This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json) Hash identifier: Zc8WLEeXkbN7WWCQPgXQykEriVVz+pINW4eONM1hZto= Subject key identifier: 1E:4A:62:EC:0B:F3:72:94:7E:E4:24:A2:D6:6E:D0:BB:72:D4:00:A8 Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18 Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918 Certificate serial: 019AF1643E9CA9C66D01121E5B8715A9A295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: Ms5LkEPSFcpnwPtG0qMzXLF4JMXLzAUlpbF2TGFhdNg=) 2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3e:9c:a9:c6:6d:01:12:1e:5b:87:15:a9:a2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918 Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=1e4a62ec0bf372947ee424a2d66ed0bb72d400a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:33:93:07:38:b0:37:c5:e0:c9:03:d6:28: 54:4d:a2:0a:e9:a4:54:ff:77:fa:16:2a:7d:e9:55: 97:f9:bc:8e:08:59:c9:c5:9a:b9:b9:ff:12:cf:f9: 75:6f:b6:bf:64:5b:89:69:28:f4:7b:95:3b:3d:02: 31:49:94:3e:62:1b:b5:5f:57:8c:91:5f:ed:11:d7: 99:a8:a9:06:55:e3:17:a9:65:77:13:10:b6:86:23: 02:ee:78:a5:b5:64:06:77:86:84:72:cb:ac:ea:06: f5:02:a2:fa:bf:44:e6:20:91:92:43:41:e7:f0:a2: fe:ca:75:22:90:c5:84:1c:10:e9:54:f8:88:37:0f: 49:38:1f:43:c5:c0:e0:94:61:0e:bf:c1:33:0c:a0: 85:99:a9:d1:83:b8:1b:74:05:87:22:ac:f9:7d:4b: 53:2c:14:3f:f5:02:1a:77:9c:a1:32:bb:11:be:af: 7b:bc:92:f7:0e:89:c3:92:32:d6:9a:87:90:ff:1a: 60:69:98:38:8f:64:0d:ef:f4:64:8f:e2:bd:5e:f3: 6c:a1:69:ae:da:93:fd:e6:3e:fb:2f:97:db:09:83: 56:44:bb:36:3f:30:ca:98:82:d7:c3:74:98:66:ef: da:b2:fd:76:69:10:67:1b:4c:f2:1d:36:3b:ed:a5: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:62:EC:0B:F3:72:94:7E:E4:24:A2:D6:6E:D0:BB:72:D4:00:A8 X509v3 Authority Key Identifier: keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7c:88:35:ec:5e:11:71:5f:6f:dd:47:f2:7c:64:88:f1:82: cd:3b:c6:f9:be:56:b4:f2:55:8c:5d:a0:3f:c8:fe:f8:08:74: cb:e1:57:27:78:cf:e9:2a:d6:85:5f:96:d6:96:20:e9:26:9b: ef:fe:f1:78:38:14:32:98:95:20:47:2e:55:c4:a7:aa:89:0a: 2b:99:2a:6c:e8:99:14:24:e0:3c:e4:68:13:da:f6:5f:48:6b: 56:23:97:de:9f:9a:de:8f:55:b7:97:73:6e:c0:2a:83:a2:24: 97:01:45:34:92:80:5e:c9:a0:a2:13:f8:50:af:2b:67:df:8b: 3c:26:c5:63:74:6d:0b:c8:47:d8:b7:0a:50:08:b4:8e:ea:08: 07:ae:44:3f:18:8e:16:7c:7d:be:92:d0:5b:13:5d:a3:9b:07: b5:2d:79:b5:45:91:e6:45:e9:a6:e1:55:b6:a8:b0:81:4a:c8: 4c:f6:61:95:7e:33:b2:39:fa:b6:e9:d0:da:a8:a7:73:4f:e7: f8:fe:90:f3:a2:13:03:7e:a4:ad:89:d5:ce:cb:7f:3d:79:e6: 49:50:9c:1c:54:22:eb:2a:b7:a8:af:eb:df:16:a3:1d:38:e2: 11:8f:91:74:f8:68:1c:f5:4d:f6:d7:1d:59:7b:68:31:62:1d: 41:e0:1f:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD6cqcZtARIeW4cVqaKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODViNmU5ZDg5ZmIwMTAzNjk5NzFlZDg4ODU3MjA1OTg1 ZDQ5MTgwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD EygxZTRhNjJlYzBiZjM3Mjk0N2VlNDI0YTJkNjZlZDBiYjcyZDQwMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DQzkwc4sDfF4MkD1ihUTaIK6aRU /3f6Fip96VWX+byOCFnJxZq5uf8Sz/l1b7a/ZFuJaSj0e5U7PQIxSZQ+Yhu1X1eM kV/tEdeZqKkGVeMXqWV3ExC2hiMC7niltWQGd4aEcsus6gb1AqL6v0TmIJGSQ0Hn 8KL+ynUikMWEHBDpVPiINw9JOB9DxcDglGEOv8EzDKCFmanRg7gbdAWHIqz5fUtT LBQ/9QIad5yhMrsRvq97vJL3DonDkjLWmoeQ/xpgaZg4j2QN7/Rkj+K9XvNsoWmu 2pP95j77L5fbCYNWRLs2PzDKmILXw3SYZu/asv12aRBnG0zyHTY77aV5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5KYuwL83KUfuQkotZu0Lty1ACoMB8GA1UdIwQY MBaAFNSFtunYn7AQNplx7YiFcgWYXUkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMt N2FjNjgwZWQ1ZGQ3LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMtN2FjNjgwZWQ1ZGQ3 LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnyINexe EXFfb91H8nxkiPGCzTvG+b5WtPJVjF2gP8j++Ah0y+FXJ3jP6SrWhV+W1pYg6Sab 7/7xeDgUMpiVIEcuVcSnqokKK5kqbOiZFCTgPORoE9r2X0hrViOX3p+a3o9Vt5dz bsAqg6IklwFFNJKAXsmgohP4UK8rZ9+LPCbFY3RtC8hH2LcKUAi0juoIB65EPxiO Fnx9vpLQWxNdo5sHtS15tUWR5kXppuFVtqiwgUrITPZhlX4zsjn6tunQ2qinc0/n +P6Q86ITA36krYnVzst/PXnmSVCcHFQi6yq3qK/r3xajHTjiEY+RdPhoHPVN9tcd WXtoMWIdQeAfJw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:01 2025 by rpki-client