This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json) Hash identifier: rkDNII6oOG52zv+9p/d/9nZL2X92GIXjEBQ0Q9dfO4c= Subject key identifier: CF:86:2F:86:B2:EB:15:23:AD:DC:D5:3B:D0:66:3D:07:BB:41:D0:05 Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785 Certificate serial: 019B4DDFEC3E09C16D5BB97F651263A798EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft Manifest number: 02D5 Signing time: Wed 24 Dec 2025 01:01:19 +0000 Manifest this update: Wed 24 Dec 2025 01:01:19 +0000 Manifest next update: Thu 25 Dec 2025 01:01:19 +0000 Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: qKZec1l5ysfYYG+JT6AYN0yh+dzGacx+pu/6Xgjd6ys=) 2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:ec:3e:09:c1:6d:5b:b9:7f:65:12:63:a7:98:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785 Validity Not Before: Dec 24 01:01:19 2025 GMT Not After : Dec 25 01:01:19 2025 GMT Subject: CN=cf862f86b2eb1523addcd53bd0663d07bb41d005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:8a:ef:0c:eb:f7:2e:e0:9a:3a:14:20:a5: f3:29:09:78:1e:fa:ef:af:22:27:a2:70:07:6d:da: a8:bc:aa:df:15:c8:83:43:be:bb:42:61:9c:37:0a: a0:9e:b4:0c:4c:9e:41:1c:d7:32:4d:63:d8:2f:fd: 4c:22:dd:34:47:fe:da:37:3d:f3:30:ae:08:50:da: a6:1d:1b:12:f7:dd:57:d5:2c:a5:50:a6:1f:7a:7a: f6:28:fd:ad:c6:42:44:44:78:d2:ef:77:6e:10:32: 07:9f:14:5d:3f:ba:d2:94:a4:dc:4c:56:e9:c6:77: 51:75:ae:ec:6b:27:f3:ef:ea:6a:9e:59:86:a6:2f: 53:53:47:1e:2e:f4:b3:e5:1b:56:0e:0e:b7:81:e3: a7:be:65:b9:9d:f6:5c:bf:3a:41:79:3e:18:a6:13: d8:01:b3:df:cd:0f:f0:01:56:9c:a3:f5:b6:7c:90: 4b:0a:ba:f0:3d:24:9a:b5:a5:da:9e:43:45:a0:1a: 55:b9:cc:72:35:22:a1:f0:96:a7:75:a8:46:50:ba: 6c:2a:8f:c0:1e:7b:65:f3:43:96:8f:e9:75:5a:b7: 03:d9:48:3e:bd:10:f1:07:e1:ee:5f:0d:43:d6:44: 47:9a:9a:8f:4d:f5:ec:45:52:47:ae:69:4f:0b:79: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:86:2F:86:B2:EB:15:23:AD:DC:D5:3B:D0:66:3D:07:BB:41:D0:05 X509v3 Authority Key Identifier: keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f9:af:45:1e:78:b6:37:2d:a8:a4:e3:ce:2f:c8:e7:c7:b6: d6:98:3e:bd:8d:1d:5e:26:b3:05:6d:20:16:4d:97:68:30:c4: d6:28:5a:91:39:66:d4:c3:0e:b1:0b:8a:61:f4:49:6a:25:ea: 6f:d5:7c:71:c0:f3:15:f1:21:7c:20:80:b4:a8:46:91:fc:33: 13:65:41:1b:57:f2:78:5f:ea:5a:2c:f1:5a:ef:ad:6e:66:31: b3:60:a7:f9:fc:bb:e5:60:ce:83:76:a8:16:ef:bf:ab:b9:67: c2:82:07:22:22:3a:a8:fd:d3:c1:81:07:1a:e6:61:61:f6:c6: ef:ab:eb:b8:cb:d0:8e:25:74:02:04:f5:eb:03:84:3d:e4:30: 97:21:89:73:a1:dd:0e:56:b7:dc:a0:ff:c3:4b:fd:1c:b9:93: f1:ec:0c:5e:ee:bf:ac:eb:d5:26:a1:bb:77:b4:86:a2:a9:68: 52:1a:f5:7a:91:cf:7c:a3:26:16:c6:08:fa:d8:16:71:e7:67: 32:00:b9:97:0d:82:cf:af:ff:3a:ff:6c:65:e9:29:22:8b:78: c8:fb:f5:f8:53:43:88:87:4e:a3:88:98:49:0a:1c:ba:83:7a: 68:8c:a5:ce:7e:ff:5d:07:66:3e:3b:85:d6:8e:26:5d:26:51: 61:81:a1:23 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtN3+w+CcFtW7l/ZRJjp5jqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ViZTJhOTA2ZGQ1ODcwMTI1OTkyMDljMzFjZTEwZjI5 ZDU3ODUwHhcNMjUxMjI0MDEwMTE5WhcNMjUxMjI1MDEwMTE5WjAzMTEwLwYDVQQD EyhjZjg2MmY4NmIyZWIxNTIzYWRkY2Q1M2JkMDY2M2QwN2JiNDFkMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WKK7wzr9y7gmjoUIKXzKQl4Hvrv ryInonAHbdqovKrfFciDQ767QmGcNwqgnrQMTJ5BHNcyTWPYL/1MIt00R/7aNz3z MK4IUNqmHRsS991X1SylUKYfenr2KP2txkJERHjS73duEDIHnxRdP7rSlKTcTFbp xndRda7sayfz7+pqnlmGpi9TU0ceLvSz5RtWDg63geOnvmW5nfZcvzpBeT4YphPY AbPfzQ/wAVaco/W2fJBLCrrwPSSataXankNFoBpVucxyNSKh8JandahGULpsKo/A Hntl80OWj+l1WrcD2Ug+vRDxB+HuXw1D1kRHmpqPTfXsRVJHrmlPC3lxQQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM+GL4ay6xUjrdzVO9BmPQe7QdAFMB8GA1UdIwQY MBaAFPg+viqQbdWHASWZIJwxzhDynVeFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ENi1LcEJ0MVljQkpaa2duREhPRVBLZFY0VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJl LTQ1MjNhMGUyYjg0NC8xLzEtRDYtS3BCdDFZY0JKWmtnbkRIT0VQS2RWNFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJmLzFmNjFhYy0wMmZlLTRlNGMtODUyZS00NTIzYTBlMmI4 NDQvMS8xLUQ2LUtwQnQxWWNCSlprZ25ESE9FUEtkVjRVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/mv RR54tjctqKTjzi/I58e21pg+vY0dXiazBW0gFk2XaDDE1ihakTlm1MMOsQuKYfRJ aiXqb9V8ccDzFfEhfCCAtKhGkfwzE2VBG1fyeF/qWizxWu+tbmYxs2Cn+fy75WDO g3aoFu+/q7lnwoIHIiI6qP3TwYEHGuZhYfbG76vruMvQjiV0AgT16wOEPeQwlyGJ c6HdDla33KD/w0v9HLmT8ewMXu6/rOvVJqG7d7SGoqloUhr1epHPfKMmFsYI+tgW cednMgC5lw2Cz6//Ov9sZekpIot4yPv1+FNDiIdOo4iYSQocuoN6aIylzn7/XQdm PjuF1o4mXSZRYYGhIw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:39:47 2025 by rpki-client