This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json) Hash identifier: oAICZo0Ud0A5CbgeR5Gn6C+vAqoETYkHUQXy1Vi6MCs= Subject key identifier: F6:9E:43:DF:A3:9B:4E:76:6D:4C:C1:CF:F9:5F:C7:38:3C:6A:D7:F9 Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20 Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120 Certificate serial: 019B4437DD82908D0416D50837FE83B78925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft Manifest number: 1788 Signing time: Mon 22 Dec 2025 04:01:10 +0000 Manifest this update: Mon 22 Dec 2025 04:01:10 +0000 Manifest next update: Tue 23 Dec 2025 04:01:10 +0000 Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: a4R0TlkVyU59bHWVvuFCMQ+GnqlrRpebTyP2FX7DFzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:dd:82:90:8d:04:16:d5:08:37:fe:83:b7:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120 Validity Not Before: Dec 22 04:01:10 2025 GMT Not After : Dec 23 04:01:10 2025 GMT Subject: CN=f69e43dfa39b4e766d4cc1cff95fc7383c6ad7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:a9:58:f0:ae:6a:c3:e3:4b:cb:93:4f:c9: 4b:66:2a:ec:c2:b6:85:ee:24:6d:89:f5:9d:10:f1: 2d:30:e7:f8:14:57:82:91:f7:26:ce:94:a1:98:c4: b9:49:a4:5f:3f:30:fe:bf:97:a9:39:77:f7:c7:bf: 8c:cd:b0:c6:6a:d6:70:e6:7a:20:07:27:93:de:58: 5e:65:91:ab:e8:82:91:ec:b4:96:dd:27:9c:1a:b6: 36:2b:c6:b0:9a:06:ef:94:43:39:48:20:cf:d9:d1: 2a:e2:33:b9:01:9d:7d:72:1b:b8:82:ae:19:e0:07: a6:75:42:74:60:4c:a5:cf:63:99:71:37:0a:54:ff: 3c:a6:ce:12:cc:ab:f5:66:c9:4e:04:a2:99:f7:32: ad:95:92:88:86:40:ca:5f:d5:e9:aa:e9:72:f7:d3: 03:4b:22:84:1e:88:15:f7:ab:18:16:1f:9d:45:00: c2:d8:d5:4e:24:e4:3d:c5:42:2e:32:18:ba:a5:d2: 66:d7:c0:3e:eb:3c:bb:74:eb:bd:51:16:09:f7:30: cf:fb:f2:f0:9b:be:f7:e8:58:ab:9d:1e:33:92:08: 0b:ac:b6:10:02:96:56:73:11:2f:cb:fc:81:37:b6: 71:58:f7:5b:9c:79:58:4a:07:58:4b:15:38:59:8d: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:43:DF:A3:9B:4E:76:6D:4C:C1:CF:F9:5F:C7:38:3C:6A:D7:F9 X509v3 Authority Key Identifier: keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:52:4a:2b:11:bd:65:a8:8b:04:0a:30:04:6f:21:a0:a2:6e: 9f:f7:43:15:c5:f8:09:28:89:80:61:f3:92:f4:ab:9b:0c:59: 3a:e8:c0:11:2b:54:2c:e1:97:31:a2:a3:6e:41:81:89:fa:f4: 11:d5:f2:44:c6:67:e2:7e:27:cc:91:03:10:6f:7a:e3:e2:73: b0:30:fe:36:b7:13:c0:4b:74:1f:3e:8e:c7:28:4a:9b:f9:94: a9:89:75:fa:69:c8:76:fc:c0:10:e0:bb:5b:1a:ad:cc:f6:36: 22:75:f4:90:42:57:bc:6c:81:ab:54:98:ce:cc:63:9e:5a:a1: 0d:1c:b2:2a:67:5a:62:f3:04:d8:1b:75:e9:d4:72:a1:8b:e8: 6e:7d:53:8e:e5:80:09:66:56:d3:5e:78:e7:54:0f:ab:00:bf: 45:7b:9a:11:52:87:1e:a2:57:b2:10:d2:3b:1b:f9:db:58:bc: c7:bf:83:b0:73:d6:41:10:b6:d4:74:34:9e:69:62:bf:b3:d1: d6:4a:50:59:e0:2b:a6:fb:b3:ad:41:5e:66:00:ee:02:0b:b1: 4b:28:ad:dd:d9:46:5b:67:b6:c9:66:0e:f2:7c:10:47:11:57: 8e:df:87:f0:34:87:58:40:4c:da:c4:ea:37:a1:80:70:d6:73: 81:f8:75:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN92CkI0EFtUIN/6Dt4klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl NDExMjAwHhcNMjUxMjIyMDQwMTEwWhcNMjUxMjIzMDQwMTEwWjAzMTEwLwYDVQQD EyhmNjllNDNkZmEzOWI0ZTc2NmQ0Y2MxY2ZmOTVmYzczODNjNmFkN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG+pWPCuasPjS8uTT8lLZirswraF 7iRtifWdEPEtMOf4FFeCkfcmzpShmMS5SaRfPzD+v5epOXf3x7+MzbDGatZw5nog ByeT3lheZZGr6IKR7LSW3SecGrY2K8awmgbvlEM5SCDP2dEq4jO5AZ19chu4gq4Z 4AemdUJ0YEylz2OZcTcKVP88ps4SzKv1ZslOBKKZ9zKtlZKIhkDKX9Xpquly99MD SyKEHogV96sYFh+dRQDC2NVOJOQ9xUIuMhi6pdJm18A+6zy7dOu9URYJ9zDP+/Lw m7736FirnR4zkggLrLYQApZWcxEvy/yBN7ZxWPdbnHlYSgdYSxU4WY09SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaeQ9+jm052bUzBz/lfxzg8atf5MB8GA1UdIwQY MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4 LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1JKKxG9 ZaiLBAowBG8hoKJun/dDFcX4CSiJgGHzkvSrmwxZOujAEStULOGXMaKjbkGBifr0 EdXyRMZn4n4nzJEDEG964+JzsDD+NrcTwEt0Hz6OxyhKm/mUqYl1+mnIdvzAEOC7 WxqtzPY2InX0kEJXvGyBq1SYzsxjnlqhDRyyKmdaYvME2Bt16dRyoYvobn1TjuWA CWZW015451QPqwC/RXuaEVKHHqJXshDSOxv521i8x7+DsHPWQRC21HQ0nmliv7PR 1kpQWeArpvuzrUFeZgDuAguxSyit3dlGW2e2yWYO8nwQRxFXjt+H8DSHWEBM2sTq N6GAcNZzgfh1xw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:11 2025 by rpki-client