This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json) Hash identifier: xe5RKoVy0fS06bPfwC+HYa8+i58LoXN3CbwUx4qfdY0= Subject key identifier: CE:8A:40:29:3E:7B:AB:6D:07:C4:B8:2B:ED:B8:45:C1:11:1C:F5:2A Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66 Certificate serial: 019AF12D141F73361FDFE67265703AF029B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: DJdr/FhvFmho3bPr6sTsSSHtOjRXKUBOUvP9StUbsfQ=) 2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:1f:73:36:1f:df:e6:72:65:70:3a:f0:29:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=ce8a40293e7bab6d07c4b82bedb845c1111cf52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c1:56:7a:f6:1c:59:25:36:bd:64:40:52:09: 90:16:37:d0:d9:b7:51:dc:fa:72:90:07:cb:71:5a: 58:0c:74:0d:b0:ef:c0:3f:83:63:0d:9c:69:f1:70: 1d:7f:d5:d8:1f:13:eb:c7:a0:4b:fe:c7:1e:3b:ad: ba:5f:9e:16:54:bc:aa:a8:0a:a4:bb:a5:4e:78:fd: b8:27:37:34:ea:0f:f4:71:46:4e:fa:76:b3:5e:de: 57:1d:1a:dc:c3:a5:67:73:3d:87:c7:18:ce:bf:b1: 2e:32:28:0a:03:41:6e:e6:11:07:63:29:24:b7:40: 31:08:bf:95:b7:1a:da:06:67:a5:e7:ec:11:c8:8a: ff:1d:40:24:d7:b7:a0:d9:7f:7f:92:80:72:48:15: 38:6e:e4:3a:23:bb:6a:15:39:13:e4:f7:de:46:76: dd:fd:d8:53:b7:15:14:0a:4d:a3:e6:fb:7c:61:cc: 9e:db:5f:55:62:d2:79:d2:77:68:df:7e:07:eb:a3: 50:20:f1:1f:31:24:63:e7:0e:76:a8:1c:55:df:a5: 98:40:34:0c:39:3e:9c:5f:6f:b2:7f:30:42:95:1a: 96:d2:a2:3a:30:f9:5b:cf:45:08:3d:9f:ef:cf:d6: dd:61:cb:63:34:d1:c0:ca:27:08:a3:6c:0b:88:f3: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8A:40:29:3E:7B:AB:6D:07:C4:B8:2B:ED:B8:45:C1:11:1C:F5:2A X509v3 Authority Key Identifier: keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f6:ef:c7:99:ab:76:91:48:fa:fc:99:b7:7f:2c:d8:53:f2: 86:29:79:53:13:1f:1a:d8:c6:d9:32:e4:78:00:5e:1b:a6:23: a3:6b:9d:5e:29:0f:ff:5b:75:7d:f3:7a:8e:38:26:ac:9d:4d: 4d:04:c8:26:b2:99:d3:e7:47:21:b4:35:4f:f8:e5:dc:b8:31: e0:9e:23:f8:ff:43:eb:4d:4a:96:5d:4c:9d:75:34:09:45:a4: 90:41:68:b0:2e:8f:1f:57:06:38:56:d0:80:79:3e:17:40:f7: ce:53:d2:58:86:8c:b7:f9:35:e3:3c:86:a5:ff:cb:d1:2a:cf: c6:49:89:70:f7:9c:c8:34:e5:9a:d7:76:b8:4c:12:2c:e5:e6: 9a:1d:77:42:9b:f8:75:59:35:b3:a5:e3:6b:42:e8:7a:14:eb: 23:61:10:fd:8b:b6:0a:45:b8:7c:aa:e0:c3:fa:1b:c2:ef:c6: f6:80:4a:b8:19:50:4c:2f:c7:83:69:6b:b5:8d:87:69:2e:50: 91:73:ee:10:c3:c1:0c:b4:02:f5:bd:80:6a:5a:17:92:be:cf: bc:3b:8e:42:a5:20:f8:d5:26:2f:8f:af:78:cb:30:b1:c7:40: 6e:8e:60:36:d4:29:b4:fe:69:a1:79:6f:2b:f8:bc:4f:b4:fb: 48:1c:49:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRQfczYf3+ZyZXA68Cm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj YWJkNjYwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EyhjZThhNDAyOTNlN2JhYjZkMDdjNGI4MmJlZGI4NDVjMTExMWNmNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sFWevYcWSU2vWRAUgmQFjfQ2bdR 3PpykAfLcVpYDHQNsO/AP4NjDZxp8XAdf9XYHxPrx6BL/sceO626X54WVLyqqAqk u6VOeP24Jzc06g/0cUZO+nazXt5XHRrcw6Vncz2HxxjOv7EuMigKA0Fu5hEHYykk t0AxCL+VtxraBmel5+wRyIr/HUAk17eg2X9/koBySBU4buQ6I7tqFTkT5PfeRnbd /dhTtxUUCk2j5vt8Ycye219VYtJ50ndo334H66NQIPEfMSRj5w52qBxV36WYQDQM OT6cX2+yfzBClRqW0qI6MPlbz0UIPZ/vz9bdYctjNNHAyicIo2wLiPMRAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6KQCk+e6ttB8S4K+24RcERHPUqMB8GA1UdIwQY MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt NDA1YjBiZGEyYzI2LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2 LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfbvx5mr dpFI+vyZt38s2FPyhil5UxMfGtjG2TLkeABeG6Yjo2udXikP/1t1ffN6jjgmrJ1N TQTIJrKZ0+dHIbQ1T/jl3Lgx4J4j+P9D601Kll1MnXU0CUWkkEFosC6PH1cGOFbQ gHk+F0D3zlPSWIaMt/k14zyGpf/L0SrPxkmJcPecyDTlmtd2uEwSLOXmmh13Qpv4 dVk1s6Xja0LoehTrI2EQ/Yu2CkW4fKrgw/obwu/G9oBKuBlQTC/Hg2lrtY2HaS5Q kXPuEMPBDLQC9b2AaloXkr7PvDuOQqUg+NUmL4+veMswscdAbo5gNtQptP5poXlv K/i8T7T7SBxJ+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:24 2025 by rpki-client