This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json) Hash identifier: nN7QPxxPltf2OIeFvDW+egvQuBb7sHqvyjIkX8Gvov8= Subject key identifier: 70:F0:AA:A0:BF:4B:73:63:45:2B:7A:58:B8:9E:99:11:71:16:9C:71 Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55 Certificate serial: 019AF49BF0D3C041145BB16EE5824210A6E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 17:00:51 +0000 Manifest this update: Sat 06 Dec 2025 17:00:51 +0000 Manifest next update: Sun 07 Dec 2025 17:00:51 +0000 Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: 2lm1DTAnukaY34+Ddd53CEva6hR+rckZb/VRm1QZTl8=) 2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=) 3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=) 4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:f0:d3:c0:41:14:5b:b1:6e:e5:82:42:10:a6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55 Validity Not Before: Dec 6 17:00:51 2025 GMT Not After : Dec 7 17:00:51 2025 GMT Subject: CN=70f0aaa0bf4b7363452b7a58b89e991171169c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:82:d2:0d:d7:2c:cc:6c:2b:78:80:4f:5d: 34:22:31:75:86:53:f2:11:81:56:39:77:a2:73:90: 14:0c:95:96:78:b7:13:5f:3f:ab:b6:13:fd:49:c0: 9d:bd:9b:39:b9:44:c8:77:6b:1a:a1:fb:64:ee:90: 2c:d4:24:d3:b5:2c:bf:0d:6f:99:49:e3:fe:14:dc: 1d:7d:f8:33:24:31:70:78:bc:c4:1b:b3:b2:ad:77: aa:84:01:3f:1c:e3:7f:4b:e6:69:a4:e9:d9:03:e7: 90:37:ca:b5:a6:75:12:f7:c5:1d:25:f0:39:41:39: 15:c9:05:41:16:9c:48:4d:5c:5d:62:60:d8:b1:0d: 03:a7:b1:2f:a4:4a:e6:d3:d1:45:fd:50:90:79:e7: e9:74:44:5e:07:83:88:1d:b1:44:e1:6a:bd:d0:9e: c1:f3:93:42:40:95:45:62:65:ff:12:df:37:79:cf: f4:4c:6b:97:ec:9f:3e:d3:1a:1c:7e:b0:36:1f:22: 94:4a:fd:f2:dd:2a:bf:07:0b:a1:82:55:c1:2e:ca: 42:25:1b:75:6d:76:71:e9:50:55:65:d2:11:8b:22: eb:47:a2:e8:c7:11:e5:5d:70:12:9b:7d:3c:85:1e: fc:26:c8:89:42:5a:a3:76:1d:cf:83:ae:0c:8f:dc: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F0:AA:A0:BF:4B:73:63:45:2B:7A:58:B8:9E:99:11:71:16:9C:71 X509v3 Authority Key Identifier: keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ca:38:23:05:da:15:67:d2:55:48:7f:bd:03:cf:1e:4f:74: 9f:04:06:e5:09:bf:c6:a9:11:88:8c:ef:9f:1a:e1:ef:91:a9: bc:09:50:a3:bc:8e:2e:a7:08:d6:63:00:db:78:81:ec:4a:28: e7:b2:af:a3:09:fe:56:d5:45:3b:9b:38:63:be:e2:ad:34:a2: 6a:8e:54:67:7c:a4:a2:1d:73:69:e9:af:e3:9e:4a:a4:59:7b: 95:4e:56:7b:c9:15:8a:51:63:25:6a:13:65:7b:8c:af:8c:c7: 41:88:f2:f2:4c:97:71:22:48:24:19:34:d3:70:ae:58:2b:94: 60:25:0f:9b:19:e3:ab:b9:5a:5b:74:d8:68:a5:e6:14:e7:3f: 4f:67:e5:7b:35:ee:6e:e8:f6:9f:d1:c8:c4:67:0e:40:fc:a9: 6a:12:df:ab:eb:c0:22:7b:40:cd:1e:40:8e:30:7a:d1:49:8e: 3e:3b:fa:69:0a:51:ad:e2:40:13:ab:e9:59:da:b0:8c:09:fd: f3:3a:b7:9f:44:06:09:97:2e:18:0d:58:fc:96:b4:25:7f:55: f5:db:ac:3b:46:46:a6:83:06:30:0b:94:8e:63:67:57:f7:94: 9f:26:8c:73:e0:6c:43:f1:0d:59:70:38:42:9b:94:6f:7e:76: 21:ed:1a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/DTwEEUW7Fu5YJCEKboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3 MjFlNTUwHhcNMjUxMjA2MTcwMDUxWhcNMjUxMjA3MTcwMDUxWjAzMTEwLwYDVQQD Eyg3MGYwYWFhMGJmNGI3MzYzNDUyYjdhNThiODllOTkxMTcxMTY5YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqCC0g3XLMxsK3iAT100IjF1hlPy EYFWOXeic5AUDJWWeLcTXz+rthP9ScCdvZs5uUTId2saoftk7pAs1CTTtSy/DW+Z SeP+FNwdffgzJDFweLzEG7OyrXeqhAE/HON/S+ZppOnZA+eQN8q1pnUS98UdJfA5 QTkVyQVBFpxITVxdYmDYsQ0Dp7EvpErm09FF/VCQeefpdEReB4OIHbFE4Wq90J7B 85NCQJVFYmX/Et83ec/0TGuX7J8+0xocfrA2HyKUSv3y3Sq/BwuhglXBLspCJRt1 bXZx6VBVZdIRiyLrR6LoxxHlXXASm308hR78JsiJQlqjdh3Pg64Mj9ySFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDwqqC/S3NjRSt6WLiemRFxFpxxMB8GA1UdIwQY MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt NmQ2NTVjZDk0NDY4LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4 LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgso4IwXa FWfSVUh/vQPPHk90nwQG5Qm/xqkRiIzvnxrh75GpvAlQo7yOLqcI1mMA23iB7Eoo 57Kvown+VtVFO5s4Y77irTSiao5UZ3ykoh1zaemv455KpFl7lU5We8kVilFjJWoT ZXuMr4zHQYjy8kyXcSJIJBk003CuWCuUYCUPmxnjq7laW3TYaKXmFOc/T2flezXu buj2n9HIxGcOQPypahLfq+vAIntAzR5AjjB60UmOPjv6aQpRreJAE6vpWdqwjAn9 8zq3n0QGCZcuGA1Y/Ja0JX9V9dusO0ZGpoMGMAuUjmNnV/eUnyaMc+BsQ/ENWXA4 QpuUb352Ie0a7g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:59 2025 by rpki-client