This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json) Hash identifier: x/bUB32SNrkogjRPBfseTDzjo3ER8QWnCYgCYkMvCys= Subject key identifier: DC:80:FF:72:EF:22:02:A5:BE:49:EF:F4:7A:1F:B9:A6:17:3E:52:8C Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Certificate serial: 019B71EBCC3434FA5ED791126A1DF37D20F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft Manifest number: 17A2 Signing time: Wed 31 Dec 2025 01:00:37 +0000 Manifest this update: Wed 31 Dec 2025 01:00:37 +0000 Manifest next update: Thu 01 Jan 2026 01:00:37 +0000 Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: sXR1g6r7Udx0eV3pfZT9Gi+pDu9WzI6A4GG6KIG7KhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:cc:34:34:fa:5e:d7:91:12:6a:1d:f3:7d:20:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Validity Not Before: Dec 31 01:00:37 2025 GMT Not After : Jan 1 01:00:37 2026 GMT Subject: CN=dc80ff72ef2202a5be49eff47a1fb9a6173e528c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:77:8b:60:0e:f5:61:c0:d9:56:17:f3:1d: cc:c2:1f:33:ff:20:1b:ee:e5:bf:c4:0c:49:d8:8f: 6d:2e:25:40:06:f7:57:d6:60:83:b6:7f:bf:72:52: 81:0a:8b:f4:91:c0:8f:54:4f:a7:18:bf:2b:76:78: 36:3e:89:46:3a:3e:b6:f2:a2:9b:e5:6b:6d:c0:58: 59:7f:e1:cb:fb:87:e6:6d:de:64:fb:31:e8:00:d9: 6c:7f:ad:e0:a9:af:28:65:c9:47:be:bd:11:9f:d6: f5:d5:0f:69:d5:da:42:e4:25:7e:50:15:eb:f1:54: 87:4b:05:5a:a6:45:de:ea:4f:d0:70:15:6e:a4:c4: e6:bf:5a:3f:53:ce:38:f0:4e:5e:ed:0b:64:f1:0c: e1:e1:db:a0:ff:4c:3d:e3:6b:3b:39:6a:09:40:98: 9f:69:8e:0a:e1:8b:6a:2b:1d:3d:aa:e0:24:88:7e: c0:76:f5:cb:bb:a4:d3:20:b3:9a:d6:c9:ff:6d:87: 54:73:53:6a:5c:9e:51:b0:19:d6:ae:ab:67:10:5e: 3d:8f:34:e4:1b:2e:b6:03:16:9e:9b:2a:a9:47:dd: b1:57:20:07:88:08:47:ad:c8:1e:65:fd:f3:b3:6d: d7:8e:48:c7:f4:e5:6f:ea:d9:53:32:6d:88:4e:fa: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:80:FF:72:EF:22:02:A5:BE:49:EF:F4:7A:1F:B9:A6:17:3E:52:8C X509v3 Authority Key Identifier: keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:49:c1:19:13:ae:de:26:ad:3a:f7:da:de:5c:82:b2:87:3f: a5:26:4c:19:b2:84:c6:93:f6:90:b8:19:ca:99:0a:80:2e:e5: b5:2e:3d:e1:bc:1b:ea:13:13:4d:e8:80:15:3c:33:f2:e2:54: 19:61:46:a5:40:15:42:19:3f:0d:c5:fc:97:76:3f:94:50:ae: 3e:d4:13:c6:65:78:9c:b8:64:9c:67:c3:07:6f:0b:6c:56:64: c0:96:ec:68:04:36:6b:50:ac:1f:41:c8:bc:29:34:e8:c8:42: 72:fd:95:d6:71:9b:89:87:8f:43:a0:41:93:e3:55:dd:1d:d7: e7:5f:70:25:37:95:9c:d4:8a:18:dd:53:c9:a6:6e:68:7c:15: be:a9:38:43:91:b5:5e:1b:e9:1a:f4:8f:59:2d:ce:5f:ea:6b: b4:c7:2f:b2:fe:7a:fd:22:da:f8:c7:15:db:1c:a6:fd:a6:00: 31:97:59:01:2f:e9:23:ab:ba:72:3d:cb:c5:12:ce:be:b5:4a: 75:4a:14:f3:72:a0:f1:65:23:13:61:78:22:2e:e1:d8:dc:11: aa:0c:d4:00:35:f9:bc:59:17:53:d5:35:0a:06:59:b6:d1:84: e0:d9:a1:fc:e8:14:98:72:9c:c9:e3:78:2b:9a:94:29:d1:53: 34:ab:fc:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx68w0NPpe15ESah3zfSD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NmZlMmMwY2ZkNzY5MTA0NGVlMzc4NDVjZmNmNTRlMWE4 NDk5NzQwHhcNMjUxMjMxMDEwMDM3WhcNMjYwMTAxMDEwMDM3WjAzMTEwLwYDVQQD EyhkYzgwZmY3MmVmMjIwMmE1YmU0OWVmZjQ3YTFmYjlhNjE3M2U1MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEd3i2AO9WHA2VYX8x3Mwh8z/yAb 7uW/xAxJ2I9tLiVABvdX1mCDtn+/clKBCov0kcCPVE+nGL8rdng2PolGOj628qKb 5WttwFhZf+HL+4fmbd5k+zHoANlsf63gqa8oZclHvr0Rn9b11Q9p1dpC5CV+UBXr 8VSHSwVapkXe6k/QcBVupMTmv1o/U8448E5e7Qtk8Qzh4dug/0w942s7OWoJQJif aY4K4YtqKx09quAkiH7AdvXLu6TTILOa1sn/bYdUc1NqXJ5RsBnWrqtnEF49jzTk Gy62AxaemyqpR92xVyAHiAhHrcgeZf3zs23XjkjH9OVv6tlTMm2ITvodAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyA/3LvIgKlvknv9HofuaYXPlKMMB8GA1UdIwQY MBaAFNVv4sDP12kQRO43hFz89U4ahJl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYt MDEwN2VjMzNlNWI3LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYtMDEwN2VjMzNlNWI3 LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGknBGROu 3iatOvfa3lyCsoc/pSZMGbKExpP2kLgZypkKgC7ltS494bwb6hMTTeiAFTwz8uJU GWFGpUAVQhk/DcX8l3Y/lFCuPtQTxmV4nLhknGfDB28LbFZkwJbsaAQ2a1CsH0HI vCk06MhCcv2V1nGbiYePQ6BBk+NV3R3X519wJTeVnNSKGN1TyaZuaHwVvqk4Q5G1 XhvpGvSPWS3OX+prtMcvsv56/SLa+McV2xym/aYAMZdZAS/pI6u6cj3LxRLOvrVK dUoU83Kg8WUjE2F4Ii7h2NwRqgzUADX5vFkXU9U1CgZZttGE4Nmh/OgUmHKcyeN4 K5qUKdFTNKv8IQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:13 2025 by rpki-client