This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json) Hash identifier: 19DXO7iIUyYVunN6kIIbDM66wbnkZcKu0Otzg4a06Eg= Subject key identifier: A1:8D:A0:8E:9B:9E:95:6A:30:4E:70:D2:97:3B:0D:93:0A:84:68:22 Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec Certificate serial: 019AF3F745860EBF73B8D5A81ECFA679000A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft Manifest number: 0B4B Signing time: Sat 06 Dec 2025 14:00:59 +0000 Manifest this update: Sat 06 Dec 2025 14:00:59 +0000 Manifest next update: Sun 07 Dec 2025 14:00:59 +0000 Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: w10E4j7XpsWVEcYptsWr7iWLYHtYfSA9HPtH73O8+go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:45:86:0e:bf:73:b8:d5:a8:1e:cf:a6:79:00:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec Validity Not Before: Dec 6 14:00:59 2025 GMT Not After : Dec 7 14:00:59 2025 GMT Subject: CN=a18da08e9b9e956a304e70d2973b0d930a846822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:df:66:e8:6f:e8:cb:17:a6:20:fa:dc:f7: be:f9:61:96:d3:2d:93:a7:eb:72:d2:f2:68:01:21: dd:ac:75:e6:7d:45:1f:67:75:fe:3f:cc:cc:da:be: 9e:06:0c:63:e7:6d:e6:2e:1b:3b:00:4d:58:6a:ee: f4:5c:cc:8c:8c:7a:3c:94:35:73:63:9e:46:10:e6: c3:cf:0b:1a:50:8b:d8:15:9b:25:a1:69:2d:b6:98: ff:ac:c3:17:95:24:ab:8b:73:a7:ed:ec:67:47:1b: aa:42:17:95:62:06:1f:84:56:38:12:b4:6d:31:bc: d2:42:46:74:4c:39:f0:0d:8f:8d:c7:ab:74:4d:cb: 26:26:9b:ae:5b:a9:63:1a:72:75:a4:b8:4b:b5:71: 85:4b:f1:3f:a2:1b:b0:19:2c:3f:aa:99:5b:cf:40: 05:a7:e9:c7:7f:32:10:21:4c:ed:80:86:a5:55:5d: c4:b4:7a:0a:e6:60:77:89:5b:4c:8f:78:96:70:2d: 98:88:a6:fd:a5:2c:70:19:5c:98:fb:97:19:98:48: 2b:0d:37:21:c8:01:1c:d0:54:64:60:80:43:4d:c9: d8:ce:ef:ac:65:8e:e4:fa:8e:b5:21:3a:68:30:52: f3:0c:73:24:31:88:49:a7:d2:fb:f8:be:f8:a5:83: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:A0:8E:9B:9E:95:6A:30:4E:70:D2:97:3B:0D:93:0A:84:68:22 X509v3 Authority Key Identifier: keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b1:15:08:c2:8d:cf:0d:99:a3:87:c0:83:0a:02:0e:51:f3: 1a:87:1b:e7:28:9c:5d:77:aa:a0:5c:0b:6b:69:83:d0:ea:a4: 65:08:a3:7d:1f:d2:d6:3b:c8:7f:7b:3d:a3:4c:5f:77:f0:15: ca:74:fc:77:c2:17:e5:82:93:06:d5:28:d6:1c:04:f3:99:1b: 16:5d:a1:e9:f0:bd:55:09:37:cf:f7:45:09:03:3d:6a:de:c9: 04:94:f1:c3:a6:87:48:de:65:12:a4:a0:14:58:59:74:55:65: bb:6a:7c:ce:29:a9:63:36:9a:e4:99:ab:ff:84:6a:c4:a3:07: 6b:58:43:95:b6:88:ec:67:3d:5e:05:df:05:ad:d5:29:76:78: 00:57:51:df:41:98:a4:04:a1:02:0c:a1:62:4d:cc:2c:71:5d: 99:d2:b8:94:3d:7b:92:32:3f:a4:32:f2:b2:da:d0:08:85:b1: c8:b5:49:f4:5d:54:df:b1:c8:5f:d7:5d:fd:cc:19:f0:13:66: 7d:47:22:10:cf:2e:32:19:b0:96:e4:b2:b9:7e:27:34:72:b9: a2:ae:26:eb:e2:35:bd:f9:a0:74:bc:78:29:79:2f:50:1c:72: 9e:7b:8e:40:af:d7:0f:01:65:8f:b0:b9:d1:29:c4:81:35:2a: cb:43:d7:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90WGDr9zuNWoHs+meQAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDY4ZjU0YzBkNDk1ODFmNjliNTQzODNkNTU3M2ZmNzc1 NjIwZWMwHhcNMjUxMjA2MTQwMDU5WhcNMjUxMjA3MTQwMDU5WjAzMTEwLwYDVQQD EyhhMThkYTA4ZTliOWU5NTZhMzA0ZTcwZDI5NzNiMGQ5MzBhODQ2ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnnfZuhv6MsXpiD63Pe++WGW0y2T p+ty0vJoASHdrHXmfUUfZ3X+P8zM2r6eBgxj523mLhs7AE1Yau70XMyMjHo8lDVz Y55GEObDzwsaUIvYFZsloWkttpj/rMMXlSSri3On7exnRxuqQheVYgYfhFY4ErRt MbzSQkZ0TDnwDY+Nx6t0TcsmJpuuW6ljGnJ1pLhLtXGFS/E/ohuwGSw/qplbz0AF p+nHfzIQIUztgIalVV3EtHoK5mB3iVtMj3iWcC2YiKb9pSxwGVyY+5cZmEgrDTch yAEc0FRkYIBDTcnYzu+sZY7k+o61ITpoMFLzDHMkMYhJp9L7+L74pYNufQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGNoI6bnpVqME5w0pc7DZMKhGgiMB8GA1UdIwQY MBaAFNVGj1TA1JWB9ptUOD1Vc/93ViDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQt MmM1YTdhYjQ5MzE5LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQtMmM1YTdhYjQ5MzE5 LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbEVCMKN zw2Zo4fAgwoCDlHzGocb5yicXXeqoFwLa2mD0OqkZQijfR/S1jvIf3s9o0xfd/AV ynT8d8IX5YKTBtUo1hwE85kbFl2h6fC9VQk3z/dFCQM9at7JBJTxw6aHSN5lEqSg FFhZdFVlu2p8zimpYzaa5Jmr/4RqxKMHa1hDlbaI7Gc9XgXfBa3VKXZ4AFdR30GY pAShAgyhYk3MLHFdmdK4lD17kjI/pDLystrQCIWxyLVJ9F1U37HIX9dd/cwZ8BNm fUciEM8uMhmwluSyuX4nNHK5oq4m6+I1vfmgdLx4KXkvUBxynnuOQK/XDwFlj7C5 0SnEgTUqy0PXGg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:42:30 2025 by rpki-client