This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json) Hash identifier: n9DB0YezNjuAkHBEx66QRV4qOTJsNk8Otlrvji2J2Ek= Subject key identifier: 05:62:DA:AA:6A:A1:1F:39:64:B8:03:A1:4C:A1:9F:92:8A:DA:31:78 Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b Certificate serial: 019B495E29F9EE6ACF67046862E026DFC840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft Manifest number: 0EF1 Signing time: Tue 23 Dec 2025 04:01:06 +0000 Manifest this update: Tue 23 Dec 2025 04:01:06 +0000 Manifest next update: Wed 24 Dec 2025 04:01:06 +0000 Files and hashes: 1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: GufqAPGbuMdpD8Az1v983LCa9tM5um12cnHVfHi6cLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:29:f9:ee:6a:cf:67:04:68:62:e0:26:df:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b Validity Not Before: Dec 23 04:01:06 2025 GMT Not After : Dec 24 04:01:06 2025 GMT Subject: CN=0562daaa6aa11f3964b803a14ca19f928ada3178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:c3:85:4c:0c:dc:c0:d0:49:f8:fc:01:29: e0:07:c8:46:c8:13:d2:79:b1:d0:bc:7a:b1:19:77: 29:41:7d:33:b7:75:10:d5:5a:be:1e:60:b3:f9:3e: bb:cd:e7:ae:f0:f0:cb:f5:68:7d:32:21:0e:4f:70: 0d:1b:f7:03:62:1d:f9:d7:0b:e6:a1:8e:c4:62:e7: 9e:a1:fa:c7:bb:5c:35:05:e5:d4:c7:35:a1:f5:2c: 73:9b:8d:34:c6:35:1d:3d:bb:b0:d1:73:15:c1:da: c5:71:dc:7d:74:2e:74:7d:1d:b2:d6:20:0e:dc:90: b7:e8:7d:31:a1:a2:f6:3b:64:2b:1a:33:b8:d4:38: 0e:b0:2a:ff:16:cf:fc:c3:25:bf:00:4c:e5:5c:39: 97:f0:72:28:c5:32:4e:10:a2:3d:9c:8b:35:bd:8b: dc:52:01:02:55:61:0e:38:29:c0:ef:c2:47:1d:62: 72:06:48:e1:a1:01:33:51:8c:58:d7:68:e1:3f:0f: 15:45:d7:73:b4:94:76:38:66:cb:1b:4f:9c:70:a8: 71:25:9b:7e:08:d7:af:8c:87:7e:ef:d0:48:d4:ef: 17:a7:60:0c:cb:74:6d:b8:81:e2:c7:49:4b:54:4f: 23:5c:87:cb:26:f0:1c:c9:5e:32:a6:45:66:30:cb: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:DA:AA:6A:A1:1F:39:64:B8:03:A1:4C:A1:9F:92:8A:DA:31:78 X509v3 Authority Key Identifier: keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0c:df:b5:69:95:2e:9b:dd:89:83:c3:65:4b:6f:6e:e6:7c: 0b:86:ba:60:ee:85:07:19:0e:4d:8d:91:66:17:b4:68:a7:4f: 45:cc:e3:09:65:38:c3:9e:55:fb:88:86:94:88:ac:cf:a8:34: a5:6a:5c:77:f7:da:c1:17:f1:8f:75:bf:54:0f:9b:a2:f5:af: 88:da:a9:a9:d4:5e:3d:27:a6:ad:71:33:0a:3e:37:10:4d:1b: 99:d0:ff:9b:90:7d:fe:9c:75:50:53:1d:58:bf:93:84:e9:bb: b5:a6:57:19:df:db:21:39:89:92:4e:38:0c:f2:17:c0:69:92: ed:4e:22:0b:ef:e6:66:13:64:99:c8:52:8b:10:52:f5:1c:04: 19:a7:4c:14:c1:4f:db:bf:3d:45:34:a8:04:aa:f0:9f:d4:6f: e2:be:fb:24:52:92:b1:25:9d:c2:88:58:cf:d6:2d:cd:6b:5b: dd:24:98:2e:f1:c3:3f:12:cb:59:f6:d1:9a:cb:5c:c1:d5:d4: f8:f2:73:b8:e4:e1:2d:2d:1f:7a:80:02:47:c5:5d:96:b5:e4: a6:66:68:00:8c:6f:e1:5e:82:2a:1e:ac:bd:70:2b:6c:76:9a: f5:e5:2c:c4:05:fd:15:05:83:65:15:16:8d:09:5c:49:3b:0a: 2e:c3:7f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXin57mrPZwRoYuAm38hAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTBhOWIxZDQ1NDk0OWYwYjE5MzAzNTI0ZDU1ZTYyNWRm MGJhNGIwHhcNMjUxMjIzMDQwMTA2WhcNMjUxMjI0MDQwMTA2WjAzMTEwLwYDVQQD EygwNTYyZGFhYTZhYTExZjM5NjRiODAzYTE0Y2ExOWY5MjhhZGEzMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLjDhUwM3MDQSfj8ASngB8hGyBPS ebHQvHqxGXcpQX0zt3UQ1Vq+HmCz+T67zeeu8PDL9Wh9MiEOT3ANG/cDYh351wvm oY7EYueeofrHu1w1BeXUxzWh9Sxzm400xjUdPbuw0XMVwdrFcdx9dC50fR2y1iAO 3JC36H0xoaL2O2QrGjO41DgOsCr/Fs/8wyW/AEzlXDmX8HIoxTJOEKI9nIs1vYvc UgECVWEOOCnA78JHHWJyBkjhoQEzUYxY12jhPw8VRddztJR2OGbLG0+ccKhxJZt+ CNevjId+79BI1O8Xp2AMy3RtuIHix0lLVE8jXIfLJvAcyV4ypkVmMMt+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVi2qpqoR85ZLgDoUyhn5KK2jF4MB8GA1UdIwQY MBaAFKdQqbHUVJSfCxkwNSTVXmJd8LpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81YjQ4MzAtN2MwZi00M2QyLWJjMWYt NzQwMTYwMzFjMjM4LzEvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81YjQ4MzAtN2MwZi00M2QyLWJjMWYtNzQwMTYwMzFjMjM4 LzEvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgzftWmV LpvdiYPDZUtvbuZ8C4a6YO6FBxkOTY2RZhe0aKdPRczjCWU4w55V+4iGlIisz6g0 pWpcd/fawRfxj3W/VA+bovWviNqpqdRePSemrXEzCj43EE0bmdD/m5B9/px1UFMd WL+ThOm7taZXGd/bITmJkk44DPIXwGmS7U4iC+/mZhNkmchSixBS9RwEGadMFMFP 2789RTSoBKrwn9Rv4r77JFKSsSWdwohYz9YtzWtb3SSYLvHDPxLLWfbRmstcwdXU +PJzuOThLS0feoACR8VdlrXkpmZoAIxv4V6CKh6svXArbHaa9eUsxAX9FQWDZRUW jQlcSTsKLsN/uQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:07:32 2025 by rpki-client