This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json) Hash identifier: xm9GTwzfCH96DBFSwASgYdg9V7ztzaqRvAFmUdJQy7Y= Subject key identifier: F9:3E:8D:82:EE:CD:E7:82:7E:B4:16:EC:64:09:89:95:89:CB:AE:C5 Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66 Certificate serial: 019B405C92059F3E44911523B9CC8258A2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft Manifest number: 14B1 Signing time: Sun 21 Dec 2025 10:02:46 +0000 Manifest this update: Sun 21 Dec 2025 10:02:46 +0000 Manifest next update: Mon 22 Dec 2025 10:02:46 +0000 Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: ZMUripBjMb2IfefbKvLpcvCjrEuuwrMEMq6WPvBRL8A=) 2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:92:05:9f:3e:44:91:15:23:b9:cc:82:58:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66 Validity Not Before: Dec 21 10:02:46 2025 GMT Not After : Dec 22 10:02:46 2025 GMT Subject: CN=f93e8d82eecde7827eb416ec6409899589cbaec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:cf:ba:09:bd:55:27:03:d1:4c:8c:72:3e: 48:fb:9b:0d:a4:40:a6:0f:e4:33:4d:25:4a:85:e5: 28:a5:27:24:de:1f:cb:f9:8c:4b:be:fd:53:78:11: f4:c8:4a:05:b2:b5:2e:ac:95:ae:2e:74:0d:f9:04: 5c:be:6e:26:a5:f8:21:e1:41:51:c7:f5:e3:f3:7d: e3:1c:10:61:77:aa:2d:7d:89:2b:b5:5e:1d:bc:d4: 67:52:6a:67:2d:fd:47:45:18:64:a6:10:1a:6b:96: 8d:81:91:bd:1e:58:f6:f4:23:4a:54:62:d7:d8:6c: 66:d5:16:1b:c4:2e:6f:f8:16:7f:0b:0f:ab:96:6e: fb:b1:2b:6c:78:c8:96:46:09:16:53:1a:4e:58:93: dc:de:29:a4:7d:d5:2b:b1:d4:ed:5a:7b:47:af:58: a9:21:18:f1:d7:b4:08:c8:2f:b4:f6:ac:41:af:81: 16:a0:60:1c:5c:f2:07:79:5b:df:42:f0:05:a5:6e: fc:d8:0e:e1:8c:1d:1d:4c:c1:94:78:91:8b:b1:8f: 74:93:ec:2c:08:2a:1b:30:e8:8a:67:1d:b4:cb:2a: 2a:b6:16:2c:d9:81:1d:1c:3a:c7:81:fc:f3:c8:71: 25:a4:86:8b:f2:3f:28:4f:af:f9:ee:2c:0c:5f:be: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:8D:82:EE:CD:E7:82:7E:B4:16:EC:64:09:89:95:89:CB:AE:C5 X509v3 Authority Key Identifier: keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:24:af:e9:21:4b:0b:29:82:27:88:73:ca:66:32:17:bd:ba: 8c:6b:65:6f:39:a9:85:92:a3:95:70:58:58:a3:56:f0:91:4a: 37:49:af:d6:29:f9:9a:85:83:78:31:87:35:ef:c2:c7:29:c1: d5:0a:26:d5:c5:97:29:dc:b1:3e:0c:3d:78:4d:ad:b1:02:04: 11:59:83:80:05:11:6a:74:88:bf:f0:ca:47:fd:6a:3d:4a:d2: cb:fe:ac:d3:00:34:d5:3c:56:8f:6a:2c:32:d7:f2:cf:d7:e5: 4f:9b:ac:b7:a8:62:c5:49:ae:bb:09:19:09:94:fd:c9:26:f0: 39:fe:5f:9f:d8:d5:79:2c:2a:ce:2b:82:ff:a9:03:8c:87:ef: 9c:e0:9f:d0:ca:c7:a0:31:21:a7:2d:b0:00:77:3b:5a:d2:69: 32:18:de:16:67:4d:94:ed:07:70:95:c7:3f:82:bb:cb:bb:15: 3f:d3:46:dd:5e:94:53:1b:2a:e9:69:ba:33:f6:61:d5:d3:72: 4f:42:b2:50:f2:01:bf:7b:e4:88:2b:fe:c8:a2:b9:8f:b8:ac: c7:51:9a:af:c9:2f:69:fc:41:6a:8f:19:7a:ba:76:25:22:bf: 9d:21:c8:ff:71:78:b8:52:f8:52:f4:4d:bd:60:d1:17:01:cd: bb:1e:fb:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXJIFnz5EkRUjucyCWKKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj YWJkNjYwHhcNMjUxMjIxMTAwMjQ2WhcNMjUxMjIyMTAwMjQ2WjAzMTEwLwYDVQQD EyhmOTNlOGQ4MmVlY2RlNzgyN2ViNDE2ZWM2NDA5ODk5NTg5Y2JhZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVjPugm9VScD0UyMcj5I+5sNpECm D+QzTSVKheUopSck3h/L+YxLvv1TeBH0yEoFsrUurJWuLnQN+QRcvm4mpfgh4UFR x/Xj833jHBBhd6otfYkrtV4dvNRnUmpnLf1HRRhkphAaa5aNgZG9Hlj29CNKVGLX 2Gxm1RYbxC5v+BZ/Cw+rlm77sStseMiWRgkWUxpOWJPc3imkfdUrsdTtWntHr1ip IRjx17QIyC+09qxBr4EWoGAcXPIHeVvfQvAFpW782A7hjB0dTMGUeJGLsY90k+ws CCobMOiKZx20yyoqthYs2YEdHDrHgfzzyHElpIaL8j8oT6/57iwMX75uuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk+jYLuzeeCfrQW7GQJiZWJy67FMB8GA1UdIwQY MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt NDA1YjBiZGEyYzI2LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2 LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSSv6SFL CymCJ4hzymYyF726jGtlbzmphZKjlXBYWKNW8JFKN0mv1in5moWDeDGHNe/CxynB 1Qom1cWXKdyxPgw9eE2tsQIEEVmDgAURanSIv/DKR/1qPUrSy/6s0wA01TxWj2os Mtfyz9flT5ust6hixUmuuwkZCZT9ySbwOf5fn9jVeSwqziuC/6kDjIfvnOCf0MrH oDEhpy2wAHc7WtJpMhjeFmdNlO0HcJXHP4K7y7sVP9NG3V6UUxsq6Wm6M/Zh1dNy T0KyUPIBv3vkiCv+yKK5j7isx1Gar8kvafxBao8Zerp2JSK/nSHI/3F4uFL4UvRN vWDRFwHNux77sQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:46 2025 by rpki-client