This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json) Hash identifier: VnB2SInRpOZZ9wWDiybubyWA+P0cMkJeVa1ORBqJDpM= Subject key identifier: B5:88:29:DC:38:62:6F:92:01:45:AE:C3:35:E1:27:28:DA:59:6C:78 Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Certificate serial: 019B74EC8F4462F702CBB22B6E2E007E8D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft Manifest number: 067E Signing time: Wed 31 Dec 2025 15:00:18 +0000 Manifest this update: Wed 31 Dec 2025 15:00:18 +0000 Manifest next update: Thu 01 Jan 2026 15:00:18 +0000 Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: luLkFJsdON1eo9qN4XIVKz+j7D9I6w8PZ6ieqrmYH4g=) 2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ec:8f:44:62:f7:02:cb:b2:2b:6e:2e:00:7e:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Validity Not Before: Dec 31 15:00:18 2025 GMT Not After : Jan 1 15:00:18 2026 GMT Subject: CN=b58829dc38626f920145aec335e12728da596c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:3a:ee:f4:c1:dd:f1:37:3c:29:cc:44:1a: 4f:38:19:ce:04:6e:99:c1:6a:75:b5:b1:77:b4:2d: 9c:7c:7d:5a:81:97:80:5d:c5:b2:fa:78:7e:c8:ae: 8f:48:6c:43:2c:89:a4:df:e8:b2:97:99:34:99:ec: c9:07:ce:92:b5:30:b9:15:b6:1c:05:7a:88:1a:66: 98:ae:81:1e:97:52:ec:91:5e:8c:ac:60:30:b0:16: cc:f0:5c:61:f8:93:36:25:df:e3:60:6f:f3:16:b3: 57:e9:72:8c:7b:e8:94:4b:58:fd:fb:f0:d6:fe:1a: 58:a0:79:e8:80:45:76:6e:71:fe:c0:3e:5d:48:e6: c0:3f:f3:d1:41:bc:6b:f6:0d:24:5d:7e:7a:3a:31: 13:94:22:e2:af:6f:46:f0:8b:76:4e:23:0c:32:ac: 43:5f:9b:b5:dc:75:07:9e:1f:76:9f:9f:a5:aa:8b: 9d:21:d6:66:7c:58:12:ec:44:0e:8c:83:9c:4f:a6: 7a:da:54:17:ad:db:4c:0f:ac:35:90:6a:4a:e5:88: c7:d9:8b:50:54:5f:23:0d:15:9b:74:69:c1:54:d4: 78:a8:f6:b8:ef:43:8f:74:5e:f6:7c:eb:0b:5f:1e: 50:6d:38:ae:1b:a5:d4:d8:69:6a:bf:37:0b:32:30: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:29:DC:38:62:6F:92:01:45:AE:C3:35:E1:27:28:DA:59:6C:78 X509v3 Authority Key Identifier: keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4e:73:87:ce:ea:3a:e4:d2:54:15:0a:54:48:f0:de:79:99: 1f:af:35:01:75:a0:be:36:d6:ed:f5:35:73:81:c2:cb:28:15: 48:5e:65:5f:88:3a:c8:26:79:3c:ff:6d:1e:11:fa:23:9f:a1: 17:80:c1:8f:e7:a1:32:13:b5:4d:07:b2:5f:2a:5d:14:c2:20: 06:c4:64:1c:a2:43:4a:38:bb:bc:13:73:47:8b:f2:a6:97:25: 5c:78:21:52:c1:04:02:a8:57:c2:8a:aa:13:ae:2b:54:56:ba: 07:93:2f:b3:c6:47:40:b0:5b:ab:5c:e7:45:6e:3f:28:87:1a: 51:2d:79:a1:37:bb:ae:38:b8:46:55:31:7f:af:27:3b:de:cf: 5c:56:df:14:10:23:b7:1c:d4:c9:44:df:19:d0:cc:f0:a3:ab: 7c:6f:4c:b1:35:db:50:b1:9e:1d:92:6d:81:91:c7:74:a5:69: 5e:21:ef:a9:bf:a8:35:77:8c:c3:ec:f4:1a:a0:8b:f4:94:cb: 6f:b6:63:13:e2:ff:b9:3b:d3:ca:d9:0c:0e:8b:10:9f:2e:e7: c0:83:8b:04:c8:f9:67:b6:31:b3:f8:bf:32:9c:9d:29:26:ad: da:f6:98:68:9c:67:31:dc:fe:d5:41:f7:7d:5e:25:52:25:8c: fe:9a:e3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07I9EYvcCy7Irbi4Afo1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2E1NWQyZTNiOTE2M2NjNDg4YjZmN2FiZTYyZWIyNmU3 YThjMzgwHhcNMjUxMjMxMTUwMDE4WhcNMjYwMTAxMTUwMDE4WjAzMTEwLwYDVQQD EyhiNTg4MjlkYzM4NjI2ZjkyMDE0NWFlYzMzNWUxMjcyOGRhNTk2Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZE67vTB3fE3PCnMRBpPOBnOBG6Z wWp1tbF3tC2cfH1agZeAXcWy+nh+yK6PSGxDLImk3+iyl5k0mezJB86StTC5FbYc BXqIGmaYroEel1LskV6MrGAwsBbM8Fxh+JM2Jd/jYG/zFrNX6XKMe+iUS1j9+/DW /hpYoHnogEV2bnH+wD5dSObAP/PRQbxr9g0kXX56OjETlCLir29G8It2TiMMMqxD X5u13HUHnh92n5+lqoudIdZmfFgS7EQOjIOcT6Z62lQXrdtMD6w1kGpK5YjH2YtQ VF8jDRWbdGnBVNR4qPa470OPdF72fOsLXx5QbTiuG6XU2GlqvzcLMjAGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWIKdw4Ym+SAUWuwzXhJyjaWWx4MB8GA1UdIwQY MBaAFNTKVdLjuRY8xIi296vmLrJueow4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2Et YTRmMDEyOTNjYzA1LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2EtYTRmMDEyOTNjYzA1 LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMU5zh87q OuTSVBUKVEjw3nmZH681AXWgvjbW7fU1c4HCyygVSF5lX4g6yCZ5PP9tHhH6I5+h F4DBj+ehMhO1TQeyXypdFMIgBsRkHKJDSji7vBNzR4vyppclXHghUsEEAqhXwoqq E64rVFa6B5Mvs8ZHQLBbq1znRW4/KIcaUS15oTe7rji4RlUxf68nO97PXFbfFBAj txzUyUTfGdDM8KOrfG9MsTXbULGeHZJtgZHHdKVpXiHvqb+oNXeMw+z0GqCL9JTL b7ZjE+L/uTvTytkMDosQny7nwIOLBMj5Z7Yxs/i/MpydKSat2vaYaJxnMdz+1UH3 fV4lUiWM/prjMA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:13:23 2025 by rpki-client