This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: pFwlYMtNE85FwF2KCSd+cp2GahnxeXNjwp2lJXqJbsI= Subject key identifier: 9A:A2:EB:09:70:24:A3:38:7F:9F:27:EF:FB:C4:FD:E1:5D:79:BD:B9 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019AF276F1C75360454B626ECD9861847DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 03FC Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: jVNrtuFWVFJI+E4XdV4hDI3p0BxfNBXAQ79fyFv/jeE=) 2: 3GUm_HsThPUJjf5Xl65FHt13AV8.roa (hash: Lhftb+taQ8v4bYwk3pVYGnzP3vZQbnGHWFTFTRUD1PM=) 3: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=) 4: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 5: Ft-8xYXFXF_pxWdqchjDObURQAQ.roa (hash: Bbe7isVG2thClqzLz0laVwUWwhKyZ8mXmscJ7ADBYEc=) 6: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 7: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 8: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 9: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 10: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=) 11: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 12: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:c7:53:60:45:4b:62:6e:cd:98:61:84:7d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=9aa2eb097024a3387f9f27effbc4fde15d79bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:e1:4c:83:84:90:26:0b:a0:0b:c1:f8:f4: a4:e8:17:fd:72:11:2c:eb:b6:cb:41:a5:e9:9b:d4: e4:ff:ef:cd:b8:29:d4:c8:8a:4c:5c:2e:e8:c6:cf: 39:48:0e:ea:9c:e6:98:50:0e:5b:34:76:54:31:5b: ec:07:69:25:9f:a4:04:2b:6e:00:87:95:10:dd:2d: 63:36:5d:ea:8a:13:f8:71:24:17:7e:1f:ee:bd:12: 0c:23:b2:84:dd:56:51:40:f5:57:fd:ad:49:5b:3e: ff:77:f5:9b:4f:14:96:96:d5:59:d3:8c:07:67:f0: 03:c0:cd:47:c3:b4:c1:12:c0:b6:a7:85:c0:1e:4c: f5:c6:fe:d4:a0:05:f1:84:e9:4f:19:56:86:eb:8d: 80:fc:82:45:23:fd:a8:fa:d9:6c:2f:09:eb:98:48: 07:28:3f:a7:7f:56:5d:cf:49:9a:68:4b:18:34:aa: 64:55:55:20:c2:18:85:f3:99:27:b5:e7:b2:87:20: 0f:2f:cc:d7:bc:08:2a:73:b5:c3:35:f0:73:1b:8a: b4:0e:6f:8a:7b:87:1e:c8:ef:7a:7a:35:58:3f:3b: af:56:b0:95:63:6e:1f:4d:8e:11:2d:bb:25:3f:94: 63:e7:b2:89:ac:dd:b5:63:ed:54:58:d1:a3:2a:e2: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A2:EB:09:70:24:A3:38:7F:9F:27:EF:FB:C4:FD:E1:5D:79:BD:B9 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3c:fc:90:97:9c:99:f2:07:8a:20:06:57:aa:bd:7b:e8:4c: 85:46:a1:70:16:c0:cb:9d:91:9e:82:f1:da:ed:95:92:a8:cd: 25:a3:dd:8c:e4:31:9e:2f:81:62:04:7f:1f:18:d6:3e:ee:21: 35:64:a2:13:d8:3d:38:83:28:66:3a:0c:ee:0a:53:ff:87:9b: 6f:52:0a:f8:e6:b3:03:9b:cc:f1:bd:bf:28:d6:45:16:a1:62: 99:5e:a5:79:e2:b9:64:af:40:87:d9:51:f5:42:d8:a4:52:cb: 62:7e:23:54:55:4c:77:a8:81:01:64:d0:65:c7:93:1f:7c:21: f1:bd:96:7f:9e:1f:63:55:8e:64:d0:e7:2d:fd:1d:59:e0:da: 55:8a:b5:2f:3b:2a:ce:d7:58:39:22:ae:05:2b:87:9f:68:1c: 4f:55:e3:01:5e:45:68:71:e6:e4:1e:44:26:a7:10:52:61:44: 20:cc:4e:d8:c7:ff:33:d4:50:f3:bd:67:22:06:78:51:49:91: b5:b3:22:a5:80:57:79:71:5a:91:a2:77:1d:08:bf:64:07:66: 47:ee:c2:92:16:18:9a:f7:87:69:7d:d7:be:33:43:80:e4:cb: 46:db:ec:e4:7a:0e:92:01:e7:a2:ed:58:3b:97:4d:be:93:68: c2:73:d1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvHHU2BFS2JuzZhhhH26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD Eyg5YWEyZWIwOTcwMjRhMzM4N2Y5ZjI3ZWZmYmM0ZmRlMTVkNzliZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GHhTIOEkCYLoAvB+PSk6Bf9chEs 67bLQaXpm9Tk/+/NuCnUyIpMXC7oxs85SA7qnOaYUA5bNHZUMVvsB2kln6QEK24A h5UQ3S1jNl3qihP4cSQXfh/uvRIMI7KE3VZRQPVX/a1JWz7/d/WbTxSWltVZ04wH Z/ADwM1Hw7TBEsC2p4XAHkz1xv7UoAXxhOlPGVaG642A/IJFI/2o+tlsLwnrmEgH KD+nf1Zdz0maaEsYNKpkVVUgwhiF85knteeyhyAPL8zXvAgqc7XDNfBzG4q0Dm+K e4ceyO96ejVYPzuvVrCVY24fTY4RLbslP5Rj57KJrN21Y+1UWNGjKuJPtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqi6wlwJKM4f58n7/vE/eFdeb25MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajz8kJec mfIHiiAGV6q9e+hMhUahcBbAy52RnoLx2u2VkqjNJaPdjOQxni+BYgR/HxjWPu4h NWSiE9g9OIMoZjoM7gpT/4ebb1IK+OazA5vM8b2/KNZFFqFimV6leeK5ZK9Ah9lR 9ULYpFLLYn4jVFVMd6iBAWTQZceTH3wh8b2Wf54fY1WOZNDnLf0dWeDaVYq1Lzsq ztdYOSKuBSuHn2gcT1XjAV5FaHHm5B5EJqcQUmFEIMxO2Mf/M9RQ871nIgZ4UUmR tbMipYBXeXFakaJ3HQi/ZAdmR+7CkhYYmveHaX3XvjNDgOTLRtvs5HoOkgHnou1Y O5dNvpNownPRxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:30 2025 by rpki-client