This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json) Hash identifier: xTD8hd2qT7fP0uZbdPECnPWfUo3VbxC4AzM4NmOlQ8k= Subject key identifier: B9:51:12:BB:F5:FE:17:AA:C3:4A:43:DA:FE:7E:0A:1A:BC:EA:1D:2B Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260 Certificate serial: 019B19F26BB50529D77BA0716E4CAF9333DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft Manifest number: 0263 Signing time: Sat 13 Dec 2025 23:01:15 +0000 Manifest this update: Sat 13 Dec 2025 23:01:15 +0000 Manifest next update: Sun 14 Dec 2025 23:01:15 +0000 Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: +2GvVgRHP4quOD0UkowgY8rtJUs8FgyWtvbiI/+DPyg=) 2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:6b:b5:05:29:d7:7b:a0:71:6e:4c:af:93:33:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260 Validity Not Before: Dec 13 23:01:15 2025 GMT Not After : Dec 14 23:01:15 2025 GMT Subject: CN=b95112bbf5fe17aac34a43dafe7e0a1abcea1d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:bc:21:43:35:9b:b3:e1:e1:17:40:ab:50: bb:c9:4d:86:64:7f:d0:54:42:6c:a8:b6:78:ad:e6: 7f:5d:ee:7d:8f:2b:da:5b:cc:d5:09:12:77:a4:66: 28:74:8e:0f:f7:23:79:42:d7:ea:b0:34:da:b5:78: 36:d9:69:a4:01:10:f6:3e:99:f0:4d:b9:ae:d6:55: a7:ee:b0:83:cc:88:07:c6:7e:da:45:9d:df:db:41: 25:9c:a1:fc:3f:48:85:58:ff:97:87:95:6e:62:ae: 09:ba:89:7f:f4:ee:7d:ee:de:bc:2a:49:be:8e:cf: f9:59:1e:c7:f5:ca:c9:23:8b:e1:cd:7d:9a:1f:7d: ef:90:fb:9a:9f:7e:d7:f7:05:8e:cc:43:00:e5:59: 87:5b:18:29:04:c8:59:54:ac:0a:0f:58:3a:41:e7: 34:93:b5:ad:57:50:b0:3f:1a:21:06:b6:03:6d:4e: 5c:6b:d0:f6:88:13:50:4b:7b:a0:16:28:78:b6:5f: 3f:c7:2d:f9:d1:26:a7:42:da:a3:b8:6c:e7:3b:86: f1:5f:f2:24:f6:64:3d:26:ac:af:b1:37:18:2a:19: d1:a8:92:48:02:62:b3:63:c8:dd:59:80:92:5a:3c: b2:0a:c7:f1:4b:bc:db:3f:64:95:60:c3:bd:b0:75: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:12:BB:F5:FE:17:AA:C3:4A:43:DA:FE:7E:0A:1A:BC:EA:1D:2B X509v3 Authority Key Identifier: keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:14:4c:5b:fa:8c:77:1e:a6:ad:ba:a2:ef:60:c1:05:8c:ca: da:f8:3c:40:d8:0b:a8:b9:3e:42:10:7e:3f:b5:73:cf:29:af: 0a:57:aa:15:70:8d:6e:11:08:c6:83:bb:b2:07:85:cc:53:28: 6e:02:f2:e7:df:d2:2e:d4:2b:75:f1:37:58:d1:89:bd:90:32: 4a:12:74:f5:61:a9:20:22:f5:61:4d:47:ee:6c:4d:cf:5a:63: 55:4b:03:11:66:32:e4:d6:aa:25:8f:4d:fa:74:5e:ce:8c:23: 9c:20:c2:7d:db:82:74:8d:58:ed:65:82:c8:f2:60:a4:1d:2f: 26:a7:5f:68:a4:9a:92:b4:fe:fc:99:78:b7:bd:e7:86:ff:00: 6f:c7:59:1b:b9:54:f8:8d:4d:ca:26:e7:db:09:bb:61:ea:88: cf:f4:47:e0:63:16:93:1a:d7:06:a8:6a:be:b5:80:ca:ff:63: 8f:57:2c:21:c3:d8:fa:d3:51:a5:d9:63:6b:ce:42:6d:c4:0a: 99:8c:ba:ea:9d:ab:d9:9a:94:2e:57:d0:52:70:83:7f:65:4e: d9:3f:88:7d:4d:d4:e9:da:85:f1:a5:8a:87:9c:70:50:0f:50: 94:f2:63:5f:ac:89:b2:80:44:05:c5:0f:d9:06:b7:4e:85:52: 5b:08:98:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8mu1BSnXe6BxbkyvkzPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw NjkyNjAwHhcNMjUxMjEzMjMwMTE1WhcNMjUxMjE0MjMwMTE1WjAzMTEwLwYDVQQD EyhiOTUxMTJiYmY1ZmUxN2FhYzM0YTQzZGFmZTdlMGExYWJjZWExZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7q8IUM1m7Ph4RdAq1C7yU2GZH/Q VEJsqLZ4reZ/Xe59jyvaW8zVCRJ3pGYodI4P9yN5QtfqsDTatXg22WmkARD2Ppnw Tbmu1lWn7rCDzIgHxn7aRZ3f20ElnKH8P0iFWP+Xh5VuYq4Juol/9O597t68Kkm+ js/5WR7H9crJI4vhzX2aH33vkPuan37X9wWOzEMA5VmHWxgpBMhZVKwKD1g6Qec0 k7WtV1CwPxohBrYDbU5ca9D2iBNQS3ugFih4tl8/xy350SanQtqjuGznO4bxX/Ik 9mQ9JqyvsTcYKhnRqJJIAmKzY8jdWYCSWjyyCsfxS7zbP2SVYMO9sHUt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlRErv1/heqw0pD2v5+Chq86h0rMB8GA1UdIwQY MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBRMW/qM dx6mrbqi72DBBYzK2vg8QNgLqLk+QhB+P7VzzymvCleqFXCNbhEIxoO7sgeFzFMo bgLy59/SLtQrdfE3WNGJvZAyShJ09WGpICL1YU1H7mxNz1pjVUsDEWYy5NaqJY9N +nRezowjnCDCfduCdI1Y7WWCyPJgpB0vJqdfaKSakrT+/Jl4t73nhv8Ab8dZG7lU +I1Nyibn2wm7YeqIz/RH4GMWkxrXBqhqvrWAyv9jj1csIcPY+tNRpdlja85CbcQK mYy66p2r2ZqULlfQUnCDf2VO2T+IfU3U6dqF8aWKh5xwUA9QlPJjX6yJsoBEBcUP 2Qa3ToVSWwiYvg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:31:08 2025 by rpki-client