This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json) Hash identifier: d8yatuXcAisVPJYxEm8PygclfYqVQTM0RFnK6Y6UwcU= Subject key identifier: 1E:2E:31:12:10:97:BC:63:43:F1:6B:59:4A:B8:12:08:A6:3F:AD:02 Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2 Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2 Certificate serial: 019B3BA1FC2FC3F7958768981C004522BF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft Manifest number: 0EEB Signing time: Sat 20 Dec 2025 12:00:30 +0000 Manifest this update: Sat 20 Dec 2025 12:00:30 +0000 Manifest next update: Sun 21 Dec 2025 12:00:30 +0000 Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: CKo0kbN2iOOxxtT+LtoSsPGRRFaOnB9var20114acs0=) 2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=) 3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a1:fc:2f:c3:f7:95:87:68:98:1c:00:45:22:bf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2 Validity Not Before: Dec 20 12:00:30 2025 GMT Not After : Dec 21 12:00:30 2025 GMT Subject: CN=1e2e31121097bc6343f16b594ab81208a63fad02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:cb:fe:d6:4d:c4:38:f9:af:9b:48:9f:22: f5:8a:12:cf:d9:72:8e:06:f2:e2:a4:b3:fd:c1:69: 39:29:23:91:44:11:b4:14:3b:45:bc:29:3f:23:eb: ff:ec:78:7f:1e:94:ed:84:bf:45:b3:bf:c9:6f:dc: 04:be:3a:3e:a2:c7:b0:ed:f2:7b:53:05:31:aa:1d: e6:b2:13:92:db:a3:38:99:f0:9a:59:76:49:17:5e: 8b:11:b2:cd:fa:cf:c1:5c:d0:b6:ba:23:d0:cd:54: 54:7a:84:24:76:e4:cf:2c:78:30:83:fc:e2:51:4a: 00:b1:71:eb:80:d1:34:5a:e5:b5:b0:c2:f1:2c:fb: 35:b9:0c:10:c0:98:2b:74:1b:37:ed:a6:23:ed:48: 7c:46:9f:39:98:08:14:af:2c:f5:86:dc:41:5e:ff: f0:bc:fa:29:bd:74:74:a8:03:43:56:db:77:09:47: d3:bb:b0:4e:74:5a:ca:e4:7a:92:8a:0f:85:58:f9: 2b:71:27:94:29:b9:e8:e1:99:1b:80:83:03:24:bf: 33:ac:98:3d:34:9f:d6:f0:72:15:b1:32:cd:b6:58: 96:66:0f:31:0d:ba:1b:12:98:6e:b5:24:8c:b1:4a: dc:10:4d:96:10:d5:a5:3a:69:b4:8f:27:ee:ce:78: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2E:31:12:10:97:BC:63:43:F1:6B:59:4A:B8:12:08:A6:3F:AD:02 X509v3 Authority Key Identifier: keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:8e:9e:5c:ce:fc:99:7b:73:41:e7:27:03:91:b2:cd:d6: 17:0e:b4:7e:50:c1:31:1b:ba:00:d4:5e:27:eb:e5:dc:35:10: f4:f8:a8:61:c7:8b:0f:27:5f:8e:34:eb:23:dd:e2:85:1d:39: 51:7a:f8:c1:2e:38:f1:84:69:85:f9:72:50:2d:c0:d5:f8:e0: f1:9e:eb:48:d4:fd:95:81:90:cb:e6:2a:e4:0b:36:94:9a:93: 4f:77:8e:36:92:28:22:83:91:af:98:a7:9e:27:03:05:1d:fb: 62:27:e2:57:24:bf:60:71:27:65:46:50:5a:63:8f:11:ec:ce: 1c:1d:09:3c:4c:ee:73:16:86:d4:e4:97:0d:27:f9:09:0e:d7: 05:74:6a:4a:01:a4:62:06:1a:05:80:ee:c4:3d:cb:1f:78:16: 46:e4:fa:40:36:c7:a1:4a:17:b3:5b:5c:c6:44:e0:b7:5a:03: 42:11:ed:9d:51:73:78:91:68:38:80:7d:74:c5:a0:22:58:d7: 22:af:0a:fb:5d:e5:0d:ef:8e:ad:f1:fe:33:ae:7f:a5:56:3e: f1:be:34:60:51:11:6a:cd:89:9e:6e:1a:5d:42:a0:9a:8a:47: 28:2c:fd:a0:77:60:32:7f:6e:91:1f:29:73:6b:9e:39:7d:39: cd:23:72:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ofwvw/eVh2iYHABFIr8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjIwY2VjNzA5NzRkMDM3ZDc3Njk3NThjNzQ2NjgzMDVi MzJjZjIwHhcNMjUxMjIwMTIwMDMwWhcNMjUxMjIxMTIwMDMwWjAzMTEwLwYDVQQD EygxZTJlMzExMjEwOTdiYzYzNDNmMTZiNTk0YWI4MTIwOGE2M2ZhZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTLL/tZNxDj5r5tInyL1ihLP2XKO BvLipLP9wWk5KSORRBG0FDtFvCk/I+v/7Hh/HpTthL9Fs7/Jb9wEvjo+osew7fJ7 UwUxqh3mshOS26M4mfCaWXZJF16LEbLN+s/BXNC2uiPQzVRUeoQkduTPLHgwg/zi UUoAsXHrgNE0WuW1sMLxLPs1uQwQwJgrdBs37aYj7Uh8Rp85mAgUryz1htxBXv/w vPopvXR0qANDVtt3CUfTu7BOdFrK5HqSig+FWPkrcSeUKbno4ZkbgIMDJL8zrJg9 NJ/W8HIVsTLNtliWZg8xDbobEphutSSMsUrcEE2WENWlOmm0jyfuzniWoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4uMRIQl7xjQ/FrWUq4EgimP60CMB8GA1UdIwQY MBaAFNViDOxwl00DfXdpdYx0ZoMFsyzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTkt YmU0MzRjYjlmOGY4LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTktYmU0MzRjYjlmOGY4 LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtSOnlzO /Jl7c0HnJwORss3WFw60flDBMRu6ANReJ+vl3DUQ9PioYceLDydfjjTrI93ihR05 UXr4wS448YRphflyUC3A1fjg8Z7rSNT9lYGQy+Yq5As2lJqTT3eONpIoIoORr5in nicDBR37YifiVyS/YHEnZUZQWmOPEezOHB0JPEzucxaG1OSXDSf5CQ7XBXRqSgGk YgYaBYDuxD3LH3gWRuT6QDbHoUoXs1tcxkTgt1oDQhHtnVFzeJFoOIB9dMWgIljX Iq8K+13lDe+OrfH+M65/pVY+8b40YFERas2Jnm4aXUKgmopHKCz9oHdgMn9ukR8p c2ueOX05zSNyBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:34:20 2025 by rpki-client