This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json) Hash identifier: iJ+UPJVwGlgECJOUba2nBZXwtxIJIJ4TYc9aw+5Tqyw= Subject key identifier: 67:7B:74:95:DF:BC:30:71:23:7D:11:E8:A5:71:69:7F:8D:CC:22:AE Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Certificate serial: 019AF2ADE8E79A614F393583D24708DCCE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft Manifest number: 110D Signing time: Sat 06 Dec 2025 08:01:14 +0000 Manifest this update: Sat 06 Dec 2025 08:01:14 +0000 Manifest next update: Sun 07 Dec 2025 08:01:14 +0000 Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: ObKvy3w+srmqR6gVd8wbF5AJokDEt8SMefOnpb+AxBA=) 2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e8:e7:9a:61:4f:39:35:83:d2:47:08:dc:ce:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Validity Not Before: Dec 6 08:01:14 2025 GMT Not After : Dec 7 08:01:14 2025 GMT Subject: CN=677b7495dfbc3071237d11e8a571697f8dcc22ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:1b:da:3a:6c:97:40:71:21:6c:b0:fb:7d: cb:22:a9:c5:8c:3c:41:a9:6b:a8:ba:91:d9:63:5d: f4:14:37:2c:23:5e:dd:b5:5d:9a:c1:78:14:79:02: dd:7d:89:8f:75:9a:0e:56:1a:b7:01:8c:fe:cc:cc: a1:5d:c5:3d:d3:80:84:23:90:87:54:81:ca:64:4d: a2:72:3d:5a:76:86:d8:dd:5c:65:d8:85:54:07:7e: 47:8c:ff:b2:01:ef:c8:f0:81:05:01:38:65:94:59: c1:0d:e8:fe:34:3f:a9:6e:9a:00:eb:f9:0e:86:94: 28:ca:2d:dc:ce:3b:a5:00:5f:ff:57:64:7c:6e:21: c2:92:2f:6e:35:c9:35:fb:82:0d:b1:61:63:6b:7f: d2:4b:21:a4:5f:67:e9:ce:42:2e:16:2d:2f:6e:0b: 44:79:84:2a:9f:6e:1d:90:56:01:81:2f:d8:ec:2f: f0:18:5f:a9:51:39:04:65:be:39:95:27:3e:3e:5a: 5a:92:97:2a:aa:68:8b:f0:4b:eb:a3:2a:08:0f:2a: 7a:9c:aa:4e:6f:31:a7:8a:cf:b3:50:34:c6:24:ba: 87:d6:9e:41:a2:60:20:7e:08:52:4a:1d:01:4e:94: 01:30:a4:ed:bd:81:d6:bc:5e:be:d2:18:26:1a:66: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:74:95:DF:BC:30:71:23:7D:11:E8:A5:71:69:7F:8D:CC:22:AE X509v3 Authority Key Identifier: keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a9:85:61:35:27:06:bc:9c:c6:15:82:24:ae:31:59:82:f7: 49:62:11:25:78:0c:dd:66:8f:cb:59:c2:39:5c:34:52:81:0c: bf:a2:fd:24:fa:4b:30:6e:3f:5f:e8:ee:60:b3:ab:eb:67:e0: 2d:de:55:c4:db:19:d8:d5:95:b8:cb:e6:f8:ae:bc:9f:37:83: 07:b2:c9:82:60:c8:30:8d:07:29:54:22:d2:de:dc:5a:8c:13: 12:27:23:50:9a:27:ff:9b:f2:3a:06:5c:25:ee:af:bb:46:1e: 2c:bc:96:e0:9d:c6:03:72:ee:02:dd:a3:c4:bf:7b:87:15:ff: eb:91:20:f1:d8:d3:10:e3:82:1c:e8:00:02:be:8b:67:76:8e: 13:15:f1:ad:64:d2:45:e6:bc:ec:97:9f:51:b4:86:8c:1f:aa: 3d:a2:51:58:fa:14:32:86:d9:5f:23:71:bf:59:4f:19:f9:f4: 51:b2:35:f0:3e:54:7b:6d:c4:6d:75:7b:46:ae:27:42:49:97: a6:2e:ec:08:c4:86:58:bb:4c:a2:a2:fa:87:a7:b5:08:c7:d1: c1:44:4b:04:eb:34:f0:8d:23:ac:6d:04:dc:7d:f9:42:e1:49: 4a:10:bd:6c:09:e1:ba:33:88:9b:a8:9d:53:d1:81:b8:01:8c: 54:50:a7:0e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrejnmmFPOTWD0kcI3M49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1 ZTJkODAwHhcNMjUxMjA2MDgwMTE0WhcNMjUxMjA3MDgwMTE0WjAzMTEwLwYDVQQD Eyg2NzdiNzQ5NWRmYmMzMDcxMjM3ZDExZThhNTcxNjk3ZjhkY2MyMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Yb2jpsl0BxIWyw+33LIqnFjDxB qWuoupHZY130FDcsI17dtV2awXgUeQLdfYmPdZoOVhq3AYz+zMyhXcU904CEI5CH VIHKZE2icj1adobY3Vxl2IVUB35HjP+yAe/I8IEFAThllFnBDej+ND+pbpoA6/kO hpQoyi3czjulAF//V2R8biHCki9uNck1+4INsWFja3/SSyGkX2fpzkIuFi0vbgtE eYQqn24dkFYBgS/Y7C/wGF+pUTkEZb45lSc+PlpakpcqqmiL8EvroyoIDyp6nKpO bzGnis+zUDTGJLqH1p5BomAgfghSSh0BTpQBMKTtvYHWvF6+0hgmGmZ/bwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGd7dJXfvDBxI30R6KVxaX+NzCKuMB8GA1UdIwQY MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2 MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKmF YTUnBrycxhWCJK4xWYL3SWIRJXgM3WaPy1nCOVw0UoEMv6L9JPpLMG4/X+juYLOr 62fgLd5VxNsZ2NWVuMvm+K68nzeDB7LJgmDIMI0HKVQi0t7cWowTEicjUJon/5vy OgZcJe6vu0YeLLyW4J3GA3LuAt2jxL97hxX/65Eg8djTEOOCHOgAAr6LZ3aOExXx rWTSRea87JefUbSGjB+qPaJRWPoUMobZXyNxv1lPGfn0UbI18D5Ue23EbXV7Rq4n QkmXpi7sCMSGWLtMoqL6h6e1CMfRwURLBOs08I0jrG0E3H35QuFJShC9bAnhujOI m6idU9GBuAGMVFCnDg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:23 2025 by rpki-client