This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json) Hash identifier: 1mnnaf+GI6WTldyO7neKyysIKYRlX5qTm1PgVs1/RNg= Subject key identifier: 92:CC:AD:EF:6F:29:C5:21:AF:32:6B:72:31:18:E6:C2:56:3B:9A:A6 Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Certificate serial: 019AF0BFA7132A7915C778907D622DA05661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:01:23 +0000 Manifest this update: Fri 05 Dec 2025 23:01:23 +0000 Manifest next update: Sat 06 Dec 2025 23:01:23 +0000 Files and hashes: 1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: qPA4ibQsJZ4IV3373BHLcu2DvGEcoZ4MCvilOt+FyLU=) 2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a7:13:2a:79:15:c7:78:90:7d:62:2d:a0:56:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Validity Not Before: Dec 5 23:01:23 2025 GMT Not After : Dec 6 23:01:23 2025 GMT Subject: CN=92ccadef6f29c521af326b723118e6c2563b9aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:dc:e9:fd:cd:14:20:46:0f:4b:f3:d7:2e: e3:cd:e5:0d:4f:01:e5:c7:0b:7c:2c:49:f9:24:3e: af:f8:19:0b:07:3a:b7:6a:3d:cc:2e:93:9c:7c:e9: c6:40:b3:39:c1:a9:dd:26:ac:e4:1c:a0:d3:05:00: 5e:5c:23:61:62:6b:f4:fa:c1:5c:b9:14:25:f5:87: 30:6e:8b:59:5b:04:da:6c:15:48:12:53:d2:71:e3: 62:ea:82:1c:f0:c2:17:ff:37:9a:36:94:70:1a:45: d0:67:d3:34:0e:d8:4d:8b:22:5c:27:14:73:cf:31: f6:c5:d9:4e:52:34:6c:5d:9c:6d:cc:4c:8f:00:8c: dd:99:51:aa:6b:4c:b2:e1:0d:ab:15:aa:54:04:ac: e2:14:7f:94:18:4d:2a:25:1d:c5:5e:f2:44:e7:67: 9f:d6:44:48:26:b1:a3:52:ae:e1:2d:8f:f5:be:93: 91:0b:0a:1f:5d:8d:67:af:81:3f:9d:61:b0:8c:8a: 0c:96:c1:ff:3d:d2:2a:c8:97:f1:e8:03:8e:24:2f: 23:bc:09:bb:ae:2e:94:c3:b0:0f:47:29:fd:88:c6: 3c:cc:d2:84:20:65:31:2a:1d:0a:aa:4d:d9:b9:1d: f7:2a:be:a8:63:6a:f1:34:20:0f:d4:36:11:51:f7: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CC:AD:EF:6F:29:C5:21:AF:32:6B:72:31:18:E6:C2:56:3B:9A:A6 X509v3 Authority Key Identifier: keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:84:6e:01:f6:18:fe:c9:90:e0:ab:df:81:4d:b4:75:87:cb: 13:e6:66:cf:b2:b8:b1:ef:31:ef:5f:96:ff:b8:3b:5a:60:ef: 84:f2:58:3b:59:3e:54:7f:5d:85:a7:4b:db:ac:2d:39:a9:76: 9f:1a:92:32:27:54:c3:74:d2:63:a0:d8:e3:96:c2:cc:b6:8b: af:d5:c8:cd:7e:94:78:02:fe:82:5a:50:1c:37:a4:b5:84:c9: 56:6f:37:61:4c:5e:3f:04:cc:83:88:6b:a3:8f:25:b9:a7:de: c7:05:25:2d:76:19:6c:33:58:73:ff:12:ce:bd:3a:a3:64:6c: 28:23:2b:fd:34:80:91:50:a2:a8:95:1a:ad:b6:77:e0:18:10: c9:13:67:be:ea:d9:70:c9:ff:f2:e1:dd:b7:fa:a8:d7:f6:eb: 5a:0a:ac:7e:69:d1:0e:ef:d2:de:32:08:c1:e9:29:71:40:d2: f0:2d:51:66:83:5f:65:43:8c:21:82:24:14:94:01:95:88:3a: 80:a5:6e:fe:ca:91:ad:36:b8:ba:b5:b1:73:1a:1a:31:80:f7: f3:b7:e0:66:cb:35:99:97:85:0f:29:22:c9:b2:65:22:14:bb: 18:cb:6e:77:18:57:08:b6:24:89:a9:af:8e:14:d7:fd:26:85: 27:4d:bf:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwv6cTKnkVx3iQfWItoFZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTg3YzViMGQ0MTU1MTZkNzJmNTkxNGY1ZjVmYjUyOGEz MmExMmMwHhcNMjUxMjA1MjMwMTIzWhcNMjUxMjA2MjMwMTIzWjAzMTEwLwYDVQQD Eyg5MmNjYWRlZjZmMjljNTIxYWYzMjZiNzIzMTE4ZTZjMjU2M2I5YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA333c6f3NFCBGD0vz1y7jzeUNTwHl xwt8LEn5JD6v+BkLBzq3aj3MLpOcfOnGQLM5wandJqzkHKDTBQBeXCNhYmv0+sFc uRQl9YcwbotZWwTabBVIElPSceNi6oIc8MIX/zeaNpRwGkXQZ9M0DthNiyJcJxRz zzH2xdlOUjRsXZxtzEyPAIzdmVGqa0yy4Q2rFapUBKziFH+UGE0qJR3FXvJE52ef 1kRIJrGjUq7hLY/1vpORCwofXY1nr4E/nWGwjIoMlsH/PdIqyJfx6AOOJC8jvAm7 ri6Uw7APRyn9iMY8zNKEIGUxKh0Kqk3ZuR33Kr6oY2rxNCAP1DYRUfe7UQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJLMre9vKcUhrzJrcjEY5sJWO5qmMB8GA1UdIwQY MBaAFPlYfFsNQVUW1y9ZFPX1+1KKMqEsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WaDhXdzFCVlJiWEwxa1U5Zlg3VW9veW9Tdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZjdkMDcwLTMyODEtNDdiNy04NWM4 LThmYjYyNDM5NGU3YS8xLzEtVmg4V3cxQlZSYlhMMWtVOWZYN1Vvb3lvU3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVjL2Y3ZDA3MC0zMjgxLTQ3YjctODVjOC04ZmI2MjQzOTRl N2EvMS8xLVZoOFd3MUJWUmJYTDFrVTlmWDdVb295b1N3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIRu AfYY/smQ4KvfgU20dYfLE+Zmz7K4se8x71+W/7g7WmDvhPJYO1k+VH9dhadL26wt Oal2nxqSMidUw3TSY6DY45bCzLaLr9XIzX6UeAL+glpQHDektYTJVm83YUxePwTM g4hro48luafexwUlLXYZbDNYc/8Szr06o2RsKCMr/TSAkVCiqJUarbZ34BgQyRNn vurZcMn/8uHdt/qo1/brWgqsfmnRDu/S3jIIwekpcUDS8C1RZoNfZUOMIYIkFJQB lYg6gKVu/sqRrTa4urWxcxoaMYD387fgZss1mZeFDykiybJlIhS7GMtudxhXCLYk iamvjhTX/SaFJ02/Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:38 2025 by rpki-client