This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft File: 1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json) Hash identifier: ku1uCyl7AyYLOQWXBShliiQObI2keHWQr653USoXmDE= Subject key identifier: 5D:4C:EF:84:72:91:AD:38:E4:72:E7:EC:4C:7D:20:93:E2:DE:EA:04 Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 Certificate issuer: /CN=d66df7599e243b462864126a8c241078a2e2b045 Certificate serial: 019AF209AA1AC06D8E524B2B1E2B0F571D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft Manifest number: 05 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: Xrlmv7FsdWdeOmJpEBG2GiGXUkfxJqH3GaKSd0MQGQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:aa:1a:c0:6d:8e:52:4b:2b:1e:2b:0f:57:1d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=5d4cef847291ad38e472e7ec4c7d2093e2deea04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:e2:6f:bd:f2:ce:0b:ef:db:c9:fb:dc:39: 26:d1:ed:f1:7d:0d:60:53:a5:5a:60:bc:e2:69:7a: 4f:27:dc:3f:25:d4:f7:45:02:04:08:22:fe:25:b6: ce:23:5e:35:b2:a9:8d:77:7c:f8:09:b3:09:9b:74: d6:ec:09:7f:e0:f3:8e:67:a5:77:d5:69:6b:bc:14: eb:9b:a4:00:de:e2:4e:4e:c3:6e:47:be:ed:3f:83: 45:4f:4b:f2:c8:f4:dc:7d:d5:fe:2c:b1:12:76:a7: 69:ae:0a:72:f7:9a:e2:dd:b9:2b:cf:be:b1:47:9b: 01:9f:df:5e:51:55:5e:48:1d:a0:c8:6a:81:8c:38: 5a:fc:e5:94:e7:eb:cb:ee:91:83:d7:d9:e7:04:16: e2:38:76:23:25:bf:ac:55:e1:73:0d:9f:be:98:9b: 9a:1b:56:b2:27:12:45:98:33:fa:1d:e7:0c:c5:9e: 86:28:95:72:76:4b:ca:f4:49:cb:56:b1:6f:38:d4: b9:45:28:ba:67:d6:84:d1:e3:37:6b:b2:29:7f:50: af:a7:c7:dc:f2:bc:e4:23:35:fc:23:ee:bd:5c:03: b2:c7:71:bb:54:06:45:5b:31:93:25:e7:44:5c:2c: eb:61:65:32:ec:e5:54:30:0c:41:28:51:6d:c6:08: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4C:EF:84:72:91:AD:38:E4:72:E7:EC:4C:7D:20:93:E2:DE:EA:04 X509v3 Authority Key Identifier: keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fa:38:b5:9e:f9:c8:9e:39:a7:c2:39:b4:da:6d:9b:39:be: f4:ad:5e:45:f1:7c:f9:9d:8b:e4:ec:8c:3a:10:a2:02:21:d1: 94:4e:43:28:44:b7:ff:25:98:32:f6:14:aa:b7:d9:61:c4:d5: 99:8e:6c:8b:fe:e7:53:c8:c8:3e:b5:27:a8:7b:fe:e2:cd:46: 51:3f:68:3a:fc:ec:dd:87:7f:fd:78:ab:4a:79:41:5d:a4:5c: 16:1f:ac:d6:ed:09:a3:45:1d:fc:e1:42:49:76:00:3b:97:b6: 46:ef:aa:5e:99:ef:b4:e6:b0:8a:68:32:96:fb:c2:46:d7:66: 43:0f:a9:56:3c:31:83:83:0b:f4:f2:b7:5f:67:b5:e7:4c:51: 86:49:0e:1f:bc:8e:11:9a:fc:99:ab:58:0e:3d:9d:3f:b3:f3: d5:46:3c:be:0d:13:18:dd:67:44:18:db:62:55:35:51:4a:22: 23:34:8e:cd:fd:eb:af:5e:6b:2e:d1:14:b9:82:57:76:39:e6: 02:b4:d9:4c:36:8d:39:31:db:7c:27:9f:e4:6f:90:e6:f7:ec: cb:c7:a9:2b:a1:7e:74:cc:1e:31:bc:b4:e6:41:7e:92:77:fd: 77:4b:13:06:22:98:56:b2:11:b1:21:40:1e:e6:eb:a9:f4:ec: 5a:6a:09:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaoawG2OUksrHisPVx0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmRmNzU5OWUyNDNiNDYyODY0MTI2YThjMjQxMDc4YTJl MmIwNDUwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD Eyg1ZDRjZWY4NDcyOTFhZDM4ZTQ3MmU3ZWM0YzdkMjA5M2UyZGVlYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3fib73yzgvv28n73Dkm0e3xfQ1g U6VaYLziaXpPJ9w/JdT3RQIECCL+JbbOI141sqmNd3z4CbMJm3TW7Al/4POOZ6V3 1WlrvBTrm6QA3uJOTsNuR77tP4NFT0vyyPTcfdX+LLESdqdprgpy95ri3bkrz76x R5sBn99eUVVeSB2gyGqBjDha/OWU5+vL7pGD19nnBBbiOHYjJb+sVeFzDZ++mJua G1ayJxJFmDP6HecMxZ6GKJVydkvK9EnLVrFvONS5RSi6Z9aE0eM3a7Ipf1Cvp8fc 8rzkIzX8I+69XAOyx3G7VAZFWzGTJedEXCzrYWUy7OVUMAxBKFFtxgjj+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1M74Ryka045HLn7Ex9IJPi3uoEMB8GA1UdIwQY MBaAFNZt91meJDtGKGQSaowkEHii4rBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQt MDcxNDM3NjVmZmZlLzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQtMDcxNDM3NjVmZmZl LzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfo4tZ75 yJ45p8I5tNptmzm+9K1eRfF8+Z2L5OyMOhCiAiHRlE5DKES3/yWYMvYUqrfZYcTV mY5si/7nU8jIPrUnqHv+4s1GUT9oOvzs3Yd//XirSnlBXaRcFh+s1u0Jo0Ud/OFC SXYAO5e2Ru+qXpnvtOawimgylvvCRtdmQw+pVjwxg4ML9PK3X2e150xRhkkOH7yO EZr8matYDj2dP7Pz1UY8vg0TGN1nRBjbYlU1UUoiIzSOzf3rr15rLtEUuYJXdjnm ArTZTDaNOTHbfCef5G+Q5vfsy8epK6F+dMweMby05kF+knf9d0sTBiKYVrIRsSFA HubrqfTsWmoJlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:54 2025 by rpki-client