This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json) Hash identifier: z9QKktat235YIjWNxJgUDGNESH/8I/AbLjXeG5WyiDQ= Subject key identifier: 44:19:0A:EE:DB:CF:EC:5D:96:54:6B:53:E9:40:45:D4:10:CC:8E:4F Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78 Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278 Certificate serial: 019AF352C1D35591BD649173A68687724315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 11:01:18 +0000 Manifest this update: Sat 06 Dec 2025 11:01:18 +0000 Manifest next update: Sun 07 Dec 2025 11:01:18 +0000 Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: kmemuiae9ui9jO/0xwbts7OdHrNonF8ZL5+xzxdbPLI=) 2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=) 3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c1:d3:55:91:bd:64:91:73:a6:86:87:72:43:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278 Validity Not Before: Dec 6 11:01:18 2025 GMT Not After : Dec 7 11:01:18 2025 GMT Subject: CN=44190aeedbcfec5d96546b53e94045d410cc8e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:8f:47:cc:f9:da:ec:1b:95:05:bb:76:85: 74:a0:c6:10:84:ba:f0:97:7d:77:b6:ec:cf:83:de: 05:07:56:05:9d:b2:54:88:03:70:ad:ad:0f:95:c0: ed:78:2d:a9:19:61:ad:58:1f:0e:bf:3c:c6:b9:91: 49:5c:13:c9:75:d7:b9:42:87:bd:9d:39:dd:d5:fa: bd:34:60:3d:31:b0:e3:86:88:56:67:63:89:6b:70: 54:9b:80:9d:21:e8:80:39:1a:6a:f3:13:21:ff:67: 44:45:c5:d6:75:d5:02:f0:2a:71:ba:f9:ec:53:ff: b2:6a:e2:19:fd:aa:66:ec:c3:50:f5:a9:b5:55:95: 8c:2d:77:dd:8a:15:49:e9:b3:fa:72:db:32:14:da: 98:90:b0:1f:fc:d8:a8:49:9a:64:21:ac:e6:f3:cd: f2:41:d5:63:6a:b4:32:47:db:11:7f:69:b2:6f:dd: 19:b0:23:62:61:48:98:fb:e4:fb:e5:de:50:8b:f2: a0:8f:09:bc:64:e7:24:77:9d:dd:8c:53:15:5b:06: 21:fc:7f:3a:bf:d9:86:6e:e3:3a:48:d6:13:f3:98: b6:49:e0:5a:21:88:3d:46:81:e4:1b:a5:4d:2b:e6: 4d:9f:b8:d6:9e:2d:6d:b5:00:70:06:4a:e5:1b:91: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:0A:EE:DB:CF:EC:5D:96:54:6B:53:E9:40:45:D4:10:CC:8E:4F X509v3 Authority Key Identifier: keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2b:ad:8f:bc:aa:b5:74:33:da:f6:90:f9:af:79:04:a8:c2: e1:29:68:02:b4:d9:ab:cd:27:ab:91:41:e1:6c:db:e3:5f:1c: db:f0:0d:b5:f7:9c:98:29:26:b0:36:45:ea:9f:9a:e1:4e:e7: ee:9d:42:3c:cf:44:e3:d2:06:88:54:15:27:f1:88:d3:5a:04: 6c:54:61:bb:b6:b9:55:d3:b3:2b:71:a7:11:63:86:06:b1:f7: 31:ec:fc:6f:25:ab:e2:72:36:10:13:34:d1:c9:16:2d:22:1c: dc:db:ce:d0:30:83:12:57:b4:13:3b:63:e3:7b:a1:30:c4:44: f6:7d:ce:9c:da:0e:e5:b6:be:fb:65:dd:54:48:f1:1b:65:ab: 0a:6f:1d:06:4a:45:08:a6:b9:f3:fd:c5:4c:d0:4f:8f:ea:71: 76:a9:74:19:b2:c1:e4:4a:34:2b:0b:3d:d2:0a:89:e6:37:43: 26:9e:4f:a5:5c:54:e2:1f:84:50:19:b8:88:69:63:06:75:bf: 4a:27:7b:74:a0:e2:0a:9d:f2:85:ce:78:7a:63:b7:82:ff:5f: 9e:96:30:f6:40:b2:aa:7f:18:be:a4:37:b5:03:99:94:e1:af: ee:82:4c:37:aa:2e:5d:87:0f:ab:b5:9c:3c:67:eb:c4:da:69: c7:9d:b3:1d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzUsHTVZG9ZJFzpoaHckMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTAzYzA3NWE2OTA1NTZiZDQ2MjEyMmIyNDY5OWUxYjZi MTkyNzgwHhcNMjUxMjA2MTEwMTE4WhcNMjUxMjA3MTEwMTE4WjAzMTEwLwYDVQQD Eyg0NDE5MGFlZWRiY2ZlYzVkOTY1NDZiNTNlOTQwNDVkNDEwY2M4ZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8mPR8z52uwblQW7doV0oMYQhLrw l313tuzPg94FB1YFnbJUiANwra0PlcDteC2pGWGtWB8OvzzGuZFJXBPJdde5Qoe9 nTnd1fq9NGA9MbDjhohWZ2OJa3BUm4CdIeiAORpq8xMh/2dERcXWddUC8Cpxuvns U/+yauIZ/apm7MNQ9am1VZWMLXfdihVJ6bP6ctsyFNqYkLAf/NioSZpkIazm883y QdVjarQyR9sRf2myb90ZsCNiYUiY++T75d5Qi/Kgjwm8ZOckd53djFMVWwYh/H86 v9mGbuM6SNYT85i2SeBaIYg9RoHkG6VNK+ZNn7jWni1ttQBwBkrlG5EY+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEQZCu7bz+xdllRrU+lARdQQzI5PMB8GA1UdIwQY MBaAFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WQThCMXBwQlZhOVJpRWlza2FaNGJheGtuZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0LTdjOTYtNGViNy05OTQw LTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVpc2thWjRiYXhrbmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzc1LzRmYTRiNC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUz ZjUvMS8xLVZBOEIxcHBCVmE5UmlFaXNrYVo0YmF4a25nLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCut j7yqtXQz2vaQ+a95BKjC4SloArTZq80nq5FB4Wzb418c2/ANtfecmCkmsDZF6p+a 4U7n7p1CPM9E49IGiFQVJ/GI01oEbFRhu7a5VdOzK3GnEWOGBrH3Mez8byWr4nI2 EBM00ckWLSIc3NvO0DCDEle0Eztj43uhMMRE9n3OnNoO5ba++2XdVEjxG2WrCm8d BkpFCKa58/3FTNBPj+pxdql0GbLB5Eo0Kws90gqJ5jdDJp5PpVxU4h+EUBm4iGlj BnW/Sid7dKDiCp3yhc54emO3gv9fnpYw9kCyqn8YvqQ3tQOZlOGv7oJMN6ouXYcP q7WcPGfrxNppx52zHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:57 2025 by rpki-client