This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json) Hash identifier: rJGY0zeCuHH6CXRyAUg2PejTE7J/FI2+8/i3KSDH8Xk= Subject key identifier: 05:CB:63:C3:26:7E:A9:8F:D6:4F:32:E7:DF:D4:FF:61:4B:FB:5E:C2 Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Certificate serial: 019B4249A64BFA6EBC17F742058A3743FDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft Manifest number: 0736 Signing time: Sun 21 Dec 2025 19:01:21 +0000 Manifest this update: Sun 21 Dec 2025 19:01:21 +0000 Manifest next update: Mon 22 Dec 2025 19:01:21 +0000 Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: Ez/YBlTfknf51BJ2DbyI6HlhXCtDiUXTB2uwudhv/dI=) 2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:a6:4b:fa:6e:bc:17:f7:42:05:8a:37:43:fd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Validity Not Before: Dec 21 19:01:21 2025 GMT Not After : Dec 22 19:01:21 2025 GMT Subject: CN=05cb63c3267ea98fd64f32e7dfd4ff614bfb5ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5d:3c:e2:d6:b9:75:f6:2b:42:03:13:ef:b7: e0:26:7c:12:b8:34:2f:75:ac:6c:85:e9:3d:0f:90: 37:0b:ee:62:0b:ef:28:64:d4:33:95:9c:21:7a:57: 5f:b6:88:ec:ac:56:75:c3:12:00:9a:e8:d1:f8:48: 6a:7d:60:de:7f:85:36:52:d8:63:6d:72:a9:12:08: 67:80:ce:c4:1c:6a:aa:11:f3:cc:2a:f0:4e:11:83: 7e:e7:32:a9:91:3d:5b:5e:ff:55:64:a0:48:a9:7b: 10:11:6d:56:31:f3:09:e9:7a:a5:a4:84:3c:9c:0b: e6:ea:ef:fd:3b:10:2d:6d:c3:e5:51:9b:ee:c3:95: e1:81:11:34:8d:83:10:67:fe:9b:0c:42:dc:05:56: 3c:9a:e4:6d:20:97:ee:0c:08:1a:f1:21:22:11:18: 9f:bb:0b:b9:ea:72:e2:6e:f5:01:52:42:44:86:4b: fe:b1:85:35:65:17:09:3a:4b:30:cf:24:6c:3c:44: 0f:e2:f3:8f:68:4f:25:3d:18:fa:21:ec:49:55:57: ea:fe:86:01:70:ba:19:9b:19:00:10:c5:86:0e:91: d0:71:34:e5:43:69:c0:3c:56:25:3a:a5:0c:3d:5a: f8:d3:8c:7d:2d:2e:60:ff:47:1f:2f:cd:82:b9:bd: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CB:63:C3:26:7E:A9:8F:D6:4F:32:E7:DF:D4:FF:61:4B:FB:5E:C2 X509v3 Authority Key Identifier: keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:72:4d:27:cb:c2:29:80:eb:8e:f6:b7:2c:37:1d:f2:a5: a6:48:a9:34:ce:64:2d:ca:08:3d:50:e0:60:78:4a:b2:65:83: e7:a3:d0:4b:a8:f4:8a:19:f3:f0:fa:2e:12:27:f5:f7:18:c9: 7e:16:e7:ca:cb:52:51:ee:d5:f4:be:1f:c1:b6:c7:6f:3a:02: d9:ef:0c:bb:13:1c:1c:a7:1c:d7:12:f2:40:c6:35:a2:bd:45: 39:44:c3:11:f6:6d:8a:fd:b5:13:0d:93:d9:69:45:2a:79:44: 47:f3:4d:29:8f:70:60:57:fa:8b:88:4c:d1:10:34:67:9d:a6: d6:f5:19:46:c3:3a:09:1b:87:73:ab:7b:f3:43:2b:ee:e3:3d: f4:6a:c2:48:a7:59:7f:52:ca:ce:0b:f6:59:c7:cd:9e:fa:a6: 6a:46:31:74:6c:78:ad:48:74:63:03:b9:8f:c4:35:e1:d5:d8: d0:52:7c:89:35:14:2f:cf:c3:de:e2:db:b8:45:6c:e9:23:22: 11:fb:85:56:b4:bc:9b:4b:14:1e:4e:af:5e:cc:bb:36:cf:09: 3e:78:1a:c4:12:cb:79:17:07:91:52:ff:f5:db:3e:59:0a:98: fd:c6:36:ef:b2:3e:13:4b:ba:7c:f0:69:1e:48:c9:bd:61:6b: 33:9f:e8:67 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCSaZL+m68F/dCBYo3Q/2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm YTBjZWIwHhcNMjUxMjIxMTkwMTIxWhcNMjUxMjIyMTkwMTIxWjAzMTEwLwYDVQQD EygwNWNiNjNjMzI2N2VhOThmZDY0ZjMyZTdkZmQ0ZmY2MTRiZmI1ZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1084ta5dfYrQgMT77fgJnwSuDQv daxshek9D5A3C+5iC+8oZNQzlZwheldftojsrFZ1wxIAmujR+EhqfWDef4U2Uthj bXKpEghngM7EHGqqEfPMKvBOEYN+5zKpkT1bXv9VZKBIqXsQEW1WMfMJ6XqlpIQ8 nAvm6u/9OxAtbcPlUZvuw5XhgRE0jYMQZ/6bDELcBVY8muRtIJfuDAga8SEiERif uwu56nLibvUBUkJEhkv+sYU1ZRcJOkswzyRsPEQP4vOPaE8lPRj6IexJVVfq/oYB cLoZmxkAEMWGDpHQcTTlQ2nAPFYlOqUMPVr404x9LS5g/0cfL82Cub2r2QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAXLY8MmfqmP1k8y59/U/2FL+17CMB8GA1UdIwQY MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGhy TSfLwimA6472tyw3HfKlpkipNM5kLcoIPVDgYHhKsmWD56PQS6j0ihnz8PouEif1 9xjJfhbnystSUe7V9L4fwbbHbzoC2e8MuxMcHKcc1xLyQMY1or1FOUTDEfZtiv21 Ew2T2WlFKnlER/NNKY9wYFf6i4hM0RA0Z52m1vUZRsM6CRuHc6t780Mr7uM99GrC SKdZf1LKzgv2WcfNnvqmakYxdGx4rUh0YwO5j8Q14dXY0FJ8iTUUL8/D3uLbuEVs 6SMiEfuFVrS8m0sUHk6vXsy7Ns8JPngaxBLLeRcHkVL/9ds+WQqY/cY277I+E0u6 fPBpHkjJvWFrM5/oZw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:02 2025 by rpki-client