This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json) Hash identifier: KdCIQtoS5iAXJjKMOca+D2FXcD+LB1vjZUVNBz/7lyo= Subject key identifier: F9:40:41:30:76:A9:23:C2:14:37:3F:04:12:31:11:A9:F0:E3:56:AE Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c Certificate serial: 019B2776C4408B062EBD8965FEE1E303D9C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft Manifest number: 075E Signing time: Tue 16 Dec 2025 14:00:53 +0000 Manifest this update: Tue 16 Dec 2025 14:00:53 +0000 Manifest next update: Wed 17 Dec 2025 14:00:53 +0000 Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: 6ZjOQRuEfgS7Sodju5zrkzG/HxP7R9A8ZTKW7M06v0o=) 2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:c4:40:8b:06:2e:bd:89:65:fe:e1:e3:03:d9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c Validity Not Before: Dec 16 14:00:53 2025 GMT Not After : Dec 17 14:00:53 2025 GMT Subject: CN=f940413076a923c214373f04123111a9f0e356ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:22:fb:2b:18:a5:23:85:fc:13:f8:3b:63: e3:80:92:80:73:6b:1d:65:20:7c:ee:e6:d3:66:33: ba:0b:6a:f5:97:c4:f6:41:d1:98:97:b2:69:c4:96: ba:1c:4b:c4:d4:f7:13:ee:50:09:e8:04:b8:b4:e4: b1:33:7e:4e:7b:6f:ec:e9:12:69:30:e4:1e:c4:82: 1d:76:a7:a5:55:27:fb:ea:03:21:66:77:68:74:e0: 0b:5a:9d:b7:ac:c8:74:4b:87:f1:31:8f:a2:56:ff: 62:94:af:b0:21:3d:63:2d:a4:fc:64:62:5d:eb:64: 5b:f3:27:f3:2c:c9:b0:49:9d:d7:a6:92:41:1e:e1: cc:d9:0c:d7:63:60:e9:89:97:9b:3b:46:6c:ab:5b: d7:5b:13:b2:e4:f0:61:63:01:4c:21:80:49:df:3b: f6:91:76:01:1c:a5:d3:cf:b1:97:07:36:30:76:d6: 8c:6f:e6:72:7a:e8:28:d4:6f:db:a0:f8:3c:83:6f: 53:f4:fb:b5:a2:1b:ca:f3:f6:48:81:20:a4:fe:f1: 16:f5:f2:5b:cd:97:69:af:a1:b1:23:bb:00:4c:69: 4f:65:f6:21:3d:4c:9a:a4:1d:98:31:bf:33:95:ad: 79:d6:86:5d:69:e1:be:45:d0:06:46:30:95:0a:85: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:41:30:76:A9:23:C2:14:37:3F:04:12:31:11:A9:F0:E3:56:AE X509v3 Authority Key Identifier: keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:2d:04:60:b8:c1:07:32:06:d3:97:2e:eb:90:8d:74:94: 36:46:ca:a7:d7:4c:c2:ad:6a:c2:38:e9:33:5a:98:f5:d5:43: 88:d6:77:d8:43:d1:77:ae:51:3d:9e:28:24:03:19:ff:6a:50: 38:2a:18:a2:d4:94:b8:2a:28:fe:29:e8:a0:0a:b9:1b:0a:5c: 5f:a8:cd:65:a0:ce:31:79:16:d1:bb:49:fb:7d:a6:a4:85:7c: a5:3d:b8:0a:c7:8e:ae:57:e3:64:9a:d2:8a:d3:7d:54:07:b3: 7f:ad:22:8c:93:7d:d5:02:5e:42:60:3a:0b:49:66:7a:cf:23: 0b:63:23:02:92:8d:ac:83:89:dd:ad:c9:59:5e:eb:12:43:46: 53:88:b9:80:d3:9c:82:ef:af:62:67:81:18:87:9b:89:4d:9b: c8:e3:fa:ce:43:90:df:95:0d:27:66:fc:00:73:bd:ff:c9:5e: 3c:a9:b8:5e:fc:fc:64:17:86:de:09:9b:9e:02:42:7c:84:a7: 1b:05:23:88:27:c7:73:7b:3c:8a:d7:7b:1b:82:36:48:22:68: 99:52:97:d9:bd:1b:87:a3:90:7a:12:29:44:6e:f2:56:4e:ae: 12:bf:c5:38:8d:e9:de:89:32:f5:f2:8e:4d:18:4c:1c:c7:a3: 3d:7c:a2:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndsRAiwYuvYll/uHjA9nBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy OTU5OWMwHhcNMjUxMjE2MTQwMDUzWhcNMjUxMjE3MTQwMDUzWjAzMTEwLwYDVQQD EyhmOTQwNDEzMDc2YTkyM2MyMTQzNzNmMDQxMjMxMTFhOWYwZTM1NmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz8i+ysYpSOF/BP4O2PjgJKAc2sd ZSB87ubTZjO6C2r1l8T2QdGYl7JpxJa6HEvE1PcT7lAJ6AS4tOSxM35Oe2/s6RJp MOQexIIddqelVSf76gMhZndodOALWp23rMh0S4fxMY+iVv9ilK+wIT1jLaT8ZGJd 62Rb8yfzLMmwSZ3XppJBHuHM2QzXY2DpiZebO0Zsq1vXWxOy5PBhYwFMIYBJ3zv2 kXYBHKXTz7GXBzYwdtaMb+Zyeugo1G/boPg8g29T9Pu1ohvK8/ZIgSCk/vEW9fJb zZdpr6GxI7sATGlPZfYhPUyapB2YMb8zla151oZdaeG+RdAGRjCVCoVziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlAQTB2qSPCFDc/BBIxEanw41auMB8GA1UdIwQY MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt M2RjZWNiY2EzNzAyLzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxgtBGC4 wQcyBtOXLuuQjXSUNkbKp9dMwq1qwjjpM1qY9dVDiNZ32EPRd65RPZ4oJAMZ/2pQ OCoYotSUuCoo/inooAq5GwpcX6jNZaDOMXkW0btJ+32mpIV8pT24CseOrlfjZJrS itN9VAezf60ijJN91QJeQmA6C0lmes8jC2MjApKNrIOJ3a3JWV7rEkNGU4i5gNOc gu+vYmeBGIebiU2byOP6zkOQ35UNJ2b8AHO9/8lePKm4Xvz8ZBeG3gmbngJCfISn GwUjiCfHc3s8itd7G4I2SCJomVKX2b0bh6OQehIpRG7yVk6uEr/FOI3p3oky9fKO TRhMHMejPXyiwg== -----END CERTIFICATE-----Generated at Tue Dec 16 16:36:34 2025 by rpki-client