This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft File: 1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json) Hash identifier: jyUtyUT1ccHfUzS1DUHxW7uxyzrtxMbFKo+fa2Wgwn0= Subject key identifier: 7E:B2:2A:00:63:66:BC:03:30:5F:5E:69:B9:31:9E:32:0D:90:FA:54 Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019AF24015C72ECC1036044F8960C65EE76B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: n/u7h4/glFrIYAVmFMoi+TFIywVZRJkMcwZFBbW/73Q=) 2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=) 3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=) 4: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (hash: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=) 5: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=) 6: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=) 7: XDE5yWHym2A5ak6WQEhkh6UG6-E.roa (hash: ZtYfbKKZBHtlgDqAoKqJ/Mw8EPVT2w6fQRb3QDPCDXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:15:c7:2e:cc:10:36:04:4f:89:60:c6:5e:e7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=7eb22a006366bc03305f5e69b9319e320d90fa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:0f:1f:a9:b0:c6:47:23:16:32:d2:bb:94: 7c:c2:28:02:f8:ad:ca:2f:da:46:36:24:c7:b2:f3: 98:f9:e8:0a:66:56:88:5e:fb:fe:8e:bd:33:0b:ed: e0:a1:26:79:a1:d6:4e:5c:85:eb:f0:cd:a6:c6:ea: 1a:fe:1d:a7:a5:11:bc:39:a9:a0:a9:37:c9:6b:2e: 85:97:b8:36:eb:41:16:b5:20:21:9b:e2:e6:39:e6: 07:a1:85:ce:5c:b4:cc:5f:3e:07:49:9d:24:37:3b: 71:01:7b:e8:8f:1a:73:dd:be:8a:f3:ef:64:73:b9: a3:b1:cc:21:25:b6:c1:e6:86:e6:a0:25:c1:48:21: 27:62:67:6d:52:c7:8b:e7:3d:b1:50:64:a2:f7:8b: 66:fa:0f:18:a0:cb:44:31:fd:d3:36:43:ee:4b:f0: a9:b9:c4:c3:9c:ee:a7:d2:4b:1d:98:f0:6a:60:75: ca:bd:85:5a:82:8d:1b:e2:80:50:4a:28:14:4d:a6: 36:63:82:55:61:fd:c8:76:42:bb:c6:7c:9a:44:8e: a6:aa:90:00:ac:83:2c:d9:af:62:90:c2:87:91:36: 39:25:f4:85:65:08:aa:ff:f4:6f:35:2c:e0:a0:57: 0d:d6:a8:6b:fb:89:4d:2f:6e:b7:ad:32:1f:24:46: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:2A:00:63:66:BC:03:30:5F:5E:69:B9:31:9E:32:0D:90:FA:54 X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:88:d7:89:10:6c:83:ec:53:a2:ca:8e:d1:cc:49:f3:11: c1:7d:08:a9:5d:ca:27:a8:2d:12:c0:2a:53:01:e7:76:9c:76: e6:4d:d9:a3:5b:a2:c8:84:3a:17:4c:7f:a4:fd:0c:54:de:2d: 41:41:88:2d:6f:6a:60:60:d7:ac:9a:b7:49:bb:2c:6d:14:e2: 60:95:ee:d2:bd:84:c6:78:da:12:a1:e1:f0:96:d3:ef:ef:0e: 30:2b:e4:ed:67:2a:3a:f1:18:2d:db:0a:f1:a9:2d:df:ec:d4: a7:48:fb:73:f0:ed:d9:a2:be:2e:b5:fb:3f:a2:09:d8:7b:4e: f4:fd:e3:99:d5:8a:02:28:2c:d5:40:bb:d6:b3:9f:8e:dd:48: 83:77:3c:ec:e6:b1:9e:df:e5:43:9c:09:c2:b8:50:ac:e9:ee: f2:a3:6b:74:e1:35:5a:33:51:a4:5f:1c:41:fc:09:b9:63:71: 01:cb:55:d9:7f:ff:1d:e0:7b:6d:6e:ad:d4:1f:32:43:e3:bc: 55:4c:ea:46:f5:2c:48:17:01:27:b8:1a:11:72:d3:37:64:ee: e0:48:bf:1d:6e:3c:21:1e:3f:68:89:17:bb:47:ae:e7:f1:59: 79:68:70:04:24:8d:b2:fe:80:b0:c6:56:24:1f:b8:fa:e2:5a: 44:40:df:f2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryQBXHLswQNgRPiWDGXudrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD Eyg3ZWIyMmEwMDYzNjZiYzAzMzA1ZjVlNjliOTMxOWUzMjBkOTBmYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D0PH6mwxkcjFjLSu5R8wigC+K3K L9pGNiTHsvOY+egKZlaIXvv+jr0zC+3goSZ5odZOXIXr8M2mxuoa/h2npRG8Oamg qTfJay6Fl7g260EWtSAhm+LmOeYHoYXOXLTMXz4HSZ0kNztxAXvojxpz3b6K8+9k c7mjscwhJbbB5obmoCXBSCEnYmdtUseL5z2xUGSi94tm+g8YoMtEMf3TNkPuS/Cp ucTDnO6n0ksdmPBqYHXKvYVago0b4oBQSigUTaY2Y4JVYf3IdkK7xnyaRI6mqpAA rIMs2a9ikMKHkTY5JfSFZQiq//RvNSzgoFcN1qhr+4lNL263rTIfJEbM0wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH6yKgBjZrwDMF9eabkxnjINkPpUMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI2LzAzY2NlMy1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5 YWEvMS8xLVBjOFhBODZFR3FMcDlfejQxeUJiUkI0M0hFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOKI 14kQbIPsU6LKjtHMSfMRwX0IqV3KJ6gtEsAqUwHndpx25k3Zo1uiyIQ6F0x/pP0M VN4tQUGILW9qYGDXrJq3SbssbRTiYJXu0r2ExnjaEqHh8JbT7+8OMCvk7WcqOvEY LdsK8akt3+zUp0j7c/Dt2aK+LrX7P6IJ2HtO9P3jmdWKAigs1UC71rOfjt1Ig3c8 7Oaxnt/lQ5wJwrhQrOnu8qNrdOE1WjNRpF8cQfwJuWNxActV2X//HeB7bW6t1B8y Q+O8VUzqRvUsSBcBJ7gaEXLTN2Tu4Ei/HW48IR4/aIkXu0eu5/FZeWhwBCSNsv6A sMZWJB+4+uJaREDf8g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:55 2025 by rpki-client