This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json) Hash identifier: uJdbo3vSZ/whKGjK3ZMUp87F8YiTOTg3h84ykAG5GHI= Subject key identifier: F5:E8:F5:7B:89:22:C5:0E:6B:5B:94:52:C7:79:9B:57:09:55:F4:99 Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d Certificate serial: 019B59773551FDAC29A4125C4AD04DA2CAE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:02:23 +0000 Manifest this update: Fri 26 Dec 2025 07:02:23 +0000 Manifest next update: Sat 27 Dec 2025 07:02:23 +0000 Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: y2gUGs6GnIW6fzgZ919kOtKN02WGXy76JkVPLaHyyVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:35:51:fd:ac:29:a4:12:5c:4a:d0:4d:a2:ca:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d Validity Not Before: Dec 26 07:02:23 2025 GMT Not After : Dec 27 07:02:23 2025 GMT Subject: CN=f5e8f57b8922c50e6b5b9452c7799b570955f499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:a1:08:e2:19:ef:96:e7:47:a3:c5:c3:8a: 62:88:65:7d:93:34:c5:05:51:0c:e3:19:7e:6d:de: e2:0a:78:64:69:c6:ac:b4:79:ed:6a:60:6f:e0:04: a5:10:0e:7f:15:da:20:f2:e7:ea:51:92:52:dc:29: c2:6f:34:a7:f4:ec:a8:02:08:f7:db:06:27:7b:de: 0d:e1:0d:e4:5d:4a:f2:4e:3f:c5:f6:78:1e:8b:80: bb:fc:2b:eb:e6:4d:83:f2:0a:50:ce:50:a6:26:49: e1:12:4b:43:76:f7:5d:1b:ab:97:c0:87:80:97:d6: ad:d1:1d:a6:98:72:69:dd:65:ac:96:a9:eb:8f:9d: 2c:ec:fd:b2:7d:2a:b0:50:af:fa:cf:7f:42:86:9b: 79:ae:35:d0:4d:68:c7:6f:04:ab:f5:e1:b1:c6:b2: 7b:07:7a:18:3d:8e:7a:27:5b:f5:26:7a:fe:54:23: ea:61:c6:3b:76:7e:c8:d2:dc:6a:95:1c:b8:24:00: d8:f7:9e:92:4e:77:aa:e6:ea:74:f8:9c:11:64:97: 9d:7a:8b:37:06:7c:af:82:60:83:d7:6d:1b:bc:87: 81:c6:8e:fa:23:04:eb:2f:ce:34:cd:41:fc:85:6d: 18:88:cd:6c:8f:3f:e2:b5:29:54:6e:ec:43:db:e4: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:F5:7B:89:22:C5:0E:6B:5B:94:52:C7:79:9B:57:09:55:F4:99 X509v3 Authority Key Identifier: keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:39:40:ea:05:f9:24:d4:d6:5f:49:19:45:6d:b6:86:c7:42: 06:16:74:65:1e:9a:ac:4a:36:e2:23:df:f3:90:df:2f:4d:a7: 6c:f6:64:e9:bf:e7:60:36:cb:3a:5d:72:fa:71:be:ab:57:89: 2a:ab:10:52:06:73:70:2e:28:e1:8b:f7:8b:92:f6:2b:41:a7: 9b:a8:31:94:cb:e4:ae:59:8a:7b:68:8e:ee:25:65:f4:29:90: 68:8d:79:32:cf:6d:7c:71:98:6f:80:6e:05:ce:33:37:51:e6: a2:d5:1b:0d:13:d8:ca:79:02:ac:a2:9e:68:c7:a3:e2:33:4f: 19:85:b0:bf:12:e1:77:e0:56:34:de:1d:c0:2b:38:3b:72:8c: 1a:3e:32:7e:c0:32:5c:eb:b9:1a:f4:51:64:d6:f2:17:d8:24: 26:1e:b1:1f:da:b0:0f:f4:98:43:a3:10:ab:ce:c9:33:52:ba: ba:81:a4:2d:bd:d2:67:87:c9:a2:a5:5f:d6:d7:13:2a:bb:fb: ba:62:09:a3:61:0f:27:1c:b1:75:08:d1:d8:b4:b6:8f:08:d7: 40:46:c0:03:1f:61:92:fc:58:b5:47:b3:77:d5:64:44:a9:76: eb:04:78:07:21:b2:1d:53:e9:dc:5f:d8:96:f2:92:6d:66:4e: 87:1a:2d:42 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdzVR/awppBJcStBNosrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzEwNTkyNzk4OWVjNDFjMDg5MDNhZDhjZDU2YTg5ZGFl OGJlNWQwHhcNMjUxMjI2MDcwMjIzWhcNMjUxMjI3MDcwMjIzWjAzMTEwLwYDVQQD EyhmNWU4ZjU3Yjg5MjJjNTBlNmI1Yjk0NTJjNzc5OWI1NzA5NTVmNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF6hCOIZ75bnR6PFw4piiGV9kzTF BVEM4xl+bd7iCnhkacastHntamBv4ASlEA5/Fdog8ufqUZJS3CnCbzSn9OyoAgj3 2wYne94N4Q3kXUryTj/F9ngei4C7/Cvr5k2D8gpQzlCmJknhEktDdvddG6uXwIeA l9at0R2mmHJp3WWslqnrj50s7P2yfSqwUK/6z39Chpt5rjXQTWjHbwSr9eGxxrJ7 B3oYPY56J1v1Jnr+VCPqYcY7dn7I0txqlRy4JADY956STneq5up0+JwRZJedeos3 BnyvgmCD120bvIeBxo76IwTrL840zUH8hW0YiM1sjz/itSlUbuxD2+QfGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPXo9XuJIsUOa1uUUsd5m1cJVfSZMB8GA1UdIwQY MBaAFPnBBZJ5iexBwIkDrYzVaona6L5dMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jRUZrbm1KN0VIQWlRT3RqTlZxaWRyb3ZsMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNWY2MmVmLTMyZWYtNDRmNy1iNDEy LTFiMTg2YjZmY2Y0MS8xLzEtY0VGa25tSjdFSEFpUU90ak5WcWlkcm92bDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY5LzVmNjJlZi0zMmVmLTQ0ZjctYjQxMi0xYjE4NmI2ZmNm NDEvMS8xLWNFRmtubUo3RUhBaVFPdGpOVnFpZHJvdmwwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDlA 6gX5JNTWX0kZRW22hsdCBhZ0ZR6arEo24iPf85DfL02nbPZk6b/nYDbLOl1y+nG+ q1eJKqsQUgZzcC4o4Yv3i5L2K0Gnm6gxlMvkrlmKe2iO7iVl9CmQaI15Ms9tfHGY b4BuBc4zN1HmotUbDRPYynkCrKKeaMej4jNPGYWwvxLhd+BWNN4dwCs4O3KMGj4y fsAyXOu5GvRRZNbyF9gkJh6xH9qwD/SYQ6MQq87JM1K6uoGkLb3SZ4fJoqVf1tcT Krv7umIJo2EPJxyxdQjR2LS2jwjXQEbAAx9hkvxYtUezd9VkRKl26wR4ByGyHVPp 3F/YlvKSbWZOhxotQg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:43 2025 by rpki-client