This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json) Hash identifier: SXTjXNZqXM4bHY+0H9nVBH1yL8vQX+43T/x+LHtxiYo= Subject key identifier: 6D:38:AF:B4:6F:08:81:AF:E3:43:32:21:C7:DC:65:E1:E2:32:AE:37 Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef Certificate serial: 019B330D5587D38CF12BDFCBA826D74A6498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 20:01:10 +0000 Manifest this update: Thu 18 Dec 2025 20:01:10 +0000 Manifest next update: Fri 19 Dec 2025 20:01:10 +0000 Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: yIY6JibcF98+Ik4JjASVayW8vhcQvzYHPSg0lHOcjN4=) 2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:55:87:d3:8c:f1:2b:df:cb:a8:26:d7:4a:64:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef Validity Not Before: Dec 18 20:01:10 2025 GMT Not After : Dec 19 20:01:10 2025 GMT Subject: CN=6d38afb46f0881afe3433221c7dc65e1e232ae37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:3f:b2:da:b1:15:f5:b4:99:bd:87:d9:6d: 16:b7:69:19:7b:d8:26:01:88:f6:4c:68:51:f1:1e: 85:33:e5:ab:8b:a5:01:e1:07:f9:d3:f8:1d:8a:53: 4e:f7:6a:46:54:53:89:04:c9:08:66:9c:5f:a7:d4: c8:61:20:92:45:cb:be:39:93:1e:46:89:dc:40:4c: 87:a1:3d:49:54:42:d9:08:d9:f4:d0:d2:23:a0:78: 64:88:3d:f9:f6:5e:a0:cd:9b:12:81:12:63:9b:21: 17:33:32:ec:e2:94:d6:49:e6:2e:ab:cc:8e:48:6e: b8:47:e5:18:91:c1:fb:0f:83:81:d6:f8:54:33:c8: 72:14:eb:fb:12:9a:ba:36:ed:e4:df:63:73:ed:a4: a7:18:27:ec:7d:3b:77:86:b9:f0:8a:bd:87:0b:24: 34:1d:ab:67:30:a7:32:68:da:f4:48:80:eb:39:14: cc:b6:33:16:ee:96:35:90:c1:16:6c:81:e9:fe:f4: 63:b0:2a:ef:e4:57:f8:7c:23:2c:f9:e8:e5:07:41: 5a:bb:31:76:2f:66:55:bd:ed:58:9a:4e:ad:71:f7: 36:61:4d:f2:1b:46:ab:38:f1:8c:e1:bb:c3:2a:1b: 39:b6:3a:5e:1b:f9:34:c3:03:2d:59:bb:7a:83:c9: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:38:AF:B4:6F:08:81:AF:E3:43:32:21:C7:DC:65:E1:E2:32:AE:37 X509v3 Authority Key Identifier: keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d0:d6:f4:43:70:60:3c:a4:1a:ed:88:a7:dc:2a:a9:db:9e: a8:07:97:7b:60:dc:6c:de:c8:af:4f:3d:fc:6e:d7:62:ba:71: 04:c1:5c:12:d3:4e:1a:51:0f:d7:bb:a7:8d:ca:ac:49:30:83: 5c:83:19:64:50:20:c1:f0:49:a9:72:3f:f6:6e:7f:e0:35:32: cf:6c:4c:5e:57:cd:69:c1:a8:04:17:ae:59:bf:af:0c:df:69: cc:e4:e3:3c:26:a0:c3:f2:dd:f2:9d:60:17:cc:b1:dc:43:cd: 0e:29:e3:a3:df:9e:1f:8c:62:1b:fa:1d:08:d2:b9:e2:ab:cd: 03:86:53:e5:b1:cc:d6:c3:61:c7:f9:25:64:6a:12:cd:ee:f0: 5d:50:3c:93:1c:a1:6b:8c:f2:1f:72:8e:46:22:88:89:ba:3b: 90:9d:fc:2a:05:3d:09:96:31:e0:dd:25:e1:34:1d:1a:c0:2b: 78:59:59:cf:4b:2c:6b:c8:a3:4d:e3:90:21:91:53:f6:0d:91: bf:13:3f:74:a3:2b:0f:33:76:6f:0a:06:58:72:ec:3f:5e:62: c1:37:01:d5:e0:5f:6a:d5:a6:b0:31:ab:aa:a2:28:8b:bb:cb: 7b:72:bb:ed:eb:e1:4d:c7:76:5b:c9:87:6b:4a:2e:ae:ae:1e: 90:08:34:bb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZszDVWH04zxK9/LqCbXSmSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MWY2YWQwZGYzODM3MjBkM2E1ZDAzYmE4OGMxOTMwOTVj NTc0ZWYwHhcNMjUxMjE4MjAwMTEwWhcNMjUxMjE5MjAwMTEwWjAzMTEwLwYDVQQD Eyg2ZDM4YWZiNDZmMDg4MWFmZTM0MzMyMjFjN2RjNjVlMWUyMzJhZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0w/stqxFfW0mb2H2W0Wt2kZe9gm AYj2TGhR8R6FM+Wri6UB4Qf50/gdilNO92pGVFOJBMkIZpxfp9TIYSCSRcu+OZMe RoncQEyHoT1JVELZCNn00NIjoHhkiD359l6gzZsSgRJjmyEXMzLs4pTWSeYuq8yO SG64R+UYkcH7D4OB1vhUM8hyFOv7Epq6Nu3k32Nz7aSnGCfsfTt3hrnwir2HCyQ0 HatnMKcyaNr0SIDrORTMtjMW7pY1kMEWbIHp/vRjsCrv5Ff4fCMs+ejlB0FauzF2 L2ZVve1Ymk6tcfc2YU3yG0arOPGM4bvDKhs5tjpeG/k0wwMtWbt6g8k9dQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG04r7RvCIGv40MyIcfcZeHiMq43MB8GA1UdIwQY MBaAFPgfatDfODcg06XQO6iMGTCVxXTvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1COXEwTjg0TnlEVHBkQTdxSXdaTUpYRmRPOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTkzZTlmLThjYWYtNDlhMC04Njhl LWE4YzRhZGY5ODcyMS8xLzEtQjlxME44NE55RFRwZEE3cUl3Wk1KWEZkTzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0L2U5M2U5Zi04Y2FmLTQ5YTAtODY4ZS1hOGM0YWRmOTg3 MjEvMS8xLUI5cTBOODROeURUcGRBN3FJd1pNSlhGZE84LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtDW 9ENwYDykGu2Ip9wqqdueqAeXe2DcbN7Ir089/G7XYrpxBMFcEtNOGlEP17unjcqs STCDXIMZZFAgwfBJqXI/9m5/4DUyz2xMXlfNacGoBBeuWb+vDN9pzOTjPCagw/Ld 8p1gF8yx3EPNDinjo9+eH4xiG/odCNK54qvNA4ZT5bHM1sNhx/klZGoSze7wXVA8 kxyha4zyH3KORiKIibo7kJ38KgU9CZYx4N0l4TQdGsAreFlZz0ssa8ijTeOQIZFT 9g2RvxM/dKMrDzN2bwoGWHLsP15iwTcB1eBfatWmsDGrqqIoi7vLe3K77evhTcd2 W8mHa0ourq4ekAg0uw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:44:37 2025 by rpki-client