This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json) Hash identifier: KjjYSKmeAzUWiU6T80Hy7tWTgcfVUs2LGOkZEt+rXys= Subject key identifier: 65:AF:7E:69:A2:11:E7:C1:7F:3F:A3:9B:CF:C6:5A:0F:2F:8C:C9:59 Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93 Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93 Certificate serial: 019B4FCDDFBC8283FA52311693535CC578B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 10:00:50 +0000 Manifest this update: Wed 24 Dec 2025 10:00:50 +0000 Manifest next update: Thu 25 Dec 2025 10:00:50 +0000 Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: lTu+utiSH6do5BInKytLORT9t/LB46CLN7Ac8TZpmPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cd:df:bc:82:83:fa:52:31:16:93:53:5c:c5:78:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93 Validity Not Before: Dec 24 10:00:50 2025 GMT Not After : Dec 25 10:00:50 2025 GMT Subject: CN=65af7e69a211e7c17f3fa39bcfc65a0f2f8cc959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:c0:22:89:68:df:9c:e3:de:90:3f:0f:7c: 15:82:4a:12:cf:22:53:82:84:ce:46:b6:42:c9:7c: 6e:60:74:00:e1:c2:48:3e:b5:1e:fb:eb:3e:38:bb: 0f:22:73:2d:ae:df:6b:f8:64:36:d4:0e:bd:b7:85: 18:f5:d8:cd:65:0b:39:f6:2e:32:44:a6:0a:3a:d9: 7e:28:0a:6d:ab:0d:eb:4d:f1:5d:22:3a:53:b9:7c: 63:c6:ab:94:7b:45:57:46:68:45:07:e5:05:c3:24: 39:e7:7b:06:c3:28:49:a6:31:fe:19:ea:69:6c:0c: d0:0b:ef:fd:41:50:5b:19:cc:f8:96:87:d4:d2:2b: c5:e2:42:9c:56:d5:53:5e:5d:3b:f5:54:61:c6:d9: c7:68:dd:00:ab:12:e5:3d:9c:1e:49:61:ec:47:78: ec:b0:f7:43:fa:2d:9e:f5:b7:e8:06:6a:39:a0:a4: 1b:f1:1b:4f:66:de:83:04:01:32:70:8b:64:1a:12: 40:8a:9b:24:7f:d0:f4:7f:d0:27:82:69:36:db:56: f5:bf:52:a9:94:4d:81:ee:eb:40:d4:8e:a0:9c:92: 5c:23:1c:0b:e2:98:fe:20:b9:ac:cb:08:a2:86:8e: d2:0c:44:24:5f:e4:6f:00:7a:26:0a:6e:90:95:18: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AF:7E:69:A2:11:E7:C1:7F:3F:A3:9B:CF:C6:5A:0F:2F:8C:C9:59 X509v3 Authority Key Identifier: keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:0e:5a:28:fc:d6:55:5a:45:0f:4b:9d:65:82:c9:2e:86: 51:18:51:27:69:15:df:ec:34:f1:5c:b3:c7:a5:5f:00:5b:72: f9:73:12:b9:26:61:12:d3:8c:e8:b4:35:80:b7:f7:a7:a6:70: c8:d8:bc:62:e4:ca:4c:90:4f:9e:10:7b:7c:93:f4:fb:65:da: 74:ac:7f:e3:12:2e:bd:87:e9:1d:27:78:c1:ad:9f:d6:ad:ea: 9a:91:7b:7e:d2:f8:d2:af:62:5d:51:db:88:50:29:34:4e:12: c6:f0:14:7f:f9:40:d9:1d:2f:37:fb:b1:82:87:e3:9e:42:04: ef:ab:fd:10:0d:c2:ca:53:88:e8:18:ec:31:84:c8:46:24:fd: 39:6e:66:d6:63:ff:e0:da:98:6d:8c:b1:bc:a9:f8:91:97:87: ba:ad:00:f1:6d:75:a8:dc:ca:9e:3a:7a:b9:e1:a5:93:d6:ce: 90:c7:e0:51:82:93:2d:fb:ac:77:82:db:be:8b:c5:64:42:f0: f0:33:4b:b6:f2:dc:5a:5f:e4:8a:a6:76:a3:37:23:3a:df:5f: 47:d9:55:cf:24:f6:e4:43:47:81:5b:4a:7a:f5:0a:30:89:13: 8e:fc:58:c4:83:28:16:92:4f:c7:cc:af:24:d1:a4:b2:a2:1e: af:35:5a:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzd+8goP6UjEWk1NcxXi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjE1N2VhNjgyZWY3NGYwZjFlZjY3ZmExZTkxNjBkMTdj ZDJlOTMwHhcNMjUxMjI0MTAwMDUwWhcNMjUxMjI1MTAwMDUwWjAzMTEwLwYDVQQD Eyg2NWFmN2U2OWEyMTFlN2MxN2YzZmEzOWJjZmM2NWEwZjJmOGNjOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLrAIolo35zj3pA/D3wVgkoSzyJT goTORrZCyXxuYHQA4cJIPrUe++s+OLsPInMtrt9r+GQ21A69t4UY9djNZQs59i4y RKYKOtl+KAptqw3rTfFdIjpTuXxjxquUe0VXRmhFB+UFwyQ553sGwyhJpjH+Gepp bAzQC+/9QVBbGcz4lofU0ivF4kKcVtVTXl079VRhxtnHaN0AqxLlPZweSWHsR3js sPdD+i2e9bfoBmo5oKQb8RtPZt6DBAEycItkGhJAipskf9D0f9Angmk221b1v1Kp lE2B7utA1I6gnJJcIxwL4pj+ILmsywiiho7SDEQkX+RvAHomCm6QlRjtWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWvfmmiEefBfz+jm8/GWg8vjMlZMB8GA1UdIwQY MBaAFNWxV+poLvdPDx72f6HpFg0XzS6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYt MDIxYzllZWMwMDc3LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYtMDIxYzllZWMwMDc3 LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD0OWij8 1lVaRQ9LnWWCyS6GURhRJ2kV3+w08Vyzx6VfAFty+XMSuSZhEtOM6LQ1gLf3p6Zw yNi8YuTKTJBPnhB7fJP0+2XadKx/4xIuvYfpHSd4wa2f1q3qmpF7ftL40q9iXVHb iFApNE4SxvAUf/lA2R0vN/uxgofjnkIE76v9EA3CylOI6BjsMYTIRiT9OW5m1mP/ 4NqYbYyxvKn4kZeHuq0A8W11qNzKnjp6ueGlk9bOkMfgUYKTLfusd4LbvovFZELw 8DNLtvLcWl/kiqZ2ozcjOt9fR9lVzyT25ENHgVtKevUKMIkTjvxYxIMoFpJPx8yv JNGksqIerzVaIw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:53:51 2025 by rpki-client