This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft File: 1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json) Hash identifier: GqS9hgleFgdL/ZgngodXnUJjSW2mIPN8DhEVvXB1Ffk= Subject key identifier: 5E:FC:29:67:32:B9:C7:12:6A:2B:A5:4A:1E:25:5A:5E:0B:FC:4B:1A Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 Certificate issuer: /CN=d66df7599e243b462864126a8c241078a2e2b045 Certificate serial: 019B5AF67CCFA0B39CE8EC0A3DB063A7397A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft Manifest number: 3C Signing time: Fri 26 Dec 2025 14:01:01 +0000 Manifest this update: Fri 26 Dec 2025 14:01:01 +0000 Manifest next update: Sat 27 Dec 2025 14:01:01 +0000 Files and hashes: 1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: 6c1itbWfvTdH6EyukzVESKi4UWdx0iiAhAlL+CQkCxg=) 2: G8JA-ggiNrSizOdXAcWG0Z-rkCA.roa (hash: BoZMKbe2gNt+SThHadDDP1VDOAUZvl65eWh4BEsCrsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:7c:cf:a0:b3:9c:e8:ec:0a:3d:b0:63:a7:39:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045 Validity Not Before: Dec 26 14:01:01 2025 GMT Not After : Dec 27 14:01:01 2025 GMT Subject: CN=5efc296732b9c7126a2ba54a1e255a5e0bfc4b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c6:91:77:a6:d2:d1:93:73:e2:0e:fe:5c:7a: 8e:c6:b6:b8:9e:19:b7:13:c6:0e:f3:29:7e:25:ba: 6e:5e:26:e9:e5:2e:83:f7:bc:f9:4a:15:d3:96:35: 6d:02:39:53:ed:fc:49:5f:48:f3:21:1e:94:e4:11: 75:12:41:18:61:9f:af:fa:87:cc:94:a6:fb:43:18: 7c:68:cf:a2:d2:a7:3a:16:f6:a0:c7:37:d8:b5:91: 2a:a7:b4:27:5f:bc:7d:a5:b9:d7:ff:c2:83:4c:91: ae:54:51:05:83:2d:85:78:75:19:7b:2e:0b:2c:f2: b7:65:ff:27:7b:41:d8:1c:3b:d5:05:73:bb:47:53: 26:51:11:ee:cc:bd:a4:90:43:cb:9e:ef:25:c2:38: 95:64:e6:66:ec:95:5c:ad:52:7d:6c:40:4f:da:ae: 4e:86:c0:77:64:7e:2b:b2:ee:55:d8:03:bd:10:db: b9:df:c9:5d:50:31:91:d3:3d:61:e3:ae:df:93:97: e4:bf:14:c6:0c:7a:53:8e:c2:fb:c0:f2:a8:30:c5: d2:71:6c:87:89:15:28:45:9d:4f:ab:2e:ad:bb:ad: bd:8e:8c:36:af:ec:50:6d:dc:bb:cb:f2:a0:6b:30: ef:91:62:d3:1f:9a:28:78:bb:f3:c1:c0:25:9d:28: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FC:29:67:32:B9:C7:12:6A:2B:A5:4A:1E:25:5A:5E:0B:FC:4B:1A X509v3 Authority Key Identifier: keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5d:80:c3:3f:66:77:d1:19:69:7e:c0:e9:38:3a:92:de:75: 98:f0:ce:ac:5b:8e:d2:22:f9:fc:22:36:5a:7e:71:1e:54:07: 18:7a:24:d9:3e:0b:b8:98:9d:36:a6:41:46:72:93:ae:c0:36: 74:68:a5:3f:7b:b5:87:b9:ae:f3:43:8e:3d:96:ad:b5:3c:b4: c2:bf:2c:29:50:22:fd:40:3c:9b:5b:a4:f6:b6:51:ce:c0:ca: d5:ac:81:57:db:b2:b6:70:39:65:c7:a3:3f:a8:6a:ad:04:3a: 12:b7:48:0d:59:9a:36:f8:97:9b:92:2f:6c:8f:8d:09:69:95: b0:3d:f4:48:c4:2c:85:eb:66:e5:55:fa:a5:7e:8c:16:e5:1e: 45:09:8f:7c:ad:2d:aa:9b:92:d1:4c:91:7e:c3:e9:97:1c:27: 05:c7:aa:f7:9b:ad:33:10:29:a1:ef:85:99:48:b5:41:71:3a: c8:dd:88:56:8e:28:6d:b6:cd:d9:43:0b:e6:45:5d:65:78:f3: e1:bb:26:21:da:ab:d5:d6:5b:5b:ab:a8:21:65:60:f2:08:52: 91:6d:71:f6:77:52:95:26:84:5e:d8:90:95:c5:9e:92:86:ab: f3:92:2d:a7:00:33:d3:2c:9e:6a:ef:41:72:b8:ae:a8:67:b1: 23:d8:a7:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nzPoLOc6OwKPbBjpzl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmRmNzU5OWUyNDNiNDYyODY0MTI2YThjMjQxMDc4YTJl MmIwNDUwHhcNMjUxMjI2MTQwMTAxWhcNMjUxMjI3MTQwMTAxWjAzMTEwLwYDVQQD Eyg1ZWZjMjk2NzMyYjljNzEyNmEyYmE1NGExZTI1NWE1ZTBiZmM0YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58aRd6bS0ZNz4g7+XHqOxra4nhm3 E8YO8yl+JbpuXibp5S6D97z5ShXTljVtAjlT7fxJX0jzIR6U5BF1EkEYYZ+v+ofM lKb7Qxh8aM+i0qc6FvagxzfYtZEqp7QnX7x9pbnX/8KDTJGuVFEFgy2FeHUZey4L LPK3Zf8ne0HYHDvVBXO7R1MmURHuzL2kkEPLnu8lwjiVZOZm7JVcrVJ9bEBP2q5O hsB3ZH4rsu5V2AO9ENu538ldUDGR0z1h467fk5fkvxTGDHpTjsL7wPKoMMXScWyH iRUoRZ1Pqy6tu629jow2r+xQbdy7y/KgazDvkWLTH5ooeLvzwcAlnShVZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF78KWcyuccSaiulSh4lWl4L/EsaMB8GA1UdIwQY MBaAFNZt91meJDtGKGQSaowkEHii4rBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQt MDcxNDM3NjVmZmZlLzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQtMDcxNDM3NjVmZmZl LzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnF2Awz9m d9EZaX7A6Tg6kt51mPDOrFuO0iL5/CI2Wn5xHlQHGHok2T4LuJidNqZBRnKTrsA2 dGilP3u1h7mu80OOPZattTy0wr8sKVAi/UA8m1uk9rZRzsDK1ayBV9uytnA5Zcej P6hqrQQ6ErdIDVmaNviXm5IvbI+NCWmVsD30SMQshetm5VX6pX6MFuUeRQmPfK0t qpuS0UyRfsPplxwnBceq95utMxApoe+FmUi1QXE6yN2IVo4obbbN2UML5kVdZXjz 4bsmIdqr1dZbW6uoIWVg8ghSkW1x9ndSlSaEXtiQlcWekoar85ItpwAz0yyeau9B criuqGexI9inmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client