This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json) Hash identifier: /IS1B6VE93qk6gVpthpQ/PQtPC11BaEn2wHbagH42Fc= Subject key identifier: E0:DB:AC:AF:EF:2F:D7:65:98:66:A0:D7:F0:2E:5E:55:66:4D:14:4F Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c Certificate serial: 019B3CB52FE2DDAA49E22BD1E20C029836DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft Manifest number: 0769 Signing time: Sat 20 Dec 2025 17:01:05 +0000 Manifest this update: Sat 20 Dec 2025 17:01:05 +0000 Manifest next update: Sun 21 Dec 2025 17:01:05 +0000 Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: qIJh9O4zgb8hJtthgVbqJEzeb00WSaJFrj3TfhCvrDo=) 2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2f:e2:dd:aa:49:e2:2b:d1:e2:0c:02:98:36:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c Validity Not Before: Dec 20 17:01:05 2025 GMT Not After : Dec 21 17:01:05 2025 GMT Subject: CN=e0dbacafef2fd7659866a0d7f02e5e55664d144f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:d3:8b:b5:93:e7:c7:00:f3:56:e3:e2:86: 65:69:c2:82:a8:25:59:c7:fb:d1:99:fc:9d:14:cb: 48:8e:36:75:51:ef:ba:1d:01:d6:bb:42:f4:8c:be: 95:40:f6:50:cb:17:69:c7:2c:3d:3b:19:65:7b:51: 26:36:f8:6e:be:e2:b2:8f:8a:cb:56:1b:f3:7d:3d: 64:2a:10:2f:e2:f8:35:93:cf:32:28:c6:53:14:16: 48:62:5b:07:f1:7a:17:4f:ef:e7:f7:f3:e3:78:33: 30:57:e7:e2:0a:d6:2e:a1:4f:23:62:4e:a0:0b:6b: 1b:33:3d:ab:ad:2c:7e:e8:18:85:ba:17:81:32:f7: d4:72:b2:57:e6:c7:34:fa:db:6d:55:04:c2:0b:79: 20:99:84:da:da:9b:2e:40:71:b8:ca:0f:f1:f5:23: 5f:43:50:49:92:48:5c:1c:f4:93:22:4e:48:56:8b: f0:e1:ce:f7:5f:3b:d2:09:aa:f6:39:fb:fa:e3:35: af:9d:09:2f:bc:78:97:68:6a:38:62:ef:33:eb:09: 70:ca:f4:56:f3:4c:d0:ba:2b:97:1b:a8:13:59:5e: d3:c2:e1:4d:e4:ce:67:78:9c:96:5f:4d:8c:42:41: 24:5c:5e:4b:eb:6d:2a:2d:fd:b7:63:fe:2f:36:8d: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DB:AC:AF:EF:2F:D7:65:98:66:A0:D7:F0:2E:5E:55:66:4D:14:4F X509v3 Authority Key Identifier: keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:f2:19:91:20:e2:32:2d:b1:ab:64:65:f9:b2:f7:cb:37: d3:79:3f:89:03:93:a7:73:0c:02:97:5f:3a:4f:c1:87:85:55: 9a:d5:b3:ea:ba:fd:89:d7:cc:39:d6:d3:1b:c9:54:2b:78:b2: 87:71:1d:03:9e:6e:77:a5:0e:34:3b:2f:4b:ac:c5:de:e5:a2: f4:75:28:93:b6:bb:4d:4d:c2:ba:76:69:12:ae:e5:92:2b:76: 2f:4e:c3:c8:43:3a:a7:18:91:9b:4c:e7:a6:f1:7f:18:d6:2f: df:bd:19:e6:e1:a6:4f:6a:90:dc:8d:7b:06:7f:13:5e:88:08: e0:ac:99:01:40:bc:2c:a5:50:a6:73:e3:ad:cc:b4:c9:79:69: 31:6e:47:44:5b:25:8e:bb:3b:d6:3c:ee:c7:2f:54:ca:4e:4d: 99:f0:f2:0b:f4:52:b3:4c:fd:8a:44:62:39:e8:d7:56:ce:79: de:ab:27:a0:35:f4:1e:5a:26:56:a6:97:b6:ce:61:8c:1a:b7: 41:69:43:d0:4d:ae:d5:d0:c6:27:4d:cb:d5:35:a9:ff:50:54: 27:4c:cd:74:2d:56:04:5b:4c:02:82:95:42:0a:06:5f:5e:3b: b6:d4:c8:0d:18:3c:54:66:2a:51:15:3e:4f:9d:4b:2d:26:e8: 1c:ea:ca:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tS/i3apJ4ivR4gwCmDbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy OTU5OWMwHhcNMjUxMjIwMTcwMTA1WhcNMjUxMjIxMTcwMTA1WjAzMTEwLwYDVQQD EyhlMGRiYWNhZmVmMmZkNzY1OTg2NmEwZDdmMDJlNWU1NTY2NGQxNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGbTi7WT58cA81bj4oZlacKCqCVZ x/vRmfydFMtIjjZ1Ue+6HQHWu0L0jL6VQPZQyxdpxyw9Oxlle1EmNvhuvuKyj4rL VhvzfT1kKhAv4vg1k88yKMZTFBZIYlsH8XoXT+/n9/PjeDMwV+fiCtYuoU8jYk6g C2sbMz2rrSx+6BiFuheBMvfUcrJX5sc0+tttVQTCC3kgmYTa2psuQHG4yg/x9SNf Q1BJkkhcHPSTIk5IVovw4c73XzvSCar2Ofv64zWvnQkvvHiXaGo4Yu8z6wlwyvRW 80zQuiuXG6gTWV7TwuFN5M5neJyWX02MQkEkXF5L620qLf23Y/4vNo1MmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODbrK/vL9dlmGag1/AuXlVmTRRPMB8GA1UdIwQY MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt M2RjZWNiY2EzNzAyLzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRPyGZEg 4jItsatkZfmy98s303k/iQOTp3MMApdfOk/Bh4VVmtWz6rr9idfMOdbTG8lUK3iy h3EdA55ud6UONDsvS6zF3uWi9HUok7a7TU3CunZpEq7lkit2L07DyEM6pxiRm0zn pvF/GNYv370Z5uGmT2qQ3I17Bn8TXogI4KyZAUC8LKVQpnPjrcy0yXlpMW5HRFsl jrs71jzuxy9Uyk5NmfDyC/RSs0z9ikRiOejXVs553qsnoDX0HlomVqaXts5hjBq3 QWlD0E2u1dDGJ03L1TWp/1BUJ0zNdC1WBFtMAoKVQgoGX147ttTIDRg8VGYqURU+ T51LLSboHOrK5w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:56 2025 by rpki-client