This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json) Hash identifier: wt/ERuJiZO9k7pvJf5ThA9durYrm0sDv0rrv0Gw6NlM= Subject key identifier: A4:D6:CC:41:B8:B0:55:C4:1D:4C:93:E1:63:EA:D1:69:0A:BB:AA:3C Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3 Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3 Certificate serial: 019AF0BF4B1D897B76CB9349CF95980CB362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft Manifest number: 0F65 Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: mNWBIS1i92P3vhVpcXoBn5xUOXCWgMJfpGbtkDWVPD8=) 2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4b:1d:89:7b:76:cb:93:49:cf:95:98:0c:b3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3 Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=a4d6cc41b8b055c41d4c93e163ead1690abbaa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:c6:76:4f:4d:6e:dd:5e:08:69:a3:78:a5: 3f:1d:97:37:b7:b8:6f:96:a5:23:cd:4f:cf:19:4d: d7:df:dc:45:50:b3:d1:35:f7:5f:11:2f:fe:dd:d5: 00:f0:29:ba:d2:f6:1a:49:0d:b7:58:64:3e:7b:b0: 30:4b:f4:bc:ca:43:a2:84:93:07:da:77:79:5b:ea: a9:a4:06:e3:0a:5c:11:df:36:48:34:45:3f:7d:15: 0b:c1:57:b8:6f:a6:87:ae:9d:b1:1a:c7:c8:9a:43: ea:02:19:ad:b7:b7:26:99:fd:e5:1c:c8:64:4e:52: dc:f8:48:30:22:fc:23:49:da:66:fb:ad:94:f3:2f: 19:fa:10:23:d3:de:09:66:27:b1:1d:a2:94:cd:b5: ef:9b:66:52:33:56:97:85:e0:fd:83:fb:03:eb:07: e3:30:88:b1:44:00:cd:02:e8:1b:6c:ae:ba:39:b1: 21:7a:55:39:73:17:5c:e6:e2:a3:a1:a8:64:63:91: 8b:4d:63:7e:16:41:d2:12:45:b3:99:c6:6f:94:e9: e3:d2:53:0d:30:89:88:f1:ee:5f:7d:b4:26:16:52: 98:c2:6e:71:18:34:36:47:3a:17:90:50:09:89:e7: 28:2d:e3:d1:5f:9a:d3:54:10:8e:b6:10:06:63:37: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D6:CC:41:B8:B0:55:C4:1D:4C:93:E1:63:EA:D1:69:0A:BB:AA:3C X509v3 Authority Key Identifier: keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3c:6a:48:bd:d4:91:43:a2:1a:ff:a6:5b:7f:0f:05:de:d6: bc:09:17:8d:f6:38:49:41:b2:36:67:18:6c:31:36:9a:6e:5c: ee:32:09:f7:31:50:6d:a6:39:65:f2:e2:eb:7b:9a:dc:53:e2: f7:de:6e:34:9c:f4:2c:5d:43:57:7f:67:5f:c2:e8:74:ab:0e: 96:b5:4d:4b:e9:b4:e0:47:44:3e:ba:53:ea:9a:86:a3:23:8f: d2:03:57:ea:4f:b4:91:6a:57:fa:d6:bb:58:e8:b3:d9:8d:32: 37:c0:79:1d:ce:b1:47:b5:ac:72:c6:34:d8:ed:c1:91:a8:2a: 4e:ad:9d:3d:36:6f:61:b1:56:38:d0:6c:b8:59:45:12:ae:18: fb:ae:6b:65:d5:94:50:b7:29:33:e3:c2:d7:9d:ac:7a:e5:0a: a8:2e:4e:22:bd:c2:f6:4b:79:24:0c:5e:e0:04:14:1e:da:d0: 62:f0:c7:c4:df:80:01:2a:cd:b2:ab:1c:e2:df:67:f9:38:ba: 7d:ea:26:67:56:e1:e3:1b:ff:1c:67:b2:50:c8:96:49:06:fe: 13:ff:55:d5:2a:f8:b2:3e:27:86:db:9c:a1:30:0a:2e:60:71: 3b:a7:dc:b4:29:36:0b:bc:d9:0d:9e:e3:0a:4e:81:ca:e3:02: cb:54:1a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0sdiXt2y5NJz5WYDLNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh NWFhYTMwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD EyhhNGQ2Y2M0MWI4YjA1NWM0MWQ0YzkzZTE2M2VhZDE2OTBhYmJhYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ3Gdk9Nbt1eCGmjeKU/HZc3t7hv lqUjzU/PGU3X39xFULPRNfdfES/+3dUA8Cm60vYaSQ23WGQ+e7AwS/S8ykOihJMH 2nd5W+qppAbjClwR3zZINEU/fRULwVe4b6aHrp2xGsfImkPqAhmtt7cmmf3lHMhk TlLc+EgwIvwjSdpm+62U8y8Z+hAj094JZiexHaKUzbXvm2ZSM1aXheD9g/sD6wfj MIixRADNAugbbK66ObEhelU5cxdc5uKjoahkY5GLTWN+FkHSEkWzmcZvlOnj0lMN MImI8e5ffbQmFlKYwm5xGDQ2RzoXkFAJiecoLePRX5rTVBCOthAGYzef4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTWzEG4sFXEHUyT4WPq0WkKu6o8MB8GA1UdIwQY MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt OWFkYTIzNzhhOWEwLzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDxqSL3U kUOiGv+mW38PBd7WvAkXjfY4SUGyNmcYbDE2mm5c7jIJ9zFQbaY5ZfLi63ua3FPi 995uNJz0LF1DV39nX8LodKsOlrVNS+m04EdEPrpT6pqGoyOP0gNX6k+0kWpX+ta7 WOiz2Y0yN8B5Hc6xR7WscsY02O3BkagqTq2dPTZvYbFWONBsuFlFEq4Y+65rZdWU ULcpM+PC152seuUKqC5OIr3C9kt5JAxe4AQUHtrQYvDHxN+AASrNsqsc4t9n+Ti6 feomZ1bh4xv/HGeyUMiWSQb+E/9V1Sr4sj4nhtucoTAKLmBxO6fctCk2C7zZDZ7j Ck6ByuMCy1Qa7A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:27 2025 by rpki-client