This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json) Hash identifier: q1OapcA+TvY8HbdLKTP53RewpdPPJ/DvLDtqOMT0zqQ= Subject key identifier: CC:48:CD:DE:45:07:CF:62:67:05:21:97:10:8D:CB:3F:AD:2A:B2:BB Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Certificate serial: 019B6A696A5C3EF5A0C93801164D4AABECAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft Manifest number: 0F9A Signing time: Mon 29 Dec 2025 14:00:51 +0000 Manifest this update: Mon 29 Dec 2025 14:00:51 +0000 Manifest next update: Tue 30 Dec 2025 14:00:51 +0000 Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: 28Tm5ypEeyzx83IK4ULw4973ukytNUaVh2c9GQsUcjE=) 2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:6a:5c:3e:f5:a0:c9:38:01:16:4d:4a:ab:ec:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Validity Not Before: Dec 29 14:00:51 2025 GMT Not After : Dec 30 14:00:51 2025 GMT Subject: CN=cc48cdde4507cf6267052197108dcb3fad2ab2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:0e:f2:38:33:fa:ea:1d:9b:97:a1:c7:f4: 4d:36:01:38:a0:01:ec:b9:65:16:4e:fa:9c:e9:0d: d4:dc:f4:9d:9e:e2:a8:fb:5f:25:71:1e:bd:e4:fe: f7:95:26:6e:24:0c:f9:35:0b:1e:78:50:34:86:37: ba:ff:f1:13:b4:c4:d1:76:00:9b:66:0f:ac:79:ce: c4:1a:bb:f4:49:09:cd:dc:08:e6:4f:f8:96:42:23: f8:4d:01:30:c4:bc:01:cb:1b:ad:32:a8:d4:be:f6: ea:ce:72:c8:cd:44:0a:96:56:5a:6b:8b:e2:16:cf: b8:97:b5:e9:3c:52:3a:70:57:ca:77:7c:1d:e9:67: 46:dc:ab:52:71:56:d9:ac:fa:6d:9a:32:5d:15:51: da:b2:fe:f9:bc:a5:9d:59:f6:3d:4c:1b:27:20:2d: a9:d0:41:ae:76:7b:9c:fa:31:a4:fc:b4:4e:56:47: a1:52:9f:10:f2:6a:f2:d6:0a:7a:71:45:0e:de:d2: 6e:7c:12:fe:d9:aa:be:4b:74:ec:a5:70:93:34:41: 57:0d:24:dc:09:57:f4:f6:18:29:8b:08:75:31:70: 2b:c5:41:09:b9:a6:61:cd:ca:2f:99:b2:7c:8f:90: 30:cb:b5:a1:5e:a3:dc:fc:d3:24:aa:fc:30:73:d3: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:CD:DE:45:07:CF:62:67:05:21:97:10:8D:CB:3F:AD:2A:B2:BB X509v3 Authority Key Identifier: keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:22:89:0b:e9:dc:e8:33:eb:b6:a6:17:e1:7d:a5:33:39:07: 80:df:a3:28:50:98:f0:73:c0:11:a7:3d:d2:33:9b:59:cb:93: 30:5d:6f:8b:da:1c:55:ca:0b:81:fb:5f:a2:16:25:75:90:59: dd:e9:be:48:96:cb:42:4f:62:36:ea:d8:ab:6f:17:cc:20:d7: 88:cc:37:78:9c:e5:81:bf:e4:49:c9:1a:9b:32:0c:08:79:f4: 5b:30:78:49:a9:0e:cc:49:86:88:e6:b0:4e:8c:70:6b:27:42: ff:20:5f:0a:25:7b:35:6c:e5:0c:7b:4a:d7:65:76:1d:36:2d: 57:af:25:2e:f6:26:3d:09:68:da:2f:96:80:5d:cc:2e:b3:b4: 9c:4f:d9:bb:d2:33:4b:9c:01:ea:51:66:13:7a:bf:f4:83:85: 46:a5:b9:28:ff:bb:3c:62:5a:ce:eb:18:02:f4:83:0c:21:28: b6:b6:77:2d:c5:0c:af:ff:3c:b3:1d:6f:5c:e9:8c:a0:7b:4d: 21:e8:4c:28:0a:3f:6e:3a:fb:25:06:66:02:12:08:6a:c5:9d: 96:39:b3:d9:fc:45:b7:c5:18:40:33:d2:f1:4f:6c:49:17:df: 0d:93:29:8b:57:8e:16:68:3c:a6:bc:06:41:2c:36:8b:91:0b: 3e:85:af:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaWpcPvWgyTgBFk1Kq+ysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm OWQ3NTEwHhcNMjUxMjI5MTQwMDUxWhcNMjUxMjMwMTQwMDUxWjAzMTEwLwYDVQQD EyhjYzQ4Y2RkZTQ1MDdjZjYyNjcwNTIxOTcxMDhkY2IzZmFkMmFiMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQsO8jgz+uodm5ehx/RNNgE4oAHs uWUWTvqc6Q3U3PSdnuKo+18lcR695P73lSZuJAz5NQseeFA0hje6//ETtMTRdgCb Zg+sec7EGrv0SQnN3AjmT/iWQiP4TQEwxLwByxutMqjUvvbqznLIzUQKllZaa4vi Fs+4l7XpPFI6cFfKd3wd6WdG3KtScVbZrPptmjJdFVHasv75vKWdWfY9TBsnIC2p 0EGudnuc+jGk/LROVkehUp8Q8mry1gp6cUUO3tJufBL+2aq+S3TspXCTNEFXDSTc CVf09hgpiwh1MXArxUEJuaZhzcovmbJ8j5Awy7WhXqPc/NMkqvwwc9Ne7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxIzd5FB89iZwUhlxCNyz+tKrK7MB8GA1UdIwQY MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt Y2Q2NTU1ZmNkODJlLzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyKJC+nc 6DPrtqYX4X2lMzkHgN+jKFCY8HPAEac90jObWcuTMF1vi9ocVcoLgftfohYldZBZ 3em+SJbLQk9iNurYq28XzCDXiMw3eJzlgb/kSckamzIMCHn0WzB4SakOzEmGiOaw ToxwaydC/yBfCiV7NWzlDHtK12V2HTYtV68lLvYmPQlo2i+WgF3MLrO0nE/Zu9Iz S5wB6lFmE3q/9IOFRqW5KP+7PGJazusYAvSDDCEotrZ3LcUMr/88sx1vXOmMoHtN IehMKAo/bjr7JQZmAhIIasWdljmz2fxFt8UYQDPS8U9sSRffDZMpi1eOFmg8prwG QSw2i5ELPoWvow== -----END CERTIFICATE-----Generated at Mon Dec 29 18:16:16 2025 by rpki-client