This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json) Hash identifier: etn5IWyEBSkPp/6np8kPJxgJH9TH/GSdv20XIb8LEjQ= Subject key identifier: D8:41:75:F3:4C:31:95:25:B2:C5:9C:EC:E5:06:AA:DA:9E:A1:7B:26 Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf Certificate serial: 019B435BB9F621322CB95EC2CA6BB3BAF55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft Manifest number: 0C60 Signing time: Mon 22 Dec 2025 00:00:43 +0000 Manifest this update: Mon 22 Dec 2025 00:00:43 +0000 Manifest next update: Tue 23 Dec 2025 00:00:43 +0000 Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: FHA7jgPpogMnrGT6VbbdnIbdYKuigsy6RYXDN/bPHkU=) 2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=) 3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:b9:f6:21:32:2c:b9:5e:c2:ca:6b:b3:ba:f5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf Validity Not Before: Dec 22 00:00:43 2025 GMT Not After : Dec 23 00:00:43 2025 GMT Subject: CN=d84175f34c319525b2c59cece506aada9ea17b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:7a:29:d1:d2:ec:00:77:c6:e7:95:16:ec: 1a:10:ba:80:a2:af:c5:b7:12:c3:99:e5:68:97:78: 97:c2:0f:c6:d3:f2:24:68:a5:06:a3:d1:cc:53:71: b0:53:b5:49:f3:4c:f5:b1:48:3b:9b:47:2b:a7:fe: af:6f:4e:02:32:fc:26:3a:c4:a1:d3:ca:a1:a0:2c: e8:b7:81:d8:d8:d0:e9:6e:95:28:60:dc:f1:61:c5: f6:32:88:cd:18:e4:94:70:b8:37:df:19:0b:8b:af: 2f:46:56:bc:a8:bd:10:d9:29:3d:75:b3:a7:cd:34: b7:99:1a:40:69:51:be:02:a3:0e:af:4f:aa:5e:79: 28:c4:82:1d:95:4c:d4:8e:20:ae:03:e0:e3:ec:4d: 74:4a:23:d0:dc:bf:19:39:58:8f:94:b7:48:67:d0: 23:e3:d1:a7:74:88:f7:20:5f:ff:7b:83:51:5c:5e: bb:63:3a:4d:99:a7:f8:97:3e:88:03:88:99:ac:03: 7d:ef:c4:ac:19:4f:a9:43:2a:a8:96:ab:92:ea:1c: 81:f8:ea:6b:82:ae:cf:c6:32:7e:62:c6:8b:e7:a5: 18:11:a5:e6:af:aa:04:8c:26:71:af:17:fa:d9:a3: fd:c2:75:24:d0:80:f5:10:7c:72:af:6d:95:54:44: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:41:75:F3:4C:31:95:25:B2:C5:9C:EC:E5:06:AA:DA:9E:A1:7B:26 X509v3 Authority Key Identifier: keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:93:e1:1c:d8:90:73:d6:ac:5f:fe:7a:cc:53:38:ee:79:28: 4a:e1:ba:89:1d:49:bd:fa:33:0b:cb:2e:00:48:e9:44:b8:6d: 92:27:44:bf:c4:b6:21:3d:95:57:20:ea:4f:20:e7:94:96:39: 20:75:8b:b4:9e:c0:16:d6:0e:28:47:19:c0:b6:35:b2:a3:6c: be:c9:3a:d8:97:3f:5d:92:01:ec:90:64:7c:c5:6a:e4:a5:9f: 87:c6:1e:42:1b:95:8b:14:bf:6c:39:a0:ff:a7:5a:32:b0:27: 3c:d2:c2:54:fc:2e:66:70:43:c5:49:b6:09:12:b3:d8:05:a3: 9b:2b:87:d1:45:5d:b2:e0:42:59:67:04:a4:44:5b:9a:f1:c0: 57:8c:13:7e:31:1a:68:3c:a3:f5:a0:86:e0:a8:83:78:f3:d0: 8a:92:e8:23:4d:fe:c4:6d:13:6e:7f:cf:f6:a9:54:98:d8:6f: e9:99:e0:c4:ab:ef:23:42:09:ab:35:d3:21:18:ae:16:dd:01: 2b:0d:98:ef:ff:7c:03:98:64:7f:d4:dc:3c:52:96:95:0d:cd: e8:ae:7a:e4:91:f3:8b:86:6f:20:1e:87:35:f8:32:1d:a8:bc: 57:43:68:69:b0:06:4f:05:1d:ef:b4:58:fa:cb:31:d3:de:3b: 4a:2e:bb:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW7n2ITIsuV7CymuzuvVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4 NTNjY2YwHhcNMjUxMjIyMDAwMDQzWhcNMjUxMjIzMDAwMDQzWjAzMTEwLwYDVQQD EyhkODQxNzVmMzRjMzE5NTI1YjJjNTljZWNlNTA2YWFkYTllYTE3YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ16KdHS7AB3xueVFuwaELqAoq/F txLDmeVol3iXwg/G0/IkaKUGo9HMU3GwU7VJ80z1sUg7m0crp/6vb04CMvwmOsSh 08qhoCzot4HY2NDpbpUoYNzxYcX2MojNGOSUcLg33xkLi68vRla8qL0Q2Sk9dbOn zTS3mRpAaVG+AqMOr0+qXnkoxIIdlUzUjiCuA+Dj7E10SiPQ3L8ZOViPlLdIZ9Aj 49GndIj3IF//e4NRXF67YzpNmaf4lz6IA4iZrAN978SsGU+pQyqolquS6hyB+Opr gq7PxjJ+YsaL56UYEaXmr6oEjCZxrxf62aP9wnUk0ID1EHxyr22VVETkSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhBdfNMMZUlssWc7OUGqtqeoXsmMB8GA1UdIwQY MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt NmQ3MWZlMTNkNjFkLzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpPhHNiQ c9asX/56zFM47nkoSuG6iR1JvfozC8suAEjpRLhtkidEv8S2IT2VVyDqTyDnlJY5 IHWLtJ7AFtYOKEcZwLY1sqNsvsk62Jc/XZIB7JBkfMVq5KWfh8YeQhuVixS/bDmg /6daMrAnPNLCVPwuZnBDxUm2CRKz2AWjmyuH0UVdsuBCWWcEpERbmvHAV4wTfjEa aDyj9aCG4KiDePPQipLoI03+xG0Tbn/P9qlUmNhv6ZngxKvvI0IJqzXTIRiuFt0B Kw2Y7/98A5hkf9TcPFKWlQ3N6K565JHzi4ZvIB6HNfgyHai8V0NoabAGTwUd77RY +ssx0947Si672A== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:07 2025 by rpki-client