This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json) Hash identifier: 7CFdY2/6WUNWoPqxf9CzQtO0plxwozKARMPYa4pyX7g= Subject key identifier: 7D:14:A1:85:F3:A3:1F:3F:88:F0:89:AF:6B:45:B9:B2:7F:F5:DA:BD Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23 Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223 Certificate serial: 019B3A90820D502D04672CC1A8849CCD6FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft Manifest number: 03F8 Signing time: Sat 20 Dec 2025 07:01:47 +0000 Manifest this update: Sat 20 Dec 2025 07:01:47 +0000 Manifest next update: Sun 21 Dec 2025 07:01:47 +0000 Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: LsKFxOOCNK9HC6EunYLRMrteC0OTJWOfQ2OCHtC/OI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:82:0d:50:2d:04:67:2c:c1:a8:84:9c:cd:6f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223 Validity Not Before: Dec 20 07:01:47 2025 GMT Not After : Dec 21 07:01:47 2025 GMT Subject: CN=7d14a185f3a31f3f88f089af6b45b9b27ff5dabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:65:66:5a:18:56:68:12:e3:7c:0e:65:87: d0:7d:86:95:8b:cc:23:ef:00:b8:b2:0a:ee:33:87: fe:b5:ce:b9:78:38:03:ee:2b:1c:76:f4:a9:e5:ae: fe:82:34:0e:7a:94:de:d0:94:ac:64:c4:02:c3:14: 42:e9:56:dd:c9:3d:92:42:76:6a:5d:8a:d5:a3:60: 08:75:62:38:8b:51:df:d1:7a:75:20:de:2c:c5:ce: 04:96:6a:2f:fb:6a:0d:10:70:1e:83:81:14:0f:c3: 8c:a3:2f:ec:02:5c:5c:32:52:c2:7c:e3:e4:f2:36: 6b:02:db:6f:a7:6e:a0:6a:ed:dc:8e:83:31:a3:4e: 8f:70:4a:55:28:fd:c6:f9:d0:ae:88:f2:63:72:bd: c1:aa:2e:d0:03:90:6a:5e:11:cf:dd:6e:ea:53:97: 42:97:c4:fc:e0:0f:59:73:45:fc:59:b2:e9:8c:30: d9:cf:ab:c1:15:ee:19:5f:9d:35:41:b0:98:6b:8b: c7:70:a0:d6:c1:1e:ca:2f:7b:81:32:21:dd:43:56: ec:46:45:ae:fc:fc:cd:95:e5:5a:9e:d8:d7:10:88: 02:c3:ca:dc:6c:1e:44:db:35:a4:60:43:ec:e4:ea: fd:9b:09:c6:5c:c1:6c:b7:66:61:aa:71:cb:bc:02: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:14:A1:85:F3:A3:1F:3F:88:F0:89:AF:6B:45:B9:B2:7F:F5:DA:BD X509v3 Authority Key Identifier: keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:44:a4:75:2c:8e:b2:a6:1a:39:24:82:84:0f:39:f8:75:46: 2f:a2:aa:4f:08:f4:a7:33:48:85:b4:fb:cf:a6:3f:98:19:b2: f7:d9:12:d4:9d:17:79:64:fc:25:88:4d:d3:27:06:c5:42:1a: 0f:14:5e:ee:dc:c8:56:5e:ef:18:a7:fa:64:2a:55:0c:17:c4: 7a:da:32:81:e7:19:bf:ae:27:5d:1d:ae:52:a0:cc:d6:84:cb: 18:24:ad:a2:0d:96:fb:aa:2b:c8:05:f9:bc:de:e3:a4:3a:2f: 09:0c:fa:14:d5:11:79:c1:60:91:70:2e:b2:94:a9:c6:3d:c0: 3d:21:a3:59:d8:18:35:b8:1a:81:e1:dd:e2:8e:65:77:5c:88: d2:3a:c2:24:eb:24:5a:bf:ef:9d:bd:ab:b5:ae:69:29:3a:f7: 08:8e:c8:c9:90:03:ec:0e:01:b2:47:54:e6:6b:4a:8f:52:df: b0:37:22:05:e1:95:80:31:dd:ec:18:c8:35:e0:22:72:02:ff: 16:01:4e:a4:86:d7:9b:c7:1d:a8:99:01:41:60:fe:bc:b8:0d: 6c:f7:95:79:57:89:49:c5:1e:8b:34:55:d2:21:c8:46:35:af: b0:09:99:62:33:19:47:cb:35:e2:1c:f6:58:f3:fa:ae:cf:24: 47:41:20:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kIINUC0EZyzBqISczW/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWY4MTc1MjNjNzBlNzI3MGQyYWVlNWEyYjZkNzI1NmEy MzQyMjMwHhcNMjUxMjIwMDcwMTQ3WhcNMjUxMjIxMDcwMTQ3WjAzMTEwLwYDVQQD Eyg3ZDE0YTE4NWYzYTMxZjNmODhmMDg5YWY2YjQ1YjliMjdmZjVkYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7xlZloYVmgS43wOZYfQfYaVi8wj 7wC4sgruM4f+tc65eDgD7iscdvSp5a7+gjQOepTe0JSsZMQCwxRC6VbdyT2SQnZq XYrVo2AIdWI4i1Hf0Xp1IN4sxc4Elmov+2oNEHAeg4EUD8OMoy/sAlxcMlLCfOPk 8jZrAttvp26gau3cjoMxo06PcEpVKP3G+dCuiPJjcr3Bqi7QA5BqXhHP3W7qU5dC l8T84A9Zc0X8WbLpjDDZz6vBFe4ZX501QbCYa4vHcKDWwR7KL3uBMiHdQ1bsRkWu /PzNleVantjXEIgCw8rcbB5E2zWkYEPs5Or9mwnGXMFst2ZhqnHLvAKYRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0UoYXzox8/iPCJr2tFubJ/9dq9MB8GA1UdIwQY MBaAFNXvgXUjxw5ycNKu5aK21yVqI0IjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWUtQmRTUEhEbkp3MHE3bG9yYlhKV29qUWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTRiMjAtMDljYi00NmViLTg5NzQt NGRmMjA4NDJlNDYwLzEvMWUtQmRTUEhEbkp3MHE3bG9yYlhKV29qUWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wOTRiMjAtMDljYi00NmViLTg5NzQtNGRmMjA4NDJlNDYw LzEvMWUtQmRTUEhEbkp3MHE3bG9yYlhKV29qUWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUSkdSyO sqYaOSSChA85+HVGL6KqTwj0pzNIhbT7z6Y/mBmy99kS1J0XeWT8JYhN0ycGxUIa DxRe7tzIVl7vGKf6ZCpVDBfEetoygecZv64nXR2uUqDM1oTLGCStog2W+6oryAX5 vN7jpDovCQz6FNURecFgkXAuspSpxj3APSGjWdgYNbgageHd4o5ld1yI0jrCJOsk Wr/vnb2rta5pKTr3CI7IyZAD7A4BskdU5mtKj1LfsDciBeGVgDHd7BjINeAicgL/ FgFOpIbXm8cdqJkBQWD+vLgNbPeVeVeJScUeizRV0iHIRjWvsAmZYjMZR8s14hz2 WPP6rs8kR0EgiA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:04 2025 by rpki-client