This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json) Hash identifier: jfJCh+Jlp93/MmRZu3QzFIAOvIk/KuIwUhqUaQl89BA= Subject key identifier: 42:35:5B:43:28:B0:6C:0B:54:95:7A:BD:AD:AC:D6:35:38:04:E6:DF Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Certificate serial: 019B22BE7DA73488F63EA2879D2C7C26F83B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft Manifest number: 174B Signing time: Mon 15 Dec 2025 16:01:07 +0000 Manifest this update: Mon 15 Dec 2025 16:01:07 +0000 Manifest next update: Tue 16 Dec 2025 16:01:07 +0000 Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: iohH41yOn4bnpElqtY2kn+bdToYyF85oQ4m1eXvy6g8=) 2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:7d:a7:34:88:f6:3e:a2:87:9d:2c:7c:26:f8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Validity Not Before: Dec 15 16:01:07 2025 GMT Not After : Dec 16 16:01:07 2025 GMT Subject: CN=42355b4328b06c0b54957abdadacd6353804e6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:3a:9d:95:36:7f:17:03:66:06:37:68:38: d2:21:72:e2:d5:79:7e:af:9e:32:99:e2:02:81:bb: 9a:05:51:46:75:af:ac:24:f1:92:3c:53:42:90:15: 05:d7:a2:f5:8e:5f:41:50:87:5f:16:1c:db:55:a7: 68:f8:43:74:b4:ad:80:57:a0:1e:7a:99:86:25:35: 4c:ee:fa:7f:a0:0e:5d:e6:cb:cd:66:7a:82:59:fe: dd:94:e6:35:16:1f:fe:95:b9:7e:64:d9:39:c5:e6: 55:13:e8:98:8b:74:4c:19:6c:c4:a6:8c:8d:49:ec: 71:f2:a4:3a:bc:2d:da:4b:5a:72:76:52:a1:f1:34: 45:a6:ab:48:70:1d:6a:7d:94:01:82:68:4d:94:69: 99:f4:99:64:9a:1f:16:9a:ef:6b:51:54:6e:62:b5: 84:57:05:ef:6e:66:e7:e6:e3:14:c0:f6:15:48:97: 13:96:ac:a3:6d:7d:4d:b5:9c:72:d3:5e:35:34:af: 9e:b7:a3:37:f8:bc:d1:20:f5:99:d9:d5:22:31:c6: dc:c7:e6:3b:b2:10:7b:d7:60:57:85:18:f9:e3:62: 9e:18:d0:12:5a:8f:f5:b4:91:a4:4a:4d:6a:4a:d3: d4:6f:5a:8b:13:22:6a:a5:8a:18:a5:5c:9a:e7:2a: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:5B:43:28:B0:6C:0B:54:95:7A:BD:AD:AC:D6:35:38:04:E6:DF X509v3 Authority Key Identifier: keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:19:e3:72:cd:33:6d:e7:92:bb:43:4a:09:b5:c1:ca:05:af: e9:66:5b:f3:7a:21:d6:39:cb:46:40:16:ff:ba:dc:7c:da:c3: 8f:4f:83:e2:26:d0:ec:4b:aa:8b:7b:f7:67:4c:eb:4f:5c:ce: c2:e2:d5:17:ba:4a:bc:a9:46:68:7f:d7:49:18:61:42:a6:08: 65:50:20:72:7f:7d:3c:10:a1:4d:28:0c:3b:a2:bf:30:9d:4d: dc:89:d5:9d:08:37:f8:73:c8:b0:f7:f2:08:7b:a5:52:be:10: 00:aa:bc:20:78:6a:70:d1:4d:87:97:be:16:c4:66:c0:dd:7e: fe:85:7d:17:0f:7d:c3:fc:b3:a4:b7:d8:81:ef:99:62:ee:21: 37:cd:db:c1:8b:6a:b0:bd:d6:58:24:a0:60:44:4a:90:40:3a: 5b:96:84:c9:69:52:1b:89:d9:39:57:51:2d:de:4b:f3:87:be: be:30:bb:09:e0:bf:b8:eb:a4:19:96:96:cf:9e:0c:03:9e:70: 21:86:1d:fc:9b:2b:77:36:2b:b2:11:9c:61:1f:29:ad:ef:63: 2e:95:9f:e8:39:04:89:df:ef:33:6b:20:0b:12:35:32:1c:93: aa:66:cf:0c:a7:73:c1:52:01:71:28:9b:01:c9:0e:55:b1:0d: eb:c3:e8:2b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsivn2nNIj2PqKHnSx8Jvg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmMzNTkwYmY0OWFmYjQyY2U0NGE4YzE3NGM0NDE2MWI4 ZmMyMDkwHhcNMjUxMjE1MTYwMTA3WhcNMjUxMjE2MTYwMTA3WjAzMTEwLwYDVQQD Eyg0MjM1NWI0MzI4YjA2YzBiNTQ5NTdhYmRhZGFjZDYzNTM4MDRlNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXw6nZU2fxcDZgY3aDjSIXLi1Xl+ r54ymeICgbuaBVFGda+sJPGSPFNCkBUF16L1jl9BUIdfFhzbVado+EN0tK2AV6Ae epmGJTVM7vp/oA5d5svNZnqCWf7dlOY1Fh/+lbl+ZNk5xeZVE+iYi3RMGWzEpoyN Sexx8qQ6vC3aS1pydlKh8TRFpqtIcB1qfZQBgmhNlGmZ9Jlkmh8Wmu9rUVRuYrWE VwXvbmbn5uMUwPYVSJcTlqyjbX1NtZxy0141NK+et6M3+LzRIPWZ2dUiMcbcx+Y7 shB712BXhRj542KeGNASWo/1tJGkSk1qStPUb1qLEyJqpYoYpVya5yoKewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEI1W0MosGwLVJV6va2s1jU4BObfMB8GA1UdIwQY MBaAFPj8NZC/Sa+0LORKjBdMRBYbj8IJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QdzFrTDlKcjdRczVFcU1GMHhFRmh1UHdnay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYyLWRkNWEtNDQ4My04ZmRi LWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFNRjB4RUZodVB3Z2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2ExZTZmMi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQz ZDkvMS8xLVB3MWtMOUpyN1FzNUVxTUYweEVGaHVQd2drLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBnj cs0zbeeSu0NKCbXBygWv6WZb83oh1jnLRkAW/7rcfNrDj0+D4ibQ7Euqi3v3Z0zr T1zOwuLVF7pKvKlGaH/XSRhhQqYIZVAgcn99PBChTSgMO6K/MJ1N3InVnQg3+HPI sPfyCHulUr4QAKq8IHhqcNFNh5e+FsRmwN1+/oV9Fw99w/yzpLfYge+ZYu4hN83b wYtqsL3WWCSgYERKkEA6W5aEyWlSG4nZOVdRLd5L84e+vjC7CeC/uOukGZaWz54M A55wIYYd/JsrdzYrshGcYR8pre9jLpWf6DkEid/vM2sgCxI1MhyTqmbPDKdzwVIB cSibAckOVbEN68PoKw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:14:29 2025 by rpki-client