This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json) Hash identifier: lmJ+iKpyPDABU8AKT6oLNd3/F0HyWqWPX30N1s4cmKg= Subject key identifier: E2:B8:B2:4F:57:76:2F:92:52:DF:C8:D3:A9:63:E9:01:90:B9:BF:58 Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Certificate serial: 019B4C5F24E378D89861CFC2B92CE52156A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft Manifest number: 1005 Signing time: Tue 23 Dec 2025 18:01:02 +0000 Manifest this update: Tue 23 Dec 2025 18:01:02 +0000 Manifest next update: Wed 24 Dec 2025 18:01:02 +0000 Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: YDjhPoI949qCmbFWAT/9Z4Oy4dOLs+DMs8t0PX893FA=) 2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:24:e3:78:d8:98:61:cf:c2:b9:2c:e5:21:56:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Validity Not Before: Dec 23 18:01:02 2025 GMT Not After : Dec 24 18:01:02 2025 GMT Subject: CN=e2b8b24f57762f9252dfc8d3a963e90190b9bf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:3e:e7:ea:db:3f:3f:af:c9:40:d8:02:68: c5:7d:b9:a8:19:3a:95:37:17:98:6b:43:8c:0f:4c: a1:12:3b:9b:85:a0:f2:ba:a0:bb:cb:3a:22:a5:8a: 9f:d0:89:9e:48:9c:6f:4e:5a:75:62:f0:80:89:cd: 0a:48:d3:6e:31:25:96:ff:09:38:68:a8:3e:a1:12: 3c:b5:b7:7a:35:c8:08:79:a0:4b:bb:0e:50:05:52: a4:c2:82:79:a0:51:78:59:ab:00:9b:91:bc:42:73: d6:6d:d9:73:5d:e1:7f:56:e0:ec:82:bb:19:b8:07: 0c:4e:6e:bc:52:a4:19:15:4d:f2:5b:7b:a3:f2:07: b3:a2:bc:54:60:41:db:ff:bc:51:32:05:62:fc:7b: 9b:8a:99:05:6a:c1:8b:41:9a:d4:96:03:ce:37:46: 26:58:db:b0:54:58:8d:d4:a2:e1:6a:5f:43:e7:77: cb:74:7f:40:8d:e3:42:1a:ed:1f:9f:1d:18:c0:eb: 86:79:dc:9f:a3:8d:c4:38:36:59:b3:5f:ea:6e:b6: 46:c5:e3:69:62:7a:a6:fc:b2:f5:04:d3:8b:b5:61: 5a:71:e4:78:42:e2:2d:2e:6d:75:40:1a:98:09:26: a2:df:c2:be:3e:40:a6:82:5b:27:d8:a4:80:da:7f: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B8:B2:4F:57:76:2F:92:52:DF:C8:D3:A9:63:E9:01:90:B9:BF:58 X509v3 Authority Key Identifier: keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:ed:cb:e9:51:52:fd:7d:61:8e:06:58:51:dc:34:e8:8c: 5c:04:ce:19:94:80:3a:7a:4e:4e:63:69:74:8e:52:0e:2c:bf: 86:49:dc:2d:20:ef:ba:ff:d8:c2:fe:2e:f6:51:47:6f:65:dd: 45:5a:33:24:ab:59:84:15:9a:44:d7:3f:1d:ae:64:a4:e3:2e: 63:e6:01:9f:da:d8:5c:b7:28:fe:21:37:36:4c:79:26:9b:9e: 85:ea:fc:e8:a9:d4:3a:c0:e5:54:9a:e7:68:1b:2c:90:a8:d8: 02:12:50:34:61:1d:bd:48:d5:9b:fe:e2:f5:91:fb:5c:8e:59: ce:d1:fd:ec:d7:7e:31:b8:e9:06:c8:7b:2e:2a:06:bf:fc:72: 1a:da:64:81:60:ab:82:a0:a9:11:b9:be:08:08:b7:94:52:a6: 8e:d4:df:70:c4:95:13:b3:cd:28:0f:0a:fa:e7:9b:f2:94:07: 0f:55:d9:01:f9:53:db:84:ad:ed:8c:da:59:44:4c:1c:b7:c6: 27:dd:5b:0d:f2:d5:1c:d9:4b:94:15:ed:7c:9b:47:6b:f5:54: 17:36:b5:f3:1b:06:37:81:a1:92:13:10:b4:ab:0a:ac:15:ce: 22:bb:04:63:fc:5c:b4:83:92:a1:23:01:ea:d2:c3:a1:77:b2: 3b:e7:f4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXyTjeNiYYc/CuSzlIVaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTE1N2U0MTlmYjVhMThiYTJiZWFmMmRlNTQ1ZjJiYjNk ZWNmZDEwHhcNMjUxMjIzMTgwMTAyWhcNMjUxMjI0MTgwMTAyWjAzMTEwLwYDVQQD EyhlMmI4YjI0ZjU3NzYyZjkyNTJkZmM4ZDNhOTYzZTkwMTkwYjliZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3M+5+rbPz+vyUDYAmjFfbmoGTqV NxeYa0OMD0yhEjubhaDyuqC7yzoipYqf0ImeSJxvTlp1YvCAic0KSNNuMSWW/wk4 aKg+oRI8tbd6NcgIeaBLuw5QBVKkwoJ5oFF4WasAm5G8QnPWbdlzXeF/VuDsgrsZ uAcMTm68UqQZFU3yW3uj8gezorxUYEHb/7xRMgVi/HubipkFasGLQZrUlgPON0Ym WNuwVFiN1KLhal9D53fLdH9AjeNCGu0fnx0YwOuGedyfo43EODZZs1/qbrZGxeNp Ynqm/LL1BNOLtWFaceR4QuItLm11QBqYCSai38K+PkCmglsn2KSA2n9p+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK4sk9Xdi+SUt/I06lj6QGQub9YMB8GA1UdIwQY MBaAFGtRV+QZ+1oYuivq8t5UXyuz3s/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEt MzI4OTFhNTgzMzdmLzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEtMzI4OTFhNTgzMzdm LzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5nty+lR Uv19YY4GWFHcNOiMXATOGZSAOnpOTmNpdI5SDiy/hkncLSDvuv/Ywv4u9lFHb2Xd RVozJKtZhBWaRNc/Ha5kpOMuY+YBn9rYXLco/iE3Nkx5Jpueher86KnUOsDlVJrn aBsskKjYAhJQNGEdvUjVm/7i9ZH7XI5ZztH97Nd+MbjpBsh7LioGv/xyGtpkgWCr gqCpEbm+CAi3lFKmjtTfcMSVE7PNKA8K+ueb8pQHD1XZAflT24St7YzaWURMHLfG J91bDfLVHNlLlBXtfJtHa/VUFza18xsGN4GhkhMQtKsKrBXOIrsEY/xctIOSoSMB 6tLDoXeyO+f0Cw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:38:53 2025 by rpki-client