This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json) Hash identifier: DfI0x877KG0mt5RW5PZA1TplgoOzHZzY2UBINhzeiLs= Subject key identifier: 5D:2B:50:33:61:A0:4C:34:C9:FC:50:78:E6:14:16:C1:A1:29:46:C2 Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Certificate serial: 019AF68AB14852F4E6D3587CCFB5A92B24B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft Manifest number: 0F5E Signing time: Sun 07 Dec 2025 02:01:15 +0000 Manifest this update: Sun 07 Dec 2025 02:01:15 +0000 Manifest next update: Mon 08 Dec 2025 02:01:15 +0000 Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: +UCavLexjfwsk+TJNXYvaimypZ5Ohg7fFUH5oyIh1iw=) 2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:b1:48:52:f4:e6:d3:58:7c:cf:b5:a9:2b:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Validity Not Before: Dec 7 02:01:15 2025 GMT Not After : Dec 8 02:01:15 2025 GMT Subject: CN=5d2b503361a04c34c9fc5078e61416c1a12946c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:32:5d:cf:82:4b:1c:72:f5:84:33:ce:a3:68: a6:75:59:72:4d:ac:15:39:fb:da:09:f2:ae:36:09: 8c:ed:6d:b4:8b:aa:25:23:cc:95:7e:a6:d5:e9:ae: a1:6f:4a:08:75:cf:49:a2:95:8f:cf:75:86:56:3c: 6a:96:09:63:d5:61:0d:d8:58:75:bc:d5:e0:f4:29: 80:22:ad:d4:fd:05:61:0e:17:77:90:d3:c8:ac:2a: 3a:f2:76:a2:21:9b:b5:ae:50:61:33:6b:fe:c5:f9: 29:03:b0:e3:eb:f4:b9:9e:d2:5e:4d:8c:fb:d3:0e: ea:3c:ce:19:95:78:89:06:21:92:8b:f6:37:28:2d: d5:37:38:23:07:60:f5:5c:41:59:02:29:fe:55:8c: bf:e1:93:88:f6:42:8f:76:ab:86:21:93:b5:aa:4c: 3b:bb:64:c4:d3:97:2f:bf:55:80:22:50:12:2c:68: a0:47:05:b9:66:13:c5:5f:27:f2:bd:24:9e:e9:ac: 81:67:00:c0:3f:6b:4b:4f:5b:4c:31:ae:9e:5e:9b: 20:ce:83:22:cf:45:67:a2:2d:94:4e:90:ca:16:13: 61:28:66:76:93:c4:c1:d5:97:4b:47:e8:68:7b:59: 96:c6:21:02:d9:2d:d2:99:c5:63:3c:1b:36:b7:0d: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2B:50:33:61:A0:4C:34:C9:FC:50:78:E6:14:16:C1:A1:29:46:C2 X509v3 Authority Key Identifier: keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a8:38:a7:2b:f7:c6:0b:84:1d:3b:9a:7d:cb:65:89:b1:3e: 3a:06:d3:1a:82:cc:64:1b:94:8c:bb:67:e6:c1:70:a8:57:3a: 5f:36:55:d9:b0:72:70:bb:72:9d:5a:9b:90:b4:f2:de:ac:57: dd:73:e0:de:5f:d6:45:85:5c:08:36:91:80:43:93:e5:48:b4: d7:37:a4:4e:91:73:c3:3d:54:5a:af:d2:50:38:be:f9:c7:e7: 50:36:05:a2:7a:8c:f4:9c:c4:aa:3a:02:ec:1b:0f:5d:ea:fb: 10:c0:2b:76:fe:15:15:bf:47:e9:41:a9:49:b8:bf:04:c1:8a: f9:82:4a:5f:0f:7d:56:6a:bd:1b:84:f2:ac:ca:7d:35:54:3d: 34:77:23:dc:13:74:36:0d:87:39:2d:c2:84:24:b4:27:7c:3c: 43:65:42:4c:83:3c:ec:47:10:93:1a:8c:4d:81:c3:6c:69:1b: b3:21:b4:e8:18:13:8d:b2:a4:43:09:0b:16:cf:61:4d:5a:5e: 3f:ad:7d:e4:82:5a:d6:33:6f:26:52:7b:e0:96:fe:46:d8:4f: e4:d7:e1:3f:ee:8c:fd:46:1b:84:ad:72:f4:1c:b7:2a:82:ba: 82:dd:31:5e:73:be:dd:54:c7:15:78:7f:9d:d2:eb:db:47:42: 1d:15:98:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2irFIUvTm01h8z7WpKyS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm OWQ3NTEwHhcNMjUxMjA3MDIwMTE1WhcNMjUxMjA4MDIwMTE1WjAzMTEwLwYDVQQD Eyg1ZDJiNTAzMzYxYTA0YzM0YzlmYzUwNzhlNjE0MTZjMWExMjk0NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jJdz4JLHHL1hDPOo2imdVlyTawV OfvaCfKuNgmM7W20i6olI8yVfqbV6a6hb0oIdc9JopWPz3WGVjxqlglj1WEN2Fh1 vNXg9CmAIq3U/QVhDhd3kNPIrCo68naiIZu1rlBhM2v+xfkpA7Dj6/S5ntJeTYz7 0w7qPM4ZlXiJBiGSi/Y3KC3VNzgjB2D1XEFZAin+VYy/4ZOI9kKPdquGIZO1qkw7 u2TE05cvv1WAIlASLGigRwW5ZhPFXyfyvSSe6ayBZwDAP2tLT1tMMa6eXpsgzoMi z0Vnoi2UTpDKFhNhKGZ2k8TB1ZdLR+hoe1mWxiEC2S3SmcVjPBs2tw0O7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0rUDNhoEw0yfxQeOYUFsGhKUbCMB8GA1UdIwQY MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt Y2Q2NTU1ZmNkODJlLzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKg4pyv3 xguEHTuafctlibE+OgbTGoLMZBuUjLtn5sFwqFc6XzZV2bBycLtynVqbkLTy3qxX 3XPg3l/WRYVcCDaRgEOT5Ui01zekTpFzwz1UWq/SUDi++cfnUDYFonqM9JzEqjoC 7BsPXer7EMArdv4VFb9H6UGpSbi/BMGK+YJKXw99Vmq9G4TyrMp9NVQ9NHcj3BN0 Ng2HOS3ChCS0J3w8Q2VCTIM87EcQkxqMTYHDbGkbsyG06BgTjbKkQwkLFs9hTVpe P6195IJa1jNvJlJ74Jb+RthP5NfhP+6M/UYbhK1y9By3KoK6gt0xXnO+3VTHFXh/ ndLr20dCHRWYGw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:51:04 2025 by rpki-client