This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json) Hash identifier: Y8E91tmSwoZBQ94SYtcpyHrbBBf5RCDvIgOcRq1PPnI= Subject key identifier: 26:91:12:49:74:0A:15:E5:B8:42:F2:64:C8:C3:53:8F:E7:6D:AD:E0 Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310 Certificate serial: 019B5907CDB982301E89F45CCDD04112392C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft Manifest number: 051D Signing time: Fri 26 Dec 2025 05:00:42 +0000 Manifest this update: Fri 26 Dec 2025 05:00:42 +0000 Manifest next update: Sat 27 Dec 2025 05:00:42 +0000 Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: Xa+Ed/n79fI5A5l6DM+o4pi8SWsp7Kxw4UJVHzX7W4U=) 2: _6oTHI74z2ro3D6ku1-3IwQMDJQ.roa (hash: fv1LSUSBqvzluFwHlLJLOy0RtBrtwPS/3BKDLVcgGlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:cd:b9:82:30:1e:89:f4:5c:cd:d0:41:12:39:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310 Validity Not Before: Dec 26 05:00:42 2025 GMT Not After : Dec 27 05:00:42 2025 GMT Subject: CN=26911249740a15e5b842f264c8c3538fe76dade0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:82:7c:cf:aa:42:91:6a:09:d7:0c:57:b0:db: 57:48:7f:6c:73:70:f8:91:0c:d5:21:0e:a8:7c:68: 75:04:7c:b5:d0:bf:45:4f:e9:78:c5:81:52:df:56: 70:e2:95:be:6c:b3:ed:56:47:dd:b5:9c:4d:d6:d0: a5:32:12:37:6c:e0:02:e8:83:f4:75:ff:eb:f0:77: 95:ea:45:c2:42:8b:98:64:49:0e:f9:b7:62:1f:7d: 48:1b:1f:9b:2b:b3:ff:fd:fa:a5:3a:bf:25:47:3a: 0f:d9:35:bf:87:57:fc:42:e4:a6:b5:d5:fd:48:5b: 70:09:74:56:50:af:ab:65:5e:2b:35:96:6a:60:83: 8d:04:5b:6f:c9:4f:dc:13:b5:40:98:1b:0e:cc:dd: 94:3c:10:9b:20:d1:ec:64:0f:a6:25:b1:4f:00:18: 21:92:f2:04:82:02:25:2f:4c:97:f7:70:b1:6b:29: 25:c5:91:ee:da:dc:27:fe:a1:e8:1d:34:0d:53:a2: 14:d6:c7:17:b7:47:88:3d:92:f6:8a:f3:6c:86:7a: 0b:ec:a4:ba:8f:d3:07:79:4b:64:81:38:9c:28:2f: 0d:2b:0a:b5:ea:c0:b6:0c:6f:e7:43:88:69:18:a1: 67:b8:44:30:c4:00:67:f7:12:5b:26:7f:3a:5b:3e: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:91:12:49:74:0A:15:E5:B8:42:F2:64:C8:C3:53:8F:E7:6D:AD:E0 X509v3 Authority Key Identifier: keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:54:d2:2b:5b:b2:52:22:f3:d8:34:97:67:2e:e5:e3:40:f3: 2f:4a:2d:34:01:b2:e5:9d:b4:01:d7:d3:a4:e9:4b:25:a7:e1: 8b:90:f2:e5:9a:72:bf:98:d6:1d:b0:e8:20:82:2d:35:0b:88: a0:87:33:f9:43:43:5b:0d:8d:f9:0b:c6:1a:12:54:e2:30:e5: 80:e0:40:e3:6d:38:c9:52:17:b5:e5:c3:d7:68:df:3b:d8:94: ca:8d:a9:de:b8:61:2a:0a:6b:2d:d2:77:7c:1a:5b:c4:2d:ff: a5:f5:a4:d9:5d:90:75:cf:85:e9:23:b3:6e:ea:0e:32:57:f5: 13:f2:ef:dd:0c:ac:1c:1b:bd:20:25:87:e4:08:80:4c:18:4f: d2:32:8d:a5:bb:f0:3e:47:57:1a:0c:6c:03:9b:18:37:a3:67: 97:a7:99:6e:7a:d4:75:d2:57:37:04:68:ef:3c:0c:41:b2:fa: 61:7d:5b:6b:54:08:37:5c:0f:1d:f7:e4:e1:31:00:b9:27:8b: 1a:4f:eb:2c:31:35:eb:e5:89:b1:6d:b7:dc:04:8a:8d:f9:85: 2c:48:9c:0e:71:91:23:e1:62:33:56:d7:76:00:44:0b:0e:68: c3:37:c0:8b:77:31:00:63:ba:e6:06:f5:01:45:c7:7d:14:b1: e8:16:b9:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB825gjAeifRczdBBEjksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz NjczMTAwHhcNMjUxMjI2MDUwMDQyWhcNMjUxMjI3MDUwMDQyWjAzMTEwLwYDVQQD EygyNjkxMTI0OTc0MGExNWU1Yjg0MmYyNjRjOGMzNTM4ZmU3NmRhZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIJ8z6pCkWoJ1wxXsNtXSH9sc3D4 kQzVIQ6ofGh1BHy10L9FT+l4xYFS31Zw4pW+bLPtVkfdtZxN1tClMhI3bOAC6IP0 df/r8HeV6kXCQouYZEkO+bdiH31IGx+bK7P//fqlOr8lRzoP2TW/h1f8QuSmtdX9 SFtwCXRWUK+rZV4rNZZqYIONBFtvyU/cE7VAmBsOzN2UPBCbINHsZA+mJbFPABgh kvIEggIlL0yX93CxayklxZHu2twn/qHoHTQNU6IU1scXt0eIPZL2ivNshnoL7KS6 j9MHeUtkgTicKC8NKwq16sC2DG/nQ4hpGKFnuEQwxABn9xJbJn86Wz70FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaREkl0ChXluELyZMjDU4/nba3gMB8GA1UdIwQY MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3 LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVTSK1uy UiLz2DSXZy7l40DzL0otNAGy5Z20AdfTpOlLJafhi5Dy5Zpyv5jWHbDoIIItNQuI oIcz+UNDWw2N+QvGGhJU4jDlgOBA4204yVIXteXD12jfO9iUyo2p3rhhKgprLdJ3 fBpbxC3/pfWk2V2Qdc+F6SOzbuoOMlf1E/Lv3QysHBu9ICWH5AiATBhP0jKNpbvw PkdXGgxsA5sYN6Nnl6eZbnrUddJXNwRo7zwMQbL6YX1ba1QIN1wPHffk4TEAuSeL Gk/rLDE16+WJsW233ASKjfmFLEicDnGRI+FiM1bXdgBECw5owzfAi3cxAGO65gb1 AUXHfRSx6Ba5OQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:13:16 2025 by rpki-client