This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json) Hash identifier: iXzIwlrl05g7s2WHjKIcGb51FUol5mVeCF9szL6gDNY= Subject key identifier: 44:B1:E7:6E:3D:94:C3:80:97:30:A1:C9:EF:8F:D8:02:24:53:5E:BA Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf Certificate serial: 019B2175573844EB53F4317A573A7A318217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft Manifest number: 14B5 Signing time: Mon 15 Dec 2025 10:01:36 +0000 Manifest this update: Mon 15 Dec 2025 10:01:36 +0000 Manifest next update: Tue 16 Dec 2025 10:01:36 +0000 Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: bq7sVqHOo+YaojSMiMGaGzkXCE1Ci0oemSq/GmcTjqg=) 2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:57:38:44:eb:53:f4:31:7a:57:3a:7a:31:82:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf Validity Not Before: Dec 15 10:01:36 2025 GMT Not After : Dec 16 10:01:36 2025 GMT Subject: CN=44b1e76e3d94c3809730a1c9ef8fd80224535eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:38:29:28:74:d5:bd:d5:c6:f4:66:5f:73: 67:44:30:4d:ad:6b:62:64:8c:6a:ad:8c:f7:b2:39: 76:9d:1e:8d:17:dd:95:67:04:38:59:4e:7d:19:f9: 1d:d7:82:33:4b:4c:3d:09:2c:20:32:2a:cf:47:a7: a8:d3:6e:c2:a7:9e:f2:8f:d9:e6:e0:42:9a:7e:64: 54:a9:03:ab:49:a2:d2:a5:1f:73:15:c4:10:44:97: 88:7d:91:cb:72:f9:41:d4:8c:a6:60:9b:0d:c0:e4: 8b:ff:93:b4:df:d5:85:50:e5:7d:c0:a4:84:9d:c9: d0:d1:66:e9:4e:ad:96:bb:33:b8:a5:13:85:c5:ee: 6b:ec:bf:0b:cb:3b:e1:94:3c:05:92:aa:d2:8d:b8: 80:0b:22:61:e0:50:6d:98:2c:58:44:9a:d8:f0:ab: 94:b0:63:da:4d:42:28:6a:85:98:de:6b:31:17:6a: 28:c8:81:d6:2e:61:df:08:d0:ae:9f:b7:06:fa:c7: 0e:48:a3:05:72:91:40:36:32:f8:ee:c9:d3:ab:14: 13:65:6e:70:d9:79:2b:a5:b8:68:3f:4a:3f:b9:be: f8:7b:64:b9:3a:ef:38:9c:dd:c5:9d:fe:f6:d4:56: 5d:b1:c5:5b:50:cb:c0:7e:cf:67:37:96:2b:0a:48: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B1:E7:6E:3D:94:C3:80:97:30:A1:C9:EF:8F:D8:02:24:53:5E:BA X509v3 Authority Key Identifier: keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a4:c8:b3:ab:05:64:d9:09:9b:29:09:4c:a5:33:87:13:54: 2c:b9:23:0d:e7:5b:f4:ad:09:d2:7b:9a:79:af:15:7b:88:ac: 3b:d5:34:e1:94:37:33:8d:4e:21:b9:df:74:e8:65:6f:60:67: df:a0:a3:69:87:48:34:e2:fc:81:00:63:cc:4d:88:74:d2:72: 4e:e2:b6:73:ac:e5:01:05:46:74:8f:47:38:e1:5b:7b:22:e9: 57:f6:ae:66:ad:c9:ac:19:e1:c0:27:fb:99:65:5a:3d:29:d1: 8c:c1:ae:67:fc:c5:a7:ba:e0:92:c5:f0:4e:10:a7:cc:f5:41: e5:1f:93:ec:ad:83:c1:80:57:10:07:86:53:0f:97:b0:61:2d: c1:4b:de:25:97:8e:50:29:f5:9e:c4:74:46:53:45:fb:54:2e: 5f:7f:f8:22:ab:15:64:ae:0d:ce:24:b2:95:c7:8e:ec:25:6a: 32:b7:53:70:61:19:7c:7f:45:b1:93:2f:f9:fe:1d:31:1a:ca: f0:98:97:52:47:51:52:b8:15:1c:6e:27:a0:3d:15:a1:ba:40: 3b:51:ec:58:cc:87:4a:09:b2:82:20:1f:60:60:91:14:3f:0f: c5:81:a9:a0:70:bb:9e:36:f4:1d:bb:40:34:f0:c7:92:1f:fd: d9:b8:93:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdVc4ROtT9DF6Vzp6MYIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTYzNWRkMzgwMjE1YTAzYzkzMDdkYTU2MjA2YzU2NmIz OGEzY2YwHhcNMjUxMjE1MTAwMTM2WhcNMjUxMjE2MTAwMTM2WjAzMTEwLwYDVQQD Eyg0NGIxZTc2ZTNkOTRjMzgwOTczMGExYzllZjhmZDgwMjI0NTM1ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL04KSh01b3VxvRmX3NnRDBNrWti ZIxqrYz3sjl2nR6NF92VZwQ4WU59Gfkd14IzS0w9CSwgMirPR6eo027Cp57yj9nm 4EKafmRUqQOrSaLSpR9zFcQQRJeIfZHLcvlB1IymYJsNwOSL/5O039WFUOV9wKSE ncnQ0WbpTq2WuzO4pROFxe5r7L8LyzvhlDwFkqrSjbiACyJh4FBtmCxYRJrY8KuU sGPaTUIoaoWY3msxF2ooyIHWLmHfCNCun7cG+scOSKMFcpFANjL47snTqxQTZW5w 2XkrpbhoP0o/ub74e2S5Ou84nN3Fnf721FZdscVbUMvAfs9nN5YrCkiJrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESx5249lMOAlzChye+P2AIkU166MB8GA1UdIwQY MBaAFGtWNd04AhWgPJMH2lYgbFZrOKPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYzE3MzgtNmM2Ny00MjA0LTg5MDEt NzQ3NDhiYzkzYmNhLzEvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hYzE3MzgtNmM2Ny00MjA0LTg5MDEtNzQ3NDhiYzkzYmNh LzEvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6TIs6sF ZNkJmykJTKUzhxNULLkjDedb9K0J0nuaea8Ve4isO9U04ZQ3M41OIbnfdOhlb2Bn 36CjaYdINOL8gQBjzE2IdNJyTuK2c6zlAQVGdI9HOOFbeyLpV/auZq3JrBnhwCf7 mWVaPSnRjMGuZ/zFp7rgksXwThCnzPVB5R+T7K2DwYBXEAeGUw+XsGEtwUveJZeO UCn1nsR0RlNF+1QuX3/4IqsVZK4NziSylceO7CVqMrdTcGEZfH9FsZMv+f4dMRrK 8JiXUkdRUrgVHG4noD0VobpAO1HsWMyHSgmygiAfYGCRFD8PxYGpoHC7njb0HbtA NPDHkh/92biT+w== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:18 2025 by rpki-client