This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json) Hash identifier: lLE9KmgcTvP1RWWQZeji/4iAoOnJSNehvOoUehILSoE= Subject key identifier: 22:47:B3:E3:08:1A:1A:EB:41:96:EA:7A:A7:92:CD:79:5D:C0:5D:47 Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Certificate serial: 019AF27651EC71B73BF404E46285283455EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft Manifest number: 0132 Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: 5apdX06ySHhLzJ2g3YNZd1iI7hqXQrYTbPvBsSEJtkM=) 2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:51:ec:71:b7:3b:f4:04:e4:62:85:28:34:55:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=2247b3e3081a1aeb4196ea7aa792cd795dc05d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:8d:77:8c:48:42:56:da:ab:04:97:9c:88: b1:b7:d0:89:50:81:a0:0d:ba:bb:c4:c2:6c:9c:1f: 03:5b:24:aa:7c:f1:ff:5d:80:07:03:0a:b4:90:85: 99:13:07:f3:3d:96:36:6b:b2:24:01:bf:25:73:f8: 0c:aa:b8:a3:4f:25:80:5c:d0:4e:eb:b8:30:d2:83: 3d:27:79:d0:a8:b8:f3:d2:5d:bc:ba:98:cb:95:ea: 5d:93:c1:11:66:1d:81:f4:67:1e:b5:44:a5:9f:89: cd:13:8d:f7:21:7e:bf:a3:59:8c:32:5e:fa:3a:47: a4:86:02:26:36:6d:a8:8d:70:f6:e3:21:49:a9:69: bc:d8:a8:a4:eb:b2:b1:54:4f:2f:6d:4a:26:2f:69: 80:09:3e:b6:e4:72:e4:d7:2f:f0:e8:e7:d4:6b:89: 63:30:83:f1:98:e7:69:44:22:ba:00:06:98:af:81: 23:7f:8d:78:df:93:fa:3e:f9:a2:22:b6:59:1a:c8: 82:62:9e:64:e2:04:56:21:18:2d:e2:3a:98:1e:57: 2a:61:84:2e:62:47:03:fc:0f:59:66:59:ae:f4:34: 6b:20:95:5f:4b:f3:94:81:73:68:19:f0:e8:04:a0: 0e:e5:47:b3:61:f1:70:a8:b3:cf:73:a0:19:75:20: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:47:B3:E3:08:1A:1A:EB:41:96:EA:7A:A7:92:CD:79:5D:C0:5D:47 X509v3 Authority Key Identifier: keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6f:04:e2:22:ff:be:43:ca:17:71:62:73:af:25:53:9d:81: c3:1a:f8:73:ad:cc:64:8d:2e:88:d8:5e:ca:fd:4f:a3:cb:4a: b5:ae:c6:c5:93:33:d9:ff:0c:6a:ae:7d:a8:92:38:5b:c2:dd: 09:d3:96:c7:04:6c:32:04:94:1f:c8:84:bc:0c:70:6b:25:ca: 8d:6d:c0:fc:8f:59:f1:24:a7:46:b3:98:23:26:3c:bb:8c:ec: 76:7d:7e:c2:be:a3:28:80:21:71:55:9d:f7:c7:cd:e8:b4:ae: 39:d1:f1:2c:c3:61:a0:c8:a0:f0:7f:50:60:90:c6:80:65:3b: be:ff:56:10:64:dc:10:3d:6e:f5:92:f9:ae:12:3f:02:37:66: 75:d0:ed:92:a7:55:dd:63:51:0a:1a:a1:aa:71:e3:3b:e1:a7: 40:3f:e1:a3:34:76:ae:0b:0d:65:a6:bb:15:82:54:d1:65:eb: 51:c5:3c:15:78:b7:4f:9f:d1:9f:56:f9:ce:fe:8a:58:a7:47: 53:8c:0d:51:e4:38:ef:25:13:d7:56:ae:12:f7:c9:db:9c:b0: 9d:82:31:91:c9:fe:fe:d0:49:cb:35:c4:4c:15:7d:82:01:93: 7a:f6:c4:14:cb:b5:92:e8:b8:6b:5d:70:e5:d4:d3:76:6d:d1: 3a:18:74:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlHscbc79ATkYoUoNFXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx ZmRlY2EwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EygyMjQ3YjNlMzA4MWExYWViNDE5NmVhN2FhNzkyY2Q3OTVkYzA1ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWaNd4xIQlbaqwSXnIixt9CJUIGg Dbq7xMJsnB8DWySqfPH/XYAHAwq0kIWZEwfzPZY2a7IkAb8lc/gMqrijTyWAXNBO 67gw0oM9J3nQqLjz0l28upjLlepdk8ERZh2B9GcetUSln4nNE433IX6/o1mMMl76 OkekhgImNm2ojXD24yFJqWm82Kik67KxVE8vbUomL2mACT625HLk1y/w6OfUa4lj MIPxmOdpRCK6AAaYr4Ejf41435P6PvmiIrZZGsiCYp5k4gRWIRgt4jqYHlcqYYQu YkcD/A9ZZlmu9DRrIJVfS/OUgXNoGfDoBKAO5UezYfFwqLPPc6AZdSDsgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJHs+MIGhrrQZbqeqeSzXldwF1HMB8GA1UdIwQY MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG8E4iL/ vkPKF3Fic68lU52Bwxr4c63MZI0uiNheyv1Po8tKta7GxZMz2f8Maq59qJI4W8Ld CdOWxwRsMgSUH8iEvAxwayXKjW3A/I9Z8SSnRrOYIyY8u4zsdn1+wr6jKIAhcVWd 98fN6LSuOdHxLMNhoMig8H9QYJDGgGU7vv9WEGTcED1u9ZL5rhI/AjdmddDtkqdV 3WNRChqhqnHjO+GnQD/hozR2rgsNZaa7FYJU0WXrUcU8FXi3T5/Rn1b5zv6KWKdH U4wNUeQ47yUT11auEvfJ25ywnYIxkcn+/tBJyzXETBV9ggGTevbEFMu1kui4a11w 5dTTdm3ROhh0BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:30 2025 by rpki-client