This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json) Hash identifier: +X0a5zyPw9MDHkdEW1QvgQ+60nIuK9I6rhA3YW/qpw8= Subject key identifier: 40:A2:28:A0:99:0F:13:36:75:3E:8D:FD:05:19:C3:2E:D2:CC:5A:AF Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Certificate serial: 019B45B871A2B71DADEC64E846BAE51CB909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft Manifest number: 0F87 Signing time: Mon 22 Dec 2025 11:01:14 +0000 Manifest this update: Mon 22 Dec 2025 11:01:14 +0000 Manifest next update: Tue 23 Dec 2025 11:01:14 +0000 Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: tehCnZxdTxhgV30xJxdaQcQUEbQg6cklJX/JiiYkVSE=) 2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:71:a2:b7:1d:ad:ec:64:e8:46:ba:e5:1c:b9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Validity Not Before: Dec 22 11:01:14 2025 GMT Not After : Dec 23 11:01:14 2025 GMT Subject: CN=40a228a0990f1336753e8dfd0519c32ed2cc5aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:9d:15:2a:df:a8:cb:1a:15:d6:cc:58:76: d3:de:74:3d:5b:5d:7f:0b:36:1c:a7:6c:5a:c3:9f: ad:ee:37:da:4f:08:02:85:f1:7e:76:65:5f:38:8c: f3:63:26:03:39:71:1d:f2:1c:6e:e1:ff:5a:ff:03: df:cc:d1:d0:c5:44:9f:12:59:6e:e9:63:29:ed:b1: 66:a8:f0:49:77:6b:62:10:59:44:71:d3:77:59:b3: d3:c6:e1:d7:f5:43:37:66:28:03:16:52:8f:54:7f: 66:21:bc:40:46:ec:df:16:a5:5c:bb:ba:ef:b6:ba: e4:ed:33:65:74:a9:ab:e9:e9:74:da:21:28:56:47: fd:ad:f8:a7:80:1b:2f:f3:2a:be:e0:6c:69:23:ef: f0:d0:12:bc:9f:ca:6f:43:d2:53:4c:42:27:6d:d5: 3e:b1:50:10:e5:7e:ca:4c:ab:4d:9f:0c:c7:b0:86: fa:92:9b:0a:78:7b:32:1a:3f:21:c1:a1:6e:3a:36: 68:0d:0d:6d:76:04:61:88:75:7f:80:10:32:90:b6: 9b:23:27:bb:57:05:0c:8b:1c:a4:b9:9f:21:5c:49: 27:d5:a4:b1:5b:30:6c:79:95:ae:55:f4:ba:e6:8b: 16:e8:4a:0c:75:9a:1b:01:73:0e:2f:6c:97:c7:9a: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:28:A0:99:0F:13:36:75:3E:8D:FD:05:19:C3:2E:D2:CC:5A:AF X509v3 Authority Key Identifier: keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:4c:74:82:c7:ec:11:b4:6d:84:f9:67:91:fb:42:ed:dc: fc:6e:13:14:68:ef:3c:2e:21:6a:8a:59:31:10:ee:ec:eb:61: da:91:70:b7:61:80:76:25:ff:e0:ab:04:af:eb:fe:50:26:8a: 08:4d:76:c2:6e:9c:34:b3:59:cd:29:c1:72:1e:35:9b:e6:d3: 52:9a:a1:83:db:68:06:50:15:af:15:e4:81:97:01:8a:5f:67: 85:f5:e0:95:21:c6:5a:c9:2f:4e:61:25:b1:91:34:ca:43:7b: aa:25:5a:4e:21:86:ad:5e:a7:11:0e:1b:69:56:0d:13:fc:db: a1:fe:52:ae:c1:ce:94:9c:94:8e:b9:d0:f0:32:00:34:82:17: 00:cb:00:cf:50:18:9c:52:2c:7a:c7:ee:5d:36:6c:fc:ae:d8: 71:67:83:e4:be:2c:9a:4c:e7:7f:26:7f:88:ec:bb:1f:c7:a3: 8e:0e:f4:4a:b4:7c:f2:2a:31:b3:58:e0:a0:fe:11:09:41:b2: 74:38:c4:88:9c:e2:2d:31:81:f3:30:f1:fd:a4:ea:3e:61:03: c9:c8:52:6e:f9:dc:3b:72:35:bc:d4:a8:fd:ed:96:41:35:55: 07:3f:85:64:68:ed:c9:55:47:21:1e:0a:a1:5b:d9:ca:16:c1: 09:39:c5:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuHGitx2t7GToRrrlHLkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm OWQ3NTEwHhcNMjUxMjIyMTEwMTE0WhcNMjUxMjIzMTEwMTE0WjAzMTEwLwYDVQQD Eyg0MGEyMjhhMDk5MGYxMzM2NzUzZThkZmQwNTE5YzMyZWQyY2M1YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb+dFSrfqMsaFdbMWHbT3nQ9W11/ CzYcp2xaw5+t7jfaTwgChfF+dmVfOIzzYyYDOXEd8hxu4f9a/wPfzNHQxUSfEllu 6WMp7bFmqPBJd2tiEFlEcdN3WbPTxuHX9UM3ZigDFlKPVH9mIbxARuzfFqVcu7rv trrk7TNldKmr6el02iEoVkf9rfingBsv8yq+4GxpI+/w0BK8n8pvQ9JTTEInbdU+ sVAQ5X7KTKtNnwzHsIb6kpsKeHsyGj8hwaFuOjZoDQ1tdgRhiHV/gBAykLabIye7 VwUMixykuZ8hXEkn1aSxWzBseZWuVfS65osW6EoMdZobAXMOL2yXx5r4gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECiKKCZDxM2dT6N/QUZwy7SzFqvMB8GA1UdIwQY MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt Y2Q2NTU1ZmNkODJlLzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijZMdILH 7BG0bYT5Z5H7Qu3c/G4TFGjvPC4haopZMRDu7Oth2pFwt2GAdiX/4KsEr+v+UCaK CE12wm6cNLNZzSnBch41m+bTUpqhg9toBlAVrxXkgZcBil9nhfXglSHGWskvTmEl sZE0ykN7qiVaTiGGrV6nEQ4baVYNE/zbof5SrsHOlJyUjrnQ8DIANIIXAMsAz1AY nFIsesfuXTZs/K7YcWeD5L4smkznfyZ/iOy7H8ejjg70SrR88ioxs1jgoP4RCUGy dDjEiJziLTGB8zDx/aTqPmEDychSbvncO3I1vNSo/e2WQTVVBz+FZGjtyVVHIR4K oVvZyhbBCTnF8A== -----END CERTIFICATE-----Generated at Mon Dec 22 20:27:54 2025 by rpki-client