This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json) Hash identifier: hgv4v99FKunzWdGHS9u0s4H/yDVu3DgX32YXFvpy3rA= Subject key identifier: E5:D2:76:DA:F6:DD:CE:74:39:F1:C2:7E:31:0A:FD:90:AF:F4:44:D9 Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24 Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024 Certificate serial: 019B668CDB423B8C6C4318389D9BC43820B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft Manifest number: 1024 Signing time: Sun 28 Dec 2025 20:01:05 +0000 Manifest this update: Sun 28 Dec 2025 20:01:05 +0000 Manifest next update: Mon 29 Dec 2025 20:01:05 +0000 Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: 2rPUpOB/HD00rUaAhBhdwhJn1j6RQtFN0In2eULFDTA=) 2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:db:42:3b:8c:6c:43:18:38:9d:9b:c4:38:20:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024 Validity Not Before: Dec 28 20:01:05 2025 GMT Not After : Dec 29 20:01:05 2025 GMT Subject: CN=e5d276daf6ddce7439f1c27e310afd90aff444d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:7d:9b:81:48:0f:f8:94:51:5a:5c:97:d4: 15:f4:91:90:22:9d:0d:80:14:37:12:31:d9:ba:09: ad:1f:8d:96:cf:92:4b:5b:b9:a6:11:76:49:3b:c9: 15:7b:2a:c6:8b:9b:c2:2e:ad:79:b8:23:0b:b0:3b: dd:83:0d:99:48:2d:2c:10:61:67:26:31:f4:db:8b: 9e:b4:74:f8:0d:8c:3d:ec:55:25:20:73:52:8a:d7: 92:88:de:cb:6a:a9:28:de:55:bd:5f:56:d9:a8:29: 50:6f:d5:20:4d:44:6c:74:48:e7:02:42:2f:8a:e1: a1:0b:a6:1e:bd:74:9a:43:a7:bc:73:f8:0f:67:2d: bf:67:47:bb:8e:f8:01:43:be:7a:60:38:66:3b:6e: 2b:f8:88:96:19:d4:80:f2:6d:07:02:8c:6d:e2:75: 1b:d0:46:12:dd:9b:67:11:cc:a5:5e:5a:3b:ac:97: 67:32:49:75:44:2c:70:97:01:c5:a7:ee:f7:a0:d4: 71:9a:09:7f:b4:5c:4e:94:d9:a2:a1:d2:db:15:e3: b2:f1:af:b1:11:18:3c:01:8e:c0:0d:51:ef:c5:66: eb:62:5a:fc:d1:81:25:c5:92:06:b6:15:56:72:ab: 3e:94:57:ff:ae:67:8c:80:e1:8b:6c:a6:a9:fd:f5: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D2:76:DA:F6:DD:CE:74:39:F1:C2:7E:31:0A:FD:90:AF:F4:44:D9 X509v3 Authority Key Identifier: keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:41:45:b1:4c:df:a2:93:00:5c:1c:a6:2e:d2:49:e0:52:7d: de:c1:9e:69:b6:61:c9:68:c7:8d:d7:9a:2b:5a:f6:d1:9b:92: 65:10:b0:9b:c4:30:91:44:49:9f:ff:ec:1c:11:cc:e4:62:72: a2:c2:43:2c:83:b4:8d:71:ff:ae:e4:7b:96:e4:5a:bd:e7:dc: 69:f2:1f:28:c8:ee:e0:e0:69:2a:af:81:c3:04:dc:b4:f5:25: f0:e0:f9:a6:f8:de:0b:6d:31:2a:4f:5b:65:d1:1d:20:26:7b: 0e:a1:ca:c7:ac:ac:a6:33:e6:09:2f:82:d5:90:c8:af:76:54: 25:51:d0:4e:9b:84:ee:55:6b:ab:ea:98:d9:78:f3:44:06:67: ad:41:05:ab:5c:04:c8:80:d5:9f:ab:97:f6:84:5c:4e:fd:73: e2:15:89:c6:ae:2a:c3:d9:9d:7e:39:f7:b1:b0:ab:1b:d1:19: ad:6d:8d:53:8e:6f:64:9f:92:65:11:54:a4:d2:3b:60:9a:79: 6a:9e:a5:28:d6:8b:b5:c7:b0:f7:ae:07:3b:eb:d7:5e:56:74: 3d:96:1d:73:14:f8:74:04:06:27:47:fd:f2:62:32:c7:03:7e: 14:ba:3f:21:79:63:4d:23:df:e9:13:ae:11:7f:31:ec:7b:57: 50:d6:46:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjNtCO4xsQxg4nZvEOCC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4 ZTQwMjQwHhcNMjUxMjI4MjAwMTA1WhcNMjUxMjI5MjAwMTA1WjAzMTEwLwYDVQQD EyhlNWQyNzZkYWY2ZGRjZTc0MzlmMWMyN2UzMTBhZmQ5MGFmZjQ0NGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/p9m4FID/iUUVpcl9QV9JGQIp0N gBQ3EjHZugmtH42Wz5JLW7mmEXZJO8kVeyrGi5vCLq15uCMLsDvdgw2ZSC0sEGFn JjH024uetHT4DYw97FUlIHNSiteSiN7Laqko3lW9X1bZqClQb9UgTURsdEjnAkIv iuGhC6YevXSaQ6e8c/gPZy2/Z0e7jvgBQ756YDhmO24r+IiWGdSA8m0HAoxt4nUb 0EYS3ZtnEcylXlo7rJdnMkl1RCxwlwHFp+73oNRxmgl/tFxOlNmiodLbFeOy8a+x ERg8AY7ADVHvxWbrYlr80YElxZIGthVWcqs+lFf/rmeMgOGLbKap/fVH7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXSdtr23c50OfHCfjEK/ZCv9ETZMB8GA1UdIwQY MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct YjhjZjA0YjU0MjUxLzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEFFsUzf opMAXBymLtJJ4FJ93sGeabZhyWjHjdeaK1r20ZuSZRCwm8QwkURJn//sHBHM5GJy osJDLIO0jXH/ruR7luRavefcafIfKMju4OBpKq+BwwTctPUl8OD5pvjeC20xKk9b ZdEdICZ7DqHKx6yspjPmCS+C1ZDIr3ZUJVHQTpuE7lVrq+qY2XjzRAZnrUEFq1wE yIDVn6uX9oRcTv1z4hWJxq4qw9mdfjn3sbCrG9EZrW2NU45vZJ+SZRFUpNI7YJp5 ap6lKNaLtcew964HO+vXXlZ0PZYdcxT4dAQGJ0f98mIyxwN+FLo/IXljTSPf6ROu EX8x7HtXUNZGfQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:58 2025 by rpki-client