This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json) Hash identifier: y3IRzMcS27GMsC/vyZ83nPd5bEjhfpgfsvoEpANetAA= Subject key identifier: BC:A8:1C:23:A2:4D:18:86:A9:E4:94:8C:41:6A:C5:F3:B9:DF:42:C3 Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Certificate serial: 019AF12E668ACD8E5648924A157272596848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft Manifest number: 137A Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: 2/vWeagho1Cj3yq24jiWKtFooG8yaxIcmi68JDa2nSU=) 2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:66:8a:cd:8e:56:48:92:4a:15:72:72:59:68:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=bca81c23a24d1886a9e4948c416ac5f3b9df42c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e8:68:37:2a:9c:e1:c3:0e:9d:f2:0f:34:50: 93:8a:b0:c9:32:06:2a:d8:d1:a7:46:5d:7d:6a:ed: c8:a6:89:4b:03:a1:43:f6:76:64:b1:ae:f5:54:28: 92:bc:8a:d7:3d:2a:ea:24:f2:c8:9a:ef:17:ef:f9: a3:eb:c6:68:83:e3:f0:91:7a:74:0c:56:b9:c1:4a: 80:d6:f4:c5:87:11:bf:5e:a1:70:0e:bf:79:25:85: 04:66:71:97:50:ce:e1:3e:dc:48:04:b3:e7:54:74: 59:3c:09:c8:ec:34:90:a0:c8:7f:ab:95:ee:da:6a: 14:ad:10:1d:de:4c:18:2e:5c:0b:64:ca:da:60:17: fa:0a:7a:16:36:1f:b2:93:43:ad:ae:92:1a:e0:24: c2:6b:2d:c3:84:cd:f9:8a:e4:b6:8a:e7:81:77:7a: 89:1f:46:7b:9f:dd:64:28:60:b0:f2:45:98:c9:5b: 7a:ab:35:9a:08:7d:d0:1c:c5:3d:2a:b1:35:31:0f: be:20:5b:5f:c6:2f:32:fe:d5:c5:7e:f3:38:9a:b8: 67:10:98:9e:b6:42:4f:10:37:cc:77:a4:78:92:53: 7f:9f:2c:69:69:d8:75:db:da:e5:0f:34:15:53:26: 96:c6:f9:e5:42:18:a5:2d:0d:e6:0a:7a:cf:8c:2f: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:1C:23:A2:4D:18:86:A9:E4:94:8C:41:6A:C5:F3:B9:DF:42:C3 X509v3 Authority Key Identifier: keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bc:69:32:04:10:86:6b:eb:ef:a5:f7:a8:26:1b:50:d9:1b: 1c:3f:f7:01:76:c3:f9:2d:4e:7c:28:31:04:1b:cb:56:b0:aa: b2:e9:1f:91:e6:cc:2c:28:3b:5b:fb:bb:f1:2d:09:98:6e:ae: e3:d5:60:5e:65:6c:c8:72:0a:2c:46:f0:5c:3c:a2:37:07:73: a1:41:1d:b2:59:70:2c:8e:08:6e:32:d6:08:ef:51:57:39:86: 03:3d:89:7f:63:f0:f8:2a:d4:e1:f2:ad:0b:53:e0:f5:4e:2c: 20:66:7e:c3:0d:61:92:28:62:12:e0:11:0d:41:68:ce:05:25: 3c:94:9b:29:50:bd:6c:34:9a:9d:63:2a:33:b6:3d:88:0d:cc: 05:e2:d6:4a:c5:62:ea:e7:f7:bc:8f:37:4e:f1:9d:63:15:cf: 45:e7:d0:48:71:cb:c6:90:ac:cf:66:eb:37:3d:65:d2:94:86: d3:ce:ab:4a:b8:e7:20:29:39:a0:f2:98:62:e9:b8:4d:23:61: 02:16:27:b6:c2:fd:84:f3:32:a1:85:0e:17:94:86:fc:d8:70: 11:46:04:76:b7:03:e5:41:a6:e5:97:94:ab:0e:dd:d2:fa:38: 82:6d:8d:53:e6:67:cb:e8:06:83:ab:f8:f0:73:4c:fa:c4:42: 87:91:f4:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmaKzY5WSJJKFXJyWWhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi MGM1YWMwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD EyhiY2E4MWMyM2EyNGQxODg2YTllNDk0OGM0MTZhYzVmM2I5ZGY0MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uhoNyqc4cMOnfIPNFCTirDJMgYq 2NGnRl19au3IpolLA6FD9nZksa71VCiSvIrXPSrqJPLImu8X7/mj68Zog+PwkXp0 DFa5wUqA1vTFhxG/XqFwDr95JYUEZnGXUM7hPtxIBLPnVHRZPAnI7DSQoMh/q5Xu 2moUrRAd3kwYLlwLZMraYBf6CnoWNh+yk0OtrpIa4CTCay3DhM35iuS2iueBd3qJ H0Z7n91kKGCw8kWYyVt6qzWaCH3QHMU9KrE1MQ++IFtfxi8y/tXFfvM4mrhnEJie tkJPEDfMd6R4klN/nyxpadh129rlDzQVUyaWxvnlQhilLQ3mCnrPjC+zEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyoHCOiTRiGqeSUjEFqxfO530LDMB8GA1UdIwQY MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It Mjg4M2Y4OGE4NmVjLzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbxpMgQQ hmvr76X3qCYbUNkbHD/3AXbD+S1OfCgxBBvLVrCqsukfkebMLCg7W/u78S0JmG6u 49VgXmVsyHIKLEbwXDyiNwdzoUEdsllwLI4IbjLWCO9RVzmGAz2Jf2Pw+CrU4fKt C1Pg9U4sIGZ+ww1hkihiEuARDUFozgUlPJSbKVC9bDSanWMqM7Y9iA3MBeLWSsVi 6uf3vI83TvGdYxXPRefQSHHLxpCsz2brNz1l0pSG086rSrjnICk5oPKYYum4TSNh AhYntsL9hPMyoYUOF5SG/NhwEUYEdrcD5UGm5ZeUqw7d0vo4gm2NU+Zny+gGg6v4 8HNM+sRCh5H0KA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:26 2025 by rpki-client