This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json) Hash identifier: JFGnrw/pJUQcUkIPgHHU6a/O9kTUw0G4WzvKQB6z9ts= Subject key identifier: 44:26:B7:85:82:34:1C:51:DD:9A:34:33:BE:09:7D:4B:1C:B4:C0:C1 Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Certificate serial: 019AF3522D030055263B4D64302FC448A7C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft Manifest number: 016D Signing time: Sat 06 Dec 2025 11:00:40 +0000 Manifest this update: Sat 06 Dec 2025 11:00:40 +0000 Manifest next update: Sun 07 Dec 2025 11:00:40 +0000 Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: NfEQOhUh5umQPG2oYQmIq7CH3KSpPs773B0aIQVmY7I=) 2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=) 3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2d:03:00:55:26:3b:4d:64:30:2f:c4:48:a7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Validity Not Before: Dec 6 11:00:40 2025 GMT Not After : Dec 7 11:00:40 2025 GMT Subject: CN=4426b78582341c51dd9a3433be097d4b1cb4c0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:0f:e7:2a:a9:29:86:94:1c:98:96:18:61: 5d:cf:0c:a9:de:5b:56:ba:9a:ce:d5:df:45:5e:08: a8:1a:b8:a4:d9:26:fe:6a:46:3b:77:76:be:9e:a4: f2:7e:f3:27:62:33:90:10:0d:92:83:52:4c:66:75: 28:66:7a:8d:6d:2b:28:71:66:2e:ed:81:d3:6b:a7: 7e:c8:1e:f8:49:af:6c:de:5b:4e:95:29:cd:a8:f5: 94:a0:41:e8:33:8b:58:42:d9:dc:dd:8c:2d:66:af: 62:03:64:12:b9:f1:db:9f:80:ef:61:23:0b:18:b4: 0a:bf:ff:70:2a:37:87:3c:d8:dc:df:79:ee:99:16: d1:7e:30:03:28:5a:8d:21:36:85:0b:62:5e:d6:05: da:79:80:2a:9e:6c:68:98:ac:e5:7d:02:c8:16:f8: f3:9e:ec:d4:48:b7:cd:6d:eb:55:f4:f8:5f:93:2e: 3a:89:07:48:2c:56:fc:66:d0:4e:ed:c1:a0:4c:e9: 07:f6:69:ce:57:bd:e1:d9:f3:f4:43:55:02:6c:1f: f8:75:ed:3a:00:03:c6:16:ed:54:a3:b6:5c:aa:04: 22:1b:a9:f3:8a:8a:79:05:73:ed:a9:26:57:b7:32: c3:e5:dd:de:1a:22:8b:24:e4:b8:24:e8:4b:2a:96: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:B7:85:82:34:1C:51:DD:9A:34:33:BE:09:7D:4B:1C:B4:C0:C1 X509v3 Authority Key Identifier: keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c8:93:79:ca:25:cc:91:a4:c1:33:c1:0c:4a:f5:0b:37:a4: 60:b9:15:4c:0f:3f:79:12:34:b9:1c:3f:d6:4d:79:d1:9e:c5: 2e:a8:ff:f4:9c:29:38:63:2b:a3:b5:fd:70:24:b7:dd:11:7e: 3f:83:5a:a9:6f:46:e9:4b:7c:04:9b:e3:4a:11:a8:51:a4:5c: 44:09:b4:e1:c0:a3:14:6a:fc:86:d9:c6:15:c3:e6:6f:3e:f3: 49:ce:b8:26:a6:43:a6:56:33:74:79:55:7f:b3:55:1b:ba:66: 0c:e5:0e:15:ac:a1:1c:93:21:ce:9f:ac:49:7d:14:13:43:49: e9:81:84:12:64:c5:81:38:60:f5:22:5b:df:d5:8a:bc:15:37: cd:e3:7e:36:b9:73:32:ee:65:88:08:e2:0f:31:9a:c3:3a:a4: d9:42:b6:76:f0:c2:88:fc:fe:59:f8:c6:5c:a8:1b:10:95:ec: 40:f9:e8:42:a2:48:de:28:02:91:7e:be:ce:b8:29:8f:6b:06: 97:5e:52:d6:4e:cf:ce:ae:9a:d7:16:4b:d5:8c:1b:16:eb:14: 87:58:07:e0:94:11:65:9c:bc:d5:78:a8:f2:ec:7c:47:3f:84: 4f:5e:f5:f4:9d:c0:9b:1a:0d:11:ec:fc:c8:5b:dd:0c:e4:fa: 7e:de:59:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUi0DAFUmO01kMC/ESKfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzAwMzQxMDRmMWJmNjU4MTQ0YjRhYTQ1YjQxYTNmNTc3 OWRjMGYwHhcNMjUxMjA2MTEwMDQwWhcNMjUxMjA3MTEwMDQwWjAzMTEwLwYDVQQD Eyg0NDI2Yjc4NTgyMzQxYzUxZGQ5YTM0MzNiZTA5N2Q0YjFjYjRjMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyigP5yqpKYaUHJiWGGFdzwyp3ltW uprO1d9FXgioGrik2Sb+akY7d3a+nqTyfvMnYjOQEA2Sg1JMZnUoZnqNbSsocWYu 7YHTa6d+yB74Sa9s3ltOlSnNqPWUoEHoM4tYQtnc3YwtZq9iA2QSufHbn4DvYSML GLQKv/9wKjeHPNjc33numRbRfjADKFqNITaFC2Je1gXaeYAqnmxomKzlfQLIFvjz nuzUSLfNbetV9Phfky46iQdILFb8ZtBO7cGgTOkH9mnOV73h2fP0Q1UCbB/4de06 AAPGFu1Uo7ZcqgQiG6nziop5BXPtqSZXtzLD5d3eGiKLJOS4JOhLKpYDsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQmt4WCNBxR3Zo0M74JfUsctMDBMB8GA1UdIwQY MBaAFNZwA0EE8b9lgUS0qkW0Gj9XedwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQt ZjkxNzJjY2JjNWFmLzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQtZjkxNzJjY2JjNWFm LzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiciTecol zJGkwTPBDEr1CzekYLkVTA8/eRI0uRw/1k150Z7FLqj/9JwpOGMro7X9cCS33RF+ P4NaqW9G6Ut8BJvjShGoUaRcRAm04cCjFGr8htnGFcPmbz7zSc64JqZDplYzdHlV f7NVG7pmDOUOFayhHJMhzp+sSX0UE0NJ6YGEEmTFgThg9SJb39WKvBU3zeN+Nrlz Mu5liAjiDzGawzqk2UK2dvDCiPz+WfjGXKgbEJXsQPnoQqJI3igCkX6+zrgpj2sG l15S1k7Pzq6a1xZL1YwbFusUh1gH4JQRZZy81Xio8ux8Rz+ET1719J3AmxoNEez8 yFvdDOT6ft5ZbA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:48 2025 by rpki-client