This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json) Hash identifier: Pe+4oYPMT2qsTZSUKTBiRO/CzBX+6Isz/Zp9952ODiM= Subject key identifier: 27:16:00:E6:4F:2D:A0:12:1F:30:EE:BE:A1:01:8A:18:FD:BE:CD:6F Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0 Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0 Certificate serial: 019AF27732AF926515A326C3A9126FDA7085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft Manifest number: 15D3 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=) 2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: sMyVoAfriYOSh8G4Ch1BRNYgGTn6aqgo/n9QumAu0Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:32:af:92:65:15:a3:26:c3:a9:12:6f:da:70:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0 Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=271600e64f2da0121f30eebea1018a18fdbecd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:71:83:c1:91:1d:83:97:f7:95:66:3b:39: 0d:99:e1:df:f4:9f:b5:88:8c:56:35:94:fc:79:fb: 45:6b:08:79:a2:10:43:b5:2c:1e:3f:b0:bd:b4:17: 64:cc:75:99:07:ec:bf:e7:6e:ac:23:dc:ce:f0:a8: 7f:a5:4a:d9:64:5e:49:8e:58:20:10:0b:cb:a5:2a: fd:ca:85:76:0f:db:39:8c:f8:01:79:34:78:70:78: 0e:f1:f3:2b:92:7f:4b:b7:df:82:31:bc:c2:94:cd: 7c:77:84:7a:34:8e:94:09:96:4f:c9:e1:1c:70:fd: 37:b9:1d:6a:ea:20:a8:c5:00:4d:19:6b:b2:90:53: 20:5c:6c:31:59:5e:51:46:fa:8b:67:48:c3:91:db: 11:c6:66:f0:d5:9d:a5:eb:cf:18:72:39:51:40:2d: 75:2b:bb:9b:83:fc:d8:b1:c1:65:55:4d:44:c7:74: 9d:26:1f:d5:14:d6:36:14:0a:1f:f0:9d:95:a6:a2: 76:0f:b4:0c:6d:07:58:ee:c7:c3:bc:7f:a8:45:d7: d7:ae:aa:3e:e9:8e:31:a1:62:c6:20:86:76:df:3c: d0:57:2f:d2:70:56:2d:79:8c:9e:e6:5d:21:b2:f7: ac:1c:5b:bc:84:44:b3:4c:95:7a:fa:30:69:60:f9: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:16:00:E6:4F:2D:A0:12:1F:30:EE:BE:A1:01:8A:18:FD:BE:CD:6F X509v3 Authority Key Identifier: keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:70:84:cd:c8:f0:7e:d4:ea:59:56:1a:19:dc:50:19:89:2a: ab:be:41:3f:ad:76:40:8d:4d:f2:cd:2e:39:43:34:33:99:b7: 97:01:ed:2a:49:0f:a1:51:31:2b:f4:50:a4:70:bb:e6:70:23: 01:5d:03:34:ee:83:10:97:f8:25:ed:9d:e6:0b:70:68:12:33: 03:2f:75:e8:63:6c:89:43:d9:38:3d:7c:ec:57:4b:ae:7e:ca: b1:18:a9:ba:9f:f0:2e:a0:48:ea:1f:8a:19:1d:32:b7:6d:4c: 27:f9:5d:a1:a2:c9:f0:fb:a7:65:39:51:76:66:63:2b:6b:1f: c9:4b:f6:e8:e4:35:27:c4:19:1f:3b:4a:a2:f1:6f:1a:b7:5e: fa:24:88:b6:db:c5:1d:a6:df:79:1e:fd:5f:44:51:44:ee:0c: 18:f0:18:58:de:2a:11:01:1a:27:36:5b:40:48:0f:35:32:52: 02:97:1d:f1:7e:03:e6:da:96:2c:90:1c:4c:3d:29:85:f3:a8: e2:87:13:e0:f2:75:a7:1e:1e:b7:69:f3:b5:1c:6d:69:87:38: a7:02:c2:70:00:a6:13:aa:9a:59:ed:80:54:ed:c6:78:2d:ab: 99:fe:12:39:98:7b:9a:b8:82:6e:d1:cf:33:dd:fd:59:5b:d2: 31:ef:c7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzKvkmUVoybDqRJv2nCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWU2Nzk5YmM1Y2EyODVhMzc2MzcyZjBiNjM0NWRmZmM4 N2I4YzAwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EygyNzE2MDBlNjRmMmRhMDEyMWYzMGVlYmVhMTAxOGExOGZkYmVjZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxxg8GRHYOX95VmOzkNmeHf9J+1 iIxWNZT8eftFawh5ohBDtSweP7C9tBdkzHWZB+y/526sI9zO8Kh/pUrZZF5Jjlgg EAvLpSr9yoV2D9s5jPgBeTR4cHgO8fMrkn9Lt9+CMbzClM18d4R6NI6UCZZPyeEc cP03uR1q6iCoxQBNGWuykFMgXGwxWV5RRvqLZ0jDkdsRxmbw1Z2l688YcjlRQC11 K7ubg/zYscFlVU1Ex3SdJh/VFNY2FAof8J2VpqJ2D7QMbQdY7sfDvH+oRdfXrqo+ 6Y4xoWLGIIZ23zzQVy/ScFYteYye5l0hsvesHFu8hESzTJV6+jBpYPnhAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcWAOZPLaASHzDuvqEBihj9vs1vMB8GA1UdIwQY MBaAFNUeZ5m8XKKFo3Y3LwtjRd/8h7jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEt OWNhMjUxYzA1NDhiLzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEtOWNhMjUxYzA1NDhi LzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA43CEzcjw ftTqWVYaGdxQGYkqq75BP612QI1N8s0uOUM0M5m3lwHtKkkPoVExK/RQpHC75nAj AV0DNO6DEJf4Je2d5gtwaBIzAy916GNsiUPZOD187FdLrn7KsRipup/wLqBI6h+K GR0yt21MJ/ldoaLJ8PunZTlRdmZjK2sfyUv26OQ1J8QZHztKovFvGrde+iSIttvF HabfeR79X0RRRO4MGPAYWN4qEQEaJzZbQEgPNTJSApcd8X4D5tqWLJAcTD0phfOo 4ocT4PJ1px4et2nztRxtaYc4pwLCcACmE6qaWe2AVO3GeC2rmf4SOZh7mriCbtHP M939WVvSMe/HHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:32 2025 by rpki-client