This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json) Hash identifier: lbBqj7RfC4vIqPZL4NGrkmN0Vtqv9uZlRpXwxikGFys= Subject key identifier: EF:24:77:82:B7:06:86:E1:EE:72:BD:1D:12:00:AB:5E:01:3A:0B:5E Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18 Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918 Certificate serial: 019B59ACCDD476B69B2624021096165B3017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:00:55 +0000 Manifest this update: Fri 26 Dec 2025 08:00:55 +0000 Manifest next update: Sat 27 Dec 2025 08:00:55 +0000 Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: h7DHGoacXFX/wxwBAXJ6vR40jU1/CRpa5D7pmkMqjsw=) 2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:cd:d4:76:b6:9b:26:24:02:10:96:16:5b:30:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918 Validity Not Before: Dec 26 08:00:55 2025 GMT Not After : Dec 27 08:00:55 2025 GMT Subject: CN=ef247782b70686e1ee72bd1d1200ab5e013a0b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:8b:7e:d1:9a:5e:50:a0:e7:11:e4:61:b0: 4e:09:c7:74:72:92:6f:ab:41:8a:0c:51:50:d8:15: 7d:25:44:cf:68:b4:a3:5a:6e:e0:06:f0:52:16:d2: e8:1f:7f:fc:cc:97:90:6a:80:59:f9:67:56:6f:7f: 30:d5:e7:cd:8b:68:a2:1f:f3:e8:4f:ad:3b:36:f4: c2:a5:25:38:28:67:04:26:39:42:f0:70:b4:c7:82: cd:f1:0b:c3:42:2e:a8:98:a0:eb:9f:f3:30:30:32: 78:7b:ca:9a:7c:71:58:be:cb:b6:1c:b8:18:d7:56: d3:1b:13:cc:4a:74:d4:98:f0:66:db:ef:38:b2:7d: 33:76:5b:f3:3b:13:df:17:f5:9e:49:d8:74:12:4f: 45:56:bc:e0:a3:17:a2:06:6c:dd:49:03:db:05:33: b4:42:a1:3a:2f:6d:29:61:bf:83:36:3c:43:9d:8e: a2:9a:b0:e4:b5:c2:b7:fc:d7:b8:3a:ee:20:f4:c5: cb:3f:e7:90:90:32:1d:b6:9e:ca:49:6c:5b:00:f3: 4b:a4:42:60:42:13:5a:84:d3:4f:d2:d7:44:2c:a7: ae:ca:13:d8:f9:cd:28:bc:85:b6:c4:45:f8:4d:34: 0f:3b:e3:99:7d:e1:74:ef:1b:e7:e6:df:a5:71:c7: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:77:82:B7:06:86:E1:EE:72:BD:1D:12:00:AB:5E:01:3A:0B:5E X509v3 Authority Key Identifier: keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:83:24:d8:47:68:79:04:d8:0a:e3:9f:51:f9:35:85:73:1e: ed:bf:f0:9e:22:f4:d4:8b:4b:58:ae:64:c8:e9:f5:bf:55:b5: 77:08:fe:6e:66:cc:f9:5a:a3:5a:9b:fe:9f:d4:af:b4:32:c1: 06:e9:47:2d:d4:a7:9d:67:e7:6e:f4:9c:8f:b8:96:a7:57:35: 62:0e:18:8f:a7:07:62:a5:06:d1:76:e3:08:80:c6:b2:36:6b: e4:d6:6e:db:ba:9c:b9:40:73:30:57:15:1a:76:72:51:31:a1: 28:22:7c:0c:fc:86:54:75:ac:58:d9:d4:2d:d8:cd:d0:b4:99: 12:1c:a4:ed:e6:9b:8e:bd:e6:1e:a2:cc:2e:98:14:43:68:1f: dc:df:9a:83:d2:2a:e8:64:1c:e2:46:07:11:78:2c:99:ce:5d: 19:d1:03:07:e3:8e:4f:dd:9c:c8:d5:1c:6f:48:c5:59:2b:08: c7:74:0c:aa:3f:f9:27:60:e3:d7:61:ad:de:15:6e:15:a3:2e: 40:a4:39:fc:80:3d:92:43:ff:e7:79:3e:06:9a:dc:93:10:43: ee:6d:1d:3d:4e:d0:d0:70:7d:b8:3b:06:ab:5a:e2:4d:27:6d: d5:66:27:0f:75:f9:f3:19:f8:6a:ac:8d:80:0d:44:81:ec:08: 1f:7c:2b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrM3UdrabJiQCEJYWWzAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODViNmU5ZDg5ZmIwMTAzNjk5NzFlZDg4ODU3MjA1OTg1 ZDQ5MTgwHhcNMjUxMjI2MDgwMDU1WhcNMjUxMjI3MDgwMDU1WjAzMTEwLwYDVQQD EyhlZjI0Nzc4MmI3MDY4NmUxZWU3MmJkMWQxMjAwYWI1ZTAxM2EwYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiLftGaXlCg5xHkYbBOCcd0cpJv q0GKDFFQ2BV9JUTPaLSjWm7gBvBSFtLoH3/8zJeQaoBZ+WdWb38w1efNi2iiH/Po T607NvTCpSU4KGcEJjlC8HC0x4LN8QvDQi6omKDrn/MwMDJ4e8qafHFYvsu2HLgY 11bTGxPMSnTUmPBm2+84sn0zdlvzOxPfF/WeSdh0Ek9FVrzgoxeiBmzdSQPbBTO0 QqE6L20pYb+DNjxDnY6imrDktcK3/Ne4Ou4g9MXLP+eQkDIdtp7KSWxbAPNLpEJg QhNahNNP0tdELKeuyhPY+c0ovIW2xEX4TTQPO+OZfeF07xvn5t+lcce4zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8kd4K3Bobh7nK9HRIAq14BOgteMB8GA1UdIwQY MBaAFNSFtunYn7AQNplx7YiFcgWYXUkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMt N2FjNjgwZWQ1ZGQ3LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMtN2FjNjgwZWQ1ZGQ3 LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYMk2Edo eQTYCuOfUfk1hXMe7b/wniL01ItLWK5kyOn1v1W1dwj+bmbM+VqjWpv+n9SvtDLB BulHLdSnnWfnbvScj7iWp1c1Yg4Yj6cHYqUG0XbjCIDGsjZr5NZu27qcuUBzMFcV GnZyUTGhKCJ8DPyGVHWsWNnULdjN0LSZEhyk7eabjr3mHqLMLpgUQ2gf3N+ag9Iq 6GQc4kYHEXgsmc5dGdEDB+OOT92cyNUcb0jFWSsIx3QMqj/5J2Dj12Gt3hVuFaMu QKQ5/IA9kkP/53k+BprckxBD7m0dPU7Q0HB9uDsGq1riTSdt1WYnD3X58xn4aqyN gA1EgewIH3wrIA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:20 2025 by rpki-client