This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json) Hash identifier: jn9OBPZNorVxJ+xMX5k63A/k9PM0JXcoJX0m+tf+4sQ= Subject key identifier: EB:35:BB:E8:42:73:D0:62:69:96:89:B2:FD:24:DF:D1:69:3D:32:FA Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Certificate serial: 019B416D76C67F18C5ECF6D5D7E11F16EC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft Manifest number: 0298 Signing time: Sun 21 Dec 2025 15:00:51 +0000 Manifest this update: Sun 21 Dec 2025 15:00:51 +0000 Manifest next update: Mon 22 Dec 2025 15:00:51 +0000 Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: +r4HWvlThuZHxmh8LEs0dqpzUxKkY8fTeZNcWByBDyo=) 2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:76:c6:7f:18:c5:ec:f6:d5:d7:e1:1f:16:ec:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Validity Not Before: Dec 21 15:00:51 2025 GMT Not After : Dec 22 15:00:51 2025 GMT Subject: CN=eb35bbe84273d062699689b2fd24dfd1693d32fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:15:8b:93:79:35:15:22:6f:9e:ed:f5:f1: 35:f5:c5:30:0d:5c:32:41:0d:00:6c:e8:2c:9a:54: e2:bb:6d:25:40:06:0d:63:92:9c:25:6c:1a:08:fb: 56:6b:12:2f:7a:c3:f4:d9:2a:26:6c:7e:0c:81:de: 5a:cf:25:a0:e9:c6:48:31:6f:14:4f:45:ea:a1:73: 0c:3e:12:79:e5:9a:b3:d1:e1:37:55:52:4f:32:f9: 06:f9:51:a8:37:72:f4:c9:1f:c3:c0:bb:ed:89:66: 4c:c3:a4:14:1b:b6:58:78:1e:c1:8a:58:7b:68:60: bb:9a:7e:16:fd:a3:0f:ac:34:32:4e:77:e0:b1:d8: 80:e1:b3:9d:1c:20:0f:ba:2f:46:cd:f4:24:a2:83: 30:0b:4f:60:7e:99:46:1d:d8:db:6e:a6:87:49:c9: 0f:4a:a3:3e:30:96:70:52:ca:bd:cc:5d:c5:c5:79: 3f:ae:a7:ef:0b:ea:74:57:bd:ee:56:b6:e8:6f:1b: e1:21:0a:58:a3:f4:98:f9:1f:9b:87:a2:78:24:4c: 32:48:9b:62:9a:3d:40:cc:18:79:6e:ff:90:de:c3: 57:94:f1:b2:3a:d9:ec:3f:f7:c8:d4:92:87:e6:e1: 7a:61:03:84:7f:37:ab:49:2a:70:f6:4b:20:13:35: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:BB:E8:42:73:D0:62:69:96:89:B2:FD:24:DF:D1:69:3D:32:FA X509v3 Authority Key Identifier: keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:11:68:ec:2f:90:b3:ac:96:17:49:05:f6:60:35:19:aa:f8: 19:ce:a8:88:26:14:d3:72:34:5d:df:19:0b:ee:a7:0f:23:6b: 52:f6:f1:a2:dc:6a:df:86:82:a0:b4:45:df:11:64:e2:bf:80: 55:5a:ad:56:99:98:af:3d:cb:0a:b1:41:18:8e:50:5b:e5:1f: d2:32:0f:4e:15:02:e6:bb:14:5e:53:ad:6b:0b:64:17:c5:30: dc:fb:cb:69:01:0b:b1:54:97:f8:8e:5b:de:0f:d9:f7:ff:ab: 49:6a:4d:11:93:35:2f:23:1b:54:d0:4d:3f:23:da:dc:9c:54: cf:c4:99:bf:f0:9a:f0:ce:42:cf:f9:63:99:b4:e5:d7:f9:a6: 7f:57:67:70:63:12:89:bd:a8:f3:0b:60:77:79:15:e3:1b:f7: dd:d9:d8:af:b0:13:82:e9:31:25:28:8e:ec:d2:d7:ba:da:c3: 6a:de:c0:26:bd:16:12:be:93:f4:4e:34:33:c2:51:1e:8d:5a: 99:67:ad:42:80:d9:48:a0:b3:73:19:c1:74:2a:27:99:8f:d8: c5:2e:ad:67:78:2d:a8:88:da:3b:9c:90:dd:07:df:a8:4d:03: cd:fc:72:ee:22:00:6c:bf:91:59:88:6d:17:c6:44:73:eb:5f: 60:a0:50:81 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtBbXbGfxjF7PbV1+EfFuwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3 YTk0NmYwHhcNMjUxMjIxMTUwMDUxWhcNMjUxMjIyMTUwMDUxWjAzMTEwLwYDVQQD EyhlYjM1YmJlODQyNzNkMDYyNjk5Njg5YjJmZDI0ZGZkMTY5M2QzMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWUVi5N5NRUib57t9fE19cUwDVwy QQ0AbOgsmlTiu20lQAYNY5KcJWwaCPtWaxIvesP02SombH4Mgd5azyWg6cZIMW8U T0XqoXMMPhJ55Zqz0eE3VVJPMvkG+VGoN3L0yR/DwLvtiWZMw6QUG7ZYeB7Bilh7 aGC7mn4W/aMPrDQyTnfgsdiA4bOdHCAPui9GzfQkooMwC09gfplGHdjbbqaHSckP SqM+MJZwUsq9zF3FxXk/rqfvC+p0V73uVrbobxvhIQpYo/SY+R+bh6J4JEwySJti mj1AzBh5bv+Q3sNXlPGyOtnsP/fI1JKH5uF6YQOEfzerSSpw9ksgEzU2ZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOs1u+hCc9BiaZaJsv0k39FpPTL6MB8GA1UdIwQY MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBFo 7C+Qs6yWF0kF9mA1Gar4Gc6oiCYU03I0Xd8ZC+6nDyNrUvbxotxq34aCoLRF3xFk 4r+AVVqtVpmYrz3LCrFBGI5QW+Uf0jIPThUC5rsUXlOtawtkF8Uw3PvLaQELsVSX +I5b3g/Z9/+rSWpNEZM1LyMbVNBNPyPa3JxUz8SZv/Ca8M5Cz/ljmbTl1/mmf1dn cGMSib2o8wtgd3kV4xv33dnYr7ATgukxJSiO7NLXutrDat7AJr0WEr6T9E40M8JR Ho1amWetQoDZSKCzcxnBdConmY/YxS6tZ3gtqIjaO5yQ3QffqE0Dzfxy7iIAbL+R WYhtF8ZEc+tfYKBQgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:21:11 2025 by rpki-client