This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json) Hash identifier: RgJSXUnOIHfSnhnArfiCeYevjpHOrqw3TOYmn7r/XFM= Subject key identifier: 58:5C:E8:9F:97:AB:2B:2A:DA:87:C7:9E:DE:A9:1C:BB:CA:A7:13:F6 Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27 Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327 Certificate serial: 019B59771988EF3C2D63DBB7098D1FE2A58C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft Manifest number: 12E8 Signing time: Fri 26 Dec 2025 07:02:16 +0000 Manifest this update: Fri 26 Dec 2025 07:02:16 +0000 Manifest next update: Sat 27 Dec 2025 07:02:16 +0000 Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: vdHAJOX++pVxQ7+a/Mx5gydANguz/M/7A7CJAR+v+hI=) 2: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (hash: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:19:88:ef:3c:2d:63:db:b7:09:8d:1f:e2:a5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327 Validity Not Before: Dec 26 07:02:16 2025 GMT Not After : Dec 27 07:02:16 2025 GMT Subject: CN=585ce89f97ab2b2ada87c79edea91cbbcaa713f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:64:bb:48:fb:6d:3c:71:8a:6a:72:c7:48:c3: 7f:2c:29:f2:f7:99:78:46:92:c4:50:2d:86:7c:c4: 39:6d:b0:35:97:e7:01:4c:ad:c3:4d:e7:c8:75:de: 08:07:bb:e4:1c:15:1f:6e:05:c3:8b:4e:41:16:24: f6:a3:e7:4f:f6:b6:6a:9b:36:31:fb:42:04:0b:c3: 86:59:d0:e3:92:f9:2b:dd:fb:cc:6e:33:a1:c4:4a: a8:ca:e6:5b:35:12:35:71:13:62:bf:8e:a0:13:f5: 6b:ee:45:75:89:fa:26:4c:31:58:27:62:e1:b7:d3: 43:fe:b5:c6:76:6c:89:57:af:8f:f8:c9:6a:48:9f: ae:a7:f0:2e:27:6e:3c:f1:3b:ea:28:12:3b:eb:6c: aa:d1:04:d5:a8:06:ee:4f:12:35:37:0d:c5:e0:32: aa:57:57:ad:09:cf:b5:1a:54:5c:dc:bc:d1:2d:2b: da:d7:b9:24:62:d8:2a:26:61:18:ba:8c:1b:2f:bd: e8:a7:b3:cb:18:6d:53:13:52:d3:05:7b:25:77:6a: 7b:44:74:11:ce:0a:78:e7:0c:1b:ec:0a:ca:ee:5e: 2c:4c:05:88:9f:a3:15:89:9c:7b:d9:ac:d6:86:89: e3:46:67:e5:a8:d0:2f:a7:a4:ce:5e:d0:c4:c3:7d: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5C:E8:9F:97:AB:2B:2A:DA:87:C7:9E:DE:A9:1C:BB:CA:A7:13:F6 X509v3 Authority Key Identifier: keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3a:bc:f4:53:02:c0:90:1f:fe:08:e4:85:aa:31:82:54:b7: 28:f1:30:a8:56:5e:76:87:30:05:65:ed:ce:96:8d:00:e9:46: 88:e8:4f:07:f8:82:e5:1c:a2:4c:8c:b1:e1:76:d0:96:20:cd: c6:e0:d1:0c:a2:4f:94:d2:20:5e:b8:f2:fb:2a:54:17:ad:6f: c5:ab:2e:f2:87:a1:11:eb:30:03:8b:cc:5b:16:fb:50:65:ff: 08:9d:15:64:7d:c4:b4:c6:89:d0:8d:ab:24:2b:6b:5e:52:8d: ec:04:a5:75:5d:c5:b3:44:bd:5b:7a:6a:f1:3c:9a:a1:a3:73: ea:59:9f:64:59:86:fe:d8:cf:69:64:da:d2:1c:18:f0:63:37: ad:97:0a:48:23:14:25:0a:0a:e9:b4:71:3a:48:60:2d:aa:d5: 37:c4:4f:9b:c1:4e:e6:78:c3:ed:c3:e9:cb:c2:18:9e:99:99: f0:0c:d2:36:99:2e:82:e3:2b:3f:16:3a:ca:b2:82:ad:61:e2: 09:12:1a:a6:70:e0:2e:a0:aa:a6:ef:bb:aa:ef:15:1b:6c:c6: 91:87:a8:4c:cd:57:95:e2:93:f2:d0:f9:39:21:84:cd:ec:ee: 2a:5e:e8:de:32:6b:1b:9c:d6:c5:88:43:b1:e5:90:99:68:89: 75:e9:df:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxmI7zwtY9u3CY0f4qWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OWQzYjhiMDQ0ZjFkMzVmZjI3MTkwYjc1NzVmMzA4MDZi MTEzMjcwHhcNMjUxMjI2MDcwMjE2WhcNMjUxMjI3MDcwMjE2WjAzMTEwLwYDVQQD Eyg1ODVjZTg5Zjk3YWIyYjJhZGE4N2M3OWVkZWE5MWNiYmNhYTcxM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WS7SPttPHGKanLHSMN/LCny95l4 RpLEUC2GfMQ5bbA1l+cBTK3DTefIdd4IB7vkHBUfbgXDi05BFiT2o+dP9rZqmzYx +0IEC8OGWdDjkvkr3fvMbjOhxEqoyuZbNRI1cRNiv46gE/Vr7kV1ifomTDFYJ2Lh t9ND/rXGdmyJV6+P+MlqSJ+up/AuJ2488TvqKBI762yq0QTVqAbuTxI1Nw3F4DKq V1etCc+1GlRc3LzRLSva17kkYtgqJmEYuowbL73op7PLGG1TE1LTBXsld2p7RHQR zgp45wwb7ArK7l4sTAWIn6MViZx72azWhonjRmflqNAvp6TOXtDEw31WiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhc6J+Xqysq2ofHnt6pHLvKpxP2MB8GA1UdIwQY MBaAFNWdO4sETx01/ycZC3V18wgGsRMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOTQzZTktZTAzYi00ZDdiLThjODkt NWIzNzMyZjQ4MDgxLzEvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mOTQzZTktZTAzYi00ZDdiLThjODktNWIzNzMyZjQ4MDgx LzEvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTq89FMC wJAf/gjkhaoxglS3KPEwqFZedocwBWXtzpaNAOlGiOhPB/iC5RyiTIyx4XbQliDN xuDRDKJPlNIgXrjy+ypUF61vxasu8oehEeswA4vMWxb7UGX/CJ0VZH3EtMaJ0I2r JCtrXlKN7ASldV3Fs0S9W3pq8TyaoaNz6lmfZFmG/tjPaWTa0hwY8GM3rZcKSCMU JQoK6bRxOkhgLarVN8RPm8FO5njD7cPpy8IYnpmZ8AzSNpkuguMrPxY6yrKCrWHi CRIapnDgLqCqpu+7qu8VG2zGkYeoTM1XleKT8tD5OSGEzezuKl7o3jJrG5zWxYhD seWQmWiJdenfcg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:59 2025 by rpki-client