This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json) Hash identifier: vQj08n+NXIgY3euIQOEZqRJOhmS84XaTY0cYRLy6m5Q= Subject key identifier: D7:72:61:1C:E3:15:7A:4C:A3:EC:1C:27:C6:7B:58:D0:44:02:6D:E2 Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Certificate serial: 019B4F602323B9156C8D96773746D44B2B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft Manifest number: 1577 Signing time: Wed 24 Dec 2025 08:00:59 +0000 Manifest this update: Wed 24 Dec 2025 08:00:59 +0000 Manifest next update: Thu 25 Dec 2025 08:00:59 +0000 Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: 4rzqGd6nG+Ozv4TYOX0KDxR9wYIhLmlDexPCvSJAWEg=) 2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:23:23:b9:15:6c:8d:96:77:37:46:d4:4b:2b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1 Validity Not Before: Dec 24 08:00:59 2025 GMT Not After : Dec 25 08:00:59 2025 GMT Subject: CN=d772611ce3157a4ca3ec1c27c67b58d044026de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:93:32:e1:f8:94:53:34:af:78:fa:72:64: e1:54:c8:f7:11:fc:f4:00:89:26:b7:83:d3:51:49: db:88:66:c7:7c:73:d9:65:fb:13:91:73:b4:5a:8f: 64:6b:ec:08:8e:cf:cf:0d:0b:2a:84:5b:a0:38:51: 2d:be:ca:66:d1:c8:7e:e3:81:3e:55:4d:ec:cc:97: f4:8a:15:ff:f0:91:b2:f9:69:e8:08:45:35:e7:83: b4:c0:c7:f8:b3:60:bf:25:44:b7:c9:e2:77:e8:a8: 74:07:0e:00:09:ea:84:1d:9c:2f:62:56:93:46:ab: 8d:65:33:1b:2b:a0:d2:9a:d4:48:15:97:03:6c:c2: 4a:cc:00:df:bf:0f:b2:9b:73:37:f1:e8:34:92:b6: af:61:07:9d:e5:a5:19:d7:39:76:6b:fe:c4:6a:d0: 57:27:2a:57:c0:b4:e7:aa:6d:ca:6c:bc:56:16:46: 5d:f3:79:26:bb:f1:10:34:e3:46:87:85:77:e6:11: 6a:3c:9d:b6:83:88:b3:59:08:45:41:1b:ed:c6:ac: d9:5f:f1:cd:e0:3b:aa:d8:0d:1a:a2:55:d4:79:3d: 5a:c3:12:79:a2:ff:32:19:c2:5e:68:1b:a1:b5:3b: 35:c3:39:f9:66:82:34:5e:cf:fd:4a:d6:c6:6e:bc: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:61:1C:E3:15:7A:4C:A3:EC:1C:27:C6:7B:58:D0:44:02:6D:E2 X509v3 Authority Key Identifier: keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:35:47:b0:45:c4:3e:64:64:6d:77:66:e9:3a:bf:27:3e:a3: 56:80:74:09:77:e8:dc:ed:1c:da:cc:74:94:c1:bb:04:c9:46: df:3f:e5:b8:1c:15:e5:8f:3e:5b:08:bd:a7:43:55:e1:31:b5: d1:64:37:18:9e:58:3d:27:3f:dc:f4:bf:ad:9b:3d:da:28:dc: ca:fc:d9:07:3a:97:f9:95:9d:72:6d:a3:78:1b:ae:3b:b0:47: f8:6d:67:f5:50:23:69:02:5d:a6:15:ce:5d:5d:93:13:97:60: 5e:d5:ff:c2:c6:ac:aa:52:08:47:48:f0:ae:b0:5a:90:f8:16: 07:18:c3:4e:74:c0:a2:e1:ad:43:f6:eb:1b:45:53:57:67:57: 92:14:81:05:ae:1b:1b:3c:be:7a:6f:fd:b9:89:61:9a:bd:59: eb:d6:fd:cd:ac:f4:7d:59:2f:30:28:4b:a6:c9:5c:be:86:7f: 64:4d:04:e7:47:1f:4f:0f:67:87:db:4a:c2:f5:7d:43:32:58: 50:8b:d0:dd:fe:0a:36:14:51:c6:0b:2e:20:4c:54:02:d0:44: f9:5a:f3:0f:5b:72:20:e4:af:1b:f7:5d:c9:72:ed:7e:58:5c: cd:f4:5e:0a:38:50:9f:cf:61:21:f5:1c:b8:80:8c:04:22:e6: 45:b4:9d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYCMjuRVsjZZ3N0bUSysEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2 ZDI1YTEwHhcNMjUxMjI0MDgwMDU5WhcNMjUxMjI1MDgwMDU5WjAzMTEwLwYDVQQD EyhkNzcyNjExY2UzMTU3YTRjYTNlYzFjMjdjNjdiNThkMDQ0MDI2ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVSTMuH4lFM0r3j6cmThVMj3Efz0 AIkmt4PTUUnbiGbHfHPZZfsTkXO0Wo9ka+wIjs/PDQsqhFugOFEtvspm0ch+44E+ VU3szJf0ihX/8JGy+WnoCEU154O0wMf4s2C/JUS3yeJ36Kh0Bw4ACeqEHZwvYlaT RquNZTMbK6DSmtRIFZcDbMJKzADfvw+ym3M38eg0kravYQed5aUZ1zl2a/7EatBX JypXwLTnqm3KbLxWFkZd83kmu/EQNONGh4V35hFqPJ22g4izWQhFQRvtxqzZX/HN 4Duq2A0aolXUeT1awxJ5ov8yGcJeaBuhtTs1wzn5ZoI0Xs/9StbGbryDAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdyYRzjFXpMo+wcJ8Z7WNBEAm3iMB8GA1UdIwQY MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDVHsEXE PmRkbXdm6Tq/Jz6jVoB0CXfo3O0c2sx0lMG7BMlG3z/luBwV5Y8+Wwi9p0NV4TG1 0WQ3GJ5YPSc/3PS/rZs92ijcyvzZBzqX+ZWdcm2jeBuuO7BH+G1n9VAjaQJdphXO XV2TE5dgXtX/wsasqlIIR0jwrrBakPgWBxjDTnTAouGtQ/brG0VTV2dXkhSBBa4b Gzy+em/9uYlhmr1Z69b9zaz0fVkvMChLpslcvoZ/ZE0E50cfTw9nh9tKwvV9QzJY UIvQ3f4KNhRRxgsuIExUAtBE+VrzD1tyIOSvG/ddyXLtflhczfReCjhQn89hIfUc uICMBCLmRbSdrw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:23 2025 by rpki-client