This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json) Hash identifier: JkCc0h/m7qUuwxPuDG5zSl6640vcM+rnISBP/RvDh50= Subject key identifier: E8:E0:B4:D7:79:CC:87:A1:72:C5:22:3E:2B:6B:61:55:F3:AE:3F:08 Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Certificate serial: 019B3A587070ACAA72810C598818E0A0DE6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft Manifest number: 1282 Signing time: Sat 20 Dec 2025 06:00:32 +0000 Manifest this update: Sat 20 Dec 2025 06:00:32 +0000 Manifest next update: Sun 21 Dec 2025 06:00:32 +0000 Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: NxjZAn9++wPG4Nw1+0EF/MygLjMrirllxjMzcUfjxv8=) 2: 52omqQEuqym82ipU0hYmrHOmv0Q.roa (hash: XCFx/COmHu6CZIYbc3sid+Zpv5Ax1Cs1bDV/hO9qIaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:70:70:ac:aa:72:81:0c:59:88:18:e0:a0:de:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Validity Not Before: Dec 20 06:00:32 2025 GMT Not After : Dec 21 06:00:32 2025 GMT Subject: CN=e8e0b4d779cc87a172c5223e2b6b6155f3ae3f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:c8:6e:1b:34:1f:42:11:5c:21:19:e1:68: 13:a0:1b:e7:1f:d8:22:ce:4e:ae:21:85:84:b9:19: 76:2b:60:72:0a:bf:91:a5:2c:9b:0d:32:71:2e:2f: 03:cb:d2:f3:9d:3b:9f:d1:71:21:42:a4:93:35:ff: 27:40:84:48:4b:6f:df:5c:25:47:9f:4e:25:b0:ba: cd:02:a0:25:e9:4c:30:0f:1d:84:67:b8:c9:9b:56: 83:e7:93:93:82:e7:23:9e:06:62:24:4c:eb:e6:c2: 69:d5:53:71:d0:dc:27:fa:0d:3b:0f:5d:56:45:bd: 03:a8:4f:11:68:48:db:0b:5e:ed:a9:00:03:4b:a8: 25:36:16:f9:4d:f9:73:aa:ba:82:7a:47:6f:dd:6a: 30:6d:42:a8:49:f3:2c:99:63:7b:0f:8e:3d:49:53: db:1a:4f:d1:30:76:f3:47:da:a2:fa:68:8a:5d:02: ed:66:6e:32:7d:45:0a:92:45:52:94:92:94:00:ab: 5a:8b:eb:22:e5:db:eb:db:2d:6f:17:2e:20:1f:17: 90:60:41:18:9f:ef:85:b3:a7:9c:bf:98:5b:2d:b9: 71:21:50:2a:91:51:ab:54:95:c1:b1:60:ce:28:6e: 0c:c0:6b:35:cc:b9:94:f7:49:36:1d:18:bf:26:53: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E0:B4:D7:79:CC:87:A1:72:C5:22:3E:2B:6B:61:55:F3:AE:3F:08 X509v3 Authority Key Identifier: keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ad:52:62:aa:e3:bb:db:44:ea:86:42:d9:85:ab:02:44:55: b5:93:2b:af:a8:10:c3:d3:de:a7:00:a9:33:74:f4:f0:bb:7e: b6:5a:d4:25:1b:23:2b:8c:12:10:6d:a4:0c:8a:e4:f0:75:62: dd:41:91:51:ad:18:af:c4:e3:89:64:33:46:c5:5c:04:97:2d: 98:01:fe:23:31:0c:0f:3e:5e:4b:33:12:ea:09:ea:04:e7:97: 68:ad:7c:91:de:a9:39:63:b5:6b:49:84:cc:19:c6:cb:27:a5: f8:97:87:9a:d1:50:0e:78:75:c2:98:ce:e4:c3:57:94:5e:18: 0d:e7:2a:fe:92:88:c3:67:4a:62:7f:17:a2:fc:4c:e4:dc:39: a4:28:2c:f3:f6:7f:ef:c2:74:a4:b8:2c:34:56:56:aa:88:ef: a3:88:ab:25:3a:73:63:dd:eb:e0:fa:c2:79:69:9a:02:6c:9b: 57:d8:61:4b:18:97:21:e0:be:ad:cc:9b:cb:78:56:ef:6b:78: cb:5b:7b:8b:e8:77:1d:ea:e8:f1:ab:f7:59:bf:de:b8:20:6b: 0f:ae:fe:0a:c7:65:90:8e:08:74:f5:bd:f4:52:9c:35:e8:a1: 9d:fc:da:bb:d0:c6:23:80:37:b9:3d:77:3a:da:97:c2:c7:7d: 07:26:f2:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHBwrKpygQxZiBjgoN5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi NmMxODQwHhcNMjUxMjIwMDYwMDMyWhcNMjUxMjIxMDYwMDMyWjAzMTEwLwYDVQQD EyhlOGUwYjRkNzc5Y2M4N2ExNzJjNTIyM2UyYjZiNjE1NWYzYWUzZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAfIbhs0H0IRXCEZ4WgToBvnH9gi zk6uIYWEuRl2K2ByCr+RpSybDTJxLi8Dy9LznTuf0XEhQqSTNf8nQIRIS2/fXCVH n04lsLrNAqAl6UwwDx2EZ7jJm1aD55OTgucjngZiJEzr5sJp1VNx0Nwn+g07D11W Rb0DqE8RaEjbC17tqQADS6glNhb5TflzqrqCekdv3WowbUKoSfMsmWN7D449SVPb Gk/RMHbzR9qi+miKXQLtZm4yfUUKkkVSlJKUAKtai+si5dvr2y1vFy4gHxeQYEEY n++Fs6ecv5hbLblxIVAqkVGrVJXBsWDOKG4MwGs1zLmU90k2HRi/JlP4IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjgtNd5zIehcsUiPitrYVXzrj8IMB8GA1UdIwQY MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaa1SYqrj u9tE6oZC2YWrAkRVtZMrr6gQw9PepwCpM3T08Lt+tlrUJRsjK4wSEG2kDIrk8HVi 3UGRUa0Yr8TjiWQzRsVcBJctmAH+IzEMDz5eSzMS6gnqBOeXaK18kd6pOWO1a0mE zBnGyyel+JeHmtFQDnh1wpjO5MNXlF4YDecq/pKIw2dKYn8XovxM5Nw5pCgs8/Z/ 78J0pLgsNFZWqojvo4irJTpzY93r4PrCeWmaAmybV9hhSxiXIeC+rcyby3hW72t4 y1t7i+h3Hero8av3Wb/euCBrD67+CsdlkI4IdPW99FKcNeihnfzau9DGI4A3uT13 OtqXwsd9BybyPQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:30 2025 by rpki-client