This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: DXgkQogmNynxjo7d25pkXCJ/ff3kvF+10fH5fIqA/uY= Subject key identifier: 1B:39:D9:4E:2A:BE:8E:5B:52:2F:1C:5D:0A:BE:9C:50:85:49:AB:6D Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019AF1D1C155E9169A794E422C2E2D8E924F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: ES7rXtoA5DMPexs2tmHaVHB98iQnNV7vXox5Pb5UkrY=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 7: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 8: lv4HmOqEkoJhmZ694ZcdnLwYlAM.roa (hash: jNXlLdUizmlPS7y4NkIFg6Z2F2lK4SSREn91C27cUCo=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c1:55:e9:16:9a:79:4e:42:2c:2e:2d:8e:92:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=1b39d94e2abe8e5b522f1c5d0abe9c508549ab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:7f:8c:53:0b:ac:17:02:79:30:bf:7b:a1: f0:ac:02:c6:cb:b4:ff:37:f5:e4:19:bd:43:37:ce: 12:fc:be:6b:a1:4b:2a:07:5d:88:53:8b:c4:47:e8: c0:23:d1:b5:79:84:59:7f:23:04:bd:3e:6d:ef:e9: 6d:a9:b9:aa:fb:47:7c:a9:44:fb:e6:89:00:70:d1: 7e:fc:80:26:4f:0e:02:60:86:20:15:a2:7b:b3:7c: 27:51:7b:6a:97:b6:71:a3:d2:3a:64:ac:26:46:53: 01:ba:b6:69:fd:63:b7:3d:e3:bd:45:81:c6:4c:9f: 3e:a4:9e:db:2b:5a:1d:b9:57:6e:63:50:d0:e0:05: 01:cb:72:16:76:a1:7d:af:a0:6d:78:3f:c1:92:7d: bd:ac:d4:40:ec:51:8a:18:3b:30:37:3d:f1:e9:76: cc:ce:57:80:33:fa:f0:05:22:dd:7d:80:dd:5b:d8: 51:69:89:63:c1:0d:e5:51:81:6a:5b:a1:f5:6f:6a: db:b0:cd:1d:38:53:9d:6e:0b:66:06:fb:fa:31:13: 40:c4:07:eb:45:64:87:98:38:d1:92:6d:ed:6f:42: dd:13:a2:27:6e:89:26:9f:e0:fd:2b:d4:bd:51:84: a1:16:66:2e:27:83:67:c5:8f:c7:36:bd:55:56:3c: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:39:D9:4E:2A:BE:8E:5B:52:2F:1C:5D:0A:BE:9C:50:85:49:AB:6D X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a0:1f:e8:99:75:72:6c:e0:e9:d8:d3:d2:b4:e2:19:81:f0: f8:17:53:25:c3:7d:30:87:a4:11:95:b0:a1:54:68:0d:8e:4d: 1f:c5:67:1d:62:02:50:cd:07:05:01:54:df:c0:c5:10:eb:55: b7:23:5d:c0:99:87:6e:5f:06:ba:e0:bd:08:e1:8a:35:e0:1d: 34:66:92:11:77:a1:c9:32:d5:e4:fb:3a:b9:4f:85:8e:36:63: 39:2b:40:bd:3e:c5:06:c6:eb:90:fe:d4:5b:c4:6d:fb:ba:e2: 21:8c:21:9f:8e:db:2d:d5:fc:42:c8:24:c0:da:02:b2:9f:87: 34:1e:68:3d:ef:a0:15:92:c4:84:f1:95:a9:25:4a:26:3c:5d: 13:30:a9:62:7d:e8:50:02:22:4c:9f:25:d8:55:d6:de:67:92: 2d:65:c2:81:94:65:ae:c2:90:aa:a8:b6:d8:c4:c5:72:ff:8b: 9c:65:dc:57:b4:d5:a0:39:2e:4b:cc:41:2f:42:9f:ab:d1:16: 67:21:a8:1e:79:14:ad:8f:16:59:1e:be:11:9a:e2:da:bd:bb: 51:66:f4:5b:b8:26:8d:63:d6:99:52:47:56:6e:2d:8c:04:76: 33:1d:6f:28:2d:07:94:b6:3f:c2:7c:7c:80:a8:fc:3f:bf:88: 16:14:cf:10 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0cFV6RaaeU5CLC4tjpJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EygxYjM5ZDk0ZTJhYmU4ZTViNTIyZjFjNWQwYWJlOWM1MDg1NDlhYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPt/jFMLrBcCeTC/e6HwrALGy7T/ N/XkGb1DN84S/L5roUsqB12IU4vER+jAI9G1eYRZfyMEvT5t7+ltqbmq+0d8qUT7 5okAcNF+/IAmTw4CYIYgFaJ7s3wnUXtql7Zxo9I6ZKwmRlMBurZp/WO3PeO9RYHG TJ8+pJ7bK1oduVduY1DQ4AUBy3IWdqF9r6BteD/Bkn29rNRA7FGKGDswNz3x6XbM zleAM/rwBSLdfYDdW9hRaYljwQ3lUYFqW6H1b2rbsM0dOFOdbgtmBvv6MRNAxAfr RWSHmDjRkm3tb0LdE6Inbokmn+D9K9S9UYShFmYuJ4NnxY/HNr1VVjyJbQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBs52U4qvo5bUi8cXQq+nFCFSattMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaAf 6Jl1cmzg6djT0rTiGYHw+BdTJcN9MIekEZWwoVRoDY5NH8VnHWICUM0HBQFU38DF EOtVtyNdwJmHbl8GuuC9COGKNeAdNGaSEXehyTLV5Ps6uU+FjjZjOStAvT7FBsbr kP7UW8Rt+7riIYwhn47bLdX8QsgkwNoCsp+HNB5oPe+gFZLEhPGVqSVKJjxdEzCp Yn3oUAIiTJ8l2FXW3meSLWXCgZRlrsKQqqi22MTFcv+LnGXcV7TVoDkuS8xBL0Kf q9EWZyGoHnkUrY8WWR6+EZri2r27UWb0W7gmjWPWmVJHVm4tjAR2Mx1vKC0HlLY/ wnx8gKj8P7+IFhTPEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:49 2025 by rpki-client