This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json) Hash identifier: QsS8JZpf7on0Rp+l358+mw1in6dbCzQ55SLjZi3ILDE= Subject key identifier: AC:C5:CD:53:8F:E6:8F:0F:49:38:4B:5E:CF:47:FE:6B:FD:4B:36:92 Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Certificate serial: 019B405AC1B1B3595059CEE288A31997CBA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft Manifest number: 13A3 Signing time: Sun 21 Dec 2025 10:00:48 +0000 Manifest this update: Sun 21 Dec 2025 10:00:48 +0000 Manifest next update: Mon 22 Dec 2025 10:00:48 +0000 Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: YYAwebh9ocYnhV4j8vTMkfMOV7Lxb5eC7KkN+f4a+Dw=) 2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:c1:b1:b3:59:50:59:ce:e2:88:a3:19:97:cb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Validity Not Before: Dec 21 10:00:48 2025 GMT Not After : Dec 22 10:00:48 2025 GMT Subject: CN=acc5cd538fe68f0f49384b5ecf47fe6bfd4b3692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:53:ba:0c:9e:db:f5:91:8c:3a:d2:ca:1b: 78:60:8d:5d:f2:b4:a3:84:1b:16:93:79:e8:49:c8: dd:a2:e4:cb:98:80:11:77:cc:2b:82:ab:9e:92:ef: b3:c5:64:fd:b8:ac:6e:1f:34:d3:59:8d:b3:c0:25: ba:f7:f2:5f:31:4b:bf:48:3d:a6:eb:9e:6b:d6:a9: f6:0f:cd:64:ad:37:86:ea:54:a2:ab:e2:7e:88:24: 87:4b:86:eb:9e:ee:3c:06:44:89:56:2c:4d:e6:1e: d8:08:fe:f0:bc:f0:6d:57:5c:bd:f6:71:30:4b:85: 51:43:d3:31:f4:c6:80:c3:93:2a:09:31:21:1a:70: 8e:da:e8:69:57:b8:3a:c0:e3:fa:10:97:e8:90:70: 98:c7:db:83:eb:18:67:a9:0d:46:82:25:61:ec:5a: ae:24:b1:89:57:6c:bd:22:db:5d:0a:4b:f9:54:df: 71:6a:fb:1b:22:51:44:26:0e:4f:d0:ff:1c:cd:5c: 0a:c6:b4:47:ce:eb:cb:ff:e2:dc:a5:c9:08:37:ad: 3f:51:94:68:e9:40:a8:e2:c3:8d:02:5b:b1:8f:42: 44:c7:89:8f:07:b4:0c:fa:19:6f:31:8f:06:01:a5: 2c:60:f5:b0:1c:d2:bc:c4:6e:50:f0:63:b7:b9:5f: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:CD:53:8F:E6:8F:0F:49:38:4B:5E:CF:47:FE:6B:FD:4B:36:92 X509v3 Authority Key Identifier: keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d0:e6:de:dd:ee:49:a7:87:b0:a7:e9:e0:ec:f8:e3:36:4f: 19:12:6d:7a:a4:be:26:0b:13:87:86:1e:d6:8d:1e:93:b6:64: 9b:07:86:1b:46:2d:cc:b8:6c:13:e5:a8:d7:9d:9d:1d:59:6c: 4a:21:4a:12:6c:cf:1b:39:0a:a6:dd:3e:c7:14:82:aa:0e:ef: 9c:ee:71:58:eb:10:a8:e9:3d:0f:e1:15:7b:d5:61:56:a8:b1: 08:f6:df:98:90:95:5e:74:c4:f1:bd:b6:74:e5:06:60:3f:fd: 8e:0a:ab:a0:2e:85:7b:a4:9d:fc:e1:50:8b:ac:fc:98:5d:cf: c5:d8:e8:3b:84:5d:19:a5:4d:a1:26:73:87:c7:19:f2:d8:05: de:de:eb:ab:a0:7a:34:d0:46:ea:4b:70:ac:17:3a:86:74:8b: 3c:9e:f0:f0:96:79:95:db:75:21:26:c3:7b:51:1d:2f:fa:3c: 5c:c2:ba:0a:62:21:83:67:9f:12:f7:46:b4:38:33:be:4d:c8: b0:2a:e9:71:f0:aa:4d:5e:00:ff:4d:ae:2c:64:96:3a:fc:84: 3e:16:a2:1a:83:4c:ec:40:52:21:88:30:70:73:e1:69:af:21: f8:21:13:88:a7:31:e9:52:14:a7:ed:85:f9:a8:29:75:45:0e: 8c:e2:39:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWsGxs1lQWc7iiKMZl8unMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi MGM1YWMwHhcNMjUxMjIxMTAwMDQ4WhcNMjUxMjIyMTAwMDQ4WjAzMTEwLwYDVQQD EyhhY2M1Y2Q1MzhmZTY4ZjBmNDkzODRiNWVjZjQ3ZmU2YmZkNGIzNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQFTugye2/WRjDrSyht4YI1d8rSj hBsWk3noScjdouTLmIARd8wrgqueku+zxWT9uKxuHzTTWY2zwCW69/JfMUu/SD2m 655r1qn2D81krTeG6lSiq+J+iCSHS4brnu48BkSJVixN5h7YCP7wvPBtV1y99nEw S4VRQ9Mx9MaAw5MqCTEhGnCO2uhpV7g6wOP6EJfokHCYx9uD6xhnqQ1GgiVh7Fqu JLGJV2y9IttdCkv5VN9xavsbIlFEJg5P0P8czVwKxrRHzuvL/+LcpckIN60/UZRo 6UCo4sONAluxj0JEx4mPB7QM+hlvMY8GAaUsYPWwHNK8xG5Q8GO3uV9AUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzFzVOP5o8PSThLXs9H/mv9SzaSMB8GA1UdIwQY MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It Mjg4M2Y4OGE4NmVjLzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktDm3t3u SaeHsKfp4Oz44zZPGRJteqS+JgsTh4Ye1o0ek7ZkmweGG0YtzLhsE+Wo152dHVls SiFKEmzPGzkKpt0+xxSCqg7vnO5xWOsQqOk9D+EVe9VhVqixCPbfmJCVXnTE8b22 dOUGYD/9jgqroC6Fe6Sd/OFQi6z8mF3PxdjoO4RdGaVNoSZzh8cZ8tgF3t7rq6B6 NNBG6ktwrBc6hnSLPJ7w8JZ5ldt1ISbDe1EdL/o8XMK6CmIhg2efEvdGtDgzvk3I sCrpcfCqTV4A/02uLGSWOvyEPhaiGoNM7EBSIYgwcHPhaa8h+CETiKcx6VIUp+2F +agpdUUOjOI5dQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:29 2025 by rpki-client