This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json) Hash identifier: 9SVWiADoLop5cA+1IXVKD9ksxgliyFlLVll5O6txJF4= Subject key identifier: 35:93:17:4D:6C:63:6C:4D:5A:26:4C:4B:E3:1C:F1:7A:97:5B:55:4B Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Certificate serial: 019B4EF1FAE9AA255803F75B68A274F8A8C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft Manifest number: 0F27 Signing time: Wed 24 Dec 2025 06:00:39 +0000 Manifest this update: Wed 24 Dec 2025 06:00:39 +0000 Manifest next update: Thu 25 Dec 2025 06:00:39 +0000 Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: xDigB290y60PpDZGkFja4ulspJnid/NEWCDIVtVssaA=) 2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:fa:e9:aa:25:58:03:f7:5b:68:a2:74:f8:a8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Validity Not Before: Dec 24 06:00:39 2025 GMT Not After : Dec 25 06:00:39 2025 GMT Subject: CN=3593174d6c636c4d5a264c4be31cf17a975b554b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:e2:90:d7:e4:cc:c4:8d:13:64:32:55:57: d0:bf:b4:2e:7e:4e:52:00:56:19:bc:15:aa:40:15: d7:34:3f:a0:e3:cf:08:25:ac:07:40:eb:32:dc:85: 6c:2a:74:f0:3e:a4:cb:ec:18:26:db:24:6b:2e:49: ca:06:a5:62:0c:cc:62:e5:a7:74:af:38:d2:79:5d: 0b:f6:49:46:c0:96:dc:55:39:d1:58:96:48:5b:a5: 83:49:4b:2d:2f:24:5b:a5:d0:3d:dd:90:15:6c:d0: 2b:56:c2:0a:d7:a5:04:d8:b3:ad:e4:5a:89:10:4e: 23:e2:d1:fe:dd:99:84:bc:4a:61:c9:0a:fa:0b:2c: ed:ae:e2:85:16:c5:c4:63:a9:da:18:fc:71:62:e7: 1c:04:aa:2f:ff:c5:a0:c7:b3:6e:ff:b3:f3:e7:65: 74:d2:99:d2:2b:aa:b0:64:18:04:47:e8:40:87:68: b7:7d:2f:cd:cd:e8:d5:9f:72:2a:1c:dd:51:f5:dd: 54:fc:6d:dd:5e:74:08:8f:45:81:ef:9b:0a:d1:52: e3:41:d6:47:1a:cd:12:ae:d6:a4:e5:b7:a5:f1:d7: 45:07:8b:ce:3d:de:e3:24:f8:88:54:98:38:80:d0: b8:2e:ec:4c:1c:0d:32:47:82:9b:bd:c6:55:5b:c9: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:93:17:4D:6C:63:6C:4D:5A:26:4C:4B:E3:1C:F1:7A:97:5B:55:4B X509v3 Authority Key Identifier: keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:58:a7:e8:1a:48:b0:8e:c5:89:ea:d7:8b:30:b9:f8:b6:db: f5:ce:d6:79:72:0c:7d:3f:26:c0:34:e2:e2:4c:ed:9d:82:6f: ef:3c:85:cc:ed:b6:78:3d:df:24:ac:86:1d:66:1d:38:39:07: 4f:4f:35:20:67:0b:9e:f8:38:bc:e5:b9:1f:c9:4c:e8:16:d0: 9e:77:1b:0f:ed:1d:37:be:5b:a7:47:f2:e8:ab:bd:ec:48:3f: ed:26:90:01:f0:e7:f7:bd:6d:9c:74:df:c7:9a:cc:81:94:d7: 22:93:37:64:2e:e2:9c:7f:76:e4:38:1b:15:60:b5:10:63:26: e9:f1:2c:4a:27:60:3e:1d:3d:ff:22:03:38:35:e4:10:b9:9e: fd:f5:e0:55:4b:52:37:8e:99:61:87:d4:3e:c5:2d:6a:3f:d4: 79:ee:70:29:a4:34:c7:3e:93:9f:8f:f2:ef:b5:21:75:f3:51: 12:6b:f9:10:a6:8d:6d:1c:a1:cb:5d:2a:37:bb:b4:45:4d:10: 94:3b:90:11:b6:b1:f7:43:03:79:28:1d:3b:8d:e8:ab:5c:b7: ec:64:38:55:1f:7f:ac:67:f5:60:c0:59:ab:33:82:a7:18:ba: 71:93:40:1f:25:91:77:8e:15:29:e9:b6:0e:41:0f:91:f0:47: 9e:88:e9:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8frpqiVYA/dbaKJ0+KjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi NjkyMzgwHhcNMjUxMjI0MDYwMDM5WhcNMjUxMjI1MDYwMDM5WjAzMTEwLwYDVQQD EygzNTkzMTc0ZDZjNjM2YzRkNWEyNjRjNGJlMzFjZjE3YTk3NWI1NTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0nikNfkzMSNE2QyVVfQv7Qufk5S AFYZvBWqQBXXND+g488IJawHQOsy3IVsKnTwPqTL7Bgm2yRrLknKBqViDMxi5ad0 rzjSeV0L9klGwJbcVTnRWJZIW6WDSUstLyRbpdA93ZAVbNArVsIK16UE2LOt5FqJ EE4j4tH+3ZmEvEphyQr6CyztruKFFsXEY6naGPxxYuccBKov/8Wgx7Nu/7Pz52V0 0pnSK6qwZBgER+hAh2i3fS/NzejVn3IqHN1R9d1U/G3dXnQIj0WB75sK0VLjQdZH Gs0Srtak5bel8ddFB4vOPd7jJPiIVJg4gNC4LuxMHA0yR4KbvcZVW8lnQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWTF01sY2xNWiZMS+Mc8XqXW1VLMB8GA1UdIwQY MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1in6BpI sI7FierXizC5+Lbb9c7WeXIMfT8mwDTi4kztnYJv7zyFzO22eD3fJKyGHWYdODkH T081IGcLnvg4vOW5H8lM6BbQnncbD+0dN75bp0fy6Ku97Eg/7SaQAfDn971tnHTf x5rMgZTXIpM3ZC7inH925DgbFWC1EGMm6fEsSidgPh09/yIDODXkELme/fXgVUtS N46ZYYfUPsUtaj/Uee5wKaQ0xz6Tn4/y77UhdfNREmv5EKaNbRyhy10qN7u0RU0Q lDuQEbax90MDeSgdO43oq1y37GQ4VR9/rGf1YMBZqzOCpxi6cZNAHyWRd44VKem2 DkEPkfBHnojpPA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:11:32 2025 by rpki-client