This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft File: 1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json) Hash identifier: BW4YGTqdlBOP7num6MzRTl2FThFY9/QwbVtezNcGkEI= Subject key identifier: 89:9B:92:51:3F:B2:60:5E:95:A1:13:F5:D4:8F:72:4A:CF:1D:30:76 Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Certificate serial: 019B3C7EAEF2E376CF7649EEA638D02DF390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft Manifest number: 0CB0 Signing time: Sat 20 Dec 2025 16:01:33 +0000 Manifest this update: Sat 20 Dec 2025 16:01:33 +0000 Manifest next update: Sun 21 Dec 2025 16:01:33 +0000 Files and hashes: 1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: DBXJaBPtIpJmzPCbj87yfwXXrRM+l+gtQsvGV0pYJFQ=) 2: RrIUgGzA_6uRGMIHp97XatRgZIk.roa (hash: 3NT/lPqavpni/vGyQU257tSAfic3v6CA2/+wCtzuUCs=) 3: ebY0ybGhZip6V6HRTLpeSE7O7sw.roa (hash: CjnZtq5jk1id0rS9srgQaW3rR6nXLv2/QKmxK7hdv7k=) 4: exoVO57OcVlbrW3dFlqxMbRV-3k.roa (hash: 4+wfdmERPGk5rVct3syoULulD0ss2tRDAHPKy/Fy+vE=) 5: rYYW7WMqtpYi4D6CLqrYoLO5mNg.roa (hash: f6/pTbyCuVSw0vzY+a+MjWpCCLP6pCY1EIIjbucvXHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:ae:f2:e3:76:cf:76:49:ee:a6:38:d0:2d:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Validity Not Before: Dec 20 16:01:33 2025 GMT Not After : Dec 21 16:01:33 2025 GMT Subject: CN=899b92513fb2605e95a113f5d48f724acf1d3076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:d0:9e:10:e5:f7:ca:db:49:73:86:07:99: 08:03:d3:50:7e:08:6a:9d:dd:a6:46:33:b5:a3:3e: 3e:cd:c2:e8:b8:d1:2c:9d:1e:3e:6b:05:11:60:b7: 31:d0:5b:b2:3a:0b:91:83:7f:76:97:48:fb:f6:cd: 30:cb:db:19:00:7c:20:c5:3b:ed:22:78:6c:39:39: a8:1a:93:9e:33:93:a2:3e:b6:16:6b:e5:c3:23:37: c6:70:25:54:04:3d:9b:de:83:3f:65:d4:bc:9d:d8: 6d:71:b1:68:12:8e:f4:df:c1:09:6d:60:8c:c7:c0: ee:3e:23:48:0b:d8:9a:f5:d8:aa:dc:df:6d:52:fd: 52:e2:de:8f:fd:5d:f4:ee:5a:1b:73:7e:ad:e5:21: dd:8f:b4:8b:c4:8f:0b:e4:63:44:93:d6:0d:12:52: 56:8c:36:03:33:92:5a:92:f6:43:27:e7:6f:55:bb: cc:19:51:d1:de:d0:97:3a:4a:c1:ed:e0:72:14:37: fd:59:5f:f1:97:f7:b2:1b:52:8a:d9:45:2e:ca:10: 5f:f6:a7:fa:ab:90:fb:26:48:04:c3:a2:8f:98:47: 58:af:d8:78:5d:dc:e7:16:e8:ba:2a:30:e5:27:fd: 26:ed:70:20:18:30:b4:d0:ac:5c:1c:af:5f:7d:6f: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:92:51:3F:B2:60:5E:95:A1:13:F5:D4:8F:72:4A:CF:1D:30:76 X509v3 Authority Key Identifier: keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:20:af:84:8e:be:f4:ba:a3:7c:07:bc:63:ac:67:b4:1b:86: 44:a0:c9:99:80:04:06:79:3e:2c:6e:0d:3e:b3:93:b4:1f:5c: ef:9d:9f:f2:2e:63:8f:95:08:24:30:01:04:90:61:41:f0:d9: e7:39:54:ff:25:00:b2:79:98:33:26:ab:3e:86:9e:a4:bd:ff: f7:ab:11:16:b9:18:cd:e2:ad:ef:80:e5:06:08:83:84:18:1c: 8b:6b:7f:6c:15:8f:43:b7:2d:c2:aa:9b:70:20:1a:c3:82:7d: f4:f4:cf:31:77:57:87:21:2b:b2:07:45:32:85:3a:2b:2d:bf: d9:a6:b5:5a:c1:79:39:00:17:51:f9:c8:57:79:85:f7:08:54: 41:fc:af:5e:50:03:80:71:47:41:f2:35:fc:7f:71:b5:60:86: 39:4e:75:69:9c:f6:8c:6a:48:c8:b5:20:a7:ff:57:c0:ef:f3: 02:b6:fa:ed:ad:da:d5:eb:77:40:91:db:f0:f9:58:85:d5:0e: 93:ea:9b:3c:33:21:4a:d8:df:65:a6:5c:3a:92:b0:8f:db:82: b0:68:a4:13:fb:bb:24:a1:fa:39:95:df:73:68:79:06:ab:6a: c9:8d:28:b5:36:53:2a:c0:97:30:cb:06:c2:23:ad:98:f4:50: f9:4d:ed:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fq7y43bPdknupjjQLfOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy ZDhlNjMwHhcNMjUxMjIwMTYwMTMzWhcNMjUxMjIxMTYwMTMzWjAzMTEwLwYDVQQD Eyg4OTliOTI1MTNmYjI2MDVlOTVhMTEzZjVkNDhmNzI0YWNmMWQzMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/7QnhDl98rbSXOGB5kIA9NQfghq nd2mRjO1oz4+zcLouNEsnR4+awURYLcx0FuyOguRg392l0j79s0wy9sZAHwgxTvt InhsOTmoGpOeM5OiPrYWa+XDIzfGcCVUBD2b3oM/ZdS8ndhtcbFoEo7038EJbWCM x8DuPiNIC9ia9diq3N9tUv1S4t6P/V307lobc36t5SHdj7SLxI8L5GNEk9YNElJW jDYDM5JakvZDJ+dvVbvMGVHR3tCXOkrB7eByFDf9WV/xl/eyG1KK2UUuyhBf9qf6 q5D7JkgEw6KPmEdYr9h4XdznFui6KjDlJ/0m7XAgGDC00KxcHK9ffW/ipQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImbklE/smBelaET9dSPckrPHTB2MB8GA1UdIwQY MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt MDc3MTFlZDAyYjc1LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1 LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryCvhI6+ 9LqjfAe8Y6xntBuGRKDJmYAEBnk+LG4NPrOTtB9c752f8i5jj5UIJDABBJBhQfDZ 5zlU/yUAsnmYMyarPoaepL3/96sRFrkYzeKt74DlBgiDhBgci2t/bBWPQ7ctwqqb cCAaw4J99PTPMXdXhyErsgdFMoU6Ky2/2aa1WsF5OQAXUfnIV3mF9whUQfyvXlAD gHFHQfI1/H9xtWCGOU51aZz2jGpIyLUgp/9XwO/zArb67a3a1et3QJHb8PlYhdUO k+qbPDMhStjfZaZcOpKwj9uCsGikE/u7JKH6OZXfc2h5BqtqyY0otTZTKsCXMMsG wiOtmPRQ+U3t2w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:34:17 2025 by rpki-client