This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json) Hash identifier: 54PsQC7ZRqNXURSCgeO7JL+Eq0OPqOegj4MLlw9b01s= Subject key identifier: 69:00:A7:2C:65:68:89:79:29:3E:55:14:40:26:5A:5E:23:12:B7:31 Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Certificate serial: 019AF23FF1F2700F95827B39F2946CD68014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft Manifest number: 0EF7 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: sV9SYByggRd/dpa0o6O0o9MfXlh1cJtmGB8ZjjyowBo=) 2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:f2:70:0f:95:82:7b:39:f2:94:6c:d6:80:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=6900a72c65688979293e551440265a5e2312b731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:94:80:cc:93:29:a0:a0:f8:07:71:a4:36: dd:a2:51:b6:49:e2:40:7f:fd:ae:dd:bc:a8:9c:47: 78:1f:cb:58:87:bf:40:0a:f1:f3:74:7a:05:d8:20: 74:21:31:fc:22:0f:66:b9:39:c8:ef:93:04:7a:51: d3:0c:73:c0:a2:38:3e:22:ba:1f:d2:50:99:b9:ee: 0c:6f:0a:d9:ff:db:c2:2d:28:c2:67:f3:e2:de:0d: 0d:67:b3:44:cc:f9:4f:40:e7:2e:2b:f0:11:ed:16: 30:18:fc:95:2d:52:69:fe:0d:45:3b:f8:f5:ec:21: d6:9f:f2:05:51:69:eb:71:04:30:8e:a0:83:73:f0: 54:33:57:4c:9b:36:39:21:7c:2b:8a:c0:94:cb:c4: d9:42:aa:27:11:56:f3:d5:54:69:43:8a:16:56:ff: 71:18:76:57:ce:b0:2d:a5:b0:56:0b:d5:1e:03:99: 57:4c:16:77:24:1b:d1:b6:c4:74:5e:aa:cd:14:48: bf:5e:bc:94:74:91:4d:9f:3f:d7:f3:e1:ec:6c:43: 66:b5:00:e2:61:44:05:2f:da:3e:26:c6:ae:fe:f4: 10:3a:b9:20:6d:45:72:c5:5d:68:74:60:2a:cb:67: 9d:79:77:b6:98:9f:0a:e9:64:09:87:4c:f4:42:5d: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:A7:2C:65:68:89:79:29:3E:55:14:40:26:5A:5E:23:12:B7:31 X509v3 Authority Key Identifier: keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6d:ff:5c:53:b4:1d:b3:2f:71:52:bc:e5:d0:08:c3:4b:aa: 41:49:c2:a5:67:ad:84:91:cc:cb:ce:cd:b7:27:5e:ae:de:10: 72:48:5e:bc:fa:d3:1c:29:0f:32:b2:89:46:90:36:f9:8c:66: 21:fd:00:98:2c:cf:89:85:bc:7f:8e:01:b2:19:84:df:c3:a4: fd:db:90:86:bb:9e:99:c6:69:06:33:37:1d:6d:be:55:34:99: cf:4b:d4:9b:2b:84:e3:51:ab:ae:ad:9c:47:43:b8:00:17:57: 92:c9:be:7b:44:1e:46:6a:81:6e:eb:19:28:87:b8:fc:dc:da: b5:86:7f:5b:75:a1:f0:48:79:0d:18:4b:49:3b:81:0a:f4:dd: bf:03:ca:7d:02:fa:94:3b:80:8c:63:7b:44:4a:b9:c5:0b:ca: f9:b1:9a:74:80:f7:d7:7b:9e:79:85:16:2c:44:7d:a0:e9:d9: 44:9e:22:45:e9:f9:5d:7e:7d:23:4c:ae:a9:d2:64:54:d1:57: a7:35:ca:8e:ef:d5:9f:d7:fc:cd:cc:57:43:0d:04:e6:6e:2d: 25:61:30:01:b2:6e:e2:d5:2f:48:f4:b5:62:30:74:49:a8:f7: d9:9f:33:13:34:d1:50:87:af:24:4a:92:e7:50:bb:78:44:cf: 11:e9:26:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/HycA+Vgns58pRs1oAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi NjkyMzgwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD Eyg2OTAwYTcyYzY1Njg4OTc5MjkzZTU1MTQ0MDI2NWE1ZTIzMTJiNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a2UgMyTKaCg+AdxpDbdolG2SeJA f/2u3byonEd4H8tYh79ACvHzdHoF2CB0ITH8Ig9muTnI75MEelHTDHPAojg+Irof 0lCZue4MbwrZ/9vCLSjCZ/Pi3g0NZ7NEzPlPQOcuK/AR7RYwGPyVLVJp/g1FO/j1 7CHWn/IFUWnrcQQwjqCDc/BUM1dMmzY5IXwrisCUy8TZQqonEVbz1VRpQ4oWVv9x GHZXzrAtpbBWC9UeA5lXTBZ3JBvRtsR0XqrNFEi/XryUdJFNnz/X8+HsbENmtQDi YUQFL9o+Jsau/vQQOrkgbUVyxV1odGAqy2edeXe2mJ8K6WQJh0z0Ql1iAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkApyxlaIl5KT5VFEAmWl4jErcxMB8GA1UdIwQY MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcW3/XFO0 HbMvcVK85dAIw0uqQUnCpWethJHMy87Ntydert4QckhevPrTHCkPMrKJRpA2+Yxm If0AmCzPiYW8f44BshmE38Ok/duQhruemcZpBjM3HW2+VTSZz0vUmyuE41Grrq2c R0O4ABdXksm+e0QeRmqBbusZKIe4/NzatYZ/W3Wh8Eh5DRhLSTuBCvTdvwPKfQL6 lDuAjGN7REq5xQvK+bGadID313ueeYUWLER9oOnZRJ4iRen5XX59I0yuqdJkVNFX pzXKju/Vn9f8zcxXQw0E5m4tJWEwAbJu4tUvSPS1YjB0Saj32Z8zEzTRUIevJEqS 51C7eETPEekmog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:41 2025 by rpki-client