This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json) Hash identifier: Cgv8LX0rY3Ol2+qu9UtT4Z+Wj/EPG6ByoYTEdkHKXIk= Subject key identifier: 2F:CE:9C:E8:F0:91:99:CC:A1:45:FF:25:48:AF:8E:17:53:70:1C:4A Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2 Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2 Certificate serial: 019AC9B1E4B1283F001F01631BA8CF6E616C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft Manifest number: 0EB0 Signing time: Fri 28 Nov 2025 09:01:10 +0000 Manifest this update: Fri 28 Nov 2025 09:01:10 +0000 Manifest next update: Sat 29 Nov 2025 09:01:10 +0000 Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: 6RTAmm4HlaU476GZ42r772n3vw2osrtGXsW9zMMboQ8=) 2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=) 3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:b1:e4:b1:28:3f:00:1f:01:63:1b:a8:cf:6e:61:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2 Validity Not Before: Nov 28 09:01:10 2025 GMT Not After : Nov 29 09:01:10 2025 GMT Subject: CN=2fce9ce8f09199cca145ff2548af8e1753701c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:b1:bd:f2:55:80:2c:8d:e8:11:32:0a:b1: 64:d7:0e:95:81:24:39:9b:ab:75:bc:d1:57:1a:6b: ae:79:6c:43:92:68:13:8a:cf:e9:f1:34:b5:aa:ee: 30:1a:df:95:6b:2d:45:ff:1a:ba:d3:b3:85:18:5d: ad:83:33:fd:c9:89:04:ff:39:c5:b6:93:f6:6f:ac: 47:80:6d:e4:1c:9a:07:5b:02:82:9c:56:cc:e2:4f: 7f:15:f0:c8:fa:11:f3:f4:0a:bb:43:4b:86:1f:6b: bf:11:c5:e8:23:b5:d4:9d:9a:6a:d7:a8:0f:b8:2e: df:30:68:2b:6b:18:fa:41:47:9b:a7:63:97:ee:6f: 94:88:0f:9c:ff:68:f4:48:85:57:d2:8f:b4:7d:65: e0:bf:cd:b0:52:cb:c5:77:b6:b8:c1:74:9f:c4:e4: 1a:33:62:80:09:11:ee:9d:4c:f8:4d:ad:6c:6e:ed: da:07:8c:1b:d6:3b:8a:b8:11:bd:3c:3a:e8:2a:30: ba:3e:61:f2:7d:f0:37:d2:fb:78:8f:79:d4:d9:7a: 94:df:ed:3a:0f:08:f8:cf:59:23:9e:ee:0f:93:0a: f9:30:ff:fd:22:de:18:a3:5e:be:8c:9b:bf:ed:ba: ce:86:9c:9c:83:f1:52:04:c0:ea:97:12:e5:d9:6b: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CE:9C:E8:F0:91:99:CC:A1:45:FF:25:48:AF:8E:17:53:70:1C:4A X509v3 Authority Key Identifier: keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:53:5e:05:e3:c7:e2:b9:dd:91:63:72:82:79:9f:c5:48:21: c5:c0:4d:03:dd:f8:90:44:29:75:57:ed:d4:7c:ea:8f:7c:de: 96:7e:cf:d8:d2:0e:cd:9d:18:31:c5:8b:22:37:ae:85:e7:75: 28:d0:2c:c5:3e:02:16:b3:50:97:0a:ec:71:9a:e7:08:bc:1c: 0a:c8:b6:f0:67:a1:59:19:33:63:99:a3:0f:2d:04:85:72:a6: be:28:4a:0a:d3:2b:e0:b9:b7:1e:ad:a4:b9:db:7e:59:84:cc: d8:0a:2a:26:c1:6f:e4:72:c0:73:4f:ad:14:49:3b:32:47:ec: e7:3c:01:81:b6:1b:20:d3:15:e0:dd:5f:31:34:cc:77:75:8e: 61:5b:90:5d:c5:b8:b7:c7:5a:22:7c:65:98:9c:a1:4e:0b:38: 49:f6:c9:db:3d:72:0e:af:b5:8b:06:dd:2b:68:9b:d4:5d:21: c4:da:7e:49:38:30:c0:33:cd:a4:72:ae:35:68:b8:f7:bc:7a: 30:44:84:7d:da:1b:31:fc:49:47:b3:68:76:98:86:ef:bf:e5: a1:fe:9e:61:c2:71:36:90:9a:35:f3:0f:04:64:9c:c4:ba:81: 0e:2e:48:7f:47:4e:a1:c8:57:89:34:0b:bd:96:c1:17:9a:21: 7f:e8:58:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrJseSxKD8AHwFjG6jPbmFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjIwY2VjNzA5NzRkMDM3ZDc3Njk3NThjNzQ2NjgzMDVi MzJjZjIwHhcNMjUxMTI4MDkwMTEwWhcNMjUxMTI5MDkwMTEwWjAzMTEwLwYDVQQD EygyZmNlOWNlOGYwOTE5OWNjYTE0NWZmMjU0OGFmOGUxNzUzNzAxYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SWxvfJVgCyN6BEyCrFk1w6VgSQ5 m6t1vNFXGmuueWxDkmgTis/p8TS1qu4wGt+Vay1F/xq607OFGF2tgzP9yYkE/znF tpP2b6xHgG3kHJoHWwKCnFbM4k9/FfDI+hHz9Aq7Q0uGH2u/EcXoI7XUnZpq16gP uC7fMGgraxj6QUebp2OX7m+UiA+c/2j0SIVX0o+0fWXgv82wUsvFd7a4wXSfxOQa M2KACRHunUz4Ta1sbu3aB4wb1juKuBG9PDroKjC6PmHyffA30vt4j3nU2XqU3+06 Dwj4z1kjnu4Pkwr5MP/9It4Yo16+jJu/7brOhpycg/FSBMDqlxLl2Wsq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/OnOjwkZnMoUX/JUivjhdTcBxKMB8GA1UdIwQY MBaAFNViDOxwl00DfXdpdYx0ZoMFsyzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTkt YmU0MzRjYjlmOGY4LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTktYmU0MzRjYjlmOGY4 LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1NeBePH 4rndkWNygnmfxUghxcBNA934kEQpdVft1Hzqj3zeln7P2NIOzZ0YMcWLIjeuhed1 KNAsxT4CFrNQlwrscZrnCLwcCsi28GehWRkzY5mjDy0EhXKmvihKCtMr4Lm3Hq2k udt+WYTM2AoqJsFv5HLAc0+tFEk7Mkfs5zwBgbYbINMV4N1fMTTMd3WOYVuQXcW4 t8daInxlmJyhTgs4SfbJ2z1yDq+1iwbdK2ib1F0hxNp+STgwwDPNpHKuNWi497x6 MESEfdobMfxJR7NodpiG77/lof6eYcJxNpCaNfMPBGScxLqBDi5If0dOochXiTQL vZbBF5ohf+hYew== -----END CERTIFICATE-----Generated at Fri Nov 28 10:21:52 2025 by rpki-client