This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json) Hash identifier: RfJfhMiM5j45YwHtBbuLC7cbWc+HIAIRTIhfW+2ghgs= Subject key identifier: B3:F5:A0:DE:0D:98:9F:FA:C5:8C:6A:2D:65:0F:E4:62:D3:DF:C5:06 Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Certificate serial: 019B0F37A796D918E2400A3B14FDBD0BB11C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft Manifest number: 0F06 Signing time: Thu 11 Dec 2025 21:01:04 +0000 Manifest this update: Thu 11 Dec 2025 21:01:04 +0000 Manifest next update: Fri 12 Dec 2025 21:01:04 +0000 Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: qBCtbqrKwqVV+qVsuYOOfqsLe+FyqeutCL3hWNJDVEg=) 2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a7:96:d9:18:e2:40:0a:3b:14:fd:bd:0b:b1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Validity Not Before: Dec 11 21:01:04 2025 GMT Not After : Dec 12 21:01:04 2025 GMT Subject: CN=b3f5a0de0d989ffac58c6a2d650fe462d3dfc506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:82:4b:b1:8d:f3:74:47:40:27:6d:69:ff: 5b:68:31:a6:5a:6f:7b:4c:8f:99:df:e3:26:67:71: 4c:1b:2b:c5:60:2b:8f:a0:5b:5a:fb:09:a4:62:21: 99:93:a0:69:a4:6b:60:79:ea:c6:17:db:f1:3b:98: 6d:d0:ff:8c:a5:0a:27:61:f1:b4:29:2a:f6:3a:eb: b0:ea:79:95:6c:ce:11:da:84:85:fa:78:97:9f:2c: 03:fa:49:02:7b:08:10:5e:a8:2c:48:17:db:ed:d3: ec:b6:f7:8e:9d:d7:21:d4:50:db:6d:7b:42:41:89: 5e:c9:c5:51:0a:0d:d5:96:de:85:6b:d3:61:9d:29: c0:45:5e:f4:e0:b1:d6:06:7a:8b:5b:12:37:0b:eb: 29:a8:b8:60:58:f5:23:65:0c:65:ef:5b:c1:46:91: 62:83:ee:7a:62:dc:47:ca:55:e8:d4:4e:74:04:33: 28:9a:b6:dd:ea:08:28:6f:81:25:0f:76:83:02:06: 76:11:63:f0:51:de:15:d6:5e:cd:0b:fe:c0:fc:18: f0:65:06:ce:e8:77:1d:ea:4e:c7:34:3f:05:ea:b1: 79:45:96:6e:24:6b:97:08:1b:58:31:3a:18:b1:78: 04:f8:83:95:4d:04:e5:94:25:67:d1:1c:58:f7:1b: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:A0:DE:0D:98:9F:FA:C5:8C:6A:2D:65:0F:E4:62:D3:DF:C5:06 X509v3 Authority Key Identifier: keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c6:d9:16:ed:b8:e4:5f:0e:07:32:4b:62:00:0a:fd:55:9f: 06:5b:01:09:a4:2e:bc:9e:fc:c5:ab:b6:6b:01:d3:45:17:75: 5e:af:45:55:50:bf:3d:98:2e:c6:fa:46:5d:08:eb:b6:2d:75: ba:15:c4:d5:fc:2d:10:a5:cf:f1:a4:42:e1:98:82:d9:13:92: 76:9c:b0:36:a8:ec:d2:f6:71:9e:eb:ad:d7:0e:e8:c4:12:a4: 9c:ae:19:cf:4f:27:67:a0:05:ca:92:ff:f6:f2:d9:ca:2c:0f: 59:40:d6:df:03:21:55:04:b0:29:5e:1f:43:37:ea:04:e1:8c: 35:6f:4e:b7:9f:b4:74:4f:a2:d5:58:ff:5f:3d:f8:c6:8a:13: 31:8a:7c:41:b5:d4:f0:de:15:e5:db:14:d0:0c:f7:54:a2:47: e6:f5:6c:18:f7:6b:5c:d7:b1:99:f3:1f:50:d5:bf:73:a2:5f: e9:f8:76:17:e9:a1:48:3a:10:01:8e:e3:b4:ae:29:ed:34:79: bf:56:85:3b:1d:65:97:9a:ab:fd:23:23:ed:04:28:62:73:31: fc:75:cd:ce:33:d0:b0:99:95:3b:c0:cd:d7:b7:cd:b0:6d:2e: fa:2f:77:6c:25:71:07:85:4f:a0:76:ee:3b:57:39:aa:fd:f3: f6:25:69:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6eW2RjiQAo7FP29C7EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi NjkyMzgwHhcNMjUxMjExMjEwMTA0WhcNMjUxMjEyMjEwMTA0WjAzMTEwLwYDVQQD EyhiM2Y1YTBkZTBkOTg5ZmZhYzU4YzZhMmQ2NTBmZTQ2MmQzZGZjNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgaCS7GN83RHQCdtaf9baDGmWm97 TI+Z3+MmZ3FMGyvFYCuPoFta+wmkYiGZk6BppGtgeerGF9vxO5ht0P+MpQonYfG0 KSr2Ouuw6nmVbM4R2oSF+niXnywD+kkCewgQXqgsSBfb7dPstveOndch1FDbbXtC QYleycVRCg3Vlt6Fa9NhnSnARV704LHWBnqLWxI3C+spqLhgWPUjZQxl71vBRpFi g+56YtxHylXo1E50BDMomrbd6ggob4ElD3aDAgZ2EWPwUd4V1l7NC/7A/BjwZQbO 6Hcd6k7HND8F6rF5RZZuJGuXCBtYMToYsXgE+IOVTQTllCVn0RxY9xvr5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP1oN4NmJ/6xYxqLWUP5GLT38UGMB8GA1UdIwQY MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMbZFu24 5F8OBzJLYgAK/VWfBlsBCaQuvJ78xau2awHTRRd1Xq9FVVC/PZguxvpGXQjrti11 uhXE1fwtEKXP8aRC4ZiC2ROSdpywNqjs0vZxnuut1w7oxBKknK4Zz08nZ6AFypL/ 9vLZyiwPWUDW3wMhVQSwKV4fQzfqBOGMNW9Ot5+0dE+i1Vj/Xz34xooTMYp8QbXU 8N4V5dsU0Az3VKJH5vVsGPdrXNexmfMfUNW/c6Jf6fh2F+mhSDoQAY7jtK4p7TR5 v1aFOx1ll5qr/SMj7QQoYnMx/HXNzjPQsJmVO8DN17fNsG0u+i93bCVxB4VPoHbu O1c5qv3z9iVpjw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:12 2025 by rpki-client