This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json) Hash identifier: AnLkt60niCVOnE6zPm6PuXopwf2R5K1QUTZGN0uliq4= Subject key identifier: DD:70:1D:9B:21:92:44:A5:68:AA:6C:18:43:86:4F:09:21:24:51:8D Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf Certificate serial: 019B318D15810DC7D57384E4010E9FCC3655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft Manifest number: 13FE Signing time: Thu 18 Dec 2025 13:01:28 +0000 Manifest this update: Thu 18 Dec 2025 13:01:28 +0000 Manifest next update: Fri 19 Dec 2025 13:01:28 +0000 Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: wkySCKPXexs8LZKAZsr+Ff017Um8igcRCCDlxtSk4Zg=) 2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:15:81:0d:c7:d5:73:84:e4:01:0e:9f:cc:36:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf Validity Not Before: Dec 18 13:01:28 2025 GMT Not After : Dec 19 13:01:28 2025 GMT Subject: CN=dd701d9b219244a568aa6c1843864f092124518d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:83:ac:dc:19:ce:8f:81:99:a8:04:74:dd: 23:ca:9f:b2:f9:a6:cc:c4:10:3a:08:5c:c2:74:c4: a4:34:ca:1f:21:ae:30:de:55:04:35:60:b5:d8:10: dc:32:e6:01:28:78:1b:7a:f1:d3:1f:2b:49:20:01: f8:4c:f0:91:dc:0b:b5:7e:da:2d:1d:82:71:40:96: f6:73:13:e0:98:93:16:6e:48:92:67:95:45:35:a8: 33:f2:1f:bd:98:8c:b9:8b:fd:e4:72:89:27:c2:b7: b5:ab:3e:f9:82:c1:8d:0f:74:b1:46:55:06:c3:5d: 83:7b:c8:8c:8c:cb:9c:0c:ec:bc:df:04:7c:21:cc: ae:22:75:57:17:71:60:36:ec:45:07:2c:3e:70:2b: a2:ae:9f:30:00:fb:91:f6:3d:fb:1e:d5:5c:4a:7a: c0:e1:2e:4d:5d:a7:af:bc:f9:46:8e:9d:0d:0f:fc: 01:81:05:32:39:d2:ea:87:87:af:da:67:ac:a2:78: 72:61:6a:f9:6b:d1:17:4f:41:99:ea:ce:e2:24:40: 1b:2b:d4:1b:e7:a0:91:b2:16:ec:c9:8d:9b:ed:fa: 6e:f0:a0:cb:fc:f3:5a:85:4d:87:7b:21:9e:e6:fa: 2a:d8:5f:1a:a7:13:09:b5:0e:0d:02:f4:1e:31:1b: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:70:1D:9B:21:92:44:A5:68:AA:6C:18:43:86:4F:09:21:24:51:8D X509v3 Authority Key Identifier: keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:96:5a:28:37:7d:18:91:1b:cd:1a:8f:b5:b4:49:66:69: 9d:5e:7d:52:1e:33:e6:e0:5a:f2:16:1e:01:ad:89:f8:18:ac: d4:c1:22:24:79:de:b9:15:55:f2:df:fc:01:7d:22:e3:65:04: 5f:23:8b:af:51:01:fb:f2:37:86:90:c4:17:c7:6e:86:31:ce: 50:f6:c7:4b:df:c1:db:7a:b8:80:93:7a:e9:53:9a:27:b5:d4: a1:dd:d5:21:ac:4a:2d:88:fe:8c:b8:b8:59:2a:28:38:15:a4: 81:49:05:77:51:3c:15:60:2a:23:d9:5e:dc:1c:c5:60:c7:4f: fd:2b:e7:b1:34:e7:35:d7:9f:04:c0:d6:fa:1f:09:d1:ae:bd: 7e:d6:6d:d7:3d:98:ee:1c:bd:77:eb:9b:70:84:9a:ca:b4:c8: 84:2e:65:1c:65:76:4d:26:9f:7f:39:b9:6c:56:a2:ee:fe:71: d0:a3:bd:de:47:c7:49:6f:b5:bc:68:eb:a2:f5:a0:0c:f6:7d: 6a:24:db:7e:fa:cf:fe:46:fc:42:12:e3:eb:59:8a:4b:b9:b0: 6a:2f:9b:57:4f:ab:31:3b:dc:74:fc:44:1e:55:e8:0a:22:63: 6f:f1:b0:2a:91:ea:6e:4b:9d:9b:f1:41:d7:56:57:f8:0b:bb: dd:e3:f3:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjRWBDcfVc4TkAQ6fzDZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz ZGY4YmYwHhcNMjUxMjE4MTMwMTI4WhcNMjUxMjE5MTMwMTI4WjAzMTEwLwYDVQQD EyhkZDcwMWQ5YjIxOTI0NGE1NjhhYTZjMTg0Mzg2NGYwOTIxMjQ1MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseeDrNwZzo+BmagEdN0jyp+y+abM xBA6CFzCdMSkNMofIa4w3lUENWC12BDcMuYBKHgbevHTHytJIAH4TPCR3Au1ftot HYJxQJb2cxPgmJMWbkiSZ5VFNagz8h+9mIy5i/3kcoknwre1qz75gsGND3SxRlUG w12De8iMjMucDOy83wR8IcyuInVXF3FgNuxFByw+cCuirp8wAPuR9j37HtVcSnrA 4S5NXaevvPlGjp0ND/wBgQUyOdLqh4ev2mesonhyYWr5a9EXT0GZ6s7iJEAbK9Qb 56CRshbsyY2b7fpu8KDL/PNahU2HeyGe5voq2F8apxMJtQ4NAvQeMRsPqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1wHZshkkSlaKpsGEOGTwkhJFGNMB8GA1UdIwQY MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3 LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTKWWig3 fRiRG80aj7W0SWZpnV59Uh4z5uBa8hYeAa2J+Bis1MEiJHneuRVV8t/8AX0i42UE XyOLr1EB+/I3hpDEF8duhjHOUPbHS9/B23q4gJN66VOaJ7XUod3VIaxKLYj+jLi4 WSooOBWkgUkFd1E8FWAqI9le3BzFYMdP/SvnsTTnNdefBMDW+h8J0a69ftZt1z2Y 7hy9d+ubcISayrTIhC5lHGV2TSaffzm5bFai7v5x0KO93kfHSW+1vGjrovWgDPZ9 aiTbfvrP/kb8QhLj61mKS7mwai+bV0+rMTvcdPxEHlXoCiJjb/GwKpHqbkudm/FB 11ZX+Au73ePzTg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:29 2025 by rpki-client