This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json) Hash identifier: IvHWuYYHG+LbGAGIoOct1llV1mNsGiMwWsULnrjvTIY= Subject key identifier: 57:72:A6:23:95:CD:19:BD:61:BA:EB:D5:C7:B2:38:D0:F2:E1:03:76 Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260 Certificate serial: 019B3EA3AC9766365FD661B30A743E432329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft Manifest number: 0276 Signing time: Sun 21 Dec 2025 02:01:12 +0000 Manifest this update: Sun 21 Dec 2025 02:01:12 +0000 Manifest next update: Mon 22 Dec 2025 02:01:12 +0000 Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: ChDQiwEDrVtwy7CJrCNirSFF58nqfVMSjT5u7Josqno=) 2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ac:97:66:36:5f:d6:61:b3:0a:74:3e:43:23:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260 Validity Not Before: Dec 21 02:01:12 2025 GMT Not After : Dec 22 02:01:12 2025 GMT Subject: CN=5772a62395cd19bd61baebd5c7b238d0f2e10376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:bd:7b:81:95:5f:81:5e:91:15:22:0d:1d: b3:22:ea:d0:89:7c:93:5a:47:af:da:34:1e:0e:b1: 2e:90:e3:e5:b7:3c:27:da:a9:b4:3c:52:68:d6:7f: 66:b1:37:67:c1:c8:91:ce:c9:03:8a:97:3b:bf:7d: 6a:d7:93:98:14:c3:17:ae:f1:5d:d9:64:99:ab:89: 65:f2:c6:29:fd:93:2e:b7:72:a7:ce:27:6d:a1:d9: f8:92:45:63:bd:61:e2:ef:87:d4:f6:cb:7d:44:c7: 65:f1:34:c8:4b:0d:2d:7e:14:f2:b8:5f:8a:67:69: 86:05:f9:97:86:5d:3b:b1:fb:8a:63:7e:05:9e:de: b0:f2:ef:6d:bb:80:cd:6c:17:35:8f:d2:90:e1:19: 46:01:3f:70:ae:35:56:6b:a0:73:94:6c:42:84:67: c8:8c:05:08:49:1e:99:b7:e6:80:d5:c4:80:4a:a0: 8c:c2:95:33:73:32:0a:32:9a:3e:90:e2:b5:1d:68: b7:58:6a:88:2d:cb:0a:06:d9:5d:4e:43:4b:c9:f6: 3b:fd:b0:06:5b:58:7b:97:a2:19:bf:70:5c:91:60: 6d:7e:f0:00:91:9b:16:c4:a5:e6:a0:e3:89:e6:71: d5:ca:bf:0d:4b:89:fc:0c:44:db:4c:ea:b5:50:41: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:72:A6:23:95:CD:19:BD:61:BA:EB:D5:C7:B2:38:D0:F2:E1:03:76 X509v3 Authority Key Identifier: keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:42:d2:e3:c8:ab:e5:aa:81:fa:da:c5:b7:9c:93:a3:22:77: c9:be:ce:69:a3:60:cf:2a:00:44:98:e0:8a:c4:3f:21:b2:90: c0:57:ef:fc:cb:d6:35:87:8d:ec:8a:2b:77:86:07:b5:73:69: fb:5b:f0:63:2b:87:e5:b5:7c:90:5a:45:a9:7a:56:26:93:41: e4:19:6c:04:01:8c:fb:61:98:00:69:30:d9:72:c0:b6:63:04: d0:30:b7:07:66:26:81:33:f0:6d:89:07:31:20:a3:b9:66:8f: 52:c6:9a:bf:53:1b:0a:96:de:36:e1:3c:55:79:fc:4f:c5:eb: 47:ca:6c:14:04:67:72:d2:a8:04:49:71:05:ac:34:70:38:4e: 2e:72:1d:07:6d:cd:9a:ba:77:11:28:13:83:c4:db:c7:37:29: 90:b4:4b:d7:f1:a3:ca:30:82:ff:f8:06:e9:cb:68:78:f4:02: e5:3c:17:02:10:05:e5:45:e6:e7:07:9d:6a:4e:f8:fa:a2:96: e4:13:ad:03:5c:f3:b3:1e:b7:24:f9:64:2b:0e:04:d9:a5:08: 0d:59:21:fe:0c:54:a6:88:83:dc:22:00:33:4e:43:a5:9a:61: a5:d6:53:03:73:54:c9:c1:39:d8:b1:61:04:67:e3:30:79:75: 04:cb:43:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6yXZjZf1mGzCnQ+QyMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw NjkyNjAwHhcNMjUxMjIxMDIwMTEyWhcNMjUxMjIyMDIwMTEyWjAzMTEwLwYDVQQD Eyg1NzcyYTYyMzk1Y2QxOWJkNjFiYWViZDVjN2IyMzhkMGYyZTEwMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI29e4GVX4FekRUiDR2zIurQiXyT Wkev2jQeDrEukOPltzwn2qm0PFJo1n9msTdnwciRzskDipc7v31q15OYFMMXrvFd 2WSZq4ll8sYp/ZMut3Knzidtodn4kkVjvWHi74fU9st9RMdl8TTISw0tfhTyuF+K Z2mGBfmXhl07sfuKY34Fnt6w8u9tu4DNbBc1j9KQ4RlGAT9wrjVWa6BzlGxChGfI jAUISR6Zt+aA1cSASqCMwpUzczIKMpo+kOK1HWi3WGqILcsKBtldTkNLyfY7/bAG W1h7l6IZv3BckWBtfvAAkZsWxKXmoOOJ5nHVyr8NS4n8DETbTOq1UEFLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdypiOVzRm9Ybrr1ceyONDy4QN2MB8GA1UdIwQY MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkLS48ir 5aqB+trFt5yToyJ3yb7OaaNgzyoARJjgisQ/IbKQwFfv/MvWNYeN7Iord4YHtXNp +1vwYyuH5bV8kFpFqXpWJpNB5BlsBAGM+2GYAGkw2XLAtmME0DC3B2YmgTPwbYkH MSCjuWaPUsaav1MbCpbeNuE8VXn8T8XrR8psFARnctKoBElxBaw0cDhOLnIdB23N mrp3ESgTg8TbxzcpkLRL1/GjyjCC//gG6ctoePQC5TwXAhAF5UXm5wedak74+qKW 5BOtA1zzsx63JPlkKw4E2aUIDVkh/gxUpoiD3CIAM05DpZphpdZTA3NUycE52LFh BGfjMHl1BMtDrA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:16 2025 by rpki-client