This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft File: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json) Hash identifier: E6tMPG3O/kmNHXmaZRv7KX2WC8rn3tiJNhMV117zWBk= Subject key identifier: D1:FB:0B:AC:47:4C:40:76:D3:D3:ED:F0:DC:CA:DF:2C:8E:68:56:80 Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc Certificate serial: 019AF2093307AB8A332D69923B0D36D050A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft Manifest number: 04D6 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: AWNc0NKCf9BXU+/OL12qYVYmgRz8xxNmnvOXv24sY/0=) 2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:33:07:ab:8a:33:2d:69:92:3b:0d:36:d0:50:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=d1fb0bac474c4076d3d3edf0dccadf2c8e685680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:a5:63:2f:67:15:35:54:2e:23:4d:74:ca: be:95:53:e4:0a:ee:53:d8:df:fa:7c:88:ae:1a:ef: d5:07:b1:0f:19:60:f5:d6:e5:09:15:c9:4e:7e:ee: be:0f:a5:a1:7e:2d:1e:86:34:c6:2c:af:66:70:0c: 39:24:e2:b2:06:66:0d:77:25:af:49:da:5c:2d:3c: 05:18:74:09:b9:a4:40:bd:5f:de:88:e7:60:44:b7: 6e:44:84:50:dd:67:9f:c1:c0:a6:c7:e9:a0:93:d4: fe:d2:5a:d4:38:38:9f:3f:fe:75:78:0f:51:eb:bf: 6e:8d:fc:ed:27:99:57:e9:4f:e2:15:e3:67:8d:ef: e7:f9:b2:73:db:f0:74:73:ef:da:da:bc:89:f3:1b: d3:2f:87:91:75:73:2c:91:05:ff:61:f0:cc:b6:a6: eb:0b:10:9e:59:cc:49:45:1c:f8:fa:e7:43:1e:f2: f1:cc:70:de:14:5a:c1:63:d8:92:a7:9a:12:35:04: d1:19:1b:7d:2c:d2:f1:e2:ac:28:5e:c2:bd:59:cc: 85:53:52:14:6a:b1:ab:aa:25:a0:d2:08:da:fd:6d: 51:b3:26:64:94:d9:f3:49:3a:3e:ca:cc:32:a2:37: d5:ff:0e:13:a5:2d:57:5c:a1:08:4b:d4:9e:b9:ea: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FB:0B:AC:47:4C:40:76:D3:D3:ED:F0:DC:CA:DF:2C:8E:68:56:80 X509v3 Authority Key Identifier: keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:28:60:00:0a:6a:37:54:8a:3b:a0:04:30:37:a1:86:85:1a: 02:21:61:ac:20:7e:f5:4e:e9:5d:74:67:fc:49:24:c3:7f:2c: a5:d4:eb:d7:45:13:2d:e3:6f:d9:2b:c5:4e:97:9d:5f:3a:97: c6:1b:58:a0:c5:5b:c6:d4:f0:95:48:6d:d3:83:75:cf:ee:10: db:99:57:06:fe:6c:ba:f5:a7:a2:31:eb:7b:bb:8e:f5:bb:e5: d1:bf:0a:83:94:15:ad:79:37:97:89:23:21:aa:72:f7:c1:c6: 9c:0a:e2:5c:67:84:c6:aa:03:a7:15:5e:8d:f9:66:3e:1b:ed: 89:e8:aa:45:08:22:fa:3a:93:43:41:2e:1d:31:cb:d7:0f:9c: 69:82:ef:39:6b:0e:62:62:6b:5a:fa:e0:c0:cb:42:a1:cd:14: 0c:3c:12:30:93:54:14:07:ae:af:80:d1:3d:e6:80:35:33:50: e2:5a:e9:52:8a:1b:8a:f1:0b:7a:db:f4:63:67:d6:29:cb:c1: c4:d9:63:e2:df:fe:0f:f4:76:ae:bb:76:95:0d:51:29:24:14: 17:84:61:50:ce:ef:d7:e2:b1:b6:6f:d4:e8:32:d1:a5:54:c0: 9e:08:14:91:c7:f8:9e:3a:60:0b:5c:62:02:f6:be:79:83:04: 67:12:39:be -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCTMHq4ozLWmSOw020FCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNmE1YzdlZWJiOGQ1ODhmMmZmMjJjNzc1YzFjMWExNDRj MjJkYmMwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EyhkMWZiMGJhYzQ3NGM0MDc2ZDNkM2VkZjBkY2NhZGYyYzhlNjg1NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNClYy9nFTVULiNNdMq+lVPkCu5T 2N/6fIiuGu/VB7EPGWD11uUJFclOfu6+D6Whfi0ehjTGLK9mcAw5JOKyBmYNdyWv SdpcLTwFGHQJuaRAvV/eiOdgRLduRIRQ3WefwcCmx+mgk9T+0lrUODifP/51eA9R 679ujfztJ5lX6U/iFeNnje/n+bJz2/B0c+/a2ryJ8xvTL4eRdXMskQX/YfDMtqbr CxCeWcxJRRz4+udDHvLxzHDeFFrBY9iSp5oSNQTRGRt9LNLx4qwoXsK9WcyFU1IU arGrqiWg0gja/W1RsyZklNnzSTo+yswyojfV/w4TpS1XXKEIS9SeueqkYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNH7C6xHTEB209Pt8NzK3yyOaFaAMB8GA1UdIwQY MBaAFPtqXH7ruNWI8v8ix3XBwaFEwi28MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0ycGNmdXU0MVlqeV95TEhkY0hCb1VUQ0xidy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhl LTk0NGNkOTJjMGMwZi8xLzEtMnBjZnV1NDFZanlfeUxIZGNIQm9VVENMYncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q1LzUzNmYwYi05Zjc5LTRkNTYtYWY4ZS05NDRjZDkyYzBj MGYvMS8xLTJwY2Z1dTQxWWp5X3lMSGRjSEJvVVRDTGJ3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARShg AApqN1SKO6AEMDehhoUaAiFhrCB+9U7pXXRn/Ekkw38spdTr10UTLeNv2SvFTped XzqXxhtYoMVbxtTwlUht04N1z+4Q25lXBv5suvWnojHre7uO9bvl0b8Kg5QVrXk3 l4kjIapy98HGnAriXGeExqoDpxVejflmPhvtieiqRQgi+jqTQ0EuHTHL1w+caYLv OWsOYmJrWvrgwMtCoc0UDDwSMJNUFAeur4DRPeaANTNQ4lrpUoobivELetv0Y2fW KcvBxNlj4t/+D/R2rrt2lQ1RKSQUF4RhUM7v1+Kxtm/U6DLRpVTAnggUkcf4njpg C1xiAva+eYMEZxI5vg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:32 2025 by rpki-client