This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json) Hash identifier: Dwkg501CXzcYkhLYpUlwxsBewzgJ99Npw9IGXB8o0cc= Subject key identifier: C7:A4:4F:26:C6:CC:7B:D2:C4:15:4E:9E:24:86:D0:35:C9:9A:99:80 Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62 Certificate issuer: /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62 Certificate serial: 019B3C7F831AE3C2CBC66FEF65ED2CFED75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 16:02:28 +0000 Manifest this update: Sat 20 Dec 2025 16:02:28 +0000 Manifest next update: Sun 21 Dec 2025 16:02:28 +0000 Files and hashes: 1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: s8uZO7lBpc1XJev+InQS2plDoNXv6PRHym6tVtCEWPY=) 2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:83:1a:e3:c2:cb:c6:6f:ef:65:ed:2c:fe:d7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62 Validity Not Before: Dec 20 16:02:28 2025 GMT Not After : Dec 21 16:02:28 2025 GMT Subject: CN=c7a44f26c6cc7bd2c4154e9e2486d035c99a9980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:7f:9a:16:7a:9d:67:e9:e0:a2:54:ff:84: f1:14:89:86:7a:a4:16:df:4e:aa:f7:e2:57:d7:a3: b0:1e:e7:a2:2f:9c:6b:0b:b0:1a:6f:4c:41:cd:72: e5:91:90:53:38:76:b1:e9:fa:a8:ab:cf:30:26:59: 16:1a:e6:3c:12:bd:b3:cb:2f:fb:5e:5a:c2:f5:d4: e4:c0:29:b7:55:2c:a6:e1:89:59:7b:ec:bb:11:32: 87:35:06:f7:b0:85:85:ef:f3:6f:bd:e2:c3:3e:a5: 07:a8:b3:9b:14:c0:95:02:40:72:41:70:e4:bf:15: b2:e7:33:56:d2:34:4b:2b:55:98:3d:79:0f:65:3b: f0:f2:62:33:56:cd:ef:1b:6c:99:f5:02:51:fd:2b: 72:f7:c5:fd:66:68:95:47:91:02:bc:2f:62:04:47: bb:6f:a6:9e:ff:13:b9:b3:1e:3b:c2:e9:b0:84:11: c6:1e:a7:68:1c:6f:0b:90:ee:87:7f:a8:9e:d6:cc: 5a:fa:84:c1:04:a4:68:5a:5f:71:b4:92:5a:98:dc: 28:e7:e9:60:db:8d:bb:2f:00:3a:7a:68:f1:5b:79: eb:84:63:d6:05:07:09:dc:de:18:8f:64:4b:65:69: 9e:11:35:af:b7:7d:4e:cd:d6:84:0f:fb:c3:c0:e9: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:4F:26:C6:CC:7B:D2:C4:15:4E:9E:24:86:D0:35:C9:9A:99:80 X509v3 Authority Key Identifier: keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:da:95:99:f5:15:ee:ea:ca:ef:cb:be:ca:61:19:c7:1a:48: 92:97:7d:a8:22:66:c8:1b:54:a5:04:de:31:8b:de:54:16:99: 8a:b1:49:21:4c:af:43:31:66:3b:fe:95:81:f0:88:cc:95:5a: 3b:41:a5:e7:96:a2:7b:01:d4:f7:e7:5d:ec:aa:53:ae:64:66: 2d:15:0d:c1:5f:46:10:4a:93:04:db:b0:9b:aa:e0:e1:41:d3: 50:14:e9:0b:cb:ac:c4:3e:ad:5b:4e:27:7c:d2:91:13:a7:65: b5:a0:b0:71:6e:37:06:a1:79:e8:ab:b6:29:64:11:6e:b4:60: c2:3b:6a:36:af:15:a9:75:8b:00:ac:fd:32:d3:cc:49:f6:6e: bf:3f:fd:ca:78:e3:b1:4b:25:9c:25:13:ce:61:d0:55:65:72: ee:ba:70:24:2d:f3:d1:13:48:bb:38:2f:39:02:7d:fa:2f:46: 0d:16:06:75:a8:b7:16:29:c3:09:6a:bc:c2:ea:26:36:d9:97: a3:16:bf:9d:c0:13:3d:74:f6:a0:7d:7e:46:a7:cf:6b:46:2d: 34:87:72:46:44:e6:58:5e:b5:d0:c0:39:2f:fc:a5:18:e7:49: 54:be:7b:93:08:33:87:3a:90:a9:86:59:54:1c:38:e0:fd:51: fc:4e:42:12 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8f4Ma48LLxm/vZe0s/tddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWQwNGU2YzUwYmE5MDZmOWFjMTFjMmU3NWJmM2Y1ZDEw NDJhNjIwHhcNMjUxMjIwMTYwMjI4WhcNMjUxMjIxMTYwMjI4WjAzMTEwLwYDVQQD EyhjN2E0NGYyNmM2Y2M3YmQyYzQxNTRlOWUyNDg2ZDAzNWM5OWE5OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1h/mhZ6nWfp4KJU/4TxFImGeqQW 306q9+JX16OwHueiL5xrC7Aab0xBzXLlkZBTOHax6fqoq88wJlkWGuY8Er2zyy/7 XlrC9dTkwCm3VSym4YlZe+y7ETKHNQb3sIWF7/NvveLDPqUHqLObFMCVAkByQXDk vxWy5zNW0jRLK1WYPXkPZTvw8mIzVs3vG2yZ9QJR/Sty98X9ZmiVR5ECvC9iBEe7 b6ae/xO5sx47wumwhBHGHqdoHG8LkO6Hf6ie1sxa+oTBBKRoWl9xtJJamNwo5+lg 2427LwA6emjxW3nrhGPWBQcJ3N4Yj2RLZWmeETWvt31OzdaED/vDwOniAQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMekTybGzHvSxBVOniSG0DXJmpmAMB8GA1UdIwQY MBaAFPhdBObFC6kG+awRwudb8/XRBCpiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GMEU1c1VMcVFiNXJCSEM1MXZ6OWRFRUttSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTNhYTMxLTk2NGYtNGE4MS1iY2Vl LWRlOGMyNjIwMmIxNy8xLzEtRjBFNXNVTHFRYjVyQkhDNTF2ejlkRUVLbUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU0L2UzYWEzMS05NjRmLTRhODEtYmNlZS1kZThjMjYyMDJi MTcvMS8xLUYwRTVzVUxxUWI1ckJIQzUxdno5ZEVFS21JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtqV mfUV7urK78u+ymEZxxpIkpd9qCJmyBtUpQTeMYveVBaZirFJIUyvQzFmO/6VgfCI zJVaO0Gl55aiewHU9+dd7KpTrmRmLRUNwV9GEEqTBNuwm6rg4UHTUBTpC8usxD6t W04nfNKRE6dltaCwcW43BqF56Ku2KWQRbrRgwjtqNq8VqXWLAKz9MtPMSfZuvz/9 ynjjsUslnCUTzmHQVWVy7rpwJC3z0RNIuzgvOQJ9+i9GDRYGdai3FinDCWq8wuom NtmXoxa/ncATPXT2oH1+RqfPa0YtNIdyRkTmWF610MA5L/ylGOdJVL57kwgzhzqQ qYZZVBw44P1R/E5CEg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:23:41 2025 by rpki-client