This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json) Hash identifier: S8E7duSXIEevtbgmWmXKLLLZsiS72RWvePlDhwtzscM= Subject key identifier: 54:BA:69:56:5A:9A:EC:03:F0:83:33:9D:66:6D:2E:DB:89:92:35:84 Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65 Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165 Certificate serial: 019B4DE0800C8C6D8C6DD7EFD2A0E3E0E272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft Manifest number: 0845 Signing time: Wed 24 Dec 2025 01:01:57 +0000 Manifest this update: Wed 24 Dec 2025 01:01:57 +0000 Manifest next update: Thu 25 Dec 2025 01:01:57 +0000 Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: Zy40E3W0qZNRsV9TOA4fMAJmtwOHKOzUG+ohgrOeSLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:80:0c:8c:6d:8c:6d:d7:ef:d2:a0:e3:e0:e2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5509d77622d30868f23613c5a816e724840165 Validity Not Before: Dec 24 01:01:57 2025 GMT Not After : Dec 25 01:01:57 2025 GMT Subject: CN=54ba69565a9aec03f083339d666d2edb89923584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:95:67:e7:64:1c:af:5f:e6:32:e7:3c:8d: 9b:7d:44:84:7f:90:d0:b5:dd:a0:ad:ad:99:d5:df: cb:ba:6e:98:3b:a8:6d:00:c6:83:f6:a2:f2:f1:11: 2d:75:8c:e5:13:2b:c6:bf:56:d1:b7:40:4a:26:45: 79:9b:0c:e1:a8:be:45:1f:92:8a:ea:42:af:13:e2: 73:50:b4:c7:5c:52:86:4f:12:79:e0:2a:79:89:80: 47:0b:32:bb:33:dd:25:32:f4:43:f0:37:87:1c:87: ee:4a:3d:ef:7a:cc:75:89:56:0d:d7:35:ad:9f:f5: 09:46:72:88:e4:67:cb:49:94:05:6d:17:cf:6e:c3: 74:7a:90:17:5b:51:79:96:c1:fd:02:71:31:39:3b: b6:92:58:c3:03:42:8b:c8:1e:fb:14:f7:bf:11:98: ea:34:ba:dd:20:6b:d9:b9:1e:5f:db:bd:e3:d9:ac: 96:bd:94:30:27:0f:aa:7e:39:79:49:6d:08:b7:27: 94:a9:8c:dc:36:c6:49:bf:a9:5d:4c:48:6a:8d:2c: f3:a8:6a:59:80:ab:c4:05:dd:5a:c4:ec:bf:a2:2f: db:7f:b1:c6:a7:05:66:bf:4e:1a:3d:0c:d3:64:58: 9a:75:58:37:1c:e0:d4:cd:7c:e1:34:ab:3b:68:99: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BA:69:56:5A:9A:EC:03:F0:83:33:9D:66:6D:2E:DB:89:92:35:84 X509v3 Authority Key Identifier: keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:87:52:0d:3e:36:30:4c:01:11:f2:72:78:8c:7b:88:48:4d: 61:17:89:9c:4e:02:3f:59:68:f2:82:87:74:46:e8:b7:04:1d: dd:c2:f3:e3:d3:30:4f:c1:c8:1b:89:20:a0:32:f3:2e:3b:46: ba:6e:5c:c4:1a:85:81:c3:94:c9:8a:c4:65:86:a5:73:90:93: 40:88:15:da:27:52:60:01:9c:f3:6f:fa:35:91:f9:77:1f:0e: 2d:82:09:64:e9:12:bb:eb:d1:17:20:79:63:02:b9:e8:be:c9: bd:d2:d7:33:bd:0c:7a:5f:db:2c:b5:6d:ca:f1:d0:80:3a:2a: 94:c7:90:f9:e0:49:d4:67:50:ed:77:ce:fc:f7:66:82:48:77: 26:5c:08:06:a7:81:6d:72:35:e2:7f:73:93:d2:05:5f:1b:d1: 2d:6b:af:17:80:a6:26:4a:a1:68:30:27:0a:fa:f3:5f:b2:ea: 75:34:86:a6:3a:49:0d:04:1b:79:7f:b1:2f:12:f0:40:ab:38: 9d:0f:9e:ed:80:01:22:78:b7:19:f8:87:cd:2e:ef:44:4a:92: 51:79:2b:18:af:62:74:d8:c0:b9:cf:48:41:ad:f4:bd:4a:88: f1:cc:a5:56:ed:92:e2:17:f0:0e:df:3e:b1:78:49:d8:49:1f: 6b:e6:8f:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4IAMjG2Mbdfv0qDj4OJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTUwOWQ3NzYyMmQzMDg2OGYyMzYxM2M1YTgxNmU3MjQ4 NDAxNjUwHhcNMjUxMjI0MDEwMTU3WhcNMjUxMjI1MDEwMTU3WjAzMTEwLwYDVQQD Eyg1NGJhNjk1NjVhOWFlYzAzZjA4MzMzOWQ2NjZkMmVkYjg5OTIzNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmeVZ+dkHK9f5jLnPI2bfUSEf5DQ td2gra2Z1d/Lum6YO6htAMaD9qLy8REtdYzlEyvGv1bRt0BKJkV5mwzhqL5FH5KK 6kKvE+JzULTHXFKGTxJ54Cp5iYBHCzK7M90lMvRD8DeHHIfuSj3vesx1iVYN1zWt n/UJRnKI5GfLSZQFbRfPbsN0epAXW1F5lsH9AnExOTu2kljDA0KLyB77FPe/EZjq NLrdIGvZuR5f273j2ayWvZQwJw+qfjl5SW0ItyeUqYzcNsZJv6ldTEhqjSzzqGpZ gKvEBd1axOy/oi/bf7HGpwVmv04aPQzTZFiadVg3HODUzXzhNKs7aJnbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS6aVZamuwD8IMznWZtLtuJkjWEMB8GA1UdIwQY MBaAFK9VCdd2ItMIaPI2E8WoFuckhAFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMt MGFlZTZlMjM3MjQzLzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMtMGFlZTZlMjM3MjQz LzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYdSDT42 MEwBEfJyeIx7iEhNYReJnE4CP1lo8oKHdEbotwQd3cLz49MwT8HIG4kgoDLzLjtG um5cxBqFgcOUyYrEZYalc5CTQIgV2idSYAGc82/6NZH5dx8OLYIJZOkSu+vRFyB5 YwK56L7JvdLXM70Mel/bLLVtyvHQgDoqlMeQ+eBJ1GdQ7XfO/Pdmgkh3JlwIBqeB bXI14n9zk9IFXxvRLWuvF4CmJkqhaDAnCvrzX7LqdTSGpjpJDQQbeX+xLxLwQKs4 nQ+e7YABIni3GfiHzS7vREqSUXkrGK9idNjAuc9IQa30vUqI8cylVu2S4hfwDt8+ sXhJ2Ekfa+aPzw== -----END CERTIFICATE-----Generated at Wed Dec 24 04:02:56 2025 by rpki-client