0:e4:99:c7:27:fb:9f:90:9d:5e:c2:82: 1e:d0:5b:6b:83:df:d5:ee:e1:7d:ce:01:52:62:14:cc:0a:71: 8a:da:bc:ad:57:69:ce:78:3a:5e:b1:84:9f:38:71:50:7d:7d: ff:89:30:a7:2e:f2:d7:b0:c3:85:a1:38:e3:67:d6:54:4c:fe: d0:85:9a:f7:45:f8:4a:d5:1a:72:48:b9:50:65:18:56:6d:f3: f7:66:0d:26:42:d4:1d:f0:75:93:7d:cf:5e:06:45:c6:84:e2: ca:7b:ad:e0:5c:57:ba:a2:ec:cc:a3:59:9a:a6:04:e1:fa:da: 2c:47:02:ea:b8:9b:81:1d:b5:12:a9:6e:90:0a:d9:a5:55:3b: fa:2f:42:2c:b5:0f:29:f3:f1:e4:21:ee:69:8f:15:6a:cf:b5: bb:7a:54:5b:20:96:84:4c:b7:7e:38:20:da:ee:72:46:8e:d5: 7c:3f:7e:6f:88:9d:29:90:8e:32:51:32:d4:fd:f3:ec:a7:5e: 97:4d:36:13:eb:77:01:c1:bd:19:56:9b:5c:83:51:f5:b2:cf: 21:e8:8c:34:39:50:68:4d:1b:4c:11:02:e5:71:20:c6:94:0e: 83:7d:69:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUiZqVg49XeePQ1/TRVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODlhNWRkZDMwMDJlODAwOTk5YjVjMTg2N2Y3ODY3ODFi YWYxM2QwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EyhmMDZmMTkzZDE1MDM2NDhhZDNiYjlkZTIzODNhNDYyOTYyZTVmODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQVYFT69ey+y9xjDzg/3HBTjYbK kJw+zO39xh/qo2E+6T5LccjMbMqXyhwyzeBaHK4e+cZrjpRdhP/HqCzWrA98Vk6K nvI4ZbBGn8hFznhkGr2Oj55IS51UvhUZbQLJHHbyUXhgGiJBbXw5cN6SnxuNauPE UIC47/fNLGFPa5drnsD0h3DsE6rZJ3ADEgyvnNiWRnD+QeQwYUsRNYYrbR7Pk/2Z JvLZOl0s+RLuYhSbrRc5XYRdfjovWZko/PdjmkwHlIbVpsXIEEAzpCU0q0lsDT6G gVel0xOMw9NFRDZij/1kpIJQB545G2atyN00Ind21vMbATC4mas8+U0UuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBvGT0VA2SK07ud4jg6Rili5fhOMB8GA1UdIwQY MBaAFNSJpd3TAC6ACZm1wYZ/eGeBuvE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmIt NTI1OWVlZGNhMDdjLzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmItNTI1OWVlZGNhMDdj LzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJI4Vr5F QWMrA2or/UWNEVkeCBYISvYA8OSZxyf7n5CdXsKCHtBba4Pf1e7hfc4BUmIUzApx itq8rVdpzng6XrGEnzhxUH19/4kwpy7y17DDhaE442fWVEz+0IWa90X4StUacki5 UGUYVm3z92YNJkLUHfB1k33PXgZFxoTiynut4FxXuqLszKNZmqYE4fraLEcC6rib gR21EqlukArZpVU7+i9CLLUPKfPx5CHuaY8Vas+1u3pUWyCWhEy3fjgg2u5yRo7V fD9+b4idKZCOMlEy1P3z7Kdel002E+t3AcG9GVabXINR9bLPIeiMNDlQaE0bTBEC 5XEgxpQOg31pQg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:11 2025 by rpki-client