This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft File: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft (raw, json) Hash identifier: U8RO1ge0/kjcGkArDEDW2uomIIQmPxAgzlKImOzEssM= Subject key identifier: 5D:DA:E1:EF:95:94:EC:70:33:26:CB:20:48:5D:93:DF:BB:04:51:95 Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3 Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3 Certificate serial: 019B35333F4D7D6344826DED9211519017A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft Manifest number: 14C6 Signing time: Fri 19 Dec 2025 06:01:49 +0000 Manifest this update: Fri 19 Dec 2025 06:01:49 +0000 Manifest next update: Sat 20 Dec 2025 06:01:49 +0000 Files and hashes: 1: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl (hash: qj62DbJmd+rI6/I7sJmFDtudcsZfW/vVhtujqG7dQ/0=) 2: OialHmpN2PfgJDs6a7B2v4zJHRs.roa (hash: Xr6Ys8oUxUhvsBwxBXXCldMQezaqpARcpSeHUjpkSck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:3f:4d:7d:63:44:82:6d:ed:92:11:51:90:17:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3 Validity Not Before: Dec 19 06:01:49 2025 GMT Not After : Dec 20 06:01:49 2025 GMT Subject: CN=5ddae1ef9594ec703326cb20485d93dfbb045195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:5e:d6:4b:0d:2c:70:f3:c3:b5:c8:23:54: d2:ab:da:ed:73:7c:8a:fb:97:6e:53:aa:09:e6:14: 5c:1c:a8:e4:dd:97:3c:fc:d7:41:ca:ef:15:51:19: e0:81:bc:c3:ce:dc:9f:fe:17:65:aa:f4:55:53:9f: 0d:d6:eb:37:06:ee:ab:49:4f:81:0b:06:fc:e2:c5: d1:83:a5:a9:2c:a7:ff:aa:0d:2b:fa:b3:96:49:b7: 46:30:e3:15:30:28:98:38:8d:5e:63:f7:89:5d:80: 98:51:40:bc:0d:33:eb:69:f1:55:60:57:59:6c:7d: 17:84:b1:67:e8:73:2c:8a:a9:ff:5b:7d:16:73:bc: df:69:a2:79:e0:a9:3e:f1:83:d5:f2:55:75:26:4d: ee:63:32:25:e3:ff:54:26:aa:42:36:58:35:ad:ab: 4b:7c:5a:6f:6e:2e:cb:fd:d4:14:29:d3:81:50:05: e5:bc:b3:5e:46:01:15:b1:7b:04:8a:54:41:bd:67: 05:29:4a:70:7e:03:1b:97:2c:ef:1d:ca:c3:b1:49: 79:53:27:58:19:05:e4:53:e6:fb:a4:74:33:99:eb: c7:55:2b:24:7e:5d:db:d8:ad:b1:8e:3d:e2:29:89: 70:7c:c5:70:62:f8:e4:e1:98:3f:a6:a3:03:56:9b: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DA:E1:EF:95:94:EC:70:33:26:CB:20:48:5D:93:DF:BB:04:51:95 X509v3 Authority Key Identifier: keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5a:90:01:bb:7c:9c:14:67:94:2c:f6:9f:d3:93:d0:1e:c7: af:88:47:f9:2e:5f:27:be:c9:ec:f6:a5:12:06:9c:64:69:8c: d4:9f:6f:4e:89:2d:b0:e9:51:db:7d:09:19:90:f4:43:a5:e0: fd:a8:0c:a6:98:1f:54:6a:e9:96:13:c0:f1:c1:a7:da:a2:6f: 9c:e2:0e:38:ac:d6:f7:fd:32:ae:eb:fd:6b:49:a3:7d:e5:85: 05:de:50:a3:e8:7d:97:aa:59:ba:e4:7e:66:0b:06:88:1c:5e: c5:24:ee:84:7e:c0:f7:ea:75:3e:ad:4f:81:8e:c4:3c:eb:70: a6:4c:58:7c:41:fe:ea:c4:3a:5f:59:6b:9c:87:38:9c:d1:36: f6:8c:e6:81:84:46:a6:63:de:4d:a2:bb:67:45:19:c3:f6:58: 40:1a:9a:e3:9a:f4:f1:8f:11:d2:4c:e1:aa:6c:c0:3c:b3:da: 47:73:dc:af:2f:cf:60:c4:8b:68:47:dd:61:6f:c4:2a:04:6e: 18:a1:f5:10:86:be:ea:f7:cc:24:a4:24:89:cc:6a:5a:27:4a: ca:e6:df:82:52:b7:ca:ba:fa:87:23:c0:de:44:3c:22:24:01: d0:4a:e7:71:cd:c4:3a:81:48:8e:7d:5d:ee:38:ea:08:01:bc: 63:b9:3a:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mz9NfWNEgm3tkhFRkBeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2M2Q1NTI5YmRhMTc3MTNlYmU2YjRjMjJmN2ZjZTRjYjhm MWU4YjMwHhcNMjUxMjE5MDYwMTQ5WhcNMjUxMjIwMDYwMTQ5WjAzMTEwLwYDVQQD Eyg1ZGRhZTFlZjk1OTRlYzcwMzMyNmNiMjA0ODVkOTNkZmJiMDQ1MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1e1ksNLHDzw7XII1TSq9rtc3yK +5duU6oJ5hRcHKjk3Zc8/NdByu8VURnggbzDztyf/hdlqvRVU58N1us3Bu6rSU+B Cwb84sXRg6WpLKf/qg0r+rOWSbdGMOMVMCiYOI1eY/eJXYCYUUC8DTPrafFVYFdZ bH0XhLFn6HMsiqn/W30Wc7zfaaJ54Kk+8YPV8lV1Jk3uYzIl4/9UJqpCNlg1ratL fFpvbi7L/dQUKdOBUAXlvLNeRgEVsXsEilRBvWcFKUpwfgMblyzvHcrDsUl5UydY GQXkU+b7pHQzmevHVSskfl3b2K2xjj3iKYlwfMVwYvjk4Zg/pqMDVptabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3a4e+VlOxwMybLIEhdk9+7BFGVMB8GA1UdIwQY MBaAFNY9VSm9oXcT6+a0wi9/zky48eizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWIt Y2RjZjVmNmE0YzI3LzEvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWItY2RjZjVmNmE0YzI3 LzEvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1qQAbt8 nBRnlCz2n9OT0B7Hr4hH+S5fJ77J7PalEgacZGmM1J9vToktsOlR230JGZD0Q6Xg /agMppgfVGrplhPA8cGn2qJvnOIOOKzW9/0yruv9a0mjfeWFBd5Qo+h9l6pZuuR+ ZgsGiBxexSTuhH7A9+p1Pq1PgY7EPOtwpkxYfEH+6sQ6X1lrnIc4nNE29ozmgYRG pmPeTaK7Z0UZw/ZYQBqa45r08Y8R0kzhqmzAPLPaR3Pcry/PYMSLaEfdYW/EKgRu GKH1EIa+6vfMJKQkicxqWidKyubfglK3yrr6hyPA3kQ8IiQB0Erncc3EOoFIjn1d 7jjqCAG8Y7k65Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:06:16 2025 by rpki-client