This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json) Hash identifier: 7f45sWgxgo7bSEdelpbsKcAt9NpJA2oqRhcIx0vgbjg= Subject key identifier: A2:20:A8:97:22:69:6C:45:A4:C6:C9:48:34:A3:9E:38:5E:C4:1F:D3 Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57 Certificate serial: 019B65B12B98B38609448E0CE8CB0B651C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft Manifest number: 0724 Signing time: Sun 28 Dec 2025 16:01:08 +0000 Manifest this update: Sun 28 Dec 2025 16:01:08 +0000 Manifest next update: Mon 29 Dec 2025 16:01:08 +0000 Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: jnhJ8R8v2v9EiIcZXtUIALy7lkO2B5vzwR0ZGPhABag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:2b:98:b3:86:09:44:8e:0c:e8:cb:0b:65:1c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57 Validity Not Before: Dec 28 16:01:08 2025 GMT Not After : Dec 29 16:01:08 2025 GMT Subject: CN=a220a89722696c45a4c6c94834a39e385ec41fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:03:a1:b5:b2:b6:12:b8:28:ea:07:35:0c: 12:e5:f7:b7:3d:c3:a7:91:1b:c3:96:a0:dd:cd:b2: 8a:c8:de:8c:7a:a5:f6:c3:c6:0a:50:c8:a2:b5:2e: 21:8b:eb:12:cb:13:d6:57:2c:cb:1e:dd:77:74:09: 89:04:6e:86:55:c9:8a:b1:42:f7:b2:a0:f8:68:70: b9:77:c1:55:99:65:d9:ff:5b:7d:21:77:5d:f4:69: 1d:1c:c7:99:33:30:7a:56:5e:c2:14:b3:a5:5a:d3: 9c:a3:b2:15:12:01:a0:9b:e3:34:e2:1e:ee:29:83: 8e:ce:29:1e:b3:e9:cd:f1:5e:bf:c8:42:99:d2:bc: 2a:b6:93:62:75:7f:4c:6c:43:45:1f:0b:eb:57:52: ad:29:bc:a9:5d:99:f4:67:c8:7f:e1:c7:ae:e5:5f: 07:5b:e8:fb:8a:ab:9c:ee:df:4c:4e:98:99:5d:0d: 64:d0:ac:20:05:8a:02:52:54:ba:4c:ed:56:7a:c8: 99:44:e8:34:2c:8f:85:2d:9b:15:b0:ba:2f:5c:94: 8d:5d:65:e2:ee:9f:16:28:0e:e0:df:c3:ea:4f:1b: d2:36:31:aa:1c:df:5b:f5:e4:fe:11:44:68:8e:56: 58:d7:32:7a:54:2b:63:df:79:6d:76:00:a5:2e:15: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:20:A8:97:22:69:6C:45:A4:C6:C9:48:34:A3:9E:38:5E:C4:1F:D3 X509v3 Authority Key Identifier: keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cc:3e:95:5d:2f:02:5b:de:87:05:db:71:6e:e6:8c:11:78: 4a:ba:31:34:d0:69:18:6f:13:e4:a5:0a:19:ac:15:59:8c:bb: 84:c4:e1:f1:88:a4:20:1b:1b:9d:4d:af:8f:b2:66:4e:db:64: 8a:ac:fc:43:6b:ca:97:ea:db:5d:08:a1:6d:57:8f:fd:a1:b1: 75:81:d2:76:de:3e:0e:c0:bb:04:14:0b:13:a5:9d:af:a3:65: c1:63:9f:95:5a:b2:db:49:69:8e:e2:d5:38:ee:20:4c:b7:3f: 5b:b0:9d:0e:5b:65:b1:6a:a2:5f:62:21:c4:9d:88:da:45:0a: 29:66:86:7e:e0:ad:43:5d:30:e9:ec:27:75:57:db:ee:35:9c: 4d:a7:5e:a7:f3:95:90:02:47:c3:8a:22:b3:44:28:4d:8d:9c: dc:1a:20:68:ba:9d:bc:85:78:61:a6:f5:50:63:89:94:98:91: 88:a3:a4:34:b3:a1:bb:fc:96:7f:86:b7:a5:03:ff:9d:5f:4b: 07:2f:a3:07:d6:7b:62:49:d1:8d:07:b1:67:02:b4:51:7b:5e: de:9c:c2:d4:61:af:dd:2e:b0:e6:6e:25:41:8f:52:ca:17:ad: e5:e7:44:a0:cf:85:40:11:dd:4f:3e:44:cd:e5:4f:8e:c3:27: 90:f5:a9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsSuYs4YJRI4M6MsLZRwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm ODNjNTcwHhcNMjUxMjI4MTYwMTA4WhcNMjUxMjI5MTYwMTA4WjAzMTEwLwYDVQQD EyhhMjIwYTg5NzIyNjk2YzQ1YTRjNmM5NDgzNGEzOWUzODVlYzQxZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QMDobWythK4KOoHNQwS5fe3PcOn kRvDlqDdzbKKyN6MeqX2w8YKUMiitS4hi+sSyxPWVyzLHt13dAmJBG6GVcmKsUL3 sqD4aHC5d8FVmWXZ/1t9IXdd9GkdHMeZMzB6Vl7CFLOlWtOco7IVEgGgm+M04h7u KYOOzikes+nN8V6/yEKZ0rwqtpNidX9MbENFHwvrV1KtKbypXZn0Z8h/4ceu5V8H W+j7iquc7t9MTpiZXQ1k0KwgBYoCUlS6TO1WesiZROg0LI+FLZsVsLovXJSNXWXi 7p8WKA7g38PqTxvSNjGqHN9b9eT+EURojlZY1zJ6VCtj33ltdgClLhUG7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIgqJciaWxFpMbJSDSjnjhexB/TMB8GA1UdIwQY MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8w+lV0v AlvehwXbcW7mjBF4SroxNNBpGG8T5KUKGawVWYy7hMTh8YikIBsbnU2vj7JmTttk iqz8Q2vKl+rbXQihbVeP/aGxdYHSdt4+DsC7BBQLE6Wdr6NlwWOflVqy20lpjuLV OO4gTLc/W7CdDltlsWqiX2IhxJ2I2kUKKWaGfuCtQ10w6ewndVfb7jWcTadep/OV kAJHw4ois0QoTY2c3BogaLqdvIV4Yab1UGOJlJiRiKOkNLOhu/yWf4a3pQP/nV9L By+jB9Z7YknRjQexZwK0UXte3pzC1GGv3S6w5m4lQY9Syhet5edEoM+FQBHdTz5E zeVPjsMnkPWpqA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:57 2025 by rpki-client