This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json) Hash identifier: TN0GJ7G9WxSCqUxnYfUKtPIn/Y5009VGX9xQywQXY9E= Subject key identifier: 32:9E:C7:A8:55:51:8D:D6:F9:B9:5A:74:13:C3:70:A9:45:67:73:34 Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15 Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615 Certificate serial: 019B3E6C89FF75CDC2E3B42D7045F3B429B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft Manifest number: 071F Signing time: Sun 21 Dec 2025 01:00:59 +0000 Manifest this update: Sun 21 Dec 2025 01:00:59 +0000 Manifest next update: Mon 22 Dec 2025 01:00:59 +0000 Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: ocQdUafxrKy6pWhFNlWsvHcO7WOaQUj1p5+zAmcjwTc=) 2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=) 3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:89:ff:75:cd:c2:e3:b4:2d:70:45:f3:b4:29:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615 Validity Not Before: Dec 21 01:00:59 2025 GMT Not After : Dec 22 01:00:59 2025 GMT Subject: CN=329ec7a855518dd6f9b95a7413c370a945677334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:c7:7f:9b:cc:31:13:65:20:3e:24:4b:f8: a0:56:9d:e8:4e:05:49:44:8f:94:cb:1a:78:e7:26: 25:79:57:e6:e0:78:b7:bb:b6:d5:bb:8b:43:fa:31: 6e:3f:cb:d5:7b:1b:ec:21:41:31:c3:0d:38:92:67: 01:57:18:eb:4c:b1:1d:71:22:ab:12:34:54:1a:19: 9d:b0:43:15:01:8b:7f:2e:5e:03:b8:e7:e2:e0:5c: 51:34:5d:ae:11:11:1b:fb:cb:ba:69:17:4b:0a:f1: af:f3:72:fa:d2:ca:8e:ef:0e:02:38:60:1b:07:5e: 60:26:25:60:52:96:f3:75:92:d1:2c:19:40:0b:60: 0d:38:2a:d4:06:cb:5e:10:bc:5b:d7:52:51:f9:ee: d4:2a:77:a5:fd:53:51:b4:ed:1f:1c:6c:e0:62:64: fd:a2:7e:ee:da:f7:81:3a:02:85:a1:33:bb:ee:62: 34:ea:42:55:05:77:36:02:e2:ce:24:7f:0f:49:8b: eb:b9:44:4e:cf:7c:82:ea:33:b8:e9:f0:cd:2d:66: 34:7d:5f:e5:c4:91:24:41:39:ed:88:c7:e9:6c:cf: 20:db:6e:ab:09:bd:e1:da:b6:b0:c1:b7:a4:86:96: e4:08:c8:86:9d:0d:57:ac:43:ba:98:cd:5e:79:29: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:C7:A8:55:51:8D:D6:F9:B9:5A:74:13:C3:70:A9:45:67:73:34 X509v3 Authority Key Identifier: keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d3:cd:05:ad:ec:6e:9c:ba:26:f5:4c:c4:29:c1:5a:34:4a: c0:3b:10:ea:90:39:11:f0:0f:7e:1f:b9:fd:bd:10:b8:c0:82: 90:ed:1a:53:f7:ae:ac:f4:b3:ab:90:d2:53:57:15:59:0a:b7: 03:af:a0:0c:a1:96:6e:9e:4c:5f:73:41:c3:2d:b6:65:e8:be: f6:28:08:9f:a3:ac:ed:6f:aa:51:77:51:c6:1c:de:8a:08:47: 30:16:df:3a:50:e5:da:fa:5e:6b:d7:16:8c:fe:23:2e:53:5e: 37:86:9f:85:27:e5:e4:f4:61:25:63:04:1e:00:17:70:68:4f: 93:94:4c:b0:ec:7a:af:31:b5:75:40:14:a0:94:71:d9:2e:a7: 43:1e:35:0a:78:66:a9:6c:8d:b9:f4:59:d8:b9:a1:df:6b:d8: 1c:ee:c0:10:f2:da:85:b7:a5:8c:01:7e:4e:28:68:73:8e:b0: 08:04:1b:09:68:75:76:2f:b6:e4:3d:cd:80:09:5f:85:e2:a7: 47:04:59:11:3e:0c:de:91:25:4c:52:26:1f:b1:45:a9:07:79: de:33:04:73:d8:0a:f5:74:0f:19:fe:e9:4f:b8:1a:cd:0c:1d: d0:1f:95:97:68:5d:fb:4c:bc:46:1a:c5:db:52:4c:61:c8:8f: 8e:63:a8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bIn/dc3C47QtcEXztCm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk NDE2MTUwHhcNMjUxMjIxMDEwMDU5WhcNMjUxMjIyMDEwMDU5WjAzMTEwLwYDVQQD EygzMjllYzdhODU1NTE4ZGQ2ZjliOTVhNzQxM2MzNzBhOTQ1Njc3MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T7Hf5vMMRNlID4kS/igVp3oTgVJ RI+Uyxp45yYleVfm4Hi3u7bVu4tD+jFuP8vVexvsIUExww04kmcBVxjrTLEdcSKr EjRUGhmdsEMVAYt/Ll4DuOfi4FxRNF2uEREb+8u6aRdLCvGv83L60sqO7w4COGAb B15gJiVgUpbzdZLRLBlAC2ANOCrUBsteELxb11JR+e7UKnel/VNRtO0fHGzgYmT9 on7u2veBOgKFoTO77mI06kJVBXc2AuLOJH8PSYvruUROz3yC6jO46fDNLWY0fV/l xJEkQTntiMfpbM8g226rCb3h2rawwbekhpbkCMiGnQ1XrEO6mM1eeSnDzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKex6hVUY3W+bladBPDcKlFZ3M0MB8GA1UdIwQY MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt MTgxZTY0MDU5ZDMxLzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNPNBa3s bpy6JvVMxCnBWjRKwDsQ6pA5EfAPfh+5/b0QuMCCkO0aU/eurPSzq5DSU1cVWQq3 A6+gDKGWbp5MX3NBwy22Zei+9igIn6Os7W+qUXdRxhzeighHMBbfOlDl2vpea9cW jP4jLlNeN4afhSfl5PRhJWMEHgAXcGhPk5RMsOx6rzG1dUAUoJRx2S6nQx41Cnhm qWyNufRZ2Lmh32vYHO7AEPLahbeljAF+Tihoc46wCAQbCWh1di+25D3NgAlfheKn RwRZET4M3pElTFImH7FFqQd53jMEc9gK9XQPGf7pT7gazQwd0B+Vl2hd+0y8RhrF 21JMYciPjmOozg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:14 2025 by rpki-client