This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json) Hash identifier: PPkMLgJXoUNAmbpK0Cvj2QwmGDX1LTcBKFGXjPUjt/8= Subject key identifier: D4:DD:D7:3C:40:B5:D8:65:9A:80:B1:43:3D:D5:A9:90:2E:4E:5B:E9 Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Certificate serial: 019B11CA63B8F0095427D31F65F37BE33063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft Manifest number: 04C5 Signing time: Fri 12 Dec 2025 09:00:34 +0000 Manifest this update: Fri 12 Dec 2025 09:00:34 +0000 Manifest next update: Sat 13 Dec 2025 09:00:34 +0000 Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: Yn2whUB6HBdcUR4XPBRJR7frTOCVWNIBb0krW5K2b/E=) 2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:63:b8:f0:09:54:27:d3:1f:65:f3:7b:e3:30:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8 Validity Not Before: Dec 12 09:00:34 2025 GMT Not After : Dec 13 09:00:34 2025 GMT Subject: CN=d4ddd73c40b5d8659a80b1433dd5a9902e4e5be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:de:44:7e:5d:26:5e:b0:4c:cb:20:10:27: 69:c9:62:b7:74:ac:57:d2:15:34:06:f3:0d:9f:5e: 25:a4:3e:2a:69:64:f7:f4:f1:16:7a:0b:d9:63:2e: 62:69:30:39:98:0e:d5:e4:19:e6:3d:c2:dc:ce:e0: 65:db:e4:58:da:24:d5:81:9f:22:eb:a2:2d:48:44: d4:c9:0b:45:34:c6:e9:c0:69:76:e0:64:8c:4b:5a: 73:50:2c:5e:00:c6:db:30:04:c4:2d:fe:55:27:a0: bc:4c:01:ff:c4:58:70:8e:50:56:79:74:a1:d8:90: 35:4e:8c:fc:32:a3:33:ca:5c:ca:c6:06:75:dc:67: 82:9e:ab:d6:ac:99:01:34:71:c7:7b:be:1c:cc:be: 90:8b:2a:cd:94:f2:e7:3f:04:5f:92:3c:7e:b3:18: c6:02:1f:d7:97:1e:4c:05:71:ce:ac:05:b1:01:08: f6:b1:89:9e:54:f1:0e:22:6e:24:eb:fd:99:4a:63: ac:a9:56:06:67:bb:e3:42:84:08:9e:e6:40:ec:eb: d3:93:e6:67:6e:4a:0c:70:a1:60:2d:22:76:0c:02: 11:4f:a0:77:b2:14:75:6b:65:10:cc:a0:d7:28:c3: 48:bc:bf:ef:7f:39:00:57:f7:9c:e0:d9:c7:3f:19: 09:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DD:D7:3C:40:B5:D8:65:9A:80:B1:43:3D:D5:A9:90:2E:4E:5B:E9 X509v3 Authority Key Identifier: keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:76:f3:64:f7:f7:d4:5f:ae:1f:63:e8:d8:13:8f:b5:9d:c0: 11:9f:9b:f1:62:a8:95:ff:71:b4:8c:98:c2:a6:3e:04:5e:06: 10:eb:2b:7a:33:f7:bc:de:d6:cf:0f:57:df:69:a4:f4:49:36: 49:ed:71:a0:df:c0:3c:6a:cc:a2:45:13:0c:12:8e:ef:0c:d4: a0:6d:f1:7d:84:57:b9:5d:df:d7:3c:18:81:db:d2:93:66:97: ac:4e:3e:34:ea:a5:c2:67:c4:b0:50:2d:b9:af:62:3c:fc:95: 12:e7:c6:35:da:71:31:73:3e:90:16:76:3b:6a:ec:9a:83:a3: 5f:d9:19:2a:7b:72:ad:fd:4b:eb:f1:83:5f:a6:a2:c4:7d:6b: 7a:a2:6b:45:22:8b:10:40:46:3f:4d:3b:c8:ae:2d:9b:18:3e: 23:f7:0f:fb:00:b0:0d:7a:2e:9a:81:5f:c8:e6:0c:8f:29:26: ca:ae:d4:23:f0:64:de:c4:bd:e7:66:40:a2:53:3a:8e:2d:22: 88:84:e8:d3:f1:3b:e7:7b:18:2f:c6:45:70:56:45:bc:80:21: dc:4a:13:ea:7b:8f:3f:94:7f:3d:92:20:2f:78:c2:d1:e9:f6: 47:7d:0b:59:16:20:3e:9e:bc:ae:33:57:b3:c4:ad:58:fc:74: 4a:56:43:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRymO48AlUJ9MfZfN74zBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NWU1NjExNzg4MTQyYjMxNTQyOGFlNTFmNjdjYmJhY2Y4 MGI3ZTgwHhcNMjUxMjEyMDkwMDM0WhcNMjUxMjEzMDkwMDM0WjAzMTEwLwYDVQQD EyhkNGRkZDczYzQwYjVkODY1OWE4MGIxNDMzZGQ1YTk5MDJlNGU1YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYfeRH5dJl6wTMsgECdpyWK3dKxX 0hU0BvMNn14lpD4qaWT39PEWegvZYy5iaTA5mA7V5BnmPcLczuBl2+RY2iTVgZ8i 66ItSETUyQtFNMbpwGl24GSMS1pzUCxeAMbbMATELf5VJ6C8TAH/xFhwjlBWeXSh 2JA1Toz8MqMzylzKxgZ13GeCnqvWrJkBNHHHe74czL6QiyrNlPLnPwRfkjx+sxjG Ah/Xlx5MBXHOrAWxAQj2sYmeVPEOIm4k6/2ZSmOsqVYGZ7vjQoQInuZA7OvTk+Zn bkoMcKFgLSJ2DAIRT6B3shR1a2UQzKDXKMNIvL/vfzkAV/ec4NnHPxkJhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTd1zxAtdhlmoCxQz3VqZAuTlvpMB8GA1UdIwQY MBaAFNVeVhF4gUKzFUKK5R9ny7rPgLfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQt ODNjN2RiNzU5NmZlLzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQtODNjN2RiNzU5NmZl LzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHbzZPf3 1F+uH2Po2BOPtZ3AEZ+b8WKolf9xtIyYwqY+BF4GEOsrejP3vN7Wzw9X32mk9Ek2 Se1xoN/APGrMokUTDBKO7wzUoG3xfYRXuV3f1zwYgdvSk2aXrE4+NOqlwmfEsFAt ua9iPPyVEufGNdpxMXM+kBZ2O2rsmoOjX9kZKntyrf1L6/GDX6aixH1reqJrRSKL EEBGP007yK4tmxg+I/cP+wCwDXoumoFfyOYMjykmyq7UI/Bk3sS952ZAolM6ji0i iITo0/E753sYL8ZFcFZFvIAh3EoT6nuPP5R/PZIgL3jC0en2R30LWRYgPp68rjNX s8StWPx0SlZDYQ== -----END CERTIFICATE-----Generated at Fri Dec 12 16:11:28 2025 by rpki-client