This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json) Hash identifier: JfxZhB2uoh4hJNGCD1GyvlQF6PSi7XDl8aqZrwD0bQc= Subject key identifier: 02:32:C5:65:0C:DD:62:10:D0:62:7B:5E:12:3C:FF:D5:B0:8A:3B:0D Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55 Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955 Certificate serial: 019B4DE0B59BB07E988254FB5FD820991707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft Manifest number: 0A57 Signing time: Wed 24 Dec 2025 01:02:10 +0000 Manifest this update: Wed 24 Dec 2025 01:02:10 +0000 Manifest next update: Thu 25 Dec 2025 01:02:10 +0000 Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: Lja0D3lKRxHMg4tkdnLu9QY4APV9wBOVoeIPfaKn3BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:b5:9b:b0:7e:98:82:54:fb:5f:d8:20:99:17:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955 Validity Not Before: Dec 24 01:02:10 2025 GMT Not After : Dec 25 01:02:10 2025 GMT Subject: CN=0232c5650cdd6210d0627b5e123cffd5b08a3b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:ec:6f:00:c0:a9:6b:ef:68:8d:1a:93:f7: cb:fd:ce:f7:83:6a:6c:86:5f:b1:cc:cd:7b:23:8c: 90:c3:a4:4f:fd:d7:9e:f4:6e:b8:cb:4f:06:cf:f9: 35:1a:b8:f0:21:44:96:3d:28:87:9f:25:74:e8:a4: ac:27:15:a8:2e:20:f2:6b:64:23:29:06:05:e7:da: c0:64:40:c0:91:cb:a7:08:c5:71:ac:5f:96:d0:d2: d5:2e:b2:ce:27:b0:14:bb:e6:8c:0b:b7:5c:02:bc: 8f:a2:57:46:97:c8:76:59:d9:6e:d1:b1:4e:20:4b: cc:f9:be:7a:0f:24:c3:7d:f7:07:a4:99:1d:53:14: 86:8a:45:3e:01:7b:55:3a:44:b0:6b:76:5c:a2:4e: 7b:4e:e3:54:c4:0f:ae:58:66:95:32:ae:2d:64:10: 97:69:76:d7:fe:fd:95:0e:d6:40:bc:2b:df:cf:71: 0f:9e:93:9c:bd:b4:10:6d:e8:af:19:f4:e6:ff:44: ed:c4:7e:24:42:ca:b7:02:12:6c:2c:36:a8:59:f1: 40:aa:b0:8c:72:31:52:70:26:dc:3f:95:db:33:96: d7:9a:5c:c6:ff:90:dc:43:b4:72:b9:e3:e0:ef:55: 35:90:71:28:2f:4d:71:8d:a5:15:db:f3:9a:00:f3: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:32:C5:65:0C:DD:62:10:D0:62:7B:5E:12:3C:FF:D5:B0:8A:3B:0D X509v3 Authority Key Identifier: keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:f4:ec:4e:2b:b3:d6:bf:4f:f1:5b:4c:c8:fd:4d:87:fb: 8e:26:b1:e8:0b:53:92:93:d0:b0:53:eb:ee:eb:ef:4c:83:e4: 0a:da:74:80:5c:ab:27:12:c0:1a:67:8d:30:d2:90:09:f2:ea: bf:4f:a6:7c:3d:e3:39:ee:09:40:30:a9:d6:9c:48:56:b5:71: 5b:7f:82:6a:6c:0e:28:1d:bb:f6:81:a3:0a:4c:a1:63:14:4f: 9e:bb:7c:56:6a:88:2f:34:a9:c7:50:05:a9:ca:f7:d0:e5:e0: 3d:47:1a:d3:0e:56:ae:dd:c9:46:54:28:61:67:da:c2:a6:88: 6b:c3:55:20:c1:75:d1:44:bf:67:f4:6b:b9:d1:01:b0:82:b4: f2:ed:f0:b6:d1:72:b9:e4:29:15:02:7b:99:26:68:70:e5:f6: d1:8c:68:e4:eb:44:9e:e0:5c:d0:eb:f2:db:bc:f9:33:14:08: 89:55:50:11:6e:52:11:82:04:07:7c:94:71:96:2e:59:bc:9d: 86:b2:1a:2e:7e:6d:8f:66:c6:42:3b:df:3c:ab:a7:6c:c1:3b: 4e:98:d3:fe:e7:9c:6c:45:05:67:14:02:23:65:34:ea:74:6e: bb:e8:5a:9e:84:2e:92:63:1a:44:6e:6b:f4:6a:f1:bb:a7:ec: 24:a8:0f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4LWbsH6YglT7X9ggmRcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2Q1ZGNhZmYxNTkwMzIyYmViNTdlYzNlYmFlZjYyNTA0 MTI5NTUwHhcNMjUxMjI0MDEwMjEwWhcNMjUxMjI1MDEwMjEwWjAzMTEwLwYDVQQD EygwMjMyYzU2NTBjZGQ2MjEwZDA2MjdiNWUxMjNjZmZkNWIwOGEzYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAPsbwDAqWvvaI0ak/fL/c73g2ps hl+xzM17I4yQw6RP/dee9G64y08Gz/k1GrjwIUSWPSiHnyV06KSsJxWoLiDya2Qj KQYF59rAZEDAkcunCMVxrF+W0NLVLrLOJ7AUu+aMC7dcAryPoldGl8h2Wdlu0bFO IEvM+b56DyTDffcHpJkdUxSGikU+AXtVOkSwa3Zcok57TuNUxA+uWGaVMq4tZBCX aXbX/v2VDtZAvCvfz3EPnpOcvbQQbeivGfTm/0TtxH4kQsq3AhJsLDaoWfFAqrCM cjFScCbcP5XbM5bXmlzG/5DcQ7RyuePg71U1kHEoL01xjaUV2/OaAPO/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIyxWUM3WIQ0GJ7XhI8/9WwijsNMB8GA1UdIwQY MBaAFLU9Xcr/FZAyK+tX7D6672JQQSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUt ZjgwNjMyMzBlMTgzLzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUtZjgwNjMyMzBlMTgz LzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsz07E4r s9a/T/FbTMj9TYf7jiax6AtTkpPQsFPr7uvvTIPkCtp0gFyrJxLAGmeNMNKQCfLq v0+mfD3jOe4JQDCp1pxIVrVxW3+CamwOKB279oGjCkyhYxRPnrt8VmqILzSpx1AF qcr30OXgPUca0w5Wrt3JRlQoYWfawqaIa8NVIMF10US/Z/RrudEBsIK08u3wttFy ueQpFQJ7mSZocOX20Yxo5OtEnuBc0Ovy27z5MxQIiVVQEW5SEYIEB3yUcZYuWbyd hrIaLn5tj2bGQjvfPKunbME7TpjT/uecbEUFZxQCI2U06nRuu+hanoQukmMaRG5r 9Grxu6fsJKgPZg== -----END CERTIFICATE-----Generated at Wed Dec 24 03:35:57 2025 by rpki-client