This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json) Hash identifier: m/ztWQiuulFKHXF8LfxTJB4vOqZgOtOEic5HF7O2z0E= Subject key identifier: 0D:0E:01:3B:E4:50:25:A2:01:3A:E3:2E:EE:BA:04:35:64:03:13:92 Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e Certificate serial: 019B5A1A81B753E06596211F9B77D19DC5B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft Manifest number: EA Signing time: Fri 26 Dec 2025 10:00:45 +0000 Manifest this update: Fri 26 Dec 2025 10:00:45 +0000 Manifest next update: Sat 27 Dec 2025 10:00:45 +0000 Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: /aqo5E415C9UQz7zoUlfx7u/VSerCSS4BQ0aStQu1eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:81:b7:53:e0:65:96:21:1f:9b:77:d1:9d:c5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e Validity Not Before: Dec 26 10:00:45 2025 GMT Not After : Dec 27 10:00:45 2025 GMT Subject: CN=0d0e013be45025a2013ae32eeeba043564031392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:05:74:4f:69:c3:ce:d6:2a:3f:ad:5a:6b: 01:f1:90:20:de:a7:e2:5c:f2:64:f5:e6:5d:f8:e6: 11:70:66:72:3c:c0:da:be:1f:aa:5c:d0:cf:a1:0c: 7f:ed:ab:25:4e:a0:50:0e:ba:98:83:ed:9d:ad:8b: 87:72:7d:ba:21:28:0d:a9:11:ec:f0:1e:92:b3:35: 73:43:2b:97:26:c7:e0:78:e0:18:af:76:fa:59:02: 00:cf:f9:c1:52:55:76:c8:14:52:e2:fb:56:5f:93: 80:27:1a:04:30:24:3f:fc:dc:fe:75:77:bc:f7:f3: 84:85:67:aa:d3:bb:e4:da:a8:4e:a3:99:b7:02:e9: 5d:65:ea:d8:ac:6c:68:e7:dc:3d:36:c4:cc:61:e9: 5a:80:24:62:d3:95:65:bd:6f:44:f3:92:76:75:0f: f1:51:f0:fe:f2:2d:8c:45:d8:20:55:81:37:74:07: a9:24:41:f0:6c:e7:91:04:00:a6:ea:77:0d:8c:24: ba:01:51:8d:83:90:a4:50:10:3d:3e:0b:21:d9:3b: 5d:d5:a1:24:37:20:6d:cf:c1:89:da:3c:5e:36:a7: 71:a4:f3:28:1d:2a:14:90:42:62:6d:9b:8c:64:66: 29:54:b8:f7:13:77:f7:f3:77:bf:56:f9:3d:91:0e: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0E:01:3B:E4:50:25:A2:01:3A:E3:2E:EE:BA:04:35:64:03:13:92 X509v3 Authority Key Identifier: keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:08:cf:5b:4c:3c:70:33:93:18:b2:e8:05:0c:30:ca:87:4c: 6c:e5:55:ca:91:98:28:ee:eb:b4:73:c5:16:a7:57:c1:24:d0: a8:91:3d:ee:00:d3:0a:21:2f:42:97:07:b5:af:e6:0f:bb:c5: 11:70:62:3d:18:2d:01:2a:ca:26:dc:f3:4f:0d:da:a0:81:c1: c6:2f:3d:a2:98:0f:84:db:ec:5f:fe:7c:0e:35:09:90:9f:20: 4a:b7:54:f5:34:5e:d0:51:7e:23:67:0c:08:37:0b:41:4a:e9: 9a:4b:48:06:bd:1d:3f:ec:e3:52:a5:1c:13:33:be:c5:b3:bf: b0:41:4a:e0:d3:c3:ec:bb:74:e8:61:40:42:7f:76:6d:58:3c: 51:3e:1a:bb:53:2c:b7:99:86:b4:32:0d:cf:a6:86:e2:2f:50: dd:77:03:f4:a5:4f:93:09:39:72:4b:9a:4d:dd:54:b4:8b:32: f1:93:8b:aa:e5:56:6e:93:87:2b:41:8e:34:ce:9a:b8:31:39: 18:d8:0b:90:1a:8d:3d:b1:cb:54:c6:2e:7d:d5:be:44:f9:d2: 9c:17:4c:b2:e7:2f:f4:0b:32:05:29:8b:47:19:54:9a:3e:a4: 4e:a4:cd:54:df:fe:5d:8a:a2:50:38:e3:04:0f:2a:f2:15:6c: e0:59:ae:b2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaGoG3U+BlliEfm3fRncW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZmRlM2Q5OTI1YWJiZTIwZmMzYzZkOTE4NGM3ZGY2NzA0 N2ZiOWUwHhcNMjUxMjI2MTAwMDQ1WhcNMjUxMjI3MTAwMDQ1WjAzMTEwLwYDVQQD EygwZDBlMDEzYmU0NTAyNWEyMDEzYWUzMmVlZWJhMDQzNTY0MDMxMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdwFdE9pw87WKj+tWmsB8ZAg3qfi XPJk9eZd+OYRcGZyPMDavh+qXNDPoQx/7aslTqBQDrqYg+2drYuHcn26ISgNqRHs 8B6SszVzQyuXJsfgeOAYr3b6WQIAz/nBUlV2yBRS4vtWX5OAJxoEMCQ//Nz+dXe8 9/OEhWeq07vk2qhOo5m3AuldZerYrGxo59w9NsTMYelagCRi05VlvW9E85J2dQ/x UfD+8i2MRdggVYE3dAepJEHwbOeRBACm6ncNjCS6AVGNg5CkUBA9Pgsh2Ttd1aEk NyBtz8GJ2jxeNqdxpPMoHSoUkEJibZuMZGYpVLj3E3f383e/Vvk9kQ54/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA0OATvkUCWiATrjLu66BDVkAxOSMB8GA1UdIwQY MBaAFPr949mSWrviD8PG2RhMffZwR/ueMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12M2oyWkphdS1JUHc4YlpHRXg5OW5CSC01NC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZGM4ZDAwLWYyYzQtNDk5MS05ODll LTQzZDE5ZGMzZjEzOC8xLzEtdjNqMlpKYXUtSVB3OGJaR0V4OTluQkgtNTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA4L2RjOGQwMC1mMmM0LTQ5OTEtOTg5ZS00M2QxOWRjM2Yx MzgvMS8xLXYzajJaSmF1LUlQdzhiWkdFeDk5bkJILTU0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAjP W0w8cDOTGLLoBQwwyodMbOVVypGYKO7rtHPFFqdXwSTQqJE97gDTCiEvQpcHta/m D7vFEXBiPRgtASrKJtzzTw3aoIHBxi89opgPhNvsX/58DjUJkJ8gSrdU9TRe0FF+ I2cMCDcLQUrpmktIBr0dP+zjUqUcEzO+xbO/sEFK4NPD7Lt06GFAQn92bVg8UT4a u1Mst5mGtDINz6aG4i9Q3XcD9KVPkwk5ckuaTd1UtIsy8ZOLquVWbpOHK0GONM6a uDE5GNgLkBqNPbHLVMYufdW+RPnSnBdMsucv9AsyBSmLRxlUmj6kTqTNVN/+XYqi UDjjBA8q8hVs4Fmusg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:39 2025 by rpki-client