This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json) Hash identifier: 5AfBsr7fSrxj+I90nQay03gV4PhqjfSpiqPjJyclZVw= Subject key identifier: FF:CD:29:C9:F1:F0:A8:8F:96:46:16:34:B7:CF:2B:25:52:2E:50:C0 Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Certificate serial: 019B23635D71C7F2161D8E77D514DA38CB88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft Manifest number: 051D Signing time: Mon 15 Dec 2025 19:01:13 +0000 Manifest this update: Mon 15 Dec 2025 19:01:13 +0000 Manifest next update: Tue 16 Dec 2025 19:01:13 +0000 Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: rmrIcESby0Idaiwbl7UFBps/ISggCNcFq3uEezXba+w=) 2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=) 3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=) 4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=) 5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:5d:71:c7:f2:16:1d:8e:77:d5:14:da:38:cb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Validity Not Before: Dec 15 19:01:13 2025 GMT Not After : Dec 16 19:01:13 2025 GMT Subject: CN=ffcd29c9f1f0a88f96461634b7cf2b25522e50c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:fb:5c:e0:7d:96:3f:57:e0:98:65:4f:fc: 61:e1:50:a0:7f:8e:e1:54:2c:ad:f3:05:a3:eb:3f: 3b:64:d6:d7:f3:3e:df:59:70:60:1f:4b:b7:f2:c5: c7:a1:30:bb:7f:ed:81:93:c4:61:29:fb:58:b0:ba: 34:9e:7b:b7:48:3f:a1:1d:16:54:bf:a7:45:1b:77: c4:e5:59:2e:13:ab:19:4c:0d:43:fc:a4:1d:23:2c: 5c:65:5e:31:de:a5:8c:bb:01:a5:76:9d:df:db:af: df:96:9d:a8:a8:03:fb:d0:c1:81:23:8d:47:b7:29: 8c:dc:78:35:17:41:7a:3b:30:d8:1c:5e:3b:a1:e8: 98:9f:39:63:58:c8:cf:a4:42:04:ed:8d:ae:94:66: 15:b9:98:6c:65:b5:97:87:5d:2e:3e:41:42:3f:7c: c3:d9:55:28:24:f9:f9:3c:58:e6:a8:37:da:a9:a1: a8:69:9a:01:71:6b:ae:8d:81:2a:2a:41:66:fe:19: 89:6d:c6:47:78:9b:66:17:ad:77:48:04:6e:2f:b9: d7:72:37:fb:cd:f8:7e:2c:b9:ac:2a:a1:d6:54:4c: 98:79:7f:76:c1:ee:10:8b:c6:b6:7b:a0:99:12:d4: 6d:c4:40:1c:10:29:48:a2:36:ad:ec:c3:e8:27:62: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:29:C9:F1:F0:A8:8F:96:46:16:34:B7:CF:2B:25:52:2E:50:C0 X509v3 Authority Key Identifier: keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f2:a7:27:44:b4:6c:be:dd:71:4a:e6:2f:41:f4:3f:fb:18: 5b:f9:c6:05:58:1a:b3:48:c5:20:08:91:79:ee:e1:5e:dd:c0: 9e:6d:e4:69:d2:3f:47:0b:7d:87:73:9b:87:b1:95:7d:a6:92: 12:29:da:7d:fa:0a:2d:d9:f4:26:c8:6d:52:b7:6e:9f:d5:e6: 2e:40:a3:7b:93:63:c5:f2:a0:1c:c5:81:90:fa:6d:77:95:5c: e3:18:1d:ff:df:fc:78:0a:a9:0f:a0:1f:8f:4d:09:56:ac:8d: e1:07:0b:3c:fe:64:bd:24:f0:68:d1:b9:d9:79:25:c4:3d:bb: e3:4d:18:63:f1:f0:58:9b:86:85:d9:ff:e1:8f:83:2f:e1:16: f6:27:17:6a:7c:60:9d:48:6f:24:f5:ca:32:87:19:43:50:5f: d9:db:de:9f:aa:ae:f9:64:5a:6d:a5:6f:05:ad:95:d1:2e:87: 73:f1:d5:03:7d:8d:77:7b:f1:73:05:f6:ab:d0:8c:4b:b0:87: 8d:55:25:23:d6:e5:e0:07:56:d5:86:3c:10:88:82:93:54:98: ba:92:bf:cd:72:ce:8f:78:b7:09:c4:3d:7d:84:71:f2:74:f3: c5:4c:0f:6c:8e:61:9a:68:b3:b0:35:a3:07:0f:5b:89:fe:b4: 0d:45:51:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY11xx/IWHY531RTaOMuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4 NDdmNTUwHhcNMjUxMjE1MTkwMTEzWhcNMjUxMjE2MTkwMTEzWjAzMTEwLwYDVQQD EyhmZmNkMjljOWYxZjBhODhmOTY0NjE2MzRiN2NmMmIyNTUyMmU1MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzln7XOB9lj9X4JhlT/xh4VCgf47h VCyt8wWj6z87ZNbX8z7fWXBgH0u38sXHoTC7f+2Bk8RhKftYsLo0nnu3SD+hHRZU v6dFG3fE5VkuE6sZTA1D/KQdIyxcZV4x3qWMuwGldp3f26/flp2oqAP70MGBI41H tymM3Hg1F0F6OzDYHF47oeiYnzljWMjPpEIE7Y2ulGYVuZhsZbWXh10uPkFCP3zD 2VUoJPn5PFjmqDfaqaGoaZoBcWuujYEqKkFm/hmJbcZHeJtmF613SARuL7nXcjf7 zfh+LLmsKqHWVEyYeX92we4Qi8a2e6CZEtRtxEAcEClIojat7MPoJ2JqMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/NKcnx8KiPlkYWNLfPKyVSLlDAMB8GA1UdIwQY MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt MDA4OTk0NDk4MGNhLzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfKnJ0S0 bL7dcUrmL0H0P/sYW/nGBVgas0jFIAiRee7hXt3Anm3kadI/Rwt9h3Obh7GVfaaS EinaffoKLdn0JshtUrdun9XmLkCje5NjxfKgHMWBkPptd5Vc4xgd/9/8eAqpD6Af j00JVqyN4QcLPP5kvSTwaNG52XklxD27400YY/HwWJuGhdn/4Y+DL+EW9icXanxg nUhvJPXKMocZQ1Bf2dven6qu+WRabaVvBa2V0S6Hc/HVA32Nd3vxcwX2q9CMS7CH jVUlI9bl4AdW1YY8EIiCk1SYupK/zXLOj3i3CcQ9fYRx8nTzxUwPbI5hmmizsDWj Bw9bif60DUVRQg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:55:37 2025 by rpki-client