This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json) Hash identifier: SEqrZlLSrjSY1isQwkOmf1/hPswX1iSgppzf0Aqui1A= Subject key identifier: 68:CD:41:D3:C7:C4:CF:AB:FE:79:79:6F:2F:13:44:17:9F:88:0C:54 Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Certificate serial: 019B3D911BA15A2F9E5DD5E6C72B1785A080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft Manifest number: 09C0 Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sun 21 Dec 2025 21:01:18 +0000 Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: Z9/PR1jp6PSPzS2FB3BV8HeTHWbAXb1Im8jt0EWWV0U=) 2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:1b:a1:5a:2f:9e:5d:d5:e6:c7:2b:17:85:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 21 21:01:18 2025 GMT Subject: CN=68cd41d3c7c4cfabfe79796f2f1344179f880c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:1e:51:51:d9:23:9b:89:53:dc:3c:fa:b1: 75:25:67:7e:bb:df:17:e5:59:5f:af:84:80:ae:87: fe:f4:35:e4:21:72:d1:3a:4e:da:7c:15:17:a3:a7: 6a:72:8a:b3:58:01:2a:a5:b4:da:09:40:8a:62:91: b3:37:a3:ab:b7:9b:01:93:e0:94:18:6d:52:cf:14: d0:35:fc:c8:d3:89:5f:34:16:b8:cf:39:72:cd:6f: 86:b3:be:da:cd:dd:63:88:29:42:ee:d7:a2:5d:7d: ea:18:96:48:90:5b:86:17:7b:a6:af:fb:a8:50:28: 8b:96:a2:03:78:2a:2b:58:95:a1:9d:41:56:2f:2e: ce:95:29:80:28:76:a5:a2:2b:51:81:72:f0:87:b5: 40:95:76:69:d7:80:04:7f:4d:c2:c6:0c:5b:2e:9c: 04:0d:06:66:d2:84:e8:53:97:b8:ea:a4:d6:ff:e8: 4c:26:99:cc:66:56:4f:38:2e:ad:e7:aa:d3:53:57: e4:6a:78:2c:a0:5b:bb:ef:a7:e3:98:56:6f:f5:b5: 83:b3:29:c8:d7:93:76:0e:eb:c7:dc:8b:99:6a:a1: ee:f4:70:b5:6a:db:8c:99:19:dd:dd:f6:86:71:e4: fc:dc:93:5f:72:4a:c7:1e:bc:57:64:5f:4f:40:cf: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:41:D3:C7:C4:CF:AB:FE:79:79:6F:2F:13:44:17:9F:88:0C:54 X509v3 Authority Key Identifier: keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:20:a3:8c:f8:9b:fe:98:b9:8b:74:14:0a:28:9a:b4:c8:2c: 4d:5d:f9:40:98:bc:d1:c8:d7:38:09:c9:33:66:a4:37:6a:87: 06:88:17:a3:fb:6b:8b:2d:e1:fa:45:04:8b:05:8f:d8:c7:22: 8f:38:79:09:06:49:a6:96:e8:62:3e:59:02:51:58:9e:94:2b: a6:52:f6:48:16:0a:8a:17:12:f4:6e:bb:08:f2:bf:79:ea:3c: 28:e2:3a:87:91:76:84:dd:22:61:92:f0:12:39:13:85:71:60: c2:03:ef:0e:b0:0a:c3:56:2e:95:80:8f:23:71:81:04:0a:61: 08:25:34:ab:db:21:38:0c:8d:b8:32:fe:31:c6:0c:03:ad:66: 62:6b:86:c4:83:41:9a:21:72:af:18:28:95:57:ca:cb:ec:73: 63:0e:e8:1b:0a:25:16:79:f0:8e:29:71:94:fe:e4:08:e6:d0: 76:b4:f0:ce:40:67:20:cb:4e:87:33:0b:9c:28:c8:5f:c2:20: 7d:b8:e2:17:f8:50:ed:ee:ca:47:5b:7f:d1:51:6a:b2:71:70: 3a:b0:92:cf:93:2d:6e:57:83:35:75:19:31:c3:23:47:54:0b: 0b:fa:b4:8a:e6:a0:cd:d5:00:15:30:52:44:31:0f:b3:10:ac: 5b:cb:67:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRuhWi+eXdXmxysXhaCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3 ZjcyMGEwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjIxMjEwMTE4WjAzMTEwLwYDVQQD Eyg2OGNkNDFkM2M3YzRjZmFiZmU3OTc5NmYyZjEzNDQxNzlmODgwYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6AeUVHZI5uJU9w8+rF1JWd+u98X 5Vlfr4SArof+9DXkIXLROk7afBUXo6dqcoqzWAEqpbTaCUCKYpGzN6Ort5sBk+CU GG1SzxTQNfzI04lfNBa4zzlyzW+Gs77azd1jiClC7teiXX3qGJZIkFuGF3umr/uo UCiLlqIDeCorWJWhnUFWLy7OlSmAKHaloitRgXLwh7VAlXZp14AEf03CxgxbLpwE DQZm0oToU5e46qTW/+hMJpnMZlZPOC6t56rTU1fkangsoFu776fjmFZv9bWDsynI 15N2DuvH3IuZaqHu9HC1atuMmRnd3faGceT83JNfckrHHrxXZF9PQM9x/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjNQdPHxM+r/nl5by8TRBefiAxUMB8GA1UdIwQY MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSCjjPib /pi5i3QUCiiatMgsTV35QJi80cjXOAnJM2akN2qHBogXo/triy3h+kUEiwWP2Mci jzh5CQZJppboYj5ZAlFYnpQrplL2SBYKihcS9G67CPK/eeo8KOI6h5F2hN0iYZLw EjkThXFgwgPvDrAKw1YulYCPI3GBBAphCCU0q9shOAyNuDL+McYMA61mYmuGxINB miFyrxgolVfKy+xzYw7oGwolFnnwjilxlP7kCObQdrTwzkBnIMtOhzMLnCjIX8Ig fbjiF/hQ7e7KR1t/0VFqsnFwOrCSz5MtbleDNXUZMcMjR1QLC/q0iuagzdUAFTBS RDEPsxCsW8tnjA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:37 2025 by rpki-client