This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json) Hash identifier: NFD07kjq22EjDZfD62m0OiqSVbJUNtt1TZT3z1F6U8U= Subject key identifier: 54:52:B4:8F:B7:46:29:22:5E:FC:C9:21:B2:FF:D6:A1:AF:AB:54:C8 Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Certificate serial: 019B5A88EC3969EAD16B431B9067AFAAC712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft Manifest number: 09CF Signing time: Fri 26 Dec 2025 12:01:21 +0000 Manifest this update: Fri 26 Dec 2025 12:01:21 +0000 Manifest next update: Sat 27 Dec 2025 12:01:21 +0000 Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: e1gjV3QkgP50aNqULlqFtaXH0LTJNPylM1uzt5Xf7+Q=) 2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ec:39:69:ea:d1:6b:43:1b:90:67:af:aa:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Validity Not Before: Dec 26 12:01:21 2025 GMT Not After : Dec 27 12:01:21 2025 GMT Subject: CN=5452b48fb74629225efcc921b2ffd6a1afab54c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:ce:18:40:35:43:21:9f:fa:78:2a:1e:51: b3:4e:fd:cf:a4:db:79:0e:55:f7:55:0a:06:5f:be: 5b:d4:63:28:5a:f5:b8:a1:a1:05:c2:e0:39:4c:57: 15:cc:1d:3f:9d:93:24:c1:3e:59:7e:d3:3f:0e:77: 8f:b7:43:14:d1:f0:50:5e:a4:c1:c6:86:80:fb:81: 3c:57:bc:22:a1:c2:cb:db:fa:d7:2a:05:db:5b:24: e5:a1:49:14:bd:13:20:9c:2a:b1:07:97:78:1f:0e: 96:87:0b:67:58:cf:96:7f:59:01:20:d5:b3:6f:94: 2a:2c:f3:ef:95:ea:51:88:cc:27:8b:ea:96:e6:e0: cc:74:ba:05:3d:b8:62:2c:d2:ed:33:e3:64:45:4e: 13:a9:37:4e:f9:c6:22:7b:28:c0:74:6d:4a:13:df: ef:7a:de:78:58:25:a5:29:a0:8f:1e:c9:6e:df:c9: af:63:13:6b:08:e0:ef:39:e2:01:46:33:a2:89:41: ee:52:e8:b0:bc:5a:99:61:5b:66:5d:34:fc:a2:8a: a7:27:3b:cc:f2:e9:7a:e2:02:10:db:6b:7f:4d:06: 1c:bb:a7:df:e2:06:6d:ba:ce:c3:07:e7:28:03:8f: 24:26:a7:7c:88:40:6f:4b:24:94:c0:b0:0b:da:68: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:52:B4:8F:B7:46:29:22:5E:FC:C9:21:B2:FF:D6:A1:AF:AB:54:C8 X509v3 Authority Key Identifier: keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b4:9b:9b:80:76:4f:65:ea:6c:c9:55:84:2f:d2:57:9e:7b: 13:ba:89:3d:dc:23:5a:0c:c2:6d:07:95:e8:80:5f:1d:0e:fd: 78:94:0c:d4:17:9d:db:69:96:69:42:86:85:02:50:d3:5a:94: 2f:cb:90:25:d0:d8:59:3b:68:f5:58:0c:ce:b8:da:73:93:c3: f0:12:46:a3:73:02:fd:d7:f0:b6:48:ad:04:e1:2e:2e:fa:81: c9:47:74:be:41:55:81:55:d1:8f:c3:75:69:73:db:e1:37:78: 1c:73:8c:28:6a:24:29:c4:57:6a:f6:f8:0d:e9:fa:3d:f1:a5: fe:ea:e2:08:b7:ad:70:32:22:11:7d:c3:b8:e5:98:c8:e8:8b: 09:ff:ee:6f:d5:d1:5a:6e:44:44:7a:18:24:d8:95:d8:91:a3: 02:7a:81:e4:aa:c0:f3:c7:d4:ce:82:ef:1b:f4:b6:64:ba:b5: 0e:fa:19:fe:ca:ed:fd:b3:0e:a9:0e:b7:90:c7:77:a4:b4:20: d9:d8:b1:2a:4d:fe:3e:b3:36:b1:12:de:0d:20:cb:3f:d8:74: 15:35:a0:30:7d:7a:ba:80:07:1c:e4:48:13:40:59:2a:e6:e5: 16:23:f2:bc:e2:f8:44:66:7e:71:91:3f:13:be:3b:e7:a3:ef: 67:d3:90:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiOw5aerRa0MbkGevqscSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3 ZjcyMGEwHhcNMjUxMjI2MTIwMTIxWhcNMjUxMjI3MTIwMTIxWjAzMTEwLwYDVQQD Eyg1NDUyYjQ4ZmI3NDYyOTIyNWVmY2M5MjFiMmZmZDZhMWFmYWI1NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzzOGEA1QyGf+ngqHlGzTv3PpNt5 DlX3VQoGX75b1GMoWvW4oaEFwuA5TFcVzB0/nZMkwT5ZftM/DnePt0MU0fBQXqTB xoaA+4E8V7wiocLL2/rXKgXbWyTloUkUvRMgnCqxB5d4Hw6WhwtnWM+Wf1kBINWz b5QqLPPvlepRiMwni+qW5uDMdLoFPbhiLNLtM+NkRU4TqTdO+cYieyjAdG1KE9/v et54WCWlKaCPHslu38mvYxNrCODvOeIBRjOiiUHuUuiwvFqZYVtmXTT8ooqnJzvM 8ul64gIQ22t/TQYcu6ff4gZtus7DB+coA48kJqd8iEBvSySUwLAL2mjh5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRStI+3RikiXvzJIbL/1qGvq1TIMB8GA1UdIwQY MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7Sbm4B2 T2XqbMlVhC/SV557E7qJPdwjWgzCbQeV6IBfHQ79eJQM1Bed22mWaUKGhQJQ01qU L8uQJdDYWTto9VgMzrjac5PD8BJGo3MC/dfwtkitBOEuLvqByUd0vkFVgVXRj8N1 aXPb4Td4HHOMKGokKcRXavb4Den6PfGl/uriCLetcDIiEX3DuOWYyOiLCf/ub9XR Wm5ERHoYJNiV2JGjAnqB5KrA88fUzoLvG/S2ZLq1DvoZ/srt/bMOqQ63kMd3pLQg 2dixKk3+PrM2sRLeDSDLP9h0FTWgMH16uoAHHORIE0BZKublFiPyvOL4RGZ+cZE/ E74756PvZ9OQRA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client