This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json) Hash identifier: 6SKEz4PctIcKdS81evXv0+1s1mcl3TnVwrPI3vLYqQY= Subject key identifier: 51:6E:04:7B:40:58:70:FD:8C:97:15:57:FA:CF:CF:64:59:36:4D:66 Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Certificate serial: 019B5CAE0E49C5BC731EA3EFD35F86D6E2DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft Manifest number: 1161 Signing time: Fri 26 Dec 2025 22:01:09 +0000 Manifest this update: Fri 26 Dec 2025 22:01:09 +0000 Manifest next update: Sat 27 Dec 2025 22:01:09 +0000 Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: 6Qc3FYDWj6D7iE76nOYo3ptB2MEfsuQyYekdX1gplMI=) 2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:0e:49:c5:bc:73:1e:a3:ef:d3:5f:86:d6:e2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Validity Not Before: Dec 26 22:01:09 2025 GMT Not After : Dec 27 22:01:09 2025 GMT Subject: CN=516e047b405870fd8c971557facfcf6459364d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:45:5f:aa:a2:2e:33:09:53:a1:dd:e2:fb: 7d:a6:c5:ea:78:fc:29:c4:df:55:43:06:da:35:ec: 47:4a:c4:a8:8b:ff:a7:b4:2a:bc:76:73:d3:9e:d5: 27:ed:d8:bb:f7:ff:8a:ea:17:8f:9b:71:d5:10:97: f1:56:ed:e0:0f:99:34:9f:01:e5:bf:92:d5:32:8a: b9:0f:d9:aa:8e:36:85:3d:e2:a6:5e:8a:39:60:0a: 44:41:54:27:1e:75:98:24:e5:87:68:79:8c:82:86: be:09:63:bd:ad:0f:1b:9d:4b:da:22:73:16:f4:29: 08:66:67:76:c2:94:ff:18:7a:25:28:f7:a3:97:ca: 75:96:b9:c7:ce:4e:3f:f9:0c:e2:7e:43:67:00:2c: 8a:94:3e:36:b5:4a:ac:c7:70:75:22:29:93:28:1d: 9b:dd:29:fe:50:5d:d8:e5:b7:87:f6:52:65:66:a5: f3:f8:f5:45:77:5c:f5:50:33:31:93:27:1d:b3:78: 28:42:14:f2:6a:7b:76:83:ca:e0:fe:55:5f:65:b3: 92:22:cf:b1:aa:5b:61:45:70:61:bd:53:30:f4:74: ce:0c:d0:f0:8d:51:d5:b7:1e:84:73:c1:d6:61:00: e7:4b:c5:51:7c:aa:40:87:9c:f9:03:08:a4:67:0d: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6E:04:7B:40:58:70:FD:8C:97:15:57:FA:CF:CF:64:59:36:4D:66 X509v3 Authority Key Identifier: keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:aa:9b:9b:74:ed:10:38:3a:24:04:a2:31:51:7d:cb:c7:83: 28:c4:b7:64:82:9d:e6:9e:aa:5f:9d:8d:21:75:4e:b5:ee:d6: 00:c3:44:68:22:c2:9c:ee:25:ff:7c:47:68:a2:73:dd:ca:c2: 99:db:58:92:e0:41:ae:51:3e:d1:9f:35:06:b8:d5:0b:d6:dd: 48:14:b2:23:18:5b:00:72:a1:cb:37:e0:6f:e6:30:34:a7:ab: 9c:7a:7b:ac:35:7d:d6:39:48:1c:9f:50:67:73:98:1c:35:ad: 47:1f:9c:6b:ef:90:a7:84:bb:46:1f:cd:4d:f8:f6:57:1d:16: e2:d8:e8:dd:df:28:70:b4:59:28:71:51:07:99:e8:69:6e:3f: dc:af:3d:36:2c:e1:e6:9c:cf:e2:59:cc:ea:2c:60:17:38:ad: 36:22:be:0f:7e:77:c0:fa:72:0d:41:37:e1:7f:6f:7f:4d:b2: a8:79:4e:16:a3:a5:d3:d0:37:9c:07:95:c9:82:b4:1a:3a:d7: 61:c9:cc:f1:30:cc:42:3b:c9:87:d2:b3:ad:10:9f:a5:d4:ce: 91:c3:84:f3:12:c4:f4:9f:41:70:6b:db:7c:d3:0d:73:a2:b5: 63:c6:1f:c8:08:dd:94:2e:44:ef:c8:01:94:8b:6e:f0:5e:37: 6e:b3:1c:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrg5JxbxzHqPv01+G1uLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm MmRhZDAwHhcNMjUxMjI2MjIwMTA5WhcNMjUxMjI3MjIwMTA5WjAzMTEwLwYDVQQD Eyg1MTZlMDQ3YjQwNTg3MGZkOGM5NzE1NTdmYWNmY2Y2NDU5MzY0ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlhFX6qiLjMJU6Hd4vt9psXqePwp xN9VQwbaNexHSsSoi/+ntCq8dnPTntUn7di79/+K6hePm3HVEJfxVu3gD5k0nwHl v5LVMoq5D9mqjjaFPeKmXoo5YApEQVQnHnWYJOWHaHmMgoa+CWO9rQ8bnUvaInMW 9CkIZmd2wpT/GHolKPejl8p1lrnHzk4/+QzifkNnACyKlD42tUqsx3B1IimTKB2b 3Sn+UF3Y5beH9lJlZqXz+PVFd1z1UDMxkycds3goQhTyant2g8rg/lVfZbOSIs+x qlthRXBhvVMw9HTODNDwjVHVtx6Ec8HWYQDnS8VRfKpAh5z5AwikZw1e7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFuBHtAWHD9jJcVV/rPz2RZNk1mMB8GA1UdIwQY MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaqbm3Tt EDg6JASiMVF9y8eDKMS3ZIKd5p6qX52NIXVOte7WAMNEaCLCnO4l/3xHaKJz3crC mdtYkuBBrlE+0Z81BrjVC9bdSBSyIxhbAHKhyzfgb+YwNKernHp7rDV91jlIHJ9Q Z3OYHDWtRx+ca++Qp4S7Rh/NTfj2Vx0W4tjo3d8ocLRZKHFRB5noaW4/3K89Nizh 5pzP4lnM6ixgFzitNiK+D353wPpyDUE34X9vf02yqHlOFqOl09A3nAeVyYK0GjrX YcnM8TDMQjvJh9KzrRCfpdTOkcOE8xLE9J9BcGvbfNMNc6K1Y8YfyAjdlC5E78gB lItu8F43brMcDg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:45 2025 by rpki-client