This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json) Hash identifier: lnIf3B9/8NuXYeZhNTZUH7I5hZfo8zidD9SEsYih3/s= Subject key identifier: FE:2B:0E:96:2B:F7:8F:96:6B:AE:28:3D:A0:09:40:41:9A:C2:38:B5 Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Certificate serial: 019B70A3E17DF3C81B2D6A2A7F4FA1D8963A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft Manifest number: 0545 Signing time: Tue 30 Dec 2025 19:02:26 +0000 Manifest this update: Tue 30 Dec 2025 19:02:26 +0000 Manifest next update: Wed 31 Dec 2025 19:02:26 +0000 Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: 1Hz8NoRuW/e1s2+497/bYL8/2e4geYglif8vdBqa3J0=) 2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=) 3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=) 4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=) 5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:e1:7d:f3:c8:1b:2d:6a:2a:7f:4f:a1:d8:96:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Validity Not Before: Dec 30 19:02:26 2025 GMT Not After : Dec 31 19:02:26 2025 GMT Subject: CN=fe2b0e962bf78f966bae283da00940419ac238b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:c5:40:f7:e7:62:5e:43:25:50:d7:00:47: 69:f7:d2:b5:e4:22:4e:d3:e4:8a:25:7b:71:30:c2: 24:e9:01:cc:7f:2e:24:d4:34:45:26:f4:b1:d7:48: df:e5:00:98:a7:d2:4b:80:ba:02:c8:27:a9:03:0c: ea:28:04:1c:20:47:ce:60:e6:7b:6e:86:5a:8c:01: 79:cc:3d:d5:5a:a8:6b:3f:a9:91:43:03:dc:f8:64: 72:18:07:8f:58:77:48:ac:b0:d7:ec:d3:c1:6e:ae: 45:aa:07:bb:34:fa:71:59:1e:b7:d9:8f:38:79:3c: 50:cc:4c:c6:30:7b:09:00:9d:9a:27:0d:16:87:7c: 93:00:2f:77:56:70:98:35:84:3d:ed:44:b7:d9:6e: cf:83:e4:e1:55:29:16:11:4f:4b:ea:04:bd:55:28: 92:ac:e9:3d:a9:1b:62:dd:cf:fe:f3:03:8d:f2:7b: a6:60:08:6b:9f:ec:2b:c0:0d:29:d8:e7:8b:5e:57: f7:1d:5f:84:2e:10:46:3e:4f:2f:8a:70:1e:5d:dd: 75:13:27:cc:23:71:ca:14:46:a5:1b:72:42:d6:5d: 1c:11:27:42:c3:5b:95:37:88:89:a6:7d:7b:e5:b1: 99:71:a9:ca:63:d5:1c:2d:2d:ee:6c:cf:d6:61:01: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:0E:96:2B:F7:8F:96:6B:AE:28:3D:A0:09:40:41:9A:C2:38:B5 X509v3 Authority Key Identifier: keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:3d:b5:a8:f4:55:65:c4:ff:56:5f:e1:38:8e:f6:e8:8b: 15:b4:59:d2:8b:26:ca:ea:87:32:b8:87:6d:34:18:a7:73:da: a1:19:50:76:36:43:3c:d7:80:15:8b:86:77:dd:6e:42:81:42: 12:c2:20:3f:a3:00:42:d2:93:ee:3a:f7:6f:3e:6b:7e:0c:52: 88:eb:4f:51:c1:8f:31:81:64:7b:bd:ab:8f:c6:b7:3e:38:0f: a4:96:8d:2b:5b:68:81:fb:ec:43:21:eb:56:c6:44:f7:47:32: 8d:ce:7f:44:bf:03:4f:a5:84:d5:61:06:ec:61:af:a9:48:67: 85:f1:8c:02:77:46:26:b4:30:1d:f6:b3:a0:47:6c:df:90:8f: 01:7e:a2:9a:6f:d5:3e:8e:ce:60:17:f9:e0:08:9d:f1:d9:24: 23:ca:ac:76:cb:57:5c:33:ca:17:6e:12:09:70:21:18:3c:63: 80:c3:1f:37:86:7a:de:4a:1b:5a:72:bb:39:a5:a5:47:e1:84: 18:cc:86:c0:e0:bd:a0:11:96:a2:ff:52:d8:0c:7a:ea:4c:16: 07:94:65:9b:ad:b9:c4:af:70:4f:63:fe:7f:86:66:66:29:30: 1b:80:4b:cb:98:84:c9:db:b1:d4:43:29:ed:9b:37:3f:fb:56: bb:1b:b7:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo+F988gbLWoqf0+h2JY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4 NDdmNTUwHhcNMjUxMjMwMTkwMjI2WhcNMjUxMjMxMTkwMjI2WjAzMTEwLwYDVQQD EyhmZTJiMGU5NjJiZjc4Zjk2NmJhZTI4M2RhMDA5NDA0MTlhYzIzOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDvFQPfnYl5DJVDXAEdp99K15CJO 0+SKJXtxMMIk6QHMfy4k1DRFJvSx10jf5QCYp9JLgLoCyCepAwzqKAQcIEfOYOZ7 boZajAF5zD3VWqhrP6mRQwPc+GRyGAePWHdIrLDX7NPBbq5Fqge7NPpxWR632Y84 eTxQzEzGMHsJAJ2aJw0Wh3yTAC93VnCYNYQ97US32W7Pg+ThVSkWEU9L6gS9VSiS rOk9qRti3c/+8wON8numYAhrn+wrwA0p2OeLXlf3HV+ELhBGPk8vinAeXd11EyfM I3HKFEalG3JC1l0cESdCw1uVN4iJpn175bGZcanKY9UcLS3ubM/WYQFyhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4rDpYr94+Wa64oPaAJQEGawji1MB8GA1UdIwQY MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt MDA4OTk0NDk4MGNhLzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqA9taj0 VWXE/1Zf4TiO9uiLFbRZ0osmyuqHMriHbTQYp3PaoRlQdjZDPNeAFYuGd91uQoFC EsIgP6MAQtKT7jr3bz5rfgxSiOtPUcGPMYFke72rj8a3PjgPpJaNK1togfvsQyHr VsZE90cyjc5/RL8DT6WE1WEG7GGvqUhnhfGMAndGJrQwHfazoEds35CPAX6imm/V Po7OYBf54Aid8dkkI8qsdstXXDPKF24SCXAhGDxjgMMfN4Z63kobWnK7OaWlR+GE GMyGwOC9oBGWov9S2Ax66kwWB5Rlm625xK9wT2P+f4ZmZikwG4BLy5iEydux1EMp 7Zs3P/tWuxu3QA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:59:44 2025 by rpki-client