This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json) Hash identifier: PIre9mwxxQwHCI3IQbKtdQ6nC1YYC40CQ/C89gVgGzw= Subject key identifier: D9:56:35:DA:F9:27:81:A5:86:0C:FD:46:69:7E:AB:E9:15:70:93:13 Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b Certificate serial: 019AF4651599D6443938963B6A166A27FA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft Manifest number: 0EC5 Signing time: Sat 06 Dec 2025 16:00:56 +0000 Manifest this update: Sat 06 Dec 2025 16:00:56 +0000 Manifest next update: Sun 07 Dec 2025 16:00:56 +0000 Files and hashes: 1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: Rf9gaNUsyqfqG1dxSgEX6oOFO30AeOJl+ap+2Q6pOLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:15:99:d6:44:39:38:96:3b:6a:16:6a:27:fa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b Validity Not Before: Dec 6 16:00:56 2025 GMT Not After : Dec 7 16:00:56 2025 GMT Subject: CN=d95635daf92781a5860cfd46697eabe915709313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:5c:97:ea:b3:9a:e1:eb:19:d2:07:99:5a: 41:83:3f:a5:c5:74:3d:47:fb:b3:75:66:30:6d:f1: 77:64:b6:2d:2c:2b:4d:0c:83:46:f3:05:02:17:04: 85:62:8e:f6:bf:9a:db:da:96:d0:ed:11:27:c3:92: 9c:0b:57:a5:16:b5:8e:c6:9c:05:c6:cc:37:b1:fd: 6d:5c:6d:23:b9:d8:5d:f4:2f:fe:fe:1b:37:fe:63: f8:26:d1:d6:81:54:7d:91:1e:48:d9:f5:19:2e:b2: 1d:57:07:ec:df:37:48:d8:63:55:5a:39:3e:03:89: 80:50:34:2d:50:aa:03:35:f6:22:e2:11:83:6f:5e: 0b:a4:72:b8:e5:be:15:66:84:4a:c4:74:bf:c3:08: e9:63:93:e8:9e:bf:2d:3d:82:c5:d2:93:89:39:c3: ec:2d:ea:84:c0:00:4c:54:bc:0c:5b:cc:7d:36:8a: 61:c6:97:47:8a:f0:91:75:3a:79:20:2b:bc:23:de: 9a:71:21:9b:32:82:7b:f8:c4:38:65:66:f8:94:32: e0:7a:23:0d:8a:0d:eb:5f:e8:04:ac:87:2c:d2:bb: 74:ee:e3:e7:03:cc:e4:97:aa:fc:3d:04:6f:57:e0: 20:7f:0c:b0:09:c1:a6:94:c3:b3:7e:24:27:2e:50: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:56:35:DA:F9:27:81:A5:86:0C:FD:46:69:7E:AB:E9:15:70:93:13 X509v3 Authority Key Identifier: keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:bb:28:8d:54:01:3c:75:c3:13:d7:5d:b5:3c:64:bf:6a:d5: 35:9f:d8:0b:26:d1:22:d1:9c:28:3e:9e:55:cd:ec:38:96:0c: d0:af:26:c9:8f:be:ae:3e:43:9c:ab:58:cd:4b:75:23:0d:fe: d9:d6:18:24:0e:b0:e6:1a:50:79:ee:4a:a3:d4:bb:c7:88:a4: e5:36:ad:c1:0c:ee:a7:f0:54:11:5d:fa:8c:fc:99:c7:3f:24: b6:8f:64:67:81:b5:6c:37:ff:1b:f7:60:b2:ee:ff:c9:93:cd: 73:1b:b8:ae:56:c1:61:0e:89:72:60:e0:ce:0e:24:48:43:10: a0:c4:19:a0:8e:5c:18:21:14:1d:70:b2:9d:db:63:f2:7e:95: 89:5a:9d:be:56:43:7c:30:10:ff:bd:45:ce:b9:80:e1:b9:7e: f8:f1:40:27:62:a5:f1:c3:3d:22:83:97:88:94:ea:e4:77:97: 89:79:80:cc:e4:05:83:7e:bf:40:3d:e8:9e:79:e9:a7:27:df: 44:f1:92:88:0a:18:9d:35:a8:15:87:f6:8a:70:74:47:66:2a: 67:44:a7:b0:63:81:8d:53:c1:9f:a3:66:8f:d7:31:ae:64:8a: 85:52:be:9d:59:b2:d3:ee:ca:62:d6:b4:4c:dd:63:0b:63:76: e6:6e:f1:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRWZ1kQ5OJY7ahZqJ/osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTBhOWIxZDQ1NDk0OWYwYjE5MzAzNTI0ZDU1ZTYyNWRm MGJhNGIwHhcNMjUxMjA2MTYwMDU2WhcNMjUxMjA3MTYwMDU2WjAzMTEwLwYDVQQD EyhkOTU2MzVkYWY5Mjc4MWE1ODYwY2ZkNDY2OTdlYWJlOTE1NzA5MzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLdcl+qzmuHrGdIHmVpBgz+lxXQ9 R/uzdWYwbfF3ZLYtLCtNDING8wUCFwSFYo72v5rb2pbQ7REnw5KcC1elFrWOxpwF xsw3sf1tXG0judhd9C/+/hs3/mP4JtHWgVR9kR5I2fUZLrIdVwfs3zdI2GNVWjk+ A4mAUDQtUKoDNfYi4hGDb14LpHK45b4VZoRKxHS/wwjpY5Ponr8tPYLF0pOJOcPs LeqEwABMVLwMW8x9NophxpdHivCRdTp5ICu8I96acSGbMoJ7+MQ4ZWb4lDLgeiMN ig3rX+gErIcs0rt07uPnA8zkl6r8PQRvV+AgfwywCcGmlMOzfiQnLlDJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlWNdr5J4Glhgz9Rml+q+kVcJMTMB8GA1UdIwQY MBaAFKdQqbHUVJSfCxkwNSTVXmJd8LpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81YjQ4MzAtN2MwZi00M2QyLWJjMWYt NzQwMTYwMzFjMjM4LzEvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81YjQ4MzAtN2MwZi00M2QyLWJjMWYtNzQwMTYwMzFjMjM4 LzEvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbsojVQB PHXDE9ddtTxkv2rVNZ/YCybRItGcKD6eVc3sOJYM0K8myY++rj5DnKtYzUt1Iw3+ 2dYYJA6w5hpQee5Ko9S7x4ik5TatwQzup/BUEV36jPyZxz8kto9kZ4G1bDf/G/dg su7/yZPNcxu4rlbBYQ6JcmDgzg4kSEMQoMQZoI5cGCEUHXCyndtj8n6ViVqdvlZD fDAQ/71FzrmA4bl++PFAJ2Kl8cM9IoOXiJTq5HeXiXmAzOQFg36/QD3onnnppyff RPGSiAoYnTWoFYf2inB0R2YqZ0SnsGOBjVPBn6Nmj9cxrmSKhVK+nVmy0+7KYta0 TN1jC2N25m7x4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:08 2025 by rpki-client