This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json) Hash identifier: rhy00J5dPdVrVon1bAdydK48r7HTznYqEMMF/aaXROM= Subject key identifier: 07:DB:E6:35:49:77:B8:BC:E8:0C:2D:F9:FC:EC:9D:91:C1:50:9F:16 Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53 Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453 Certificate serial: 019B3DFE5FF23487BEC7E1CB6188103DAF89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft Manifest number: 01F1 Signing time: Sat 20 Dec 2025 23:00:39 +0000 Manifest this update: Sat 20 Dec 2025 23:00:39 +0000 Manifest next update: Sun 21 Dec 2025 23:00:39 +0000 Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: oZ5YYWyhq2MDamMX8IdWFalYBgGM5EcVcn5HlIhGYeM=) 2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=) 3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:5f:f2:34:87:be:c7:e1:cb:61:88:10:3d:af:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453 Validity Not Before: Dec 20 23:00:39 2025 GMT Not After : Dec 21 23:00:39 2025 GMT Subject: CN=07dbe6354977b8bce80c2df9fcec9d91c1509f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:c2:0b:52:3e:37:06:47:ea:ee:8f:c8:53: f8:6e:35:e7:33:0e:2f:60:af:e9:80:ea:a8:df:c2: 56:75:88:18:2f:ac:5c:3d:2b:d9:19:46:be:f4:89: 63:39:20:79:ac:df:e9:32:d6:a4:5e:3f:b9:ee:e6: fa:2b:72:5a:c9:b4:9e:ca:64:ee:32:28:0e:6d:a1: 4d:57:40:48:6f:14:34:df:80:c8:7f:a3:2a:64:05: 68:b0:79:ab:f6:05:e8:b5:f6:cc:a1:cb:1d:66:71: 23:15:e7:f8:c8:e6:39:aa:ee:cf:7b:ab:8b:89:8b: a0:da:6b:b6:9c:36:d6:8b:27:f8:bc:34:c4:4b:8a: 9e:84:ab:24:85:32:7a:41:3e:b5:0c:5c:9d:ed:16: 74:fb:a7:ac:0d:57:58:71:55:17:11:e9:e5:e0:87: 16:0f:dc:9d:23:7f:e6:e6:43:83:12:e7:ed:f5:58: 50:01:3e:24:ec:eb:3c:db:b7:97:d6:86:79:1e:ef: 71:56:41:6e:88:cd:05:a2:92:6f:32:ea:ce:73:78: 38:02:72:89:22:c8:a1:25:c9:0f:49:d3:2b:54:04: 98:85:7e:86:03:d8:95:4d:b5:fe:71:60:92:6b:be: b9:13:19:ca:67:01:99:f5:14:cb:85:ed:de:c1:50: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DB:E6:35:49:77:B8:BC:E8:0C:2D:F9:FC:EC:9D:91:C1:50:9F:16 X509v3 Authority Key Identifier: keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b2:a3:ec:23:e9:5b:47:1a:20:62:2e:bf:32:dc:78:c0:1c: a2:8f:d5:c3:ce:86:0c:ac:2f:ab:c4:43:a5:41:25:6d:fc:44: c5:c4:00:8b:53:13:50:35:76:a4:2b:2f:15:b9:26:93:58:d6: 67:ad:38:0a:5c:35:8c:23:d5:58:61:4d:ff:4f:a9:e8:4b:ad: 45:b4:72:34:24:49:f1:fe:92:c4:a3:4c:0d:c1:e8:05:c0:f4: 6b:4a:f7:ae:38:00:57:c7:32:49:a8:eb:04:aa:97:91:d7:78: 55:15:20:48:ee:26:a1:05:9e:8a:1a:ff:c6:f7:78:43:78:29: df:1b:0a:07:10:a7:84:5a:f7:77:19:c1:4f:34:e1:12:36:49: be:3c:fd:7f:d1:87:f5:78:c3:45:b3:c8:f7:d9:90:26:a9:a2: df:58:4e:4d:d3:6b:95:c0:62:bf:c3:63:31:1c:08:8b:6e:f6: 90:cb:cf:e9:0b:f0:d3:d4:35:84:33:bf:3d:91:0b:19:40:e2: e9:a7:f2:9c:2a:dc:37:5d:d2:7e:81:7b:94:a4:26:56:36:2f: 81:78:a4:45:80:91:70:49:c3:e2:d8:f4:73:7b:8b:b7:d6:52: f4:4d:30:f3:82:5b:cc:9f:f0:4b:8d:16:89:a1:41:1a:c6:d3: 79:9f:42:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/l/yNIe+x+HLYYgQPa+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTU5MzI5NjBmM2MxNzRkNDk1N2FiZTlmNWFiMjk1MjY0 ZDU0NTMwHhcNMjUxMjIwMjMwMDM5WhcNMjUxMjIxMjMwMDM5WjAzMTEwLwYDVQQD EygwN2RiZTYzNTQ5NzdiOGJjZTgwYzJkZjlmY2VjOWQ5MWMxNTA5ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPjCC1I+NwZH6u6PyFP4bjXnMw4v YK/pgOqo38JWdYgYL6xcPSvZGUa+9IljOSB5rN/pMtakXj+57ub6K3JaybSeymTu MigObaFNV0BIbxQ034DIf6MqZAVosHmr9gXotfbMocsdZnEjFef4yOY5qu7Pe6uL iYug2mu2nDbWiyf4vDTES4qehKskhTJ6QT61DFyd7RZ0+6esDVdYcVUXEenl4IcW D9ydI3/m5kODEuft9VhQAT4k7Os827eX1oZ5Hu9xVkFuiM0FopJvMurOc3g4AnKJ IsihJckPSdMrVASYhX6GA9iVTbX+cWCSa765ExnKZwGZ9RTLhe3ewVBYcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfb5jVJd7i86Awt+fzsnZHBUJ8WMB8GA1UdIwQY MBaAFNUVkylg88F01JV6vp9aspUmTVRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjkt MTNmNjViNTQzY2M0LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjktMTNmNjViNTQzY2M0 LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrKj7CPp W0caIGIuvzLceMAcoo/Vw86GDKwvq8RDpUElbfxExcQAi1MTUDV2pCsvFbkmk1jW Z604Clw1jCPVWGFN/0+p6EutRbRyNCRJ8f6SxKNMDcHoBcD0a0r3rjgAV8cySajr BKqXkdd4VRUgSO4moQWeihr/xvd4Q3gp3xsKBxCnhFr3dxnBTzThEjZJvjz9f9GH 9XjDRbPI99mQJqmi31hOTdNrlcBiv8NjMRwIi272kMvP6Qvw09Q1hDO/PZELGUDi 6afynCrcN13SfoF7lKQmVjYvgXikRYCRcEnD4tj0c3uLt9ZS9E0w84JbzJ/wS40W iaFBGsbTeZ9C0w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:37 2025 by rpki-client