This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json) Hash identifier: vbXUWMqORyWAugLKzWTECjX6QuhTcMK4H68XIf/8Z08= Subject key identifier: 1B:8D:98:36:80:B0:27:29:B0:6F:38:92:3A:E9:4D:E4:39:28:71:67 Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51 Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051 Certificate serial: 019B54F3EF66A30DD1D237C78F3DE2830230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft Manifest number: 13EC Signing time: Thu 25 Dec 2025 10:00:31 +0000 Manifest this update: Thu 25 Dec 2025 10:00:31 +0000 Manifest next update: Fri 26 Dec 2025 10:00:31 +0000 Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: dJuMobkCVUFfF/JSRr0QcMe83xUsu2pB7EPhQgVWm0M=) 2: igBGcaK6I-04bslxB8dvdsYLHhw.roa (hash: FBSMg/oDiupeLPZD+Uq2Nknq3gqPFPRMj+3j0Pt7jOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f3:ef:66:a3:0d:d1:d2:37:c7:8f:3d:e2:83:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051 Validity Not Before: Dec 25 10:00:31 2025 GMT Not After : Dec 26 10:00:31 2025 GMT Subject: CN=1b8d983680b02729b06f38923ae94de439287167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:39:1d:ec:d5:0c:2e:ab:4d:8e:8c:e7:38: 97:fd:ed:f2:69:80:c2:2d:50:ec:0c:75:76:03:2f: 2b:d2:de:56:4b:2d:0d:ca:e9:b1:c4:37:40:78:7e: 6c:ab:fb:04:01:bb:44:84:03:32:fd:e6:35:10:d1: 04:ba:c5:1f:07:20:61:7d:3e:b9:08:18:ea:fb:c3: 96:0e:41:3d:bd:5d:4c:7e:5b:f2:1c:0e:69:82:d2: ae:13:92:07:50:5e:fb:26:ae:3c:77:cc:d6:dd:26: 4c:a5:e2:ce:25:1b:bd:5d:dc:3f:11:fd:f7:61:a6: 99:5e:db:1d:99:c9:fa:96:42:37:7e:09:0f:bc:fb: 0f:1c:1b:8e:09:5f:5e:a1:1a:fd:dc:60:49:38:fc: 27:c4:39:2e:83:b1:2a:2f:ee:81:6f:1b:3a:df:fd: e0:3b:9b:38:ba:40:3f:df:b7:c1:88:56:3d:9a:f5: 66:8e:64:36:6f:f6:aa:5c:7c:88:f9:6d:63:06:88: 56:2a:f2:8a:4b:2a:29:e8:cb:48:88:b2:cd:ea:ae: 36:0c:0d:57:4c:8e:23:26:b5:12:27:9c:8f:12:e7: d2:5c:49:48:16:94:35:b8:71:62:61:76:87:58:44: 10:12:07:ed:75:79:f9:34:5f:a9:f1:36:e7:ca:cf: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:98:36:80:B0:27:29:B0:6F:38:92:3A:E9:4D:E4:39:28:71:67 X509v3 Authority Key Identifier: keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0e:82:51:4b:15:e1:74:af:7a:cc:f8:7e:ec:74:39:d4:4a: 86:eb:94:a9:5e:3f:fa:9c:b8:46:8c:33:cb:bb:0c:c2:d6:f2: 5b:59:35:b8:6c:08:ea:41:ab:3a:23:c0:70:28:db:1f:5d:69: c5:d1:85:91:f9:19:7e:eb:7f:d5:57:db:dd:37:e6:90:2f:7b: 09:ad:d5:5a:fe:35:44:1f:92:fa:ea:1d:2a:b0:0e:f7:ef:ed: d5:d4:e3:70:9f:17:9a:da:29:59:b1:a4:fd:75:45:8e:75:ef: 75:c6:6a:47:91:d9:05:a0:fa:f7:45:3d:23:69:a2:e0:c1:7c: 67:18:19:ea:bc:90:14:e0:6e:c8:50:b6:75:66:f5:bd:37:c9: d5:f0:2c:17:b5:1d:a3:60:94:e1:2e:e9:5f:f1:d9:6e:20:01: ea:08:5b:35:9d:a1:a4:34:d0:cf:7e:41:db:5e:10:0d:64:eb: 1a:cc:12:40:8e:78:85:ca:d6:c4:14:82:68:cc:da:16:7e:bf: dc:86:fa:0e:42:47:26:8c:d9:ca:54:2e:e0:41:61:c0:f0:87: 84:8f:4e:ca:84:d0:96:71:0e:da:b3:b0:7a:94:65:4c:3d:43: c4:98:39:25:b9:82:ad:e3:2f:43:e0:18:da:20:94:c1:a3:f2: 0d:a3:a3:b9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtU8+9mow3R0jfHjz3igwIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDJiYWM3Yjc5YTMxMDllOWJlM2RmZTRmMDZkNTg1YmI5 ZjkwNTEwHhcNMjUxMjI1MTAwMDMxWhcNMjUxMjI2MTAwMDMxWjAzMTEwLwYDVQQD EygxYjhkOTgzNjgwYjAyNzI5YjA2ZjM4OTIzYWU5NGRlNDM5Mjg3MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqg5HezVDC6rTY6M5ziX/e3yaYDC LVDsDHV2Ay8r0t5WSy0NyumxxDdAeH5sq/sEAbtEhAMy/eY1ENEEusUfByBhfT65 CBjq+8OWDkE9vV1MflvyHA5pgtKuE5IHUF77Jq48d8zW3SZMpeLOJRu9Xdw/Ef33 YaaZXtsdmcn6lkI3fgkPvPsPHBuOCV9eoRr93GBJOPwnxDkug7EqL+6Bbxs63/3g O5s4ukA/37fBiFY9mvVmjmQ2b/aqXHyI+W1jBohWKvKKSyop6MtIiLLN6q42DA1X TI4jJrUSJ5yPEufSXElIFpQ1uHFiYXaHWEQQEgftdXn5NF+p8Tbnys847wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBuNmDaAsCcpsG84kjrpTeQ5KHFnMB8GA1UdIwQY MBaAFPsCuse3mjEJ6b49/k8G1YW7n5BRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13SzZ4N2VhTVFucHZqMy1Ud2JWaGJ1ZmtGRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjAwZTJiLWQzYTQtNDU1Ny05NzM1 LTQ5NTBmODZjYmI1Yi8xLzEtd0s2eDdlYU1RbnB2ajMtVHdiVmhidWZrRkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFkLzIwMGUyYi1kM2E0LTQ1NTctOTczNS00OTUwZjg2Y2Ji NWIvMS8xLXdLNng3ZWFNUW5wdmozLVR3YlZoYnVma0ZFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA6C UUsV4XSvesz4fux0OdRKhuuUqV4/+py4Rowzy7sMwtbyW1k1uGwI6kGrOiPAcCjb H11pxdGFkfkZfut/1Vfb3TfmkC97Ca3VWv41RB+S+uodKrAO9+/t1dTjcJ8Xmtop WbGk/XVFjnXvdcZqR5HZBaD690U9I2mi4MF8ZxgZ6ryQFOBuyFC2dWb1vTfJ1fAs F7Udo2CU4S7pX/HZbiAB6ghbNZ2hpDTQz35B214QDWTrGswSQI54hcrWxBSCaMza Fn6/3Ib6DkJHJozZylQu4EFhwPCHhI9OyoTQlnEO2rOwepRlTD1DxJg5JbmCreMv Q+AY2iCUwaPyDaOjuQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:14:38 2025 by rpki-client