This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json) Hash identifier: RnC8iS8eaeDT1W22SPNiIRkmEjqxWLD6p/vQg+7/Bz8= Subject key identifier: 06:72:07:96:04:DB:38:67:31:B6:12:B5:E2:C8:28:61:25:C5:CB:FA Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78 Certificate serial: 019AF5779B8332B7D0A662EE94AE13DC7A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft Manifest number: 0861 Signing time: Sat 06 Dec 2025 21:00:47 +0000 Manifest this update: Sat 06 Dec 2025 21:00:47 +0000 Manifest next update: Sun 07 Dec 2025 21:00:47 +0000 Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: 0HLDSa82GsnFfqjEVa7FGucZedarAHklfmSpvzLU8vY=) 2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=) 3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:9b:83:32:b7:d0:a6:62:ee:94:ae:13:dc:7a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78 Validity Not Before: Dec 6 21:00:47 2025 GMT Not After : Dec 7 21:00:47 2025 GMT Subject: CN=0672079604db386731b612b5e2c8286125c5cbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:01:96:30:28:71:d5:08:18:1f:c9:b7:68: 8b:38:43:1b:e4:6b:d4:2d:8d:15:f0:87:b5:b9:2c: 8d:80:47:99:03:75:b5:b1:58:bf:9e:66:d6:ae:15: 6d:f4:aa:f0:5b:90:6d:d9:b9:1e:b0:f1:d7:6a:44: dc:8a:f3:8f:f7:cf:51:b6:8b:e8:20:3b:2b:89:f6: d2:e1:44:60:30:be:83:f8:90:35:42:53:04:ff:cd: dc:4b:5b:7b:53:18:5c:0e:9f:8d:a1:04:64:20:9b: d8:d6:5c:07:9f:91:4b:ec:5e:21:38:93:36:06:87: 77:87:56:b7:39:56:20:1d:83:01:73:59:3d:04:ba: a0:d9:f1:64:5a:57:97:ce:09:3d:92:0b:51:fb:a5: eb:18:1b:f5:79:80:c2:dc:83:d6:45:33:55:2c:e0: 27:71:43:9f:80:bb:af:c2:bd:60:f9:2e:b8:8b:df: 94:e4:ab:41:b5:6c:e8:ad:aa:34:bf:20:86:b0:b7: 95:2c:21:c2:f6:64:7d:7c:62:2c:46:d4:88:f0:d8: 79:66:54:9b:0e:5c:5c:83:a8:4d:15:70:94:ec:0f: c1:83:99:11:99:d7:b8:13:5b:46:f8:12:22:93:03: e6:b2:7e:40:ae:33:97:2b:db:71:09:52:0f:1b:c9: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:07:96:04:DB:38:67:31:B6:12:B5:E2:C8:28:61:25:C5:CB:FA X509v3 Authority Key Identifier: keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c4:d1:68:a2:35:7c:93:55:fb:bd:b3:ff:d5:2f:bb:59:c4: 25:a7:43:a9:90:c4:f6:60:a1:76:fc:0c:aa:b2:8f:92:21:d7: be:96:8f:cf:78:92:a7:ea:b3:d8:33:25:d0:86:74:98:d8:93: cd:45:b0:de:4e:62:ae:b4:b7:26:da:38:b9:e3:83:f9:23:53: fb:14:b8:a2:22:99:79:9f:f8:b2:fc:bf:9e:b1:ba:ef:20:6d: e8:a7:86:9d:ad:b6:61:67:e8:31:f0:ff:bb:fc:27:41:8a:53: 12:6d:ab:9d:6a:0a:d7:93:85:c2:e8:22:76:06:5f:63:be:76: b1:0c:d6:b6:60:ad:19:bc:be:8e:a9:1d:29:a6:b1:f7:e4:8b: 60:01:9e:76:31:3b:92:d2:b9:e7:ed:da:6d:7a:36:04:22:bd: 6f:60:68:7f:52:3e:51:f8:04:78:d0:0b:3a:b4:2f:d0:c4:54: bb:82:8d:fa:c7:91:68:8d:48:16:f9:ac:fb:fc:5d:74:ba:70: dc:63:d7:f7:11:42:41:33:2f:b4:a3:e3:6a:c7:80:7b:9e:85: 0b:ba:1d:2d:16:75:c7:3f:c9:68:d3:f2:32:53:ba:a7:26:66: 08:b8:c5:86:5e:26:53:9d:ff:b8:00:d3:03:a1:d0:99:6b:68: 01:45:f3:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5uDMrfQpmLulK4T3HoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx YThlNzgwHhcNMjUxMjA2MjEwMDQ3WhcNMjUxMjA3MjEwMDQ3WjAzMTEwLwYDVQQD EygwNjcyMDc5NjA0ZGIzODY3MzFiNjEyYjVlMmM4Mjg2MTI1YzVjYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MQBljAocdUIGB/Jt2iLOEMb5GvU LY0V8Ie1uSyNgEeZA3W1sVi/nmbWrhVt9KrwW5Bt2bkesPHXakTcivOP989Rtovo IDsrifbS4URgML6D+JA1QlME/83cS1t7UxhcDp+NoQRkIJvY1lwHn5FL7F4hOJM2 Bod3h1a3OVYgHYMBc1k9BLqg2fFkWleXzgk9kgtR+6XrGBv1eYDC3IPWRTNVLOAn cUOfgLuvwr1g+S64i9+U5KtBtWzorao0vyCGsLeVLCHC9mR9fGIsRtSI8Nh5ZlSb Dlxcg6hNFXCU7A/Bg5kRmde4E1tG+BIikwPmsn5ArjOXK9txCVIPG8klRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZyB5YE2zhnMbYSteLIKGElxcv6MB8GA1UdIwQY MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5 LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMTRaKI1 fJNV+72z/9Uvu1nEJadDqZDE9mChdvwMqrKPkiHXvpaPz3iSp+qz2DMl0IZ0mNiT zUWw3k5irrS3Jto4ueOD+SNT+xS4oiKZeZ/4svy/nrG67yBt6KeGna22YWfoMfD/ u/wnQYpTEm2rnWoK15OFwugidgZfY752sQzWtmCtGby+jqkdKaax9+SLYAGedjE7 ktK55+3abXo2BCK9b2Bof1I+UfgEeNALOrQv0MRUu4KN+seRaI1IFvms+/xddLpw 3GPX9xFCQTMvtKPjaseAe56FC7odLRZ1xz/JaNPyMlO6pyZmCLjFhl4mU53/uADT A6HQmWtoAUXz/g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:40 2025 by rpki-client