This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json) Hash identifier: L2iR1JsvJi7Q0DxhbT+txYXpo0bYKDQrcfqsThR9qfo= Subject key identifier: C1:3F:82:C3:E6:1D:5A:CC:90:6F:5B:9A:1D:78:93:5C:4F:10:86:F1 Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72 Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472 Certificate serial: 019AF42E2EE9255A57D0832E91E6ADF0624D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 15:00:58 +0000 Manifest this update: Sat 06 Dec 2025 15:00:58 +0000 Manifest next update: Sun 07 Dec 2025 15:00:58 +0000 Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: VtLpEvxA50ryOhlDjaVdVBhZvxlHxI213Ph+zFwVvfc=) 2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:2e:e9:25:5a:57:d0:83:2e:91:e6:ad:f0:62:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d422367433765b541a37390a998997b737c46472 Validity Not Before: Dec 6 15:00:58 2025 GMT Not After : Dec 7 15:00:58 2025 GMT Subject: CN=c13f82c3e61d5acc906f5b9a1d78935c4f1086f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:30:8a:bb:63:53:48:1d:43:82:ea:95:46: 3f:b8:d1:41:a8:e4:fa:0a:32:b5:90:69:df:89:6e: 9e:91:6b:66:1e:88:d2:8d:76:43:be:d6:8f:1f:6b: dd:24:94:b1:72:25:00:82:0c:93:95:c6:63:cc:ac: 13:0a:e1:df:d5:29:b9:3e:3a:82:46:e9:4d:49:97: 8c:dc:cc:b2:d3:d0:cf:2b:f7:c1:c8:15:db:ca:17: 5b:40:96:0f:4c:b0:cd:b8:ca:bd:a2:64:a5:05:45: 34:33:66:b6:80:bc:27:0f:6c:1a:46:fa:88:4a:3a: a4:55:a8:a9:c4:ce:61:40:aa:4e:a9:a7:1a:8e:b8: 56:05:5f:7f:1e:fa:05:2f:be:49:10:5e:2b:d5:00: f9:44:d1:66:0f:81:23:53:4f:c2:38:f8:c0:a9:ed: c9:e5:67:ae:e6:7b:41:33:d8:7b:3e:62:34:7d:76: a0:89:18:fa:69:6a:45:c7:8d:ae:f0:16:ea:fe:47: f5:19:f6:be:86:20:7f:48:2b:d6:70:6d:c8:06:b5: 8f:a9:bb:5d:2f:56:94:4a:d8:c7:d2:6d:27:fc:0e: e7:9f:2f:64:85:62:43:33:47:43:56:be:4f:de:ba: 80:cb:ed:49:7c:35:54:c6:0f:e6:07:3d:6b:f7:ad: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:82:C3:E6:1D:5A:CC:90:6F:5B:9A:1D:78:93:5C:4F:10:86:F1 X509v3 Authority Key Identifier: keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:af:fc:c8:91:79:e0:77:b6:74:70:ce:f5:a2:1c:1a:5d:78: 15:c5:61:cc:5a:5e:d5:1f:bd:0c:f9:ce:33:bf:f8:a5:54:03: 02:5f:28:c2:a0:5e:7c:81:fe:74:c1:57:84:c1:35:fe:27:d0: 26:f0:8a:e0:89:e3:52:ee:f8:b7:01:0b:d0:3c:4f:70:51:de: 44:55:2c:a0:8b:90:2e:8e:fc:3b:bb:11:9a:8e:a7:6e:43:d0: f3:de:57:fa:7f:2c:a1:46:92:3f:16:b1:4b:2e:0c:21:34:1f: f9:b5:a5:28:a8:bc:21:51:c1:54:48:69:7b:a2:9e:76:91:4e: 09:85:b1:fb:4d:a2:d7:3d:2c:25:47:30:8a:9e:51:2d:03:9a: e0:5c:5c:23:3e:01:08:de:af:e1:3b:5e:30:33:0a:6c:e3:6a: 83:e3:69:3e:d1:6e:da:a9:28:a3:5c:7d:d5:ce:a1:d1:a2:24: e6:04:cf:bb:f3:32:7d:8b:aa:b2:74:76:c6:71:04:50:52:fb: 12:b0:12:f6:5a:66:e3:da:5e:e4:fb:95:58:be:e1:ab:45:06: d0:55:ec:ea:0a:76:f3:b3:c6:5b:46:b8:dc:c1:ef:b4:e4:a7: 8f:99:c4:d8:f4:30:79:94:60:9e:19:62:c7:2e:c6:ac:e7:3d: f9:47:0f:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Li7pJVpX0IMukeat8GJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjIzNjc0MzM3NjViNTQxYTM3MzkwYTk5ODk5N2I3Mzdj NDY0NzIwHhcNMjUxMjA2MTUwMDU4WhcNMjUxMjA3MTUwMDU4WjAzMTEwLwYDVQQD EyhjMTNmODJjM2U2MWQ1YWNjOTA2ZjViOWExZDc4OTM1YzRmMTA4NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNUwirtjU0gdQ4LqlUY/uNFBqOT6 CjK1kGnfiW6ekWtmHojSjXZDvtaPH2vdJJSxciUAggyTlcZjzKwTCuHf1Sm5PjqC RulNSZeM3Myy09DPK/fByBXbyhdbQJYPTLDNuMq9omSlBUU0M2a2gLwnD2waRvqI SjqkVaipxM5hQKpOqacajrhWBV9/HvoFL75JEF4r1QD5RNFmD4EjU0/COPjAqe3J 5Weu5ntBM9h7PmI0fXagiRj6aWpFx42u8Bbq/kf1Gfa+hiB/SCvWcG3IBrWPqbtd L1aUStjH0m0n/A7nny9khWJDM0dDVr5P3rqAy+1JfDVUxg/mBz1r9605zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME/gsPmHVrMkG9bmh14k1xPEIbxMB8GA1UdIwQY MBaAFNQiNnQzdltUGjc5CpmJl7c3xGRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NWJlMzItODIxZi00NTE0LWFhMzEt YmM3NTQ2NjA0N2M5LzEvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy80NWJlMzItODIxZi00NTE0LWFhMzEtYmM3NTQ2NjA0N2M5 LzEvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna/8yJF5 4He2dHDO9aIcGl14FcVhzFpe1R+9DPnOM7/4pVQDAl8owqBefIH+dMFXhME1/ifQ JvCK4InjUu74twEL0DxPcFHeRFUsoIuQLo78O7sRmo6nbkPQ895X+n8soUaSPxax Sy4MITQf+bWlKKi8IVHBVEhpe6KedpFOCYWx+02i1z0sJUcwip5RLQOa4FxcIz4B CN6v4TteMDMKbONqg+NpPtFu2qkoo1x91c6h0aIk5gTPu/MyfYuqsnR2xnEEUFL7 ErAS9lpm49pe5PuVWL7hq0UG0FXs6gp287PGW0a43MHvtOSnj5nE2PQweZRgnhli xy7GrOc9+UcP5A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:52 2025 by rpki-client