This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json) Hash identifier: kApg2eZF1YsRzyMgQQvM+Q8HNJGqjyxzxA3kzSFrt9A= Subject key identifier: E2:49:BC:AF:AD:E7:B0:D9:84:75:22:48:D9:AA:24:BD:20:21:B5:ED Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53 Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453 Certificate serial: 019B22F548DFF2D587F057C479A8965A2E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft Manifest number: 01E3 Signing time: Mon 15 Dec 2025 17:00:58 +0000 Manifest this update: Mon 15 Dec 2025 17:00:58 +0000 Manifest next update: Tue 16 Dec 2025 17:00:58 +0000 Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: Ay1C8fvVZytRVGDijas+b+NcHurezp1Wan7k5wayjhw=) 2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=) 3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:48:df:f2:d5:87:f0:57:c4:79:a8:96:5a:2e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453 Validity Not Before: Dec 15 17:00:58 2025 GMT Not After : Dec 16 17:00:58 2025 GMT Subject: CN=e249bcafade7b0d984752248d9aa24bd2021b5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:9c:aa:c7:55:11:cc:98:c1:3a:4a:8f:77: 08:29:30:02:3b:c2:77:ce:d7:d9:4e:01:01:c3:0e: 40:7d:c5:80:8e:be:ba:e9:eb:a9:f6:c4:ec:8c:f0: 7b:f9:72:80:cc:df:5f:46:e3:8b:fd:aa:83:a4:86: 66:c5:cf:e2:91:15:d3:d6:57:03:8f:4c:e7:db:18: 80:a8:69:36:06:c0:23:be:04:51:ac:39:83:40:04: fc:83:a5:4f:bb:20:62:81:d3:ab:ac:5c:8e:cc:75: 7c:b0:90:60:bb:a4:42:2e:76:41:83:9c:f3:d4:eb: 9f:36:4e:be:52:f5:40:ae:0a:82:4a:30:8a:09:af: 72:0b:37:40:68:96:72:a3:c2:a1:d7:13:ee:a1:ef: 05:9d:f2:ad:18:d2:59:cd:da:e0:64:7e:a2:6c:92: 21:fa:26:20:6a:d4:0a:41:43:aa:54:a0:26:10:b2: 26:13:0e:28:b7:61:1d:c7:c4:5e:d6:51:20:a7:09: 63:97:1d:c3:09:0b:6d:24:6d:ea:ca:76:6b:63:b7: 82:9e:3b:c6:ba:26:20:ac:cb:f2:6c:aa:e1:2d:3a: 33:6c:cd:65:1a:70:3c:7c:7c:eb:ea:ae:d9:7b:ad: 1e:fa:8a:ec:f4:77:64:ae:29:0f:dc:c4:f9:89:e0: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:49:BC:AF:AD:E7:B0:D9:84:75:22:48:D9:AA:24:BD:20:21:B5:ED X509v3 Authority Key Identifier: keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:30:bd:03:14:c5:29:cc:d8:e4:58:46:62:22:f1:02:38:16: 10:5c:e7:77:7f:be:0e:6a:03:cb:27:03:ad:48:b5:7c:d8:01: 41:df:0f:ef:de:d7:8b:44:1e:2a:00:84:dd:93:8d:d1:25:6c: 63:c3:20:de:38:00:72:1d:9d:49:b0:87:d4:1e:ed:85:bd:7c: 00:65:ec:a7:0c:73:0b:61:c7:81:1e:56:c3:34:c6:1c:dd:4d: d3:9c:13:c8:de:7c:13:39:04:7b:a5:36:41:24:de:01:3a:26: 8c:7e:98:4b:2e:de:7a:6c:73:27:46:c1:ab:f7:79:63:ea:7f: ce:aa:28:3d:e5:6f:39:4b:c4:ac:53:11:fa:4f:e5:16:64:1f: 46:b9:44:54:50:30:d4:82:3c:ca:49:47:7f:2d:92:fc:53:a4: 80:4a:df:ec:c7:d0:f9:43:04:6f:09:5d:90:7f:cc:29:a0:21: 0f:64:6e:31:23:c2:b3:49:83:ec:24:cc:14:24:2d:7c:14:fc: d8:d8:c7:6e:39:8b:ae:8c:e2:bd:a1:3f:3c:aa:75:27:f6:6f: 13:d8:49:8b:b9:b2:ff:f8:e1:90:2a:aa:8b:54:b0:ef:a5:92: 37:a9:df:1c:2e:a3:24:2a:bd:05:1d:02:ac:70:e8:d5:93:31: 47:ec:d8:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Ujf8tWH8FfEeaiWWi6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTU5MzI5NjBmM2MxNzRkNDk1N2FiZTlmNWFiMjk1MjY0 ZDU0NTMwHhcNMjUxMjE1MTcwMDU4WhcNMjUxMjE2MTcwMDU4WjAzMTEwLwYDVQQD EyhlMjQ5YmNhZmFkZTdiMGQ5ODQ3NTIyNDhkOWFhMjRiZDIwMjFiNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d2cqsdVEcyYwTpKj3cIKTACO8J3 ztfZTgEBww5AfcWAjr666eup9sTsjPB7+XKAzN9fRuOL/aqDpIZmxc/ikRXT1lcD j0zn2xiAqGk2BsAjvgRRrDmDQAT8g6VPuyBigdOrrFyOzHV8sJBgu6RCLnZBg5zz 1OufNk6+UvVArgqCSjCKCa9yCzdAaJZyo8Kh1xPuoe8FnfKtGNJZzdrgZH6ibJIh +iYgatQKQUOqVKAmELImEw4ot2Edx8Re1lEgpwljlx3DCQttJG3qynZrY7eCnjvG uiYgrMvybKrhLTozbM1lGnA8fHzr6q7Ze60e+ors9HdkrikP3MT5ieD8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJJvK+t57DZhHUiSNmqJL0gIbXtMB8GA1UdIwQY MBaAFNUVkylg88F01JV6vp9aspUmTVRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjkt MTNmNjViNTQzY2M0LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjktMTNmNjViNTQzY2M0 LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejC9AxTF KczY5FhGYiLxAjgWEFznd3++DmoDyycDrUi1fNgBQd8P797Xi0QeKgCE3ZON0SVs Y8Mg3jgAch2dSbCH1B7thb18AGXspwxzC2HHgR5WwzTGHN1N05wTyN58EzkEe6U2 QSTeATomjH6YSy7eemxzJ0bBq/d5Y+p/zqooPeVvOUvErFMR+k/lFmQfRrlEVFAw 1II8yklHfy2S/FOkgErf7MfQ+UMEbwldkH/MKaAhD2RuMSPCs0mD7CTMFCQtfBT8 2NjHbjmLrozivaE/PKp1J/ZvE9hJi7my//jhkCqqi1Sw76WSN6nfHC6jJCq9BR0C rHDo1ZMxR+zYig== -----END CERTIFICATE-----Generated at Mon Dec 15 19:56:10 2025 by rpki-client