This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json) Hash identifier: TdU4IUAPA/rsgaFg9uxAwm/I8eyOd1VponVuw+HFbBc= Subject key identifier: EC:76:0F:0A:BC:19:72:02:8D:06:A9:35:02:74:A5:52:A0:88:97:44 Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda Certificate serial: 019AF2AD7FA75AAC2DDC8656017669DB3C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft Manifest number: 1596 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=) 2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: Lv20vJtILfwLPM3c/Wq6FccqsNjwonUnk3hUJvKrgpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:a7:5a:ac:2d:dc:86:56:01:76:69:db:3c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=ec760f0abc1972028d06a9350274a552a0889744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:ab:d1:ec:7f:29:fd:70:f1:b8:8e:c1:bb: 0b:72:bf:c4:59:4f:0a:47:6f:5b:37:c3:6d:3d:c8: 4f:4f:58:8a:ff:c3:8f:46:88:5c:44:55:9d:36:9e: 99:27:0e:4e:15:5c:7f:0b:47:2e:06:2b:2a:4f:1a: d9:10:88:6f:fe:4c:51:e6:c4:86:75:29:43:72:6a: 67:92:f0:43:85:79:b9:f3:30:57:66:3e:5b:d5:b3: 0f:14:c0:33:9c:a7:d2:fa:f3:d5:82:55:63:09:a3: ea:71:54:66:92:29:4c:30:4d:20:d9:cc:77:86:6b: 72:8c:2a:45:45:de:ed:03:32:35:0b:a1:b9:b0:be: 67:de:8e:ef:2c:cf:93:15:32:53:16:18:1f:97:ac: d9:1c:6f:b9:51:11:a6:24:ba:2c:4d:56:21:3c:b1: 0d:d1:a3:55:68:6c:e3:1e:6f:da:2f:aa:ac:7c:e3: 19:70:b5:f3:3b:81:36:d6:d9:3c:f0:a5:b7:ee:48: cc:39:33:3b:fd:1e:d8:0c:73:09:4f:4c:18:79:70: bb:22:d7:11:6d:67:a8:8f:a8:aa:72:03:0a:3c:d9: c0:cb:51:c8:21:ff:62:b0:ed:3f:73:31:5d:94:d4: b8:01:93:2f:30:6d:ae:48:1b:f6:f0:66:d8:ba:b1: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:76:0F:0A:BC:19:72:02:8D:06:A9:35:02:74:A5:52:A0:88:97:44 X509v3 Authority Key Identifier: keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:29:5a:de:7d:d6:1b:01:49:59:0f:74:94:41:20:50:b2:a2: 76:bb:5a:ca:bf:58:c2:f5:3a:c9:19:c0:7e:db:d5:5d:1f:f6: f5:7e:20:db:32:55:1f:b5:de:ba:24:01:6f:35:6a:ce:33:58: a0:81:42:b9:50:9a:be:d0:7b:27:f9:55:b9:95:d5:41:e2:f8: 15:d4:26:73:32:a1:05:08:12:4e:68:de:07:7c:19:82:5b:20: 03:f8:88:55:78:84:aa:3a:23:4e:6b:1c:6d:0b:37:8d:77:53: b1:5c:b7:cf:3c:69:45:ff:63:73:74:45:1f:90:1b:87:a6:7b: ab:81:c9:77:cd:66:f9:99:0f:5a:ca:e8:00:2a:96:ba:68:6c: a7:c4:64:20:37:bd:40:e4:e6:96:b8:37:e9:71:5e:a3:d7:0e: 06:81:34:ac:09:1a:6d:3a:b5:e0:b2:b1:76:13:68:7e:51:4b: 1c:bd:4f:b3:ed:db:f8:ca:db:b4:1a:57:37:cd:9a:9c:53:4a: 34:5e:ff:d9:52:55:67:10:f4:b0:04:24:6f:20:14:28:a5:2c: 06:aa:eb:17:56:f4:d4:e1:e9:ff:ea:8f:93:d1:c9:32:d0:a4: 98:ca:91:fe:2e:ed:bb:49:3e:e0:35:8c:39:75:b1:71:75:74: d1:35:f9:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX+nWqwt3IZWAXZp2zx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTlkMzUzMzFjOWVmZTMzYzk1MzA3NjkzMjVhZThlZjU1 MGZmZGEwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EyhlYzc2MGYwYWJjMTk3MjAyOGQwNmE5MzUwMjc0YTU1MmEwODg5NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwter0ex/Kf1w8biOwbsLcr/EWU8K R29bN8NtPchPT1iK/8OPRohcRFWdNp6ZJw5OFVx/C0cuBisqTxrZEIhv/kxR5sSG dSlDcmpnkvBDhXm58zBXZj5b1bMPFMAznKfS+vPVglVjCaPqcVRmkilMME0g2cx3 hmtyjCpFRd7tAzI1C6G5sL5n3o7vLM+TFTJTFhgfl6zZHG+5URGmJLosTVYhPLEN 0aNVaGzjHm/aL6qsfOMZcLXzO4E21tk88KW37kjMOTM7/R7YDHMJT0wYeXC7ItcR bWeoj6iqcgMKPNnAy1HIIf9isO0/czFdlNS4AZMvMG2uSBv28GbYurFsNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOx2Dwq8GXICjQapNQJ0pVKgiJdEMB8GA1UdIwQY MBaAFK9Z01Mxye/jPJUwdpMlro71UP/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUt YTU5ZTZlOWFiY2M4LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUtYTU5ZTZlOWFiY2M4 LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFila3n3W GwFJWQ90lEEgULKidrtayr9YwvU6yRnAftvVXR/29X4g2zJVH7XeuiQBbzVqzjNY oIFCuVCavtB7J/lVuZXVQeL4FdQmczKhBQgSTmjeB3wZglsgA/iIVXiEqjojTmsc bQs3jXdTsVy3zzxpRf9jc3RFH5Abh6Z7q4HJd81m+ZkPWsroACqWumhsp8RkIDe9 QOTmlrg36XFeo9cOBoE0rAkabTq14LKxdhNoflFLHL1Ps+3b+MrbtBpXN82anFNK NF7/2VJVZxD0sAQkbyAUKKUsBqrrF1b01OHp/+qPk9HJMtCkmMqR/i7tu0k+4DWM OXWxcXV00TX5HA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:37 2025 by rpki-client