This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json) Hash identifier: 33OmYnwDGuwziStiPBheL9TOK4gTW3sziZQXBPgGUaI= Subject key identifier: 4C:3C:52:D5:E6:28:7B:00:9B:4F:C7:F3:21:A3:05:6F:4F:4A:26:09 Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310 Certificate serial: 019B552B2C24E9D83D3BFB46AF5E289C377D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft Manifest number: 051B Signing time: Thu 25 Dec 2025 11:00:51 +0000 Manifest this update: Thu 25 Dec 2025 11:00:51 +0000 Manifest next update: Fri 26 Dec 2025 11:00:51 +0000 Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: rOQD2vO+ToL9S3j0Nvmodxy7L3FM5UWXTmINewjAN74=) 2: _6oTHI74z2ro3D6ku1-3IwQMDJQ.roa (hash: fv1LSUSBqvzluFwHlLJLOy0RtBrtwPS/3BKDLVcgGlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:2c:24:e9:d8:3d:3b:fb:46:af:5e:28:9c:37:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310 Validity Not Before: Dec 25 11:00:51 2025 GMT Not After : Dec 26 11:00:51 2025 GMT Subject: CN=4c3c52d5e6287b009b4fc7f321a3056f4f4a2609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:d5:66:6b:72:c5:e9:23:d7:6d:52:72:b8: 98:86:29:b3:00:34:f3:8d:a1:87:e5:c6:cb:d6:fb: 8b:24:a1:51:e5:dc:2e:7a:bb:36:16:bf:3a:b2:d6: e7:74:57:05:f7:46:c7:d2:63:c0:37:bc:69:33:94: 69:06:7d:27:5f:0c:48:8a:03:bd:3e:81:98:96:61: 6a:d9:a8:2f:ec:ec:30:f3:e6:4f:32:21:4d:ad:53: 8b:0a:22:e2:f5:2b:10:28:48:05:97:1c:98:fe:1b: b4:ad:29:7d:45:dc:91:73:6e:bb:ec:1e:40:55:78: 46:a5:72:31:78:7a:cf:1f:88:25:fe:32:fe:f4:1a: 5b:91:31:fa:6c:1c:35:70:65:47:ee:75:fb:02:f4: bc:36:d9:f7:27:c0:c1:d8:fc:2e:e4:a3:b1:77:a2: 38:2f:7d:ac:e9:07:aa:7b:10:dc:31:41:35:be:12: 66:a4:a8:51:15:96:5e:be:0f:18:d7:03:4e:1a:d5: ed:a5:29:c2:60:02:ee:9a:30:e7:b8:db:03:04:12: fe:d6:b0:95:56:9d:d9:66:f1:ac:1e:53:b7:61:ed: 26:4e:a1:a7:1b:16:17:3c:74:90:5c:0d:4b:6f:44: 7c:53:f4:e0:ba:5d:a2:b5:34:f5:64:eb:5e:e8:bc: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:52:D5:E6:28:7B:00:9B:4F:C7:F3:21:A3:05:6F:4F:4A:26:09 X509v3 Authority Key Identifier: keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ad:a7:9d:e9:da:28:5d:bc:ef:7a:04:bf:5d:61:83:34:47: c9:79:b4:11:0d:c1:af:a2:cf:f2:a6:e9:15:60:0c:84:51:6a: 69:4c:09:0c:3e:0c:18:db:f3:43:31:e6:18:7c:56:f6:14:c5: 20:90:f3:8d:21:23:b9:62:75:ad:14:60:ce:b9:4a:09:ad:e8: 16:93:76:39:14:f3:2d:bc:8c:10:95:b6:86:3a:0f:5b:32:b5: 70:72:27:9d:0c:39:d0:b6:2e:df:45:fa:60:47:df:1d:51:7a: f8:3d:0a:44:7a:76:1e:55:a2:16:ad:0c:e3:38:cc:c3:b7:0e: a8:13:2b:1f:cc:2a:25:b7:4b:c3:c9:37:56:c7:87:24:e3:a9: d7:f4:ed:f9:2e:f7:5c:71:8f:4a:77:0e:02:93:74:d5:db:39: 81:f2:66:ce:13:0f:35:28:41:76:59:28:e9:d6:d0:0f:2c:a0: d9:68:81:55:20:67:19:a0:a9:64:7a:f3:75:4f:25:09:c9:b3: 62:1c:ea:4e:5f:66:ca:e9:77:cc:75:77:57:8a:4e:cf:1a:55: 93:97:5c:11:6a:dd:e9:e4:ed:43:3d:27:3e:40:b5:4d:b0:f5: 1a:ad:b3:2c:c4:1d:e2:50:0a:09:a2:ce:35:06:59:53:e5:28: 1a:27:2e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKywk6dg9O/tGr14onDd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz NjczMTAwHhcNMjUxMjI1MTEwMDUxWhcNMjUxMjI2MTEwMDUxWjAzMTEwLwYDVQQD Eyg0YzNjNTJkNWU2Mjg3YjAwOWI0ZmM3ZjMyMWEzMDU2ZjRmNGEyNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IPVZmtyxekj121ScriYhimzADTz jaGH5cbL1vuLJKFR5dwuers2Fr86stbndFcF90bH0mPAN7xpM5RpBn0nXwxIigO9 PoGYlmFq2agv7Oww8+ZPMiFNrVOLCiLi9SsQKEgFlxyY/hu0rSl9RdyRc2677B5A VXhGpXIxeHrPH4gl/jL+9BpbkTH6bBw1cGVH7nX7AvS8Ntn3J8DB2Pwu5KOxd6I4 L32s6QeqexDcMUE1vhJmpKhRFZZevg8Y1wNOGtXtpSnCYALumjDnuNsDBBL+1rCV Vp3ZZvGsHlO3Ye0mTqGnGxYXPHSQXA1Lb0R8U/Tgul2itTT1ZOte6LwXJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw8UtXmKHsAm0/H8yGjBW9PSiYJMB8GA1UdIwQY MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3 LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq2nnena KF2873oEv11hgzRHyXm0EQ3Br6LP8qbpFWAMhFFqaUwJDD4MGNvzQzHmGHxW9hTF IJDzjSEjuWJ1rRRgzrlKCa3oFpN2ORTzLbyMEJW2hjoPWzK1cHInnQw50LYu30X6 YEffHVF6+D0KRHp2HlWiFq0M4zjMw7cOqBMrH8wqJbdLw8k3VseHJOOp1/Tt+S73 XHGPSncOApN01ds5gfJmzhMPNShBdlko6dbQDyyg2WiBVSBnGaCpZHrzdU8lCcmz YhzqTl9myul3zHV3V4pOzxpVk5dcEWrd6eTtQz0nPkC1TbD1Gq2zLMQd4lAKCaLO NQZZU+UoGicurg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:31:19 2025 by rpki-client