This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json) Hash identifier: v8pcz1qifDneO/X9xguAXq+qTRyzisCCz4CMOiuxRN0= Subject key identifier: 0C:FA:1C:C4:4F:7F:E6:51:69:A9:EB:6A:08:95:F5:22:41:BC:FC:C5 Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724 Certificate serial: 019AF276E8C5A583FD401726D0F93FC7E56D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft Manifest number: 0511 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: d/FtixKst3MGdHWemO9AlIJfWB7Yv0eECclxZeW19kE=) 2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=) 3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e8:c5:a5:83:fd:40:17:26:d0:f9:3f:c7:e5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=0cfa1cc44f7fe65169a9eb6a0895f52241bcfcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:33:fd:cb:83:16:fa:41:19:96:80:84:65: de:0f:af:68:b7:30:a1:1a:82:e2:66:d0:9d:e5:5f: 94:ce:3a:cb:65:02:d1:ee:b9:8e:72:2f:b8:28:32: 94:b6:3a:a7:f4:6c:e6:38:43:d9:66:0d:6f:3d:8f: 24:36:58:f4:5f:d5:f3:be:70:55:26:ba:e0:00:e1: 2b:90:b4:50:e1:3c:10:80:76:35:71:49:c4:82:22: 76:cc:37:ca:5c:41:10:97:79:86:40:6e:64:e9:8e: cf:3b:e4:88:f9:4d:b8:f4:e9:bf:8c:26:77:f7:3a: 5f:6e:8b:34:df:c6:53:96:7c:2d:48:2c:7c:f3:0c: fd:cf:32:cd:0c:94:f8:28:53:d1:b8:0d:e5:10:35: 5e:66:46:a8:30:8c:20:f9:1f:14:79:7a:bb:bd:b8: e5:ff:d3:51:8d:01:20:9f:95:ee:05:e7:5b:ab:c8: 50:13:05:4c:df:7a:7d:6f:7c:18:8c:22:51:85:94: 2b:9b:8d:d5:6c:ae:ad:77:9a:ce:fb:60:ba:5a:65: c9:2f:b7:ab:d3:11:ba:b3:22:26:5b:d9:8b:19:f6: d2:75:b4:01:22:cd:97:5b:23:36:0d:01:0b:b3:d2: ea:9f:48:c0:a2:e9:fb:03:1e:f6:64:23:76:36:9d: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FA:1C:C4:4F:7F:E6:51:69:A9:EB:6A:08:95:F5:22:41:BC:FC:C5 X509v3 Authority Key Identifier: keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1d:23:d7:5a:7d:71:63:75:2c:d4:3b:8a:59:7b:5c:ca:a0: f8:c6:80:31:3e:8c:d2:30:a2:75:e1:41:3c:8b:07:dc:46:7a: 78:17:ec:0d:86:bf:d9:2d:21:02:a6:f9:d5:76:2a:fa:30:4d: 5d:06:49:20:0f:e6:25:75:82:09:59:10:a9:e8:d2:0f:85:2c: 80:3d:51:86:56:7e:f3:ba:17:f5:74:6d:1c:eb:79:f9:53:2d: 56:7a:1d:5b:cc:68:04:49:c6:52:be:68:ff:0a:db:f9:c6:99: da:52:e9:2e:1e:4d:0b:c9:39:2b:11:3c:23:64:f3:fa:32:02: 10:fd:81:25:09:76:53:38:61:10:f8:74:67:f7:46:46:20:b6: da:45:69:e1:c3:40:21:11:56:93:25:96:64:26:d3:e1:98:2e: 5e:62:73:77:d1:eb:9e:79:43:60:90:89:48:a2:ae:2b:ca:73: a2:a9:5a:da:0f:32:ea:cb:ea:9e:f2:23:03:74:59:dd:79:72: d0:89:17:43:1c:54:e4:4d:42:f9:30:5a:8e:b9:9e:0d:e1:b6: 61:02:52:4a:fa:80:71:b4:09:59:d1:d6:82:73:35:a5:50:bd: 46:c0:5e:cb:0c:87:fd:40:ea:55:87:39:4b:4e:a4:d4:65:64: 08:58:45:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydujFpYP9QBcm0Pk/x+VtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5 OWE3MjQwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EygwY2ZhMWNjNDRmN2ZlNjUxNjlhOWViNmEwODk1ZjUyMjQxYmNmY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocsz/cuDFvpBGZaAhGXeD69otzCh GoLiZtCd5V+UzjrLZQLR7rmOci+4KDKUtjqn9GzmOEPZZg1vPY8kNlj0X9XzvnBV JrrgAOErkLRQ4TwQgHY1cUnEgiJ2zDfKXEEQl3mGQG5k6Y7PO+SI+U249Om/jCZ3 9zpfbos038ZTlnwtSCx88wz9zzLNDJT4KFPRuA3lEDVeZkaoMIwg+R8UeXq7vbjl /9NRjQEgn5XuBedbq8hQEwVM33p9b3wYjCJRhZQrm43VbK6td5rO+2C6WmXJL7er 0xG6syImW9mLGfbSdbQBIs2XWyM2DQELs9Lqn0jAoun7Ax72ZCN2Np0g8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz6HMRPf+ZRaanragiV9SJBvPzFMB8GA1UdIwQY MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2 LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh0j11p9 cWN1LNQ7ill7XMqg+MaAMT6M0jCideFBPIsH3EZ6eBfsDYa/2S0hAqb51XYq+jBN XQZJIA/mJXWCCVkQqejSD4UsgD1RhlZ+87oX9XRtHOt5+VMtVnodW8xoBEnGUr5o /wrb+caZ2lLpLh5NC8k5KxE8I2Tz+jICEP2BJQl2UzhhEPh0Z/dGRiC22kVp4cNA IRFWkyWWZCbT4ZguXmJzd9HrnnlDYJCJSKKuK8pzoqla2g8y6svqnvIjA3RZ3Xly 0IkXQxxU5E1C+TBajrmeDeG2YQJSSvqAcbQJWdHWgnM1pVC9RsBeywyH/UDqVYc5 S06k1GVkCFhFXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:52 2025 by rpki-client