This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json) Hash identifier: 2UiZV6A7yr0mmufVkZlw2DHvcoVEPr7AFLfuUp8T3nc= Subject key identifier: 96:AC:51:D3:D1:53:0C:8C:12:C1:77:4E:F9:65:21:4A:DA:9C:0C:BD Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Certificate serial: 019B2287E99BABFEB3F51C0BA4F464769354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft Manifest number: 09B2 Signing time: Mon 15 Dec 2025 15:01:30 +0000 Manifest this update: Mon 15 Dec 2025 15:01:30 +0000 Manifest next update: Tue 16 Dec 2025 15:01:30 +0000 Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: 4OhskV/ycIKdQPWcFbiqC574K8jwovmiH4i4FwbudGk=) 2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:e9:9b:ab:fe:b3:f5:1c:0b:a4:f4:64:76:93:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Validity Not Before: Dec 15 15:01:30 2025 GMT Not After : Dec 16 15:01:30 2025 GMT Subject: CN=96ac51d3d1530c8c12c1774ef965214ada9c0cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:62:db:38:5d:be:6d:9a:36:1a:2d:70:9d: 84:b5:4d:97:9c:10:89:30:25:2e:1c:09:2a:25:5d: e0:f6:45:05:a4:b6:ad:13:f3:88:b8:2d:cd:80:8e: 47:5a:57:c1:95:e4:26:13:89:e3:ee:ec:bd:3a:0e: 9f:b7:15:0a:d0:e6:76:75:75:79:cd:14:a3:bb:51: 29:95:7e:9c:8e:31:76:bc:44:cd:65:ee:8b:7f:43: 35:50:75:1f:53:a0:45:de:2e:29:16:0e:bc:7d:9f: ad:69:4e:f1:d6:8e:d1:ab:f9:f6:c8:9d:29:f5:0e: d2:9a:1c:c1:89:2e:19:02:0e:74:9f:9c:a9:42:8b: 66:81:2f:c8:d9:71:9d:31:ab:35:07:34:4e:85:b2: ea:01:55:dd:af:d0:34:e8:22:5d:36:0a:9a:2f:65: 1e:fd:89:e4:23:6c:e9:69:d6:59:a1:80:7b:d6:f2: 30:69:53:09:05:d4:19:e8:80:fc:d1:28:cf:e8:a4: 50:ca:12:bf:b2:8f:d8:13:f2:54:11:cd:46:83:59: ae:0f:af:61:5f:c5:19:65:71:a1:d3:29:25:b5:38: 4c:e7:be:f0:11:62:3c:ab:cf:12:2e:5f:b5:39:e4: 7f:f4:3a:c0:dd:41:aa:69:57:3d:95:f8:a0:41:ee: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AC:51:D3:D1:53:0C:8C:12:C1:77:4E:F9:65:21:4A:DA:9C:0C:BD X509v3 Authority Key Identifier: keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5f:fe:b9:ee:df:9a:87:7f:5c:ac:ce:fc:07:44:48:57:6a: e5:6f:44:f0:b7:42:42:bf:b4:80:ab:99:6b:46:75:ce:d8:71: 0a:87:e1:7f:ef:48:a7:54:d8:c8:4d:65:30:2d:72:d6:d5:fb: eb:13:0e:89:73:a4:71:5d:23:b7:8c:4d:1f:6c:57:8c:b0:7c: 9d:d3:a3:1e:00:3d:61:7e:0f:eb:20:48:da:6b:65:99:dc:ed: 98:12:44:b2:9f:be:4f:aa:a2:a3:fb:c5:19:14:cf:34:40:32: 88:e7:d3:62:62:33:74:14:36:e5:34:ca:bd:db:9f:1e:e9:a0: c7:79:2c:b7:0a:7b:09:b2:ad:bc:17:26:df:72:89:35:5e:2f: 97:84:5f:4a:df:ac:f8:ea:f5:48:41:1b:87:35:c7:6d:cc:51: 50:40:6a:a7:fe:de:83:21:03:83:32:e0:fd:80:95:c3:27:88: 58:4e:4a:ab:8d:cc:1e:36:7e:e1:33:e2:4b:99:e9:86:02:40: 94:0a:68:6e:fb:cf:63:fe:74:ea:fa:52:2f:b7:1f:04:74:79: 6e:61:d3:a4:09:7d:f7:37:be:67:c0:df:4e:53:56:a7:5a:2b: b8:62:5d:7a:0e:57:a5:7f:32:ff:18:e6:25:d0:92:30:a7:46: e5:04:ef:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih+mbq/6z9RwLpPRkdpNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3 ZjcyMGEwHhcNMjUxMjE1MTUwMTMwWhcNMjUxMjE2MTUwMTMwWjAzMTEwLwYDVQQD Eyg5NmFjNTFkM2QxNTMwYzhjMTJjMTc3NGVmOTY1MjE0YWRhOWMwY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKVi2zhdvm2aNhotcJ2EtU2XnBCJ MCUuHAkqJV3g9kUFpLatE/OIuC3NgI5HWlfBleQmE4nj7uy9Og6ftxUK0OZ2dXV5 zRSju1EplX6cjjF2vETNZe6Lf0M1UHUfU6BF3i4pFg68fZ+taU7x1o7Rq/n2yJ0p 9Q7SmhzBiS4ZAg50n5ypQotmgS/I2XGdMas1BzROhbLqAVXdr9A06CJdNgqaL2Ue /YnkI2zpadZZoYB71vIwaVMJBdQZ6ID80SjP6KRQyhK/so/YE/JUEc1Gg1muD69h X8UZZXGh0ykltThM577wEWI8q88SLl+1OeR/9DrA3UGqaVc9lfigQe6olQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJasUdPRUwyMEsF3TvllIUranAy9MB8GA1UdIwQY MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1/+ue7f mod/XKzO/AdESFdq5W9E8LdCQr+0gKuZa0Z1zthxCofhf+9Ip1TYyE1lMC1y1tX7 6xMOiXOkcV0jt4xNH2xXjLB8ndOjHgA9YX4P6yBI2mtlmdztmBJEsp++T6qio/vF GRTPNEAyiOfTYmIzdBQ25TTKvdufHumgx3kstwp7CbKtvBcm33KJNV4vl4RfSt+s +Or1SEEbhzXHbcxRUEBqp/7egyEDgzLg/YCVwyeIWE5Kq43MHjZ+4TPiS5nphgJA lApobvvPY/506vpSL7cfBHR5bmHTpAl99ze+Z8DfTlNWp1oruGJdeg5XpX8y/xjm JdCSMKdG5QTvDg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:56 2025 by rpki-client