This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json) Hash identifier: L6CdTQSF2or6OrotQyv/bFcFCoEEYJeeS4XZA57CPko= Subject key identifier: 65:A6:EC:48:80:87:25:30:8A:61:87:FC:F2:4C:7C:29:03:AD:82:59 Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019AF23F9CAE6D10BDA9F16495D8DBD7038C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: jGWrqxxh8qBicDq3ycGDmyJgo7ERmjZsA8CoMNMd6RE=) 2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=) 3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=) 4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=) 5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=) 6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9c:ae:6d:10:bd:a9:f1:64:95:d8:db:d7:03:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=65a6ec48808725308a6187fcf24c7c2903ad8259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:72:b5:06:96:aa:eb:ad:47:89:04:9a:b4: 31:ba:31:0b:07:0c:b0:d2:18:d8:a7:2e:f0:7b:1c: a5:9e:87:51:ad:49:49:dc:55:1d:1b:8f:ee:79:a2: e0:b0:11:e9:40:72:71:45:e3:50:b0:5d:33:98:4d: 05:e3:f4:34:12:21:3d:0f:5b:e3:ef:0a:52:51:ab: 67:a6:31:a0:f8:5a:09:c8:50:b7:be:8c:7f:d5:b3: b0:c1:29:d9:be:32:37:bf:df:3b:8a:ff:56:42:df: b7:61:83:55:5a:d2:8d:3a:10:65:d3:00:03:8d:3e: 1e:2c:1d:5b:1f:ae:da:87:a8:50:30:3f:cf:22:2d: 3a:48:8f:0d:0b:8a:8a:5c:64:81:14:1e:f2:c8:9a: cf:a1:34:13:83:f3:51:73:eb:3c:4d:73:58:74:11: 3c:ef:42:a4:ea:bf:38:bc:39:c0:1b:7f:55:c0:fb: 80:b3:5f:80:1f:99:b5:7f:cb:ad:cb:60:e3:5f:71: 73:a2:33:35:e3:4b:d2:fa:9c:5a:34:2a:74:d1:23: e8:60:67:e7:a6:0d:f2:5c:c6:46:7c:3c:e2:0b:e3: e5:8b:e5:7e:84:58:63:55:0d:e7:80:b1:72:2a:0f: 28:92:87:09:fe:85:d4:ca:83:63:82:03:e6:8d:16: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:EC:48:80:87:25:30:8A:61:87:FC:F2:4C:7C:29:03:AD:82:59 X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:15:30:46:cd:0b:b1:c9:a4:24:38:8c:a8:13:fc:c5:fb: 6a:6e:58:79:2f:9f:f6:bf:a4:4b:38:b3:1a:b2:cc:7d:33:ab: 02:83:29:db:56:0b:c1:ab:fb:19:c8:57:dc:67:34:ef:d1:80: b4:4a:83:4d:91:62:7f:40:22:5d:93:26:82:ed:9b:ce:59:4f: 12:87:9a:ec:ea:66:fe:e6:84:65:df:fe:e1:fc:10:d8:f4:7e: d3:f4:49:b7:04:b5:74:7e:47:8e:89:0f:dd:c0:7a:fe:0b:6a: 22:16:2c:d8:ff:8a:2a:f6:a4:20:c3:53:5a:b3:56:67:e3:50: 4d:02:01:0e:bf:e3:57:70:b2:0d:47:63:eb:b1:7f:cd:2c:25: 09:3f:0d:bd:ae:7b:6a:fa:96:03:85:39:b0:8f:22:a2:86:91: 05:73:73:6d:d7:41:b2:25:6a:4d:b1:1c:2e:11:77:80:f4:cb: 2a:4b:c5:04:fb:bb:39:7a:91:b8:3b:74:d0:46:e5:9d:61:59: ed:b3:04:4c:12:c0:07:bd:ff:03:9e:09:b8:e5:56:50:0e:77: b3:d8:79:19:a9:54:d9:a6:6a:be:4b:41:c3:4b:59:ea:ae:db: 77:7f:91:37:0b:3f:06:f6:bf:f4:ef:91:50:f4:b4:96:58:70: 5c:a4:77:9e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryP5yubRC9qfFkldjb1wOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg2NWE2ZWM0ODgwODcyNTMwOGE2MTg3ZmNmMjRjN2MyOTAzYWQ4MjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ExytQaWquutR4kEmrQxujELBwyw 0hjYpy7wexylnodRrUlJ3FUdG4/ueaLgsBHpQHJxReNQsF0zmE0F4/Q0EiE9D1vj 7wpSUatnpjGg+FoJyFC3vox/1bOwwSnZvjI3v987iv9WQt+3YYNVWtKNOhBl0wAD jT4eLB1bH67ah6hQMD/PIi06SI8NC4qKXGSBFB7yyJrPoTQTg/NRc+s8TXNYdBE8 70Kk6r84vDnAG39VwPuAs1+AH5m1f8uty2DjX3FzojM140vS+pxaNCp00SPoYGfn pg3yXMZGfDziC+Pli+V+hFhjVQ3ngLFyKg8okocJ/oXUyoNjggPmjRZ+MwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGWm7EiAhyUwimGH/PJMfCkDrYJZMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0 MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuwV MEbNC7HJpCQ4jKgT/MX7am5YeS+f9r+kSzizGrLMfTOrAoMp21YLwav7GchX3Gc0 79GAtEqDTZFif0AiXZMmgu2bzllPEoea7Opm/uaEZd/+4fwQ2PR+0/RJtwS1dH5H jokP3cB6/gtqIhYs2P+KKvakIMNTWrNWZ+NQTQIBDr/jV3CyDUdj67F/zSwlCT8N va57avqWA4U5sI8iooaRBXNzbddBsiVqTbEcLhF3gPTLKkvFBPu7OXqRuDt00Ebl nWFZ7bMETBLAB73/A54JuOVWUA53s9h5GalU2aZqvktBw0tZ6q7bd3+RNws/Bva/ 9O+RUPS0llhwXKR3ng== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:39 2025 by rpki-client