This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json) Hash identifier: oBgHanYaRCzZ8PFdHtxnvp79QMLVTpkbJQHC05GzniY= Subject key identifier: 5E:5C:5C:9C:8A:45:B7:EA:E2:8E:CD:A9:1C:FD:79:2C:22:01:AA:C9 Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9 Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9 Certificate serial: 019B58D102FE07CFD5997D068A406304C29E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft Manifest number: 10BB Signing time: Fri 26 Dec 2025 04:00:51 +0000 Manifest this update: Fri 26 Dec 2025 04:00:51 +0000 Manifest next update: Sat 27 Dec 2025 04:00:51 +0000 Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: eoU4lQKKC/FCMU5ohHwBIx+CODfnjLmiQB9P58MgMBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:02:fe:07:cf:d5:99:7d:06:8a:40:63:04:c2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9 Validity Not Before: Dec 26 04:00:51 2025 GMT Not After : Dec 27 04:00:51 2025 GMT Subject: CN=5e5c5c9c8a45b7eae28ecda91cfd792c2201aac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:82:e9:90:7a:c3:40:b2:de:1b:74:b4:c2: 75:88:c8:4d:16:e7:82:af:cb:fa:d2:3e:fa:36:04: 98:57:60:27:b6:16:7c:cd:75:76:1d:20:1b:8c:fc: 29:ab:2b:dd:15:10:b5:64:6e:96:8d:96:62:53:36: 51:80:8c:4a:3e:f6:89:b3:4a:19:52:b0:30:e0:29: 07:98:b4:bd:c7:01:44:85:f6:68:20:26:0e:2f:4b: 75:34:23:81:31:98:1e:cc:20:b8:62:1c:c3:bd:42: 43:5b:0e:4d:f2:02:95:a5:ea:c7:4b:15:34:4b:a5: 95:14:40:55:67:4a:1c:ac:4f:04:a2:62:62:05:c3: 48:d5:c2:2f:76:51:ef:1e:2d:da:75:7f:d5:28:f0: 4d:80:ea:9d:f2:25:64:dd:e2:a8:9b:bf:bd:93:c0: 61:28:a0:06:0e:ca:18:c6:57:75:4a:db:78:6d:b3: f2:0c:05:c1:cf:13:78:c7:d6:c1:99:94:5b:27:ae: 07:33:2f:2f:6a:c0:ea:56:cd:e9:c9:28:32:55:69: 62:7e:46:27:e4:44:5d:95:d8:da:51:12:61:8c:ad: de:b5:62:7a:21:f6:45:92:f3:ea:06:05:a9:30:46: 11:59:73:3b:47:c2:d9:a3:20:9a:9b:5d:65:4d:ac: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5C:5C:9C:8A:45:B7:EA:E2:8E:CD:A9:1C:FD:79:2C:22:01:AA:C9 X509v3 Authority Key Identifier: keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4f:32:0d:9f:fc:18:1e:0c:72:69:da:44:57:ee:2a:3e:c2: 84:55:03:49:ce:30:96:2f:04:7f:d4:1d:7b:d2:3d:55:aa:fb: ff:50:30:e4:42:33:49:88:3f:08:3d:59:a7:2e:69:67:b6:e2: 1e:c4:2d:b0:6f:dc:28:50:e6:8a:d3:6e:83:b8:69:f0:d4:7f: 9c:4e:0b:08:f2:e0:58:a3:33:1d:9a:07:02:0c:f2:d4:a4:61: b0:15:04:08:d8:08:2e:49:84:1f:b2:fc:e8:dd:ee:ea:c6:8a: e1:95:cb:19:37:7d:9f:e4:8c:46:a9:d4:e8:43:0f:56:3d:51: a1:3e:5f:d3:16:78:5d:bc:a7:a7:a9:87:e0:bc:0c:3f:d7:6c: 21:73:af:a9:d9:81:34:c7:3b:17:66:91:81:85:95:f0:92:d4: 00:d3:e2:e6:8d:e7:d9:33:e6:3f:be:b1:d9:8c:21:9b:c4:0b: 49:eb:5d:6b:5c:0b:15:3e:4d:2b:71:42:8d:4b:c7:30:ab:e3: f1:a2:37:dd:48:f9:e5:46:ea:c9:ef:a8:1b:07:8b:81:5e:30: 0b:23:de:85:e5:6d:4d:87:b4:1c:80:4e:c1:35:f5:61:57:92: 74:e3:68:5f:28:44:2b:29:1f:b7:8d:8a:20:2b:57:f1:d9:22: c7:f1:92:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0QL+B8/VmX0GikBjBMKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MmE1M2RhMDM4MjUyZjY0YjZjMjkzNTljZmFjNDEwNGMz NWI3ZTkwHhcNMjUxMjI2MDQwMDUxWhcNMjUxMjI3MDQwMDUxWjAzMTEwLwYDVQQD Eyg1ZTVjNWM5YzhhNDViN2VhZTI4ZWNkYTkxY2ZkNzkyYzIyMDFhYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIWC6ZB6w0Cy3ht0tMJ1iMhNFueC r8v60j76NgSYV2AnthZ8zXV2HSAbjPwpqyvdFRC1ZG6WjZZiUzZRgIxKPvaJs0oZ UrAw4CkHmLS9xwFEhfZoICYOL0t1NCOBMZgezCC4YhzDvUJDWw5N8gKVperHSxU0 S6WVFEBVZ0ocrE8EomJiBcNI1cIvdlHvHi3adX/VKPBNgOqd8iVk3eKom7+9k8Bh KKAGDsoYxld1Stt4bbPyDAXBzxN4x9bBmZRbJ64HMy8vasDqVs3pySgyVWlifkYn 5ERdldjaURJhjK3etWJ6IfZFkvPqBgWpMEYRWXM7R8LZoyCam11lTawbpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5cXJyKRbfq4o7NqRz9eSwiAarJMB8GA1UdIwQY MBaAFNQqU9oDglL2S2wpNZz6xBBMNbfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEt Yzg2OTlkYzczMTAwLzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEtYzg2OTlkYzczMTAw LzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk8yDZ/8 GB4McmnaRFfuKj7ChFUDSc4wli8Ef9Qde9I9Var7/1Aw5EIzSYg/CD1Zpy5pZ7bi HsQtsG/cKFDmitNug7hp8NR/nE4LCPLgWKMzHZoHAgzy1KRhsBUECNgILkmEH7L8 6N3u6saK4ZXLGTd9n+SMRqnU6EMPVj1RoT5f0xZ4Xbynp6mH4LwMP9dsIXOvqdmB NMc7F2aRgYWV8JLUANPi5o3n2TPmP76x2Ywhm8QLSetda1wLFT5NK3FCjUvHMKvj 8aI33Uj55Ubqye+oGweLgV4wCyPeheVtTYe0HIBOwTX1YVeSdONoXyhEKykft42K ICtX8dkix/GSnA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:50 2025 by rpki-client