This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json) Hash identifier: 53Hay8BioZZI95KZAj0or7f/Ol5AcBktxDlX2FyGkes= Subject key identifier: 31:6B:BF:5B:02:1F:FF:08:E4:FF:05:04:48:3E:D6:FF:9C:56:84:75 Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec Certificate serial: 019B1A9788C38A6F914CFAC2411FAA7314DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft Manifest number: 0B5F Signing time: Sun 14 Dec 2025 02:01:37 +0000 Manifest this update: Sun 14 Dec 2025 02:01:37 +0000 Manifest next update: Mon 15 Dec 2025 02:01:37 +0000 Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: xVE95vWuGx5nwyUTRazIscMAooeMrBNCH6DigBeZTHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:88:c3:8a:6f:91:4c:fa:c2:41:1f:aa:73:14:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec Validity Not Before: Dec 14 02:01:37 2025 GMT Not After : Dec 15 02:01:37 2025 GMT Subject: CN=316bbf5b021fff08e4ff0504483ed6ff9c568475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:98:2a:03:14:8f:fa:d3:92:15:b2:02:cf:2f: 61:52:aa:53:b7:f6:50:1b:c7:f8:44:40:5c:b6:32: ab:ab:4d:01:75:5f:df:54:c4:97:30:d9:34:b1:0e: 67:80:a5:c0:04:1f:fa:ee:f8:da:a1:14:f1:da:85: 1c:b0:84:04:87:f8:bb:53:f6:73:1a:fd:d2:3f:f2: dc:ca:0b:d5:f8:37:7e:67:36:c9:26:2c:9c:67:8b: 17:8c:55:fa:69:cd:bf:df:ef:ff:dc:4c:54:81:e0: 7c:77:78:78:51:f0:41:28:a3:cf:0c:89:59:f5:9b: 4e:1a:0a:f9:a8:d6:ef:92:e5:8c:2e:19:40:08:21: 92:8f:6b:9f:13:a0:9a:e4:9e:23:ab:f0:d5:3a:c6: f1:b0:83:c9:c2:88:35:25:64:7a:2c:80:96:cd:88: c4:2b:44:3a:37:e9:a6:d4:4c:41:4f:0c:ec:ab:86: 31:d4:88:3c:b7:c7:32:77:16:77:da:be:60:db:27: 4d:a7:27:5b:67:ad:ec:dd:01:2d:a8:95:82:04:6f: 6a:3e:7e:9b:c6:8b:69:6e:f7:74:23:6b:78:e6:24: bb:23:2a:a5:ba:2d:11:f5:0d:70:c7:34:51:b8:63: 09:a9:89:2c:0d:93:65:b7:7d:ad:22:12:13:f9:39: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6B:BF:5B:02:1F:FF:08:E4:FF:05:04:48:3E:D6:FF:9C:56:84:75 X509v3 Authority Key Identifier: keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:09:b1:c2:e8:4a:16:a3:aa:01:c8:b8:aa:0e:90:3f:26: 6f:20:76:ff:01:05:38:69:76:4a:47:cf:c5:db:c3:82:fe:51: b6:63:7b:31:3f:3b:fb:5e:ba:62:64:7f:c6:b4:79:07:4d:51: e7:27:78:19:b1:0d:6e:ce:a4:27:0e:3f:e5:2c:b9:cf:89:e7: fa:81:4c:6a:93:fd:76:65:88:ca:df:9d:e1:31:ce:ad:7e:7e: 7a:2e:9f:2a:13:dd:32:f5:ad:e6:f2:d4:98:c9:91:62:1d:d1: b3:00:f6:6b:b5:1a:22:e3:21:ab:bc:d2:b9:1a:95:f2:4e:9f: bf:66:48:53:2f:51:f0:38:cf:16:1d:1a:81:81:95:c3:bc:e7: 29:a8:cb:43:a7:f5:15:08:1f:b6:59:a3:23:63:81:09:86:c6: cc:fa:c1:68:1a:b3:a3:e8:0f:9c:62:7b:41:ce:fe:d0:2c:43: 0e:72:0c:e9:a8:81:63:fa:35:ce:c7:07:de:18:cf:fa:4a:bf: 49:35:7b:db:a2:64:3f:60:98:bf:81:3f:08:b1:d3:48:ca:d3: d4:fa:5a:70:05:85:64:dd:b4:06:10:1a:f3:42:f8:08:62:2f: 1d:ec:70:41:53:76:90:07:9c:33:16:e4:25:87:06:de:72:35: 6f:2f:da:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal4jDim+RTPrCQR+qcxTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDY4ZjU0YzBkNDk1ODFmNjliNTQzODNkNTU3M2ZmNzc1 NjIwZWMwHhcNMjUxMjE0MDIwMTM3WhcNMjUxMjE1MDIwMTM3WjAzMTEwLwYDVQQD EygzMTZiYmY1YjAyMWZmZjA4ZTRmZjA1MDQ0ODNlZDZmZjljNTY4NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5gqAxSP+tOSFbICzy9hUqpTt/ZQ G8f4REBctjKrq00BdV/fVMSXMNk0sQ5ngKXABB/67vjaoRTx2oUcsIQEh/i7U/Zz Gv3SP/LcygvV+Dd+ZzbJJiycZ4sXjFX6ac2/3+//3ExUgeB8d3h4UfBBKKPPDIlZ 9ZtOGgr5qNbvkuWMLhlACCGSj2ufE6Ca5J4jq/DVOsbxsIPJwog1JWR6LICWzYjE K0Q6N+mm1ExBTwzsq4Yx1Ig8t8cydxZ32r5g2ydNpydbZ63s3QEtqJWCBG9qPn6b xotpbvd0I2t45iS7Iyqlui0R9Q1wxzRRuGMJqYksDZNlt32tIhIT+Tk3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFrv1sCH/8I5P8FBEg+1v+cVoR1MB8GA1UdIwQY MBaAFNVGj1TA1JWB9ptUOD1Vc/93ViDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQt MmM1YTdhYjQ5MzE5LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQtMmM1YTdhYjQ5MzE5 LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0sJscLo ShajqgHIuKoOkD8mbyB2/wEFOGl2SkfPxdvDgv5RtmN7MT87+166YmR/xrR5B01R 5yd4GbENbs6kJw4/5Sy5z4nn+oFMapP9dmWIyt+d4THOrX5+ei6fKhPdMvWt5vLU mMmRYh3RswD2a7UaIuMhq7zSuRqV8k6fv2ZIUy9R8DjPFh0agYGVw7znKajLQ6f1 FQgftlmjI2OBCYbGzPrBaBqzo+gPnGJ7Qc7+0CxDDnIM6aiBY/o1zscH3hjP+kq/ STV726JkP2CYv4E/CLHTSMrT1PpacAWFZN20BhAa80L4CGIvHexwQVN2kAecMxbk JYcG3nI1by/aRw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:04 2025 by rpki-client