This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json) Hash identifier: Y3PT484Gq5qlgMAxeSNgRc/hIwGh3XJQG47jdlNoQ3Q= Subject key identifier: 52:71:B8:BF:E7:4E:9D:5E:30:DD:A6:AE:2E:4D:57:22:55:73:71:A5 Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9 Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9 Certificate serial: 019AF276EA8E2DEFDA865024525851980203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft Manifest number: 1086 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: MzwlPk4NS0JdKGhRfnYZI1MYZWLVWHbxEIGvYEiZq9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ea:8e:2d:ef:da:86:50:24:52:58:51:98:02:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=5271b8bfe74e9d5e30dda6ae2e4d5722557371a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:de:43:02:a0:a6:cb:0d:9d:04:7a:db:df: 52:4d:ec:45:a5:72:03:00:03:40:cd:2c:8a:ac:fc: 4e:71:55:f7:ef:34:6f:05:91:78:98:eb:5e:30:21: 51:fc:c0:7c:af:aa:f4:57:9a:be:70:48:50:a5:a1: 1e:70:05:f4:78:0a:cd:67:fd:5e:e4:fe:92:ec:c9: be:2a:fe:ac:55:6e:a0:6a:70:20:5f:80:eb:bd:cb: 3d:6b:4d:23:36:26:2f:2c:4b:d0:77:a7:36:06:00: 6e:f2:62:b0:db:cb:e1:7c:1d:9d:4f:7b:1a:88:cc: 7e:6f:f8:7c:b2:df:ca:e5:6b:8e:af:05:3c:bf:c7: 26:37:c1:9e:1d:40:74:06:22:d3:61:13:40:25:42: 4b:1f:ee:89:97:70:36:93:d4:46:d5:2d:79:6e:b6: e1:8c:bf:8b:86:fb:7b:c9:58:e0:c3:b9:0e:61:eb: 26:d8:9b:bf:7f:01:85:4b:53:2b:da:d4:f8:47:ea: 6c:fd:1b:46:26:33:54:43:39:8a:36:f0:bc:a0:b8: 78:f6:af:b6:e6:b9:8a:7f:53:b1:15:90:77:8d:cc: e4:d7:c6:f1:a7:2a:3f:83:ad:e2:08:5c:60:9c:f6: ac:89:96:96:9c:23:e0:eb:38:fd:cb:43:59:6a:6c: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:B8:BF:E7:4E:9D:5E:30:DD:A6:AE:2E:4D:57:22:55:73:71:A5 X509v3 Authority Key Identifier: keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b0:2e:af:29:97:91:5f:e3:23:4c:18:47:a9:01:d8:cb:af: ba:d7:ba:fb:b2:8c:71:d7:64:cc:a8:1d:d7:8d:8e:a4:d4:57: 59:00:f0:90:b5:80:cd:06:3c:45:0d:b7:be:b6:4b:a5:fc:69: 59:b8:af:05:92:ed:c5:57:26:73:35:17:f4:f2:31:2b:2f:64: e5:bc:f9:b7:60:cb:eb:99:5c:79:1b:18:99:e2:98:c4:59:0d: af:5e:f7:19:0b:b6:c4:b9:40:c8:17:8c:11:59:7e:9b:ab:17: 60:4c:09:04:0d:08:61:b5:90:ae:23:fb:9a:97:2d:64:36:a6: 9c:31:41:04:5b:84:e2:df:aa:61:39:65:e2:ca:ad:50:8f:3c: 52:eb:c0:83:fc:48:aa:75:62:03:3f:c4:f8:1c:ed:aa:57:7b: 5c:20:5b:83:c5:25:4d:30:b7:20:de:eb:78:52:85:de:a4:5f: 6e:dc:59:63:eb:40:30:ee:cd:18:5c:c7:6c:d1:94:8f:9f:35: 9f:4f:cf:46:e2:79:fc:d6:a5:f2:fa:4e:2d:70:68:f2:bb:ca: 2d:d5:13:dc:37:2a:a3:5d:b3:14:9e:0c:29:10:63:f5:39:00: ae:c0:44:f3:cd:7e:5a:54:79:b8:da:ec:da:24:23:92:36:6a: 93:3a:6a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduqOLe/ahlAkUlhRmAIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MmE1M2RhMDM4MjUyZjY0YjZjMjkzNTljZmFjNDEwNGMz NWI3ZTkwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD Eyg1MjcxYjhiZmU3NGU5ZDVlMzBkZGE2YWUyZTRkNTcyMjU1NzM3MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyireQwKgpssNnQR6299STexFpXID AANAzSyKrPxOcVX37zRvBZF4mOteMCFR/MB8r6r0V5q+cEhQpaEecAX0eArNZ/1e 5P6S7Mm+Kv6sVW6ganAgX4Drvcs9a00jNiYvLEvQd6c2BgBu8mKw28vhfB2dT3sa iMx+b/h8st/K5WuOrwU8v8cmN8GeHUB0BiLTYRNAJUJLH+6Jl3A2k9RG1S15brbh jL+Lhvt7yVjgw7kOYesm2Ju/fwGFS1Mr2tT4R+ps/RtGJjNUQzmKNvC8oLh49q+2 5rmKf1OxFZB3jczk18bxpyo/g63iCFxgnPasiZaWnCPg6zj9y0NZamyyTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJxuL/nTp1eMN2mri5NVyJVc3GlMB8GA1UdIwQY MBaAFNQqU9oDglL2S2wpNZz6xBBMNbfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEt Yzg2OTlkYzczMTAwLzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEtYzg2OTlkYzczMTAw LzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrAurymX kV/jI0wYR6kB2Muvute6+7KMcddkzKgd142OpNRXWQDwkLWAzQY8RQ23vrZLpfxp WbivBZLtxVcmczUX9PIxKy9k5bz5t2DL65lceRsYmeKYxFkNr173GQu2xLlAyBeM EVl+m6sXYEwJBA0IYbWQriP7mpctZDamnDFBBFuE4t+qYTll4sqtUI88UuvAg/xI qnViAz/E+Bztqld7XCBbg8UlTTC3IN7reFKF3qRfbtxZY+tAMO7NGFzHbNGUj581 n0/PRuJ5/Nal8vpOLXBo8rvKLdUT3Dcqo12zFJ4MKRBj9TkArsBE881+WlR5uNrs 2iQjkjZqkzpq6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:38 2025 by rpki-client