This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json) Hash identifier: UzbbdwQ6dk/UgdUpLuFalkt6gXFBgYVjFNlqUda6L4Y= Subject key identifier: B8:1B:7D:F9:7A:0C:C2:29:81:A1:95:F7:3B:3B:CD:96:FF:4E:99:3B Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785 Certificate serial: 019B59763B922C0DB18DE0E1A20041BCABD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft Manifest number: 02DB Signing time: Fri 26 Dec 2025 07:01:19 +0000 Manifest this update: Fri 26 Dec 2025 07:01:19 +0000 Manifest next update: Sat 27 Dec 2025 07:01:19 +0000 Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: zikXi5L7XAqp7QH2EFitQzrSdqZ/TqGJAn2sTLFdVNs=) 2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:3b:92:2c:0d:b1:8d:e0:e1:a2:00:41:bc:ab:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785 Validity Not Before: Dec 26 07:01:19 2025 GMT Not After : Dec 27 07:01:19 2025 GMT Subject: CN=b81b7df97a0cc22981a195f73b3bcd96ff4e993b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:e7:fc:e4:5a:57:92:18:3a:2f:ad:c6:d1: 4d:86:8c:b6:04:77:e2:e3:6f:f3:f3:b7:46:62:db: fb:3e:00:d8:43:cd:cc:d8:13:56:d1:7b:a4:f7:f6: 6e:4c:be:a7:53:4c:5c:63:c9:a7:d8:be:a4:98:8d: 77:ad:ee:4e:53:f3:b0:f4:f5:45:c6:ad:dc:82:27: 02:e1:c1:df:b0:5c:1b:6c:7f:27:c2:ae:6a:e8:e8: 54:2f:24:82:df:e1:e0:41:dc:58:5b:ab:aa:55:38: 41:64:c4:59:4b:de:13:41:ac:1e:2b:fd:d2:b5:68: 8d:eb:24:58:16:a6:27:98:b7:76:e7:08:f2:6c:85: ad:93:61:3f:b5:a3:3c:83:07:55:65:36:08:b7:d3: 1b:71:e1:6e:61:ed:c1:02:bb:2a:83:49:38:d7:96: 9b:22:cf:f7:0e:c7:46:99:ee:4b:7b:92:e7:1a:61: 2e:c8:f1:bb:d3:29:c5:6f:05:20:b3:ee:23:84:dc: fc:9e:c1:ea:bd:43:57:ee:b0:a5:05:22:0d:0f:8b: a8:0f:ef:07:f8:8f:f0:0e:93:30:ff:df:3a:90:8b: 62:be:8e:ce:da:48:ec:da:e0:46:85:7e:ad:fc:08: e2:27:f3:5c:b1:81:01:23:15:1f:10:52:70:d6:ec: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:7D:F9:7A:0C:C2:29:81:A1:95:F7:3B:3B:CD:96:FF:4E:99:3B X509v3 Authority Key Identifier: keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c9:b4:e0:7b:b6:70:b1:f7:bb:a8:44:c3:c0:d8:c9:c0:06: ad:3d:fa:15:97:57:78:89:bf:88:65:49:34:97:dd:3e:94:d1: 2a:2f:2f:b8:06:51:d0:c3:f6:32:f3:40:e7:cb:4d:5d:6b:d5: 28:a3:af:9d:9e:b9:54:36:c3:17:8e:52:72:0d:74:11:d9:1e: c8:8b:8c:0d:8c:bf:af:00:b3:2e:07:6f:81:33:4e:10:4e:0b: ab:a1:c0:b5:fa:ef:9b:c5:5e:be:8a:7a:47:d7:fa:c7:44:6f: 5f:8a:ed:f5:fd:d8:2d:b5:e1:75:d9:f4:40:c8:76:c7:fc:d1: 2d:14:57:c7:c9:24:27:24:09:e3:de:62:c6:3d:45:a0:6d:8d: 8c:cc:ee:98:e6:71:8d:cb:5b:e0:a5:6e:1e:a1:fe:ed:f2:cd: 8c:be:e5:d3:78:52:1c:38:52:44:85:33:6c:9e:03:12:fa:18: 03:73:d4:eb:00:23:90:2a:b5:af:c4:dc:3d:3b:b8:0a:c9:93: d0:e6:9a:7d:11:17:4e:70:95:0c:60:4b:fe:a7:03:5d:2b:f0: de:3d:32:dd:fc:46:49:20:88:5d:93:c0:4b:c2:74:8b:2e:b0: ea:e7:72:00:ee:59:fb:8f:3e:48:e5:01:38:93:ad:d0:a4:9f: 55:42:34:86 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdjuSLA2xjeDhogBBvKvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ViZTJhOTA2ZGQ1ODcwMTI1OTkyMDljMzFjZTEwZjI5 ZDU3ODUwHhcNMjUxMjI2MDcwMTE5WhcNMjUxMjI3MDcwMTE5WjAzMTEwLwYDVQQD EyhiODFiN2RmOTdhMGNjMjI5ODFhMTk1ZjczYjNiY2Q5NmZmNGU5OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UDn/ORaV5IYOi+txtFNhoy2BHfi 42/z87dGYtv7PgDYQ83M2BNW0Xuk9/ZuTL6nU0xcY8mn2L6kmI13re5OU/Ow9PVF xq3cgicC4cHfsFwbbH8nwq5q6OhULySC3+HgQdxYW6uqVThBZMRZS94TQaweK/3S tWiN6yRYFqYnmLd25wjybIWtk2E/taM8gwdVZTYIt9MbceFuYe3BArsqg0k415ab Is/3DsdGme5Le5LnGmEuyPG70ynFbwUgs+4jhNz8nsHqvUNX7rClBSIND4uoD+8H +I/wDpMw/986kItivo7O2kjs2uBGhX6t/AjiJ/NcsYEBIxUfEFJw1uwRRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLgbffl6DMIpgaGV9zs7zZb/Tpk7MB8GA1UdIwQY MBaAFPg+viqQbdWHASWZIJwxzhDynVeFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ENi1LcEJ0MVljQkpaa2duREhPRVBLZFY0VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJl LTQ1MjNhMGUyYjg0NC8xLzEtRDYtS3BCdDFZY0JKWmtnbkRIT0VQS2RWNFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJmLzFmNjFhYy0wMmZlLTRlNGMtODUyZS00NTIzYTBlMmI4 NDQvMS8xLUQ2LUtwQnQxWWNCSlprZ25ESE9FUEtkVjRVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8m0 4Hu2cLH3u6hEw8DYycAGrT36FZdXeIm/iGVJNJfdPpTRKi8vuAZR0MP2MvNA58tN XWvVKKOvnZ65VDbDF45Scg10EdkeyIuMDYy/rwCzLgdvgTNOEE4Lq6HAtfrvm8Ve vop6R9f6x0RvX4rt9f3YLbXhddn0QMh2x/zRLRRXx8kkJyQJ495ixj1FoG2NjMzu mOZxjctb4KVuHqH+7fLNjL7l03hSHDhSRIUzbJ4DEvoYA3PU6wAjkCq1r8TcPTu4 CsmT0OaafREXTnCVDGBL/qcDXSvw3j0y3fxGSSCIXZPAS8J0iy6w6udyAO5Z+48+ SOUBOJOt0KSfVUI0hg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:53 2025 by rpki-client