This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json) Hash identifier: qp/5ZLDImeqd+kC1N9h7d6Se4xjfXFAPiFX7oct3u5U= Subject key identifier: 02:5A:52:E0:67:0D:14:88:E7:57:22:23:F0:2F:CE:C2:72:89:B9:70 Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Certificate serial: 019B3FB5E1C85FB4F8830998631BF0193C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft Manifest number: 1152 Signing time: Sun 21 Dec 2025 07:00:42 +0000 Manifest this update: Sun 21 Dec 2025 07:00:42 +0000 Manifest next update: Mon 22 Dec 2025 07:00:42 +0000 Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: 0hJmP7gf5/cC6/Nqkm/dTeGXH1gA4T4XwTTZAVrJ3C4=) 2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:e1:c8:5f:b4:f8:83:09:98:63:1b:f0:19:3c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Validity Not Before: Dec 21 07:00:42 2025 GMT Not After : Dec 22 07:00:42 2025 GMT Subject: CN=025a52e0670d1488e7572223f02fcec27289b970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:b1:db:76:36:33:57:07:41:8f:1f:47:be: 21:03:7b:31:d6:64:ee:82:ef:ba:6f:3d:24:32:ee: 52:a1:8c:18:0d:2f:20:9b:ec:4b:7b:6c:31:97:9a: f0:5d:ff:0a:42:e1:2b:12:37:13:56:83:68:eb:ae: 8b:88:79:cd:25:83:d4:a2:22:80:3d:69:8c:8e:21: e9:b8:9d:40:43:75:0f:d8:b3:56:ae:b2:92:b8:71: 77:59:67:78:67:ec:b8:4f:94:09:fc:a5:65:38:77: 4a:89:58:22:28:57:e5:02:0b:f7:1f:10:cb:6b:fd: 2d:4f:3e:46:4a:c8:c2:ba:aa:b2:85:b4:8a:f7:fa: cd:82:a6:f9:ec:3a:7c:82:e1:96:bc:00:3e:5f:76: 13:1c:94:09:49:5f:91:a4:67:e1:f2:b5:bd:cf:24: 76:ec:f6:82:c4:01:1f:31:6c:f4:1f:19:68:7d:a0: ae:50:41:6a:3a:d5:86:e2:61:e8:4e:4e:34:f5:cc: e3:1d:56:98:8c:36:69:95:bf:ab:65:ad:ba:39:cc: 7f:f3:ff:c8:98:cb:28:51:65:b4:ea:d3:b0:6c:32: b3:f5:26:81:d6:6a:30:ed:4c:31:ae:ee:26:e7:a5: 75:64:c9:cd:88:dc:38:10:66:02:dc:ac:2f:aa:57: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:52:E0:67:0D:14:88:E7:57:22:23:F0:2F:CE:C2:72:89:B9:70 X509v3 Authority Key Identifier: keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:45:f7:1c:a8:6b:87:04:20:57:5e:08:1e:0a:38:b6:1d:0e: 1c:f5:e9:af:c3:bb:78:bc:28:25:9d:9a:4c:7f:a9:bc:53:7d: 64:3f:4a:72:69:8f:0d:d6:63:33:a5:a4:78:49:b6:37:5a:06: ff:f4:ab:6f:23:78:19:fe:33:ea:8a:d0:ce:95:0d:b0:ec:82: 46:37:9b:0b:af:18:4d:d9:e3:a8:48:f5:eb:d6:ef:71:23:51: 15:50:ce:ce:15:22:40:a1:3d:79:4c:0f:c0:72:6c:35:87:bb: 04:15:12:80:5f:65:db:82:63:0a:8c:18:2f:b2:c6:ba:92:e1: 8c:f8:f7:52:4a:7c:10:7a:a9:3b:3f:43:e1:50:73:ff:81:26: 79:b3:1e:b7:75:53:c8:85:aa:7e:16:8e:c6:e8:0e:6d:db:cd: 17:91:d5:41:c4:b2:50:4e:fc:39:80:e8:b6:3b:d7:c6:14:bf: 5a:1c:99:5e:4e:66:e3:5a:0b:79:cd:c7:c1:ee:55:b8:e8:87: 46:7a:82:af:59:c7:bd:54:84:45:d7:e1:b7:4d:95:12:21:73: ae:f7:31:f8:9a:02:75:42:ca:45:e1:f8:5a:30:13:f4:07:c2: d5:d5:63:6c:8f:4b:5d:a5:24:92:de:91:2a:93:c0:07:6b:b2: 26:02:10:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/teHIX7T4gwmYYxvwGTxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm MmRhZDAwHhcNMjUxMjIxMDcwMDQyWhcNMjUxMjIyMDcwMDQyWjAzMTEwLwYDVQQD EygwMjVhNTJlMDY3MGQxNDg4ZTc1NzIyMjNmMDJmY2VjMjcyODliOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKGx23Y2M1cHQY8fR74hA3sx1mTu gu+6bz0kMu5SoYwYDS8gm+xLe2wxl5rwXf8KQuErEjcTVoNo666LiHnNJYPUoiKA PWmMjiHpuJ1AQ3UP2LNWrrKSuHF3WWd4Z+y4T5QJ/KVlOHdKiVgiKFflAgv3HxDL a/0tTz5GSsjCuqqyhbSK9/rNgqb57Dp8guGWvAA+X3YTHJQJSV+RpGfh8rW9zyR2 7PaCxAEfMWz0HxlofaCuUEFqOtWG4mHoTk409czjHVaYjDZplb+rZa26Ocx/8//I mMsoUWW06tOwbDKz9SaB1mow7Uwxru4m56V1ZMnNiNw4EGYC3KwvqleXEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJaUuBnDRSI51ciI/AvzsJyiblwMB8GA1UdIwQY MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEX3HKhr hwQgV14IHgo4th0OHPXpr8O7eLwoJZ2aTH+pvFN9ZD9KcmmPDdZjM6WkeEm2N1oG //SrbyN4Gf4z6orQzpUNsOyCRjebC68YTdnjqEj169bvcSNRFVDOzhUiQKE9eUwP wHJsNYe7BBUSgF9l24JjCowYL7LGupLhjPj3Ukp8EHqpOz9D4VBz/4EmebMet3VT yIWqfhaOxugObdvNF5HVQcSyUE78OYDotjvXxhS/WhyZXk5m41oLec3Hwe5VuOiH RnqCr1nHvVSERdfht02VEiFzrvcx+JoCdULKReH4WjAT9AfC1dVjbI9LXaUkkt6R KpPAB2uyJgIQzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:05:54 2025 by rpki-client