This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json) Hash identifier: 3v2Q3j87lTRCj6ouUUkvDVrq0QShj3uFocTSBObiWRU= Subject key identifier: 77:20:9E:21:41:BD:95:75:4E:8B:5F:65:24:8E:B4:1B:3D:99:91:AA Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Certificate serial: 019AF0F5E0DA86B52A3C05E8FD22D3C1DC54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft Manifest number: 125C Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: 1bPFVl09PwVaqipJptyCLLijmGYjA6zXAgWuEYFtAGE=) 2: 52omqQEuqym82ipU0hYmrHOmv0Q.roa (hash: XCFx/COmHu6CZIYbc3sid+Zpv5Ax1Cs1bDV/hO9qIaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e0:da:86:b5:2a:3c:05:e8:fd:22:d3:c1:dc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=77209e2141bd95754e8b5f65248eb41b3d9991aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:f1:83:da:b8:5d:5a:d4:c7:6d:5d:86:26: d7:04:cf:46:c1:0d:2c:69:3f:5c:d1:54:4b:d1:65: a1:fd:ae:51:4f:8b:22:e9:ec:54:71:2c:ee:23:c6: 11:e2:a5:a2:c3:b9:bb:f1:b5:79:d9:9b:b7:2a:be: 2e:81:9c:c6:f1:6f:41:37:ee:10:e5:c7:6b:ba:9b: 01:1b:29:a3:e2:67:37:9b:ff:c6:80:46:9a:21:ca: 1a:1a:70:a7:85:32:c2:76:aa:04:1d:52:19:75:19: 14:59:ce:bc:f1:18:d9:f2:c4:84:57:6a:9a:74:67: 67:e1:02:db:99:8c:30:71:ad:ef:be:bc:39:fd:67: 96:06:f5:af:22:da:68:c4:2f:8a:88:e7:98:15:d3: 67:32:09:9b:37:35:80:77:34:04:c6:77:9c:c5:0c: 15:74:1e:58:56:65:e3:53:2c:d6:d6:99:66:a2:64: 5c:98:20:20:66:83:79:f4:3f:56:e2:b3:7f:54:a2: 71:1e:b3:2a:39:e5:e3:fd:2a:d2:ea:02:2f:a2:bb: b3:d1:09:bb:72:5b:8f:f5:81:2c:fd:0d:c2:c0:06: ed:24:0b:7e:a0:6d:5a:2b:9c:af:ad:11:a4:13:6c: 74:94:e2:58:25:0c:63:52:63:b6:b0:46:30:ee:dc: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:9E:21:41:BD:95:75:4E:8B:5F:65:24:8E:B4:1B:3D:99:91:AA X509v3 Authority Key Identifier: keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3b:89:f6:c6:57:8b:bc:c2:2d:5b:d1:b4:84:0e:24:0a:29: 00:92:9f:12:41:ae:9e:dc:44:d6:ba:b0:c7:c8:54:ed:83:dc: 4a:eb:09:d9:c8:62:ed:bf:be:0e:44:6e:e6:e3:0e:3d:6c:10: c6:de:d2:05:c3:eb:c0:bd:8f:b5:2b:2b:69:ec:6d:d1:d8:fe: 99:9b:21:c7:8f:23:e2:1f:09:f0:d9:f2:11:d1:4c:d6:45:13: 9c:d1:f8:5b:70:a3:6b:83:70:e0:36:5b:d4:19:72:58:b8:87: 0d:b5:e7:e4:1d:bf:82:08:71:d9:c0:82:56:2b:24:65:f8:46: 5f:b7:72:ce:9f:57:14:91:c8:79:dd:16:86:cf:80:89:29:69: 6e:16:ef:c1:2d:ed:47:aa:ef:30:01:1c:c2:91:5e:24:78:16: cc:e7:9a:e7:47:36:ea:c0:71:98:f4:40:23:d3:26:65:74:7b: 5b:42:90:73:98:23:ce:af:00:67:62:2f:f1:22:b7:e3:6f:12: f0:86:1f:fc:81:15:7c:9d:07:95:11:9a:0e:95:83:1f:93:07: 22:34:76:9e:34:8b:44:3a:54:ad:a7:8c:ca:9e:de:1e:73:b8: 0d:47:38:29:41:a6:9b:9c:a0:8d:fd:d8:fd:93:8e:d2:d2:d7: 32:66:e0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eDahrUqPAXo/SLTwdxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi NmMxODQwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD Eyg3NzIwOWUyMTQxYmQ5NTc1NGU4YjVmNjUyNDhlYjQxYjNkOTk5MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OPxg9q4XVrUx21dhibXBM9GwQ0s aT9c0VRL0WWh/a5RT4si6exUcSzuI8YR4qWiw7m78bV52Zu3Kr4ugZzG8W9BN+4Q 5cdrupsBGymj4mc3m//GgEaaIcoaGnCnhTLCdqoEHVIZdRkUWc688RjZ8sSEV2qa dGdn4QLbmYwwca3vvrw5/WeWBvWvItpoxC+KiOeYFdNnMgmbNzWAdzQExnecxQwV dB5YVmXjUyzW1plmomRcmCAgZoN59D9W4rN/VKJxHrMqOeXj/SrS6gIvoruz0Qm7 cluP9YEs/Q3CwAbtJAt+oG1aK5yvrRGkE2x0lOJYJQxjUmO2sEYw7twIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcgniFBvZV1TotfZSSOtBs9mZGqMB8GA1UdIwQY MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTuJ9sZX i7zCLVvRtIQOJAopAJKfEkGuntxE1rqwx8hU7YPcSusJ2chi7b++DkRu5uMOPWwQ xt7SBcPrwL2PtSsraext0dj+mZshx48j4h8J8NnyEdFM1kUTnNH4W3Cja4Nw4DZb 1BlyWLiHDbXn5B2/gghx2cCCViskZfhGX7dyzp9XFJHIed0Whs+AiSlpbhbvwS3t R6rvMAEcwpFeJHgWzOea50c26sBxmPRAI9MmZXR7W0KQc5gjzq8AZ2Iv8SK3428S 8IYf/IEVfJ0HlRGaDpWDH5MHIjR2njSLRDpUraeMyp7eHnO4DUc4KUGmm5ygjf3Y /ZOO0tLXMmbgCA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:06 2025 by rpki-client