This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json) Hash identifier: uGLBF2O8OQ+ThA7BCRchxPoMkgakWUjZvZpTzcYM7/w= Subject key identifier: 7F:1E:AC:2A:09:88:2D:59:7A:4E:85:9D:6B:95:1D:39:CE:34:26:2B Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019B3BA2B1140A7B31ED48A451D59A54080F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 12:01:16 +0000 Manifest this update: Sat 20 Dec 2025 12:01:16 +0000 Manifest next update: Sun 21 Dec 2025 12:01:16 +0000 Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: bNz9RiuL1241Pnp9hEX8Z9Tteko2N4timMWoczGDxyk=) 2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=) 3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=) 4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=) 5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=) 6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b1:14:0a:7b:31:ed:48:a4:51:d5:9a:54:08:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Dec 20 12:01:16 2025 GMT Not After : Dec 21 12:01:16 2025 GMT Subject: CN=7f1eac2a09882d597a4e859d6b951d39ce34262b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:ca:a0:d7:6b:db:9c:f5:a5:80:7f:d4:2c: bd:51:f0:f2:d0:5c:28:3b:74:49:04:85:16:b9:e4: 2c:05:14:54:f4:b6:35:cc:50:a0:90:38:3b:7a:4f: 75:46:c6:43:bb:be:e3:38:46:c8:b7:a6:62:36:ec: f2:39:d3:2e:0c:19:3b:ea:13:9e:27:9c:ba:99:52: 28:55:83:2e:92:46:45:9a:47:bb:0e:da:dd:e2:60: cc:e5:19:86:b4:af:3c:3e:dc:d6:3c:ce:59:96:40: 43:93:48:cd:a1:14:f0:ea:32:c7:6a:f9:fb:a2:8b: eb:b0:19:98:e6:ee:5f:d5:11:75:cb:ba:a9:aa:91: cf:fe:65:b2:cd:97:07:7e:e1:1e:7f:ef:a6:b9:46: e8:e3:25:da:3e:84:b6:a6:55:15:d4:55:3a:a3:13: 78:80:dc:71:94:88:19:09:5b:24:b5:73:68:0e:34: 90:11:ba:67:23:4f:42:01:f6:f2:87:99:d3:cc:2f: 6d:b9:1a:b2:b6:da:48:fc:a6:ef:5f:36:5f:22:51: 94:1f:46:15:d7:43:06:d0:45:ac:f9:eb:35:20:89: 5c:74:8e:d7:5a:e9:7a:7c:48:e6:86:74:8c:58:8d: bf:b9:0a:0b:3c:38:0c:19:e0:70:5e:d9:00:61:16: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1E:AC:2A:09:88:2D:59:7A:4E:85:9D:6B:95:1D:39:CE:34:26:2B X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ec:c2:7a:ce:60:2c:40:21:d3:ca:c4:8b:d0:01:58:ee:45: 37:56:64:1c:e6:d3:3c:18:75:5d:89:ef:52:f6:e8:15:1f:d1: 26:db:a4:71:08:e3:87:9d:45:03:df:1d:92:5b:de:80:aa:4c: 44:3e:2e:71:9d:03:99:eb:12:eb:dd:c5:c9:c6:82:b6:4a:ee: f6:49:1a:68:88:68:30:ed:73:91:4d:0c:64:e2:60:23:8f:75: a7:72:4c:c0:7b:1b:51:6b:25:02:43:94:5a:ee:75:8a:fe:64: bc:2e:f4:7a:ce:67:45:d7:37:97:ec:ac:20:d6:e0:cd:1a:61: 2c:d9:79:0a:60:1a:3f:01:49:df:7a:c6:cd:69:60:e0:0c:b7: 33:d6:95:e5:e7:aa:2a:7d:5b:d8:7d:4c:67:8d:bb:17:5d:ad: 55:c4:a6:94:86:29:0a:aa:64:44:c4:ac:2c:a7:3f:41:34:e2: 94:fb:71:d4:8e:be:6e:c8:42:0d:ff:44:dd:9c:71:53:df:7d: c2:07:e5:68:d4:c0:fe:81:7d:e5:c2:36:70:20:0c:5d:a5:39: 64:ce:44:f7:09:a4:98:79:1b:d3:79:3f:ff:7e:e9:79:71:55: c9:72:5b:41:17:04:47:97:2b:9a:0b:a5:db:a0:64:44:92:1f: c2:17:30:a6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7orEUCnsx7UikUdWaVAgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjUxMjIwMTIwMTE2WhcNMjUxMjIxMTIwMTE2WjAzMTEwLwYDVQQD Eyg3ZjFlYWMyYTA5ODgyZDU5N2E0ZTg1OWQ2Yjk1MWQzOWNlMzQyNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/KoNdr25z1pYB/1Cy9UfDy0Fwo O3RJBIUWueQsBRRU9LY1zFCgkDg7ek91RsZDu77jOEbIt6ZiNuzyOdMuDBk76hOe J5y6mVIoVYMukkZFmke7Dtrd4mDM5RmGtK88PtzWPM5ZlkBDk0jNoRTw6jLHavn7 oovrsBmY5u5f1RF1y7qpqpHP/mWyzZcHfuEef++muUbo4yXaPoS2plUV1FU6oxN4 gNxxlIgZCVsktXNoDjSQEbpnI09CAfbyh5nTzC9tuRqyttpI/KbvXzZfIlGUH0YV 10MG0EWs+es1IIlcdI7XWul6fEjmhnSMWI2/uQoLPDgMGeBwXtkAYRYFBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH8erCoJiC1Zek6FnWuVHTnONCYrMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0 MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuzC es5gLEAh08rEi9ABWO5FN1ZkHObTPBh1XYnvUvboFR/RJtukcQjjh51FA98dklve gKpMRD4ucZ0DmesS693FycaCtkru9kkaaIhoMO1zkU0MZOJgI491p3JMwHsbUWsl AkOUWu51iv5kvC70es5nRdc3l+ysINbgzRphLNl5CmAaPwFJ33rGzWlg4Ay3M9aV 5eeqKn1b2H1MZ427F12tVcSmlIYpCqpkRMSsLKc/QTTilPtx1I6+bshCDf9E3Zxx U999wgflaNTA/oF95cI2cCAMXaU5ZM5E9wmkmHkb03k//37peXFVyXJbQRcER5cr mgul26BkRJIfwhcwpg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:37 2025 by rpki-client