This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json) Hash identifier: DtgU61/9cAwMZkTIJIebufGNCwIyTzg81UUlb20e9aM= Subject key identifier: 20:83:FE:50:D2:6C:A4:6D:99:62:B5:D2:4F:4D:BA:28:B2:A8:40:55 Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Certificate serial: 019B5A88AE68D4CD0809CA33A9D715D08B72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft Manifest number: 0279 Signing time: Fri 26 Dec 2025 12:01:05 +0000 Manifest this update: Fri 26 Dec 2025 12:01:05 +0000 Manifest next update: Sat 27 Dec 2025 12:01:05 +0000 Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: CseSsr9BhBYjiDmCkyw2or84/Izw2wyvh++r3QkY154=) 2: sq3j0A4FF53FDnj1cQeAQwKHwYY.roa (hash: nIuc2CbfmY1z7G8hRZW0vMUbc2VvwrAvS4OcpulV6G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ae:68:d4:cd:08:09:ca:33:a9:d7:15:d0:8b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Validity Not Before: Dec 26 12:01:05 2025 GMT Not After : Dec 27 12:01:05 2025 GMT Subject: CN=2083fe50d26ca46d9962b5d24f4dba28b2a84055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:7e:0b:59:1c:44:52:bb:0a:cb:de:32:10: d2:4b:51:a1:01:3b:ad:0a:c4:6c:76:15:bd:9e:a7: 55:2f:3d:85:f7:19:66:89:28:84:4c:85:c4:fd:45: a1:66:a1:6b:22:ad:af:7c:1c:2e:6e:56:9d:41:60: b3:dd:93:c3:00:0f:81:4a:15:07:5b:19:1a:3d:de: ec:ea:c4:0f:1c:83:a7:1f:19:45:14:33:cb:98:2b: 49:ea:b3:3d:22:6c:f9:5d:d6:84:9e:49:6e:59:85: b4:83:62:71:7b:4b:50:6d:6b:fc:73:eb:dd:70:1e: 25:8e:5c:81:5a:9d:2d:89:bc:5f:02:3a:e3:7d:7b: 50:9c:c0:e6:8b:c8:98:dc:13:23:d7:36:ee:ea:4e: 52:ba:58:33:76:c2:ee:88:16:e8:e6:74:5c:32:34: 80:6f:17:89:ec:d0:ec:c5:4f:7f:8a:0b:9b:78:36: bb:e3:1c:76:23:23:cc:0c:3b:f1:63:09:aa:a1:72: c4:ad:c2:11:c6:07:5d:b1:77:d1:d4:d7:87:9c:d2: 59:d9:90:dd:d2:2b:56:4c:31:98:67:64:24:61:0c: cb:61:ca:3e:ef:f5:47:00:9e:41:79:95:62:61:fe: aa:8d:15:3d:ae:0d:26:07:c9:52:c1:1c:2c:05:3b: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:83:FE:50:D2:6C:A4:6D:99:62:B5:D2:4F:4D:BA:28:B2:A8:40:55 X509v3 Authority Key Identifier: keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d7:d5:e7:ff:1e:f7:8d:de:35:04:01:bf:50:c5:2a:e7:dd: 34:d4:d6:6e:2d:4c:b3:c5:c9:38:93:c5:d0:fb:0b:41:30:34: 1c:e2:c2:b3:db:0d:73:b3:5e:c2:27:70:79:f2:ae:f7:92:81: 4b:4b:19:35:14:c6:8a:14:15:1b:6d:34:7e:1d:ac:1c:80:1a: d4:7b:90:7d:2d:9c:8c:44:5a:1b:6b:df:5d:3f:0f:52:27:22: 70:53:34:63:9a:8f:ca:5b:90:03:be:34:86:21:5b:46:ba:75: c2:ea:88:82:ae:bf:42:5e:86:54:5a:54:6d:7b:4a:b4:e1:f4: c1:de:82:2c:4b:71:d7:28:cd:e4:e0:88:15:c6:93:f2:28:03: 08:87:6f:1b:53:be:cb:71:c5:6b:d7:4f:04:d3:3d:4e:6d:08: 7a:fe:c5:e5:5d:1b:d0:3b:a3:78:9a:3c:fa:c0:4f:85:f5:6a: 20:73:a8:76:71:ba:2c:71:7e:67:ae:04:bf:19:37:48:a7:cf: 7e:ac:7d:13:74:c8:85:cd:52:da:3c:93:fa:99:1b:47:5c:3f: 4e:23:84:50:e3:66:92:46:7d:2e:96:82:a9:42:56:16:86:a9: 14:26:3f:30:43:d1:5c:3d:3a:5a:ff:f0:51:e8:0c:75:56:42: db:c8:d8:e1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaiK5o1M0ICcozqdcV0ItyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODdhYzdlNWIyODljZTY4MWIyNDc0YzM4Zjc5NTJjY2E5 YzBmYjgwHhcNMjUxMjI2MTIwMTA1WhcNMjUxMjI3MTIwMTA1WjAzMTEwLwYDVQQD EygyMDgzZmU1MGQyNmNhNDZkOTk2MmI1ZDI0ZjRkYmEyOGIyYTg0MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBJ+C1kcRFK7CsveMhDSS1GhATut CsRsdhW9nqdVLz2F9xlmiSiETIXE/UWhZqFrIq2vfBwubladQWCz3ZPDAA+BShUH WxkaPd7s6sQPHIOnHxlFFDPLmCtJ6rM9Imz5XdaEnkluWYW0g2Jxe0tQbWv8c+vd cB4ljlyBWp0tibxfAjrjfXtQnMDmi8iY3BMj1zbu6k5SulgzdsLuiBbo5nRcMjSA bxeJ7NDsxU9/igubeDa74xx2IyPMDDvxYwmqoXLErcIRxgddsXfR1NeHnNJZ2ZDd 0itWTDGYZ2QkYQzLYco+7/VHAJ5BeZViYf6qjRU9rg0mB8lSwRwsBTvyYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCCD/lDSbKRtmWK10k9NuiiyqEBVMB8GA1UdIwQY MBaAFPiHrH5bKJzmgbJHTDj3lSzKnA+4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JZXNmbHNvbk9hQnNrZE1PUGVWTE1xY0Q3Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2MzYWQ0LWZmMWEtNDQ5Ny04MmRh LThkNTFkYjY1ZGI2Ni8xLzEtSWVzZmxzb25PYUJza2RNT1BlVkxNcWNEN2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ5L2NjM2FkNC1mZjFhLTQ0OTctODJkYS04ZDUxZGI2NWRi NjYvMS8xLUllc2Zsc29uT2FCc2tkTU9QZVZMTXFjRDdnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9fV 5/8e943eNQQBv1DFKufdNNTWbi1Ms8XJOJPF0PsLQTA0HOLCs9sNc7NewidwefKu 95KBS0sZNRTGihQVG200fh2sHIAa1HuQfS2cjERaG2vfXT8PUicicFM0Y5qPyluQ A740hiFbRrp1wuqIgq6/Ql6GVFpUbXtKtOH0wd6CLEtx1yjN5OCIFcaT8igDCIdv G1O+y3HFa9dPBNM9Tm0Iev7F5V0b0DujeJo8+sBPhfVqIHOodnG6LHF+Z64Evxk3 SKfPfqx9E3TIhc1S2jyT+pkbR1w/TiOEUONmkkZ9LpaCqUJWFoapFCY/MEPRXD06 Wv/wUegMdVZC28jY4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:43 2025 by rpki-client