This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json) Hash identifier: kLtru1SHWKaXrc0pvZAK95yquXmXySa8HbhGVCA4V0Q= Subject key identifier: F0:70:A8:A7:B1:4C:F6:14:8B:D7:72:09:92:0D:B9:A3:5A:FA:E1:1D Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c Certificate serial: 019ABA0763D46D971C6A7F39D9E9B6CCE4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft Manifest number: 13EF Signing time: Tue 25 Nov 2025 08:00:37 +0000 Manifest this update: Tue 25 Nov 2025 08:00:37 +0000 Manifest next update: Wed 26 Nov 2025 08:00:37 +0000 Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: hF1WWD6i1EW0wQQDYVaFtQgPf5cCugHUG2nIb31zyME=) 2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:07:63:d4:6d:97:1c:6a:7f:39:d9:e9:b6:cc:e4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c Validity Not Before: Nov 25 08:00:37 2025 GMT Not After : Nov 26 08:00:37 2025 GMT Subject: CN=f070a8a7b14cf6148bd77209920db9a35afae11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:8d:c9:21:01:43:47:bc:b2:d3:db:45:2f: d6:5c:48:38:60:68:9b:7f:63:ad:7a:3e:05:dd:65: 58:12:25:96:31:3e:c3:e6:38:3d:7c:f2:c1:d4:49: dd:72:51:89:ec:22:7c:5f:c1:19:f6:1f:ad:35:a5: 22:36:79:f6:e0:c6:5c:ce:7e:2b:d9:f0:83:fc:dd: a1:81:f9:77:30:f2:10:cd:9f:35:d9:9f:bd:07:84: a0:e7:c0:66:8e:bd:24:64:98:55:4a:bf:7c:f1:a3: a6:c1:47:c7:81:04:e8:ad:a5:fb:bf:0e:4c:73:66: 44:ef:2a:18:8a:69:28:ae:1f:3c:37:31:68:fd:dc: 39:a9:6d:af:88:ff:9f:5f:80:7a:9e:fd:5d:f8:44: 07:97:fe:cb:00:4c:7f:25:f2:e3:1e:ab:97:36:2a: d8:88:04:a5:1e:11:53:a2:58:e3:19:51:74:be:01: e1:84:21:e6:05:bb:d3:6b:b3:8e:64:2d:3f:50:3f: 54:1a:8d:22:8a:49:e2:69:87:4f:c4:2a:88:cc:29: 3f:a3:d8:78:17:6e:7e:ca:5c:93:e7:87:ad:71:e2: 01:d0:b0:eb:6f:8b:dc:07:a0:58:dd:62:2e:7d:37: 87:4f:81:91:0c:a0:cf:28:f0:eb:ea:b5:76:a5:1d: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:A8:A7:B1:4C:F6:14:8B:D7:72:09:92:0D:B9:A3:5A:FA:E1:1D X509v3 Authority Key Identifier: keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:40:d7:21:52:11:fc:07:44:72:f4:e9:09:1d:8e:7c:9c:02: 05:e5:ab:6b:8f:1d:77:a6:a1:46:f2:13:e5:2f:a6:75:a5:20: 9c:06:0e:46:17:ec:6f:11:ff:15:bd:73:03:12:94:a3:bd:ce: 8d:fc:d3:0a:dd:f6:e3:ab:dc:36:fc:3e:a6:22:95:ed:f1:f1: 2a:8c:15:97:4f:69:fa:fd:1b:22:09:10:31:e2:8b:cc:a2:37: 3f:e2:2d:31:7f:99:f0:2d:8f:06:eb:98:6f:c7:08:63:3e:d5: 3f:21:19:17:86:db:7a:f8:e2:a6:bb:bd:0e:fa:9f:8d:a8:f6: 22:0d:3e:7f:28:0e:3c:07:44:0f:a8:d5:a4:b0:af:61:24:d1: 01:63:fa:ef:be:58:c9:08:21:f4:aa:0b:ca:58:c0:e9:b3:55: 48:6b:d7:9d:90:06:b7:9d:90:a6:6c:04:f2:9f:4e:57:b9:60: 31:3d:fe:0b:77:c2:90:38:08:d6:bb:cf:f4:04:77:05:10:3e: c8:54:76:e9:6a:b3:f6:8a:66:05:8e:c8:4c:49:8b:9e:d2:56: 97:6a:1d:2b:15:55:75:8e:b7:f7:fb:07:15:df:ea:e1:f3:d8: c5:1e:aa:7d:2a:fb:c3:69:bb:1f:43:51:9b:42:7b:8c:d7:30: 82:2d:98:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6B2PUbZccan852em2zOTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk YzMyMmMwHhcNMjUxMTI1MDgwMDM3WhcNMjUxMTI2MDgwMDM3WjAzMTEwLwYDVQQD EyhmMDcwYThhN2IxNGNmNjE0OGJkNzcyMDk5MjBkYjlhMzVhZmFlMTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvSNySEBQ0e8stPbRS/WXEg4YGib f2Otej4F3WVYEiWWMT7D5jg9fPLB1EndclGJ7CJ8X8EZ9h+tNaUiNnn24MZczn4r 2fCD/N2hgfl3MPIQzZ812Z+9B4Sg58Bmjr0kZJhVSr988aOmwUfHgQToraX7vw5M c2ZE7yoYimkorh88NzFo/dw5qW2viP+fX4B6nv1d+EQHl/7LAEx/JfLjHquXNirY iASlHhFToljjGVF0vgHhhCHmBbvTa7OOZC0/UD9UGo0iikniaYdPxCqIzCk/o9h4 F25+ylyT54etceIB0LDrb4vcB6BY3WIufTeHT4GRDKDPKPDr6rV2pR2i7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBwqKexTPYUi9dyCZINuaNa+uEdMB8GA1UdIwQY MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt ZjQ0OWJhZDI5ODU1LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1 LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkDXIVIR /AdEcvTpCR2OfJwCBeWra48dd6ahRvIT5S+mdaUgnAYORhfsbxH/Fb1zAxKUo73O jfzTCt3246vcNvw+piKV7fHxKowVl09p+v0bIgkQMeKLzKI3P+ItMX+Z8C2PBuuY b8cIYz7VPyEZF4bbevjipru9Dvqfjaj2Ig0+fygOPAdED6jVpLCvYSTRAWP6775Y yQgh9KoLyljA6bNVSGvXnZAGt52QpmwE8p9OV7lgMT3+C3fCkDgI1rvP9AR3BRA+ yFR26Wqz9opmBY7ITEmLntJWl2odKxVVdY639/sHFd/q4fPYxR6qfSr7w2m7H0NR m0J7jNcwgi2YQg== -----END CERTIFICATE-----Generated at Tue Nov 25 13:17:33 2025 by rpki-client