This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json) Hash identifier: dCUJtB6bWgWDlOIF9QKU/FSnJREFV5dPi5CpjuiczZw= Subject key identifier: 3B:97:B2:48:51:7E:16:5C:E5:F8:8B:8D:1E:4F:52:28:94:0B:36:3B Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0 Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0 Certificate serial: 019B45822BEE4886B1BB139ECEDCE83FA99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft Manifest number: 15FE Signing time: Mon 22 Dec 2025 10:01:57 +0000 Manifest this update: Mon 22 Dec 2025 10:01:57 +0000 Manifest next update: Tue 23 Dec 2025 10:01:57 +0000 Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=) 2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: /1WsMVRBVDmndwrQY235O44IgbqF/DRadquW1lNJeT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:82:2b:ee:48:86:b1:bb:13:9e:ce:dc:e8:3f:a9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0 Validity Not Before: Dec 22 10:01:57 2025 GMT Not After : Dec 23 10:01:57 2025 GMT Subject: CN=3b97b248517e165ce5f88b8d1e4f5228940b363b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:33:cb:a2:2a:d7:2b:75:90:f0:15:95:52: aa:e4:83:1d:77:f7:46:07:47:30:bb:dc:16:6b:49: 07:a9:79:45:33:3e:83:22:a4:a4:11:f5:42:65:33: f2:11:0c:c2:b8:51:17:0a:b8:45:de:cf:97:bc:46: 43:fd:79:3f:15:06:bb:55:dd:23:ec:b7:38:e2:9a: 5a:63:f8:c0:28:c9:8d:6a:ae:76:86:2d:29:a6:ba: 38:d3:4d:c0:31:aa:40:27:e8:a0:f6:31:21:8c:dd: 98:e2:d4:2b:8c:71:c5:ea:0f:0a:9a:ab:8c:8f:09: c3:f3:55:2d:4c:30:9c:3e:fe:6e:88:26:0f:15:35: 8a:0d:6d:dc:d5:aa:96:b8:8b:2a:72:19:3e:72:5b: 04:23:eb:b0:1f:9b:8d:0c:40:23:02:f3:9d:65:12: d7:60:73:b0:b9:46:53:c7:ae:f1:cf:e4:e9:96:a8: e4:e4:6a:47:79:37:ac:3f:3e:7a:ec:62:43:d1:73: da:79:87:a5:ce:ec:67:40:a6:2d:43:e9:30:2e:cc: 17:de:82:0d:d3:f3:0d:68:0a:8a:5c:ae:16:65:9f: ed:55:4f:b9:20:07:7b:5d:54:b6:cc:2d:bf:23:e0: a1:c3:ed:21:e8:54:4a:2d:12:10:89:b7:5c:b0:4a: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:97:B2:48:51:7E:16:5C:E5:F8:8B:8D:1E:4F:52:28:94:0B:36:3B X509v3 Authority Key Identifier: keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:4e:9a:8e:d9:f3:33:5e:c0:5b:7b:6a:04:62:6e:ab:aa:ba: c9:92:23:47:50:6b:53:02:26:ae:1f:ac:2b:c8:2b:41:c6:f0: 1f:7d:59:1e:ec:e5:07:39:9b:27:89:42:85:ab:2a:99:22:5d: da:7e:f1:58:d7:4f:2d:81:e4:0e:39:a3:6f:b4:83:73:4f:53: d9:fe:e2:d3:ee:56:48:4a:c0:8c:33:bc:f6:67:40:07:8f:e0: a0:dc:95:fe:ef:3c:39:12:78:ba:02:0d:d3:1f:e9:cf:65:a8: 4d:08:4f:fa:07:40:cf:d4:70:0b:66:05:12:4a:cd:b0:78:66: 4c:39:76:56:a3:b2:76:6f:ab:d3:1d:f3:22:39:4c:d8:f3:86: 4f:c2:55:41:4f:85:a6:4f:9a:73:54:e1:12:d1:59:54:00:df: 80:55:0b:9c:5a:23:d8:57:d7:18:d9:df:2b:f6:cf:13:3e:a7: 9b:de:48:b3:18:91:db:31:9b:f7:0b:67:59:45:8d:5e:9b:0a: 70:39:48:5a:d6:1e:22:47:0c:28:a4:0f:e9:25:73:c3:c9:be: 73:96:73:8b:3d:41:3f:98:c1:c1:59:89:09:c5:f2:a4:3f:17: 66:ff:7a:b3:e0:7a:8c:e8:17:b3:dc:f3:c6:5a:33:9a:3c:af: 33:f6:d0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgivuSIaxuxOeztzoP6meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWU2Nzk5YmM1Y2EyODVhMzc2MzcyZjBiNjM0NWRmZmM4 N2I4YzAwHhcNMjUxMjIyMTAwMTU3WhcNMjUxMjIzMTAwMTU3WjAzMTEwLwYDVQQD EygzYjk3YjI0ODUxN2UxNjVjZTVmODhiOGQxZTRmNTIyODk0MGIzNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwzy6Iq1yt1kPAVlVKq5IMdd/dG B0cwu9wWa0kHqXlFMz6DIqSkEfVCZTPyEQzCuFEXCrhF3s+XvEZD/Xk/FQa7Vd0j 7Lc44ppaY/jAKMmNaq52hi0ppro4003AMapAJ+ig9jEhjN2Y4tQrjHHF6g8KmquM jwnD81UtTDCcPv5uiCYPFTWKDW3c1aqWuIsqchk+clsEI+uwH5uNDEAjAvOdZRLX YHOwuUZTx67xz+Tplqjk5GpHeTesPz567GJD0XPaeYelzuxnQKYtQ+kwLswX3oIN 0/MNaAqKXK4WZZ/tVU+5IAd7XVS2zC2/I+Chw+0h6FRKLRIQibdcsEr/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuXskhRfhZc5fiLjR5PUiiUCzY7MB8GA1UdIwQY MBaAFNUeZ5m8XKKFo3Y3LwtjRd/8h7jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEt OWNhMjUxYzA1NDhiLzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEtOWNhMjUxYzA1NDhi LzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6E6ajtnz M17AW3tqBGJuq6q6yZIjR1BrUwImrh+sK8grQcbwH31ZHuzlBzmbJ4lChasqmSJd 2n7xWNdPLYHkDjmjb7SDc09T2f7i0+5WSErAjDO89mdAB4/goNyV/u88ORJ4ugIN 0x/pz2WoTQhP+gdAz9RwC2YFEkrNsHhmTDl2VqOydm+r0x3zIjlM2POGT8JVQU+F pk+ac1ThEtFZVADfgFULnFoj2FfXGNnfK/bPEz6nm95IsxiR2zGb9wtnWUWNXpsK cDlIWtYeIkcMKKQP6SVzw8m+c5Zziz1BP5jBwVmJCcXypD8XZv96s+B6jOgXs9zz xlozmjyvM/bQxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:09 2025 by rpki-client