This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json) Hash identifier: LzJ2YOF6xTsAzPOPRft1v+p7hfDFFQrXMh+NN3l5B+0= Subject key identifier: 54:B2:16:49:67:CF:5C:20:D1:44:85:CE:C7:8D:28:5F:3B:CD:8C:0C Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Certificate serial: 019B24E3EF0CD6DA9842C245D9A8A85E1798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft Manifest number: 1127 Signing time: Tue 16 Dec 2025 02:01:16 +0000 Manifest this update: Tue 16 Dec 2025 02:01:16 +0000 Manifest next update: Wed 17 Dec 2025 02:01:16 +0000 Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: PiV5yyiUPNWoiEVaaUyB6SCH7bGweFf9YSPM/8mL2Yo=) 2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:ef:0c:d6:da:98:42:c2:45:d9:a8:a8:5e:17:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Validity Not Before: Dec 16 02:01:16 2025 GMT Not After : Dec 17 02:01:16 2025 GMT Subject: CN=54b2164967cf5c20d14485cec78d285f3bcd8c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:08:9a:f4:49:42:f0:65:fc:69:ba:d7:de: 6e:14:ba:51:c2:e9:5f:11:ec:8b:b0:12:e5:5a:d5: 20:57:36:39:7c:26:12:51:71:89:cc:7b:41:6a:88: 8a:1e:07:3f:da:35:d5:f8:c6:25:c5:41:e6:a8:35: f1:53:86:07:de:43:c4:da:b8:46:dc:80:1b:a7:69: 95:70:0f:35:5f:1b:98:84:15:34:f6:8a:91:80:52: 92:45:8b:73:6f:bb:52:27:ec:9a:47:cb:fc:b9:2f: ab:aa:80:f5:c4:69:75:bd:68:74:07:14:fe:a2:c8: 1d:be:f7:9d:13:3e:65:82:f3:6a:d9:f4:2f:ca:5f: 72:60:86:fb:95:27:8f:a6:fd:28:82:36:ec:c0:e7: 97:d7:87:7e:3a:8a:a8:8d:ac:51:2c:f4:69:d1:87: 67:3e:9f:bd:5c:0a:5d:0b:0a:60:27:b0:c2:a2:f9: 16:2a:15:e5:da:1a:02:bc:51:ee:5e:1d:16:9a:da: 5f:2f:f2:51:5a:08:49:6b:ca:2f:ec:aa:90:b5:4d: 3c:95:c3:7f:44:74:6d:59:9f:55:cf:6a:8d:61:1b: 32:ee:7e:25:f7:3f:e6:7b:91:55:25:b1:93:12:2c: 45:3f:3a:56:c5:bd:73:cb:8a:03:6a:6c:81:de:b4: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:16:49:67:CF:5C:20:D1:44:85:CE:C7:8D:28:5F:3B:CD:8C:0C X509v3 Authority Key Identifier: keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:bd:40:0e:f3:19:6c:b1:2b:12:c4:35:ea:cd:00:3d:74:1a: c9:55:78:60:f0:0a:45:87:7a:71:5f:2c:1c:7d:d1:c8:34:99: 6a:e5:e0:5b:18:af:9b:6b:85:d5:42:97:b0:46:b6:f8:82:ee: 5e:bb:ea:5a:cc:c3:5c:7f:c5:78:cb:d4:f7:9b:71:10:0e:ae: 29:da:13:5d:35:5f:fb:c2:92:b1:1b:11:3a:2c:da:af:4b:8e: 1f:d2:0e:72:97:65:5a:34:4e:2c:56:b3:76:77:f9:97:13:07: 12:f5:33:4f:e5:6c:cb:29:10:52:8a:d9:cd:bd:4f:ba:b9:ed: e6:a8:eb:80:fe:7e:12:c6:10:16:91:5f:0a:96:71:e0:77:f3: 4d:00:ae:32:37:74:76:4e:c8:59:3f:09:ed:54:da:fc:ad:99: a6:12:5a:e7:d2:2a:2e:3a:b7:39:d6:67:8e:a2:9e:48:07:57: b8:ea:20:9b:2a:9c:1d:67:8a:14:90:13:b4:85:62:12:f9:00: 95:d9:31:ae:3e:fb:a1:93:07:82:bf:47:4a:64:44:00:d4:ff: 5b:51:ac:74:f4:3e:81:6a:9b:f6:93:d9:76:f7:64:17:27:ec: 64:02:ca:02:f6:9d:c8:01:0d:71:db:68:60:63:89:b6:cc:aa: 56:7f:ce:36 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsk4+8M1tqYQsJF2aioXheYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1 ZTJkODAwHhcNMjUxMjE2MDIwMTE2WhcNMjUxMjE3MDIwMTE2WjAzMTEwLwYDVQQD Eyg1NGIyMTY0OTY3Y2Y1YzIwZDE0NDg1Y2VjNzhkMjg1ZjNiY2Q4YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCcImvRJQvBl/Gm6195uFLpRwulf EeyLsBLlWtUgVzY5fCYSUXGJzHtBaoiKHgc/2jXV+MYlxUHmqDXxU4YH3kPE2rhG 3IAbp2mVcA81XxuYhBU09oqRgFKSRYtzb7tSJ+yaR8v8uS+rqoD1xGl1vWh0BxT+ osgdvvedEz5lgvNq2fQvyl9yYIb7lSePpv0ogjbswOeX14d+OoqojaxRLPRp0Ydn Pp+9XApdCwpgJ7DCovkWKhXl2hoCvFHuXh0WmtpfL/JRWghJa8ov7KqQtU08lcN/ RHRtWZ9Vz2qNYRsy7n4l9z/me5FVJbGTEixFPzpWxb1zy4oDamyB3rQmVwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFSyFklnz1wg0USFzseNKF87zYwMMB8GA1UdIwQY MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2 MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs71A DvMZbLErEsQ16s0APXQayVV4YPAKRYd6cV8sHH3RyDSZauXgWxivm2uF1UKXsEa2 +ILuXrvqWszDXH/FeMvU95txEA6uKdoTXTVf+8KSsRsROizar0uOH9IOcpdlWjRO LFazdnf5lxMHEvUzT+VsyykQUorZzb1Purnt5qjrgP5+EsYQFpFfCpZx4HfzTQCu Mjd0dk7IWT8J7VTa/K2ZphJa59IqLjq3OdZnjqKeSAdXuOogmyqcHWeKFJATtIVi EvkAldkxrj77oZMHgr9HSmREANT/W1GsdPQ+gWqb9pPZdvdkFyfsZALKAvadyAEN cdtoYGOJtsyqVn/ONg== -----END CERTIFICATE-----Generated at Tue Dec 16 08:49:55 2025 by rpki-client