This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json) Hash identifier: dY9c0LcYR6YawB+Gz6KkE3YqEyavWN7XtbbKgw6munA= Subject key identifier: 52:AB:34:A7:B6:F4:B6:AC:84:E5:0C:48:D1:E8:B0:F4:E8:28:FB:48 Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Certificate serial: 019B66FB74E6A60AAE7EB1AC02932753BF1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft Manifest number: 13B7 Signing time: Sun 28 Dec 2025 22:01:53 +0000 Manifest this update: Sun 28 Dec 2025 22:01:53 +0000 Manifest next update: Mon 29 Dec 2025 22:01:53 +0000 Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: ds05dR8cb1GGFWsMjBn2BkPXOzOI6uFY87eJldY+f7U=) 2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:74:e6:a6:0a:ae:7e:b1:ac:02:93:27:53:bf:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Validity Not Before: Dec 28 22:01:53 2025 GMT Not After : Dec 29 22:01:53 2025 GMT Subject: CN=52ab34a7b6f4b6ac84e50c48d1e8b0f4e828fb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:96:83:56:c5:b8:80:e9:2b:3b:4d:3e:4c: 85:ec:90:d8:6a:64:9f:a4:ba:b8:01:7a:93:d1:f0: 94:f1:cf:a9:5c:0c:60:03:73:e5:06:ab:4e:86:c1: 57:86:20:38:8d:46:b4:82:65:db:8e:45:68:dc:f3: 4c:57:f3:4a:8c:87:ca:16:61:53:a6:64:81:b1:47: 22:bf:42:e5:b4:85:75:c7:3a:d7:ab:06:37:6f:0f: bf:ec:07:1e:67:37:3e:52:24:47:9e:9c:4f:8a:b9: 25:95:33:bb:e2:13:f1:56:fd:fb:29:0c:56:a7:3b: bd:97:c0:95:41:f3:56:0d:48:94:b4:09:c2:19:d0: 81:26:01:c6:b4:07:6f:58:c7:94:42:48:28:df:d0: 23:11:6f:77:ca:1b:81:82:e6:b3:00:9a:91:99:76: 8f:2a:65:46:22:dc:5a:a6:c2:2a:1d:af:e0:8f:66: 79:2f:f0:40:45:04:d4:0a:ab:00:87:f6:3b:46:82: 68:3b:60:ac:88:4f:b0:f1:6e:7a:f1:8b:7b:f9:f9: de:60:2b:7c:3c:f3:e3:ea:6c:01:e2:8d:a0:04:8a: 8e:61:83:9e:3c:cc:03:63:da:0f:1d:f7:62:24:b3: b1:40:3c:6c:6a:99:59:5c:f3:da:12:7a:e7:f2:a2: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AB:34:A7:B6:F4:B6:AC:84:E5:0C:48:D1:E8:B0:F4:E8:28:FB:48 X509v3 Authority Key Identifier: keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b0:c3:0d:17:3b:89:e6:5b:71:45:ef:95:97:5a:16:06:a6: 7d:54:72:e2:bf:e8:df:d4:85:3d:51:de:d6:f0:fd:2e:79:0f: 59:2e:74:0e:82:94:84:ee:f4:b7:b3:41:eb:2f:25:d4:31:c5: fa:12:d3:93:20:00:3a:e5:a8:85:a6:d8:19:fc:f1:ad:83:fd: 1e:99:94:71:54:b7:6f:22:e3:97:f5:36:71:03:31:b8:3c:51: 53:9c:18:a3:16:78:cd:a2:6e:3f:e6:51:8f:3c:5f:c5:31:58: af:65:fe:99:ca:f9:ea:da:f0:bb:2e:78:67:47:22:22:bd:ad: 12:96:90:bb:6b:88:8a:54:ce:09:5f:8a:36:48:22:dc:05:e6: d5:b9:4b:4b:a8:a1:06:85:40:f8:f5:91:70:ce:3f:8e:b1:22: fa:90:3f:75:48:aa:4e:1a:b2:62:e0:39:c1:2a:10:f8:a4:1a: e4:74:9b:1a:ff:95:fd:f6:60:5c:fe:5a:70:4a:e0:fd:06:98: 84:1e:45:3c:8a:48:0f:2f:de:ee:44:84:27:f0:0c:67:ba:8e: 19:da:6e:3f:fe:73:27:83:12:7e:9a:83:7b:d7:9a:0f:6a:de: 57:9c:b8:a1:f7:69:f4:c8:2e:30:aa:70:39:53:c4:7b:3e:7d: a4:be:5e:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+3TmpgqufrGsApMnU78eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi MGM1YWMwHhcNMjUxMjI4MjIwMTUzWhcNMjUxMjI5MjIwMTUzWjAzMTEwLwYDVQQD Eyg1MmFiMzRhN2I2ZjRiNmFjODRlNTBjNDhkMWU4YjBmNGU4MjhmYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte2Wg1bFuIDpKztNPkyF7JDYamSf pLq4AXqT0fCU8c+pXAxgA3PlBqtOhsFXhiA4jUa0gmXbjkVo3PNMV/NKjIfKFmFT pmSBsUciv0LltIV1xzrXqwY3bw+/7AceZzc+UiRHnpxPirkllTO74hPxVv37KQxW pzu9l8CVQfNWDUiUtAnCGdCBJgHGtAdvWMeUQkgo39AjEW93yhuBguazAJqRmXaP KmVGItxapsIqHa/gj2Z5L/BARQTUCqsAh/Y7RoJoO2CsiE+w8W568Yt7+fneYCt8 PPPj6mwB4o2gBIqOYYOePMwDY9oPHfdiJLOxQDxsaplZXPPaEnrn8qKMuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKrNKe29LashOUMSNHosPToKPtIMB8GA1UdIwQY MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It Mjg4M2Y4OGE4NmVjLzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLDDDRc7 ieZbcUXvlZdaFgamfVRy4r/o39SFPVHe1vD9LnkPWS50DoKUhO70t7NB6y8l1DHF +hLTkyAAOuWohabYGfzxrYP9HpmUcVS3byLjl/U2cQMxuDxRU5wYoxZ4zaJuP+ZR jzxfxTFYr2X+mcr56trwuy54Z0ciIr2tEpaQu2uIilTOCV+KNkgi3AXm1blLS6ih BoVA+PWRcM4/jrEi+pA/dUiqThqyYuA5wSoQ+KQa5HSbGv+V/fZgXP5acErg/QaY hB5FPIpIDy/e7kSEJ/AMZ7qOGdpuP/5zJ4MSfpqDe9eaD2reV5y4ofdp9MguMKpw OVPEez59pL5e6A== -----END CERTIFICATE-----Generated at Mon Dec 29 01:09:37 2025 by rpki-client