This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json) Hash identifier: bxEF+iIiKFVYz3DkgI6KHGZQCqi9M6MnshZJXA1+R8E= Subject key identifier: ED:9C:67:67:5E:F6:5F:DE:74:91:39:6C:30:7F:40:F8:17:6A:D1:EE Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec Certificate serial: 019B281BB5DDA6D44BDF46A48C55E927083A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft Manifest number: 0B66 Signing time: Tue 16 Dec 2025 17:01:03 +0000 Manifest this update: Tue 16 Dec 2025 17:01:03 +0000 Manifest next update: Wed 17 Dec 2025 17:01:03 +0000 Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: J3G9t0En42aIt+X8MmDfBE/4BS2kAZkzT5gNwq0Bpy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:b5:dd:a6:d4:4b:df:46:a4:8c:55:e9:27:08:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec Validity Not Before: Dec 16 17:01:03 2025 GMT Not After : Dec 17 17:01:03 2025 GMT Subject: CN=ed9c67675ef65fde7491396c307f40f8176ad1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:7e:5a:d2:15:0a:07:a6:91:2c:ee:4f:67: a2:47:c5:1f:a8:55:8c:86:22:31:83:8b:04:bf:2b: 1f:77:33:da:5e:5d:78:bd:7d:53:b4:0b:79:db:23: 1c:3d:2a:d2:d0:85:8d:4f:0a:cf:ee:ec:90:f0:a5: 2f:c7:e6:a9:43:95:5a:b9:68:f3:d0:10:c6:8a:3c: a9:ec:2d:4f:45:81:6c:f7:5b:26:a8:ab:d3:ff:32: b0:49:c4:f5:42:97:e5:16:f6:4a:c5:8e:f8:66:38: fc:63:6f:ca:9b:98:bb:73:a0:0c:ee:ac:81:41:5f: 45:2f:f5:08:f1:47:10:30:f1:bd:8d:ce:b0:3b:1d: fd:40:4b:28:48:61:24:81:29:1c:7f:d6:c0:0b:8f: 84:0f:4b:ee:75:2a:32:ad:58:6d:a9:f9:6a:e2:61: 37:18:30:13:fd:d5:75:3c:74:ad:5a:bb:26:cc:7d: 8d:c9:c4:07:b1:e9:81:a0:f4:e0:55:9f:04:ff:14: 5f:00:00:20:b6:e2:47:da:3e:a9:0c:cf:42:25:8d: cf:55:69:98:f0:2f:2b:90:65:c9:e1:ea:60:42:1e: b5:fe:aa:1d:2c:bb:a9:fa:f8:e7:65:c4:02:aa:16: 4e:4c:c9:5e:c7:97:f2:cc:f8:3a:07:a7:d3:7f:6d: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9C:67:67:5E:F6:5F:DE:74:91:39:6C:30:7F:40:F8:17:6A:D1:EE X509v3 Authority Key Identifier: keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0f:23:ce:c5:15:f6:08:83:80:28:8a:25:a8:7b:ce:a7:47: 72:16:0d:69:5a:1b:30:aa:c3:4a:26:6d:b8:b8:74:dc:37:97: bd:40:89:0b:91:db:5c:23:9c:10:fa:76:aa:c2:ee:68:75:c5: eb:14:a8:82:c4:c1:4b:90:af:ce:42:28:b8:22:d4:de:c6:8e: de:8f:7c:84:ad:56:8f:3a:82:7c:a2:7a:6d:1f:89:3d:ad:74: 23:f8:ad:fd:68:90:fe:f3:b8:d8:e6:24:93:b0:2f:9c:d2:e9: 49:9d:94:9d:d9:1c:64:e3:b6:ad:90:f0:24:f6:7d:dc:aa:28: b6:a8:d9:60:c0:35:09:68:d6:34:8d:c5:c8:65:3b:74:b4:7b: e1:3e:b1:e5:cd:d2:fd:54:42:fe:ff:4b:e1:99:33:c5:b1:a4: 79:2d:f4:c3:2a:90:27:dd:a9:33:89:b5:73:f8:10:c3:f6:5f: ee:d1:96:d3:23:0e:01:11:1b:af:3f:22:91:16:4f:31:3e:15: ac:7d:6e:2e:cb:03:72:c9:02:61:89:82:f1:8e:1c:4c:b1:c8: f9:d7:fb:59:67:d7:8b:46:ab:93:b4:7a:d9:ec:c8:ec:b9:c9: 3c:1c:ba:a6:bf:37:9b:1d:14:13:b3:9f:8b:96:c8:73:27:2c: b0:f3:82:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG7XdptRL30akjFXpJwg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDY4ZjU0YzBkNDk1ODFmNjliNTQzODNkNTU3M2ZmNzc1 NjIwZWMwHhcNMjUxMjE2MTcwMTAzWhcNMjUxMjE3MTcwMTAzWjAzMTEwLwYDVQQD EyhlZDljNjc2NzVlZjY1ZmRlNzQ5MTM5NmMzMDdmNDBmODE3NmFkMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9+WtIVCgemkSzuT2eiR8UfqFWM hiIxg4sEvysfdzPaXl14vX1TtAt52yMcPSrS0IWNTwrP7uyQ8KUvx+apQ5VauWjz 0BDGijyp7C1PRYFs91smqKvT/zKwScT1QpflFvZKxY74Zjj8Y2/Km5i7c6AM7qyB QV9FL/UI8UcQMPG9jc6wOx39QEsoSGEkgSkcf9bAC4+ED0vudSoyrVhtqflq4mE3 GDAT/dV1PHStWrsmzH2NycQHsemBoPTgVZ8E/xRfAAAgtuJH2j6pDM9CJY3PVWmY 8C8rkGXJ4epgQh61/qodLLup+vjnZcQCqhZOTMlex5fyzPg6B6fTf224WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2cZ2de9l/edJE5bDB/QPgXatHuMB8GA1UdIwQY MBaAFNVGj1TA1JWB9ptUOD1Vc/93ViDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQt MmM1YTdhYjQ5MzE5LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQtMmM1YTdhYjQ5MzE5 LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ8jzsUV 9giDgCiKJah7zqdHchYNaVobMKrDSiZtuLh03DeXvUCJC5HbXCOcEPp2qsLuaHXF 6xSogsTBS5CvzkIouCLU3saO3o98hK1WjzqCfKJ6bR+JPa10I/it/WiQ/vO42OYk k7AvnNLpSZ2UndkcZOO2rZDwJPZ93KootqjZYMA1CWjWNI3FyGU7dLR74T6x5c3S /VRC/v9L4ZkzxbGkeS30wyqQJ92pM4m1c/gQw/Zf7tGW0yMOAREbrz8ikRZPMT4V rH1uLssDcskCYYmC8Y4cTLHI+df7WWfXi0ark7R62ezI7LnJPBy6pr83mx0UE7Of i5bIcycssPOCfQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:36:00 2025 by rpki-client