This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json) Hash identifier: e+Cc170yqYbpszu9cm9xJNgvbZeffsV4XumqPjwLi/0= Subject key identifier: 9F:21:1D:68:41:FB:40:E9:2A:B8:06:C7:B0:C6:49:0F:9A:D0:E9:71 Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79 Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479 Certificate serial: 019AF19B060B491F7787F436D73456449BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: 8LdgAWUN76qKl8iAwtqKx296Id95ZtAeS4eRpAIleZw=) 2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:06:0b:49:1f:77:87:f4:36:d7:34:56:44:9b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=9f211d6841fb40e92ab806c7b0c6490f9ad0e971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:8b:56:4e:5a:23:a0:56:69:ad:34:36:8a: 4c:d7:f4:8b:40:1d:dd:00:4d:87:2b:b0:76:02:7a: fc:b5:e3:c4:05:d4:eb:56:c9:69:b8:cf:89:e3:43: 88:60:f3:19:70:38:da:a4:a7:fa:38:96:a0:a2:cd: 8c:57:96:6a:b0:aa:92:ef:0b:6c:d0:e4:79:0b:da: 50:13:09:4b:e5:d5:09:3f:eb:fc:7b:96:b9:0b:69: 73:f3:9b:fc:70:bb:4d:af:88:d1:f8:4f:0a:58:26: 71:89:45:be:63:1c:30:41:00:93:ba:7c:30:75:60: ee:1a:62:6a:35:9f:c6:26:f9:7e:8e:37:08:6d:b0: 9f:1e:41:65:75:37:38:64:fb:33:16:3a:a8:b3:b9: d1:6e:16:de:25:cb:b8:78:38:0d:80:51:0f:ea:12: f3:f7:38:69:b2:fd:77:84:f2:fc:1c:d9:35:b8:46: f6:ec:a1:63:f9:a1:e1:35:84:a4:48:19:84:b4:75: 57:ab:30:8e:92:7a:b0:d9:83:2f:36:6a:77:14:0d: 5a:f4:1f:0e:5c:23:08:18:63:cb:d6:d8:21:65:65: ce:20:ff:98:21:23:32:d9:2c:fb:9c:30:84:ff:3e: 9f:09:a6:f7:e5:06:3a:a6:9f:ab:75:c4:19:9e:ac: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:1D:68:41:FB:40:E9:2A:B8:06:C7:B0:C6:49:0F:9A:D0:E9:71 X509v3 Authority Key Identifier: keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e2:ab:0f:65:b7:fa:72:77:8a:92:05:7c:8c:20:f0:cd:0f: 77:50:cb:d7:d9:2f:3b:2a:4f:6f:ee:21:55:ac:6d:c1:d9:47: 96:39:ed:0e:e5:ec:30:62:25:40:9b:15:e6:a8:cc:de:15:b6: 41:24:d7:ee:97:de:2a:be:78:17:80:08:38:6f:ac:78:af:32: 8a:3f:e0:d2:bd:f6:28:6b:f0:bb:e3:fb:36:fa:12:64:0c:61: ea:30:ed:f5:34:82:a6:c3:23:e9:81:db:29:c0:80:dc:49:f0: 16:3d:73:2f:1a:ee:11:b3:83:e8:3e:fc:14:bb:88:0b:36:15: 47:e3:ed:20:8e:53:64:8a:22:3f:b4:e6:6d:d8:44:ce:a0:40: 57:8d:38:4b:db:bf:8e:d3:08:80:9b:5f:16:12:7b:25:30:00: f9:2f:fe:31:b1:5d:bc:0d:7b:e1:bc:3f:e8:d0:8d:ef:17:79: 85:7b:c1:41:1f:94:1b:8b:17:1b:3e:a7:d5:eb:f6:db:35:23: fa:5f:a4:7a:49:00:0b:b2:fc:25:12:f8:42:7b:e8:94:68:6e: a7:83:05:77:3b:d4:19:18:59:56:95:09:10:7f:94:3d:bb:d5: 19:75:42:24:7d:e3:66:6b:08:1c:f1:3d:72:29:a5:a5:d9:e2: c2:34:a7:74 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmwYLSR93h/Q21zRWRJuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzMyMDk2MjVlMmEwM2RkZWVjZjkxYmI0ODA1NDhlNTcy OWQ0NzkwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg5ZjIxMWQ2ODQxZmI0MGU5MmFiODA2YzdiMGM2NDkwZjlhZDBlOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjduLVk5aI6BWaa00NopM1/SLQB3d AE2HK7B2Anr8tePEBdTrVslpuM+J40OIYPMZcDjapKf6OJagos2MV5ZqsKqS7wts 0OR5C9pQEwlL5dUJP+v8e5a5C2lz85v8cLtNr4jR+E8KWCZxiUW+YxwwQQCTunww dWDuGmJqNZ/GJvl+jjcIbbCfHkFldTc4ZPszFjqos7nRbhbeJcu4eDgNgFEP6hLz 9zhpsv13hPL8HNk1uEb27KFj+aHhNYSkSBmEtHVXqzCOknqw2YMvNmp3FA1a9B8O XCMIGGPL1tghZWXOIP+YISMy2Sz7nDCE/z6fCab35QY6pp+rdcQZnqz8sQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJ8hHWhB+0DpKrgGx7DGSQ+a0OlxMB8GA1UdIwQY MBaAFPlzIJYl4qA93uz5G7SAVI5XKdR5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YTWdsaVhpb0QzZTdQa2J0SUJVamxjcDFIay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYWY1NGU4LWJkNjMtNDI3ZC04Y2M4 LWY0ZWNlYmJiMWVjMi8xLzEtWE1nbGlYaW9EM2U3UGtidElCVWpsY3AxSGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVkL2FmNTRlOC1iZDYzLTQyN2QtOGNjOC1mNGVjZWJiYjFl YzIvMS8xLVhNZ2xpWGlvRDNlN1BrYnRJQlVqbGNwMUhrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauKr D2W3+nJ3ipIFfIwg8M0Pd1DL19kvOypPb+4hVaxtwdlHljntDuXsMGIlQJsV5qjM 3hW2QSTX7pfeKr54F4AIOG+seK8yij/g0r32KGvwu+P7NvoSZAxh6jDt9TSCpsMj 6YHbKcCA3EnwFj1zLxruEbOD6D78FLuICzYVR+PtII5TZIoiP7TmbdhEzqBAV404 S9u/jtMIgJtfFhJ7JTAA+S/+MbFdvA174bw/6NCN7xd5hXvBQR+UG4sXGz6n1ev2 2zUj+l+kekkAC7L8JRL4QnvolGhup4MFdzvUGRhZVpUJEH+UPbvVGXVCJH3jZmsI HPE9cimlpdniwjSndA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:41 2025 by rpki-client