This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json) Hash identifier: 3h/iR28zeDFc3nECZSVaeiZJiBc8H0QdnVGlMo7T9Kc= Subject key identifier: 65:E2:2E:CB:14:60:2A:CC:CB:5F:54:62:E6:18:B3:2B:08:3C:A5:ED Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57 Certificate serial: 019B5A1A9F7FF3EB8573484455F12C1B1366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft Manifest number: 071E Signing time: Fri 26 Dec 2025 10:00:52 +0000 Manifest this update: Fri 26 Dec 2025 10:00:52 +0000 Manifest next update: Sat 27 Dec 2025 10:00:52 +0000 Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: Y/N3srNHzQ1ELshc5SPgRtrTjDWEeWGrqUbzlwIUP9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:9f:7f:f3:eb:85:73:48:44:55:f1:2c:1b:13:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57 Validity Not Before: Dec 26 10:00:52 2025 GMT Not After : Dec 27 10:00:52 2025 GMT Subject: CN=65e22ecb14602acccb5f5462e618b32b083ca5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:49:ca:06:4b:57:35:c3:36:18:3f:f2:40: bb:d7:3c:b0:cd:ba:59:d0:76:ad:c1:19:fe:11:37: 43:00:22:a4:9c:44:32:65:63:c5:2c:ff:d1:fb:99: f3:b0:c9:aa:cf:88:46:57:c9:ff:12:97:99:ca:b9: ec:62:49:0b:01:f2:90:05:5e:2e:8b:e9:13:83:23: 93:17:02:68:b8:27:05:65:d8:49:92:fa:64:87:90: 47:c0:1f:20:2a:ca:7e:47:df:b6:af:d8:01:9b:90: ee:c2:f8:f8:0c:90:f8:60:04:f7:2d:5d:23:35:a7: 98:72:a3:71:e4:a3:3a:da:d1:40:ce:4a:9b:a0:bd: b0:96:16:34:fa:32:fb:09:64:b0:75:93:53:7e:b7: c5:19:ba:07:c9:7d:18:31:05:73:78:5a:8e:98:fc: 2a:fe:35:09:cc:13:ff:0d:42:34:a6:7e:61:07:fb: ff:97:10:c1:db:86:7e:72:55:53:ff:41:98:7b:a3: c2:c0:6e:63:82:77:7b:32:6e:67:88:b9:bf:1a:c5: ee:0c:9d:5b:26:79:7f:78:84:85:e6:1e:23:db:75: 6e:76:2f:74:e0:2a:d2:53:12:bf:a0:68:da:38:0b: 2c:78:6e:83:e0:64:bc:fc:b6:35:e3:1e:bf:22:e4: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E2:2E:CB:14:60:2A:CC:CB:5F:54:62:E6:18:B3:2B:08:3C:A5:ED X509v3 Authority Key Identifier: keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d8:24:a4:d2:58:c2:ff:c6:ff:19:2f:6b:c7:6c:66:29:86: 8d:2f:f3:6f:04:3d:5a:07:d1:a9:3a:0e:4a:13:5e:f3:e4:c3: 31:99:ba:37:9c:23:33:5b:33:f1:4c:ea:91:ea:31:13:2d:3e: 8a:cd:13:c1:05:ed:75:2d:d0:1b:3f:a3:15:84:fe:84:cd:38: f8:0c:90:10:3f:49:2f:a9:cf:ee:90:bf:cc:04:7b:7b:97:e5: 92:9a:f4:28:47:c4:3f:b4:cc:01:33:96:78:3a:78:c9:6d:8b: 89:e8:65:45:53:ac:f4:ee:73:4c:5d:cd:58:b5:e9:11:4e:3f: 51:9c:70:cf:ad:a1:79:ed:b1:4d:d8:06:10:49:84:e4:e5:7f: 19:85:e3:49:bb:f0:6b:3d:eb:81:29:6a:06:fe:8c:84:d6:63: 2b:a6:3c:21:a3:37:22:7d:94:64:ed:85:df:d0:2c:74:1d:c6: 9f:dd:3b:0c:ff:49:be:0b:69:d0:1e:6c:62:9c:c6:55:a4:75: f0:78:0a:a3:db:bd:da:b3:f4:14:06:ae:2c:04:2f:e7:26:f6: b9:ac:93:a7:0f:eb:30:c0:de:81:8c:92:68:2c:7a:08:e3:74: 9c:bb:6a:89:d0:2d:f6:e7:95:a4:f4:74:11:ed:c9:32:1e:1c: fc:9b:c9:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGp9/8+uFc0hEVfEsGxNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm ODNjNTcwHhcNMjUxMjI2MTAwMDUyWhcNMjUxMjI3MTAwMDUyWjAzMTEwLwYDVQQD Eyg2NWUyMmVjYjE0NjAyYWNjY2I1ZjU0NjJlNjE4YjMyYjA4M2NhNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpNJygZLVzXDNhg/8kC71zywzbpZ 0HatwRn+ETdDACKknEQyZWPFLP/R+5nzsMmqz4hGV8n/EpeZyrnsYkkLAfKQBV4u i+kTgyOTFwJouCcFZdhJkvpkh5BHwB8gKsp+R9+2r9gBm5Duwvj4DJD4YAT3LV0j NaeYcqNx5KM62tFAzkqboL2wlhY0+jL7CWSwdZNTfrfFGboHyX0YMQVzeFqOmPwq /jUJzBP/DUI0pn5hB/v/lxDB24Z+clVT/0GYe6PCwG5jgnd7Mm5niLm/GsXuDJ1b Jnl/eISF5h4j23Vudi904CrSUxK/oGjaOAsseG6D4GS8/LY14x6/IuQisQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXiLssUYCrMy19UYuYYsysIPKXtMB8GA1UdIwQY MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtgkpNJY wv/G/xkva8dsZimGjS/zbwQ9WgfRqToOShNe8+TDMZm6N5wjM1sz8UzqkeoxEy0+ is0TwQXtdS3QGz+jFYT+hM04+AyQED9JL6nP7pC/zAR7e5flkpr0KEfEP7TMATOW eDp4yW2LiehlRVOs9O5zTF3NWLXpEU4/UZxwz62hee2xTdgGEEmE5OV/GYXjSbvw az3rgSlqBv6MhNZjK6Y8IaM3In2UZO2F39AsdB3Gn907DP9Jvgtp0B5sYpzGVaR1 8HgKo9u92rP0FAauLAQv5yb2uayTpw/rMMDegYySaCx6CON0nLtqidAt9ueVpPR0 Ee3JMh4c/JvJ8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:53 2025 by rpki-client