This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json) Hash identifier: JwgxO3fly0/xI7Bn0zGGCNXmlzb3mD3DetQM1KOXU1M= Subject key identifier: 98:8C:EB:BC:E9:4E:AF:D8:69:73:33:47:DF:3C:D9:39:DD:E4:C3:5A Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49 Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49 Certificate serial: 019B6EB4DC0B60836232C9C08924417F4E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 10:01:45 +0000 Manifest this update: Tue 30 Dec 2025 10:01:45 +0000 Manifest next update: Wed 31 Dec 2025 10:01:45 +0000 Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: IJ5uHI8/MxPvUuXmcHaWuQTTc6Gi4D+E8yUyGORi4LM=) 2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:dc:0b:60:83:62:32:c9:c0:89:24:41:7f:4e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49 Validity Not Before: Dec 30 10:01:45 2025 GMT Not After : Dec 31 10:01:45 2025 GMT Subject: CN=988cebbce94eafd869733347df3cd939dde4c35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:f7:cc:b8:8a:e4:35:47:5b:59:df:71:af: 08:7a:3f:d0:ff:92:ff:05:75:ba:25:58:1a:da:de: 1e:01:76:01:36:e3:c1:9b:e5:9f:85:86:ed:d2:53: 4f:d4:6e:28:41:cc:b2:4a:76:ad:17:da:fd:0d:a3: e4:c8:d8:f5:b4:88:ee:19:db:20:f5:44:61:12:f1: 5c:9e:14:fe:6c:0d:a2:e8:e3:b1:ef:2a:5b:d1:d7: 1b:53:3d:6e:f3:f5:3b:77:3c:34:b5:a0:fb:60:63: 5c:b7:f6:d5:9b:fe:d1:50:ce:6f:69:1f:82:3e:1d: 9d:d0:f3:80:9e:04:13:fb:cc:9a:cf:ed:78:70:38: a9:00:e4:fc:d1:b3:d3:d1:1a:0f:37:a3:13:2e:07: ff:da:99:8d:b9:68:ad:b5:31:22:85:11:00:b9:4f: 72:12:bd:d5:92:97:1f:80:d7:9e:42:c6:bf:5f:b5: aa:df:51:eb:66:a2:a4:dd:20:7d:89:6c:bc:59:37: ad:be:60:9a:35:ce:5b:af:74:7f:c7:e0:da:7b:8e: 6a:31:2a:11:aa:91:a4:88:fe:5f:d6:c0:9d:8c:a6: c6:34:8b:11:6a:fc:33:30:82:1f:5b:35:2d:69:71: dc:7a:45:e8:84:5f:99:2c:4e:52:39:0c:ae:56:76: 7d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8C:EB:BC:E9:4E:AF:D8:69:73:33:47:DF:3C:D9:39:DD:E4:C3:5A X509v3 Authority Key Identifier: keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:b8:a7:19:49:97:f2:01:8e:9b:06:25:63:7d:38:dd:30: 1c:c7:41:29:86:09:ea:17:a5:3b:5c:4b:65:95:aa:e0:e9:91: ec:18:5f:ee:3f:a4:f6:e2:0b:21:6b:d6:d8:ba:69:29:5a:74: b3:ff:de:ba:c5:cd:7f:7c:0f:38:27:af:3e:11:f2:a2:a4:0b: a3:23:dc:71:0c:51:eb:a8:43:ae:05:27:fb:fb:cb:fc:74:d6: a2:5e:e8:b3:e2:21:c9:6a:c3:35:19:b3:f1:ff:cb:76:d4:5d: 57:e5:20:9d:70:f3:e0:12:a4:13:50:81:68:1d:f4:cc:92:c8: 07:31:c2:f2:18:b9:22:b1:12:22:44:e3:cd:c1:8a:02:7d:3a: 9f:f0:65:47:b5:e5:ef:a4:5f:ac:64:7f:05:34:e6:b5:4c:91: 10:2e:f2:f1:c2:01:01:dc:e5:a1:dd:92:1f:2e:5e:89:46:af: 48:98:a2:b8:98:11:57:65:8b:61:f1:d4:20:0d:9a:ee:9d:74: 8e:78:9d:aa:5b:cc:7f:bb:2f:8f:7c:f2:69:e1:5e:be:57:81: 29:d9:75:fb:ca:45:68:4f:3a:8c:93:0e:04:45:42:27:e0:df: 72:ac:10:c0:d1:e6:d9:2b:da:97:4d:53:cf:81:77:5b:d5:25: 46:b0:4c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutNwLYINiMsnAiSRBf042MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjIzMmFhMjQzMWNhNGRlNWQ4MjUyYTNjOWNjNmJiNjMw ZDFkNDkwHhcNMjUxMjMwMTAwMTQ1WhcNMjUxMjMxMTAwMTQ1WjAzMTEwLwYDVQQD Eyg5ODhjZWJiY2U5NGVhZmQ4Njk3MzMzNDdkZjNjZDkzOWRkZTRjMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SL3zLiK5DVHW1nfca8Iej/Q/5L/ BXW6JVga2t4eAXYBNuPBm+WfhYbt0lNP1G4oQcyySnatF9r9DaPkyNj1tIjuGdsg 9URhEvFcnhT+bA2i6OOx7ypb0dcbUz1u8/U7dzw0taD7YGNct/bVm/7RUM5vaR+C Ph2d0POAngQT+8yaz+14cDipAOT80bPT0RoPN6MTLgf/2pmNuWittTEihREAuU9y Er3VkpcfgNeeQsa/X7Wq31HrZqKk3SB9iWy8WTetvmCaNc5br3R/x+Dae45qMSoR qpGkiP5f1sCdjKbGNIsRavwzMIIfWzUtaXHcekXohF+ZLE5SOQyuVnZ9mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiM67zpTq/YaXMzR9882Tnd5MNaMB8GA1UdIwQY MBaAFNWyMqokMcpN5dglKjycxrtjDR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgt N2VhNTkyZjliMjllLzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgtN2VhNTkyZjliMjll LzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevO4pxlJ l/IBjpsGJWN9ON0wHMdBKYYJ6helO1xLZZWq4OmR7Bhf7j+k9uILIWvW2LppKVp0 s//eusXNf3wPOCevPhHyoqQLoyPccQxR66hDrgUn+/vL/HTWol7os+IhyWrDNRmz 8f/LdtRdV+UgnXDz4BKkE1CBaB30zJLIBzHC8hi5IrESIkTjzcGKAn06n/BlR7Xl 76RfrGR/BTTmtUyREC7y8cIBAdzlod2SHy5eiUavSJiiuJgRV2WLYfHUIA2a7p10 jnidqlvMf7svj3zyaeFevleBKdl1+8pFaE86jJMOBEVCJ+DfcqwQwNHm2Sval01T z4F3W9UlRrBM9w== -----END CERTIFICATE-----Generated at Tue Dec 30 12:12:57 2025 by rpki-client