This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json) Hash identifier: L2g3w85FVIHT4m8Pm0xB70QX3WCGd0PMVSR7VtBbgMg= Subject key identifier: 19:05:9B:56:F4:E7:96:07:9A:00:73:D1:33:52:65:A2:99:C1:C3:AB Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Certificate serial: 019AF31B842C1F550F25CAB7A29570CD25E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 10:00:58 +0000 Manifest this update: Sat 06 Dec 2025 10:00:58 +0000 Manifest next update: Sun 07 Dec 2025 10:00:58 +0000 Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: HO18xMNrlgW/bZJeYkdBc6dZ0ndv+yz1OtuGwzS6BiA=) 2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:84:2c:1f:55:0f:25:ca:b7:a2:95:70:cd:25:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Validity Not Before: Dec 6 10:00:58 2025 GMT Not After : Dec 7 10:00:58 2025 GMT Subject: CN=19059b56f4e796079a0073d1335265a299c1c3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:d0:aa:8b:e0:60:c2:4d:d2:01:fa:0a:88: ae:e7:12:03:aa:2e:29:a7:67:3d:66:6f:4c:95:4c: 5d:c7:c3:ef:e6:e9:f8:c5:28:d2:57:3e:2c:4d:b9: fb:56:86:23:b5:0b:40:1b:e5:b3:67:a4:36:67:46: d1:c5:e2:29:85:54:63:fa:4d:2f:bf:64:9c:20:56: 9f:72:3d:06:50:12:89:18:60:0b:66:61:d9:08:55: ec:da:9e:f9:4f:f5:fe:36:f8:9d:07:44:8c:8a:17: 24:4f:93:41:9c:ab:a1:62:2d:49:b5:1b:c9:2f:f0: 39:ab:aa:fe:df:d6:fc:57:a0:27:78:7a:52:b7:22: ed:43:e5:aa:c2:f5:ef:30:3f:28:cb:e9:ea:6f:34: 5d:2a:0b:72:7a:23:c6:3b:aa:6e:0c:dd:c6:30:c8: ea:15:8b:e3:3e:3b:e4:6b:a8:91:4b:a2:9b:58:07: 0c:38:14:e8:27:b0:07:c3:70:0c:b3:c4:54:5b:75: 1f:f5:5e:26:fa:d5:51:35:8c:9d:94:76:c8:41:30: 3a:11:21:c7:89:70:2c:e1:72:96:cb:17:22:c0:8f: 4b:ea:8a:02:8e:aa:e0:3d:5f:45:55:2c:41:73:18: f1:00:98:2d:60:2b:3a:b3:28:63:68:ef:58:3c:ee: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:05:9B:56:F4:E7:96:07:9A:00:73:D1:33:52:65:A2:99:C1:C3:AB X509v3 Authority Key Identifier: keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:77:6c:a8:fa:8f:cb:2f:ba:14:19:30:a2:04:74:c7:20: 52:3d:dd:c7:b1:f3:a2:74:fe:6c:2a:73:db:4d:6f:95:2f:1b: bd:3f:e7:21:29:65:cb:52:24:00:39:86:13:38:1e:ca:16:60: 6d:b5:54:8a:7d:74:3c:1e:ab:45:2d:74:95:d1:6e:45:60:93: cf:49:0b:01:81:82:f6:93:30:1d:7f:8d:e9:36:16:82:1c:35: 9c:0a:98:b5:f6:b4:c6:e8:43:b7:51:44:89:77:24:06:ea:36: e1:a1:fc:60:f8:5d:0e:49:1a:3a:87:91:bf:31:a8:a1:de:3b: 1c:34:9c:e6:1a:ce:2f:b9:31:df:76:aa:88:28:71:ef:b2:2f: f1:9f:b1:6f:77:c5:87:d8:87:8e:c2:6d:dc:20:63:a7:eb:e0: 30:b4:b3:a2:31:8a:82:69:b3:5b:75:05:7b:e0:c3:e0:d9:c4: d4:01:eb:7a:78:08:21:47:ba:92:58:e1:b8:fe:39:9f:a3:13: 38:a4:ef:94:0b:61:e1:49:1d:36:f5:88:ef:ff:1a:f0:a3:32: b8:4d:05:88:5d:ca:4a:e3:5f:db:85:2a:2e:aa:8d:1c:73:23: 40:54:f3:fc:e1:96:65:20:0f:e8:60:37:fa:3d:62:10:73:1c: 19:b7:9b:07 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG4QsH1UPJcq3opVwzSXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWQ1NGUxNTg1YWMwOTdjM2Y5MWRlZmMwMzNkZGE1NzIy ZWExZTYwHhcNMjUxMjA2MTAwMDU4WhcNMjUxMjA3MTAwMDU4WjAzMTEwLwYDVQQD EygxOTA1OWI1NmY0ZTc5NjA3OWEwMDczZDEzMzUyNjVhMjk5YzFjM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfjQqovgYMJN0gH6Coiu5xIDqi4p p2c9Zm9MlUxdx8Pv5un4xSjSVz4sTbn7VoYjtQtAG+WzZ6Q2Z0bRxeIphVRj+k0v v2ScIFafcj0GUBKJGGALZmHZCFXs2p75T/X+NvidB0SMihckT5NBnKuhYi1JtRvJ L/A5q6r+39b8V6AneHpStyLtQ+WqwvXvMD8oy+nqbzRdKgtyeiPGO6puDN3GMMjq FYvjPjvka6iRS6KbWAcMOBToJ7AHw3AMs8RUW3Uf9V4m+tVRNYydlHbIQTA6ESHH iXAs4XKWyxciwI9L6ooCjqrgPV9FVSxBcxjxAJgtYCs6syhjaO9YPO7OiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBkFm1b055YHmgBz0TNSZaKZwcOrMB8GA1UdIwQY MBaAFPodVOFYWsCXw/kd78Az3aVyLqHmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oMVU0Vmhhd0pmRC1SM3Z3RFBkcFhJdW9lWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNGQ3MDBlLTlmMWUtNDk1OS05Y2Zk LWIyYjU3MmUyNWFmZC8xLzEtaDFVNFZoYXdKZkQtUjN2d0RQZHBYSXVvZVkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E4LzRkNzAwZS05ZjFlLTQ5NTktOWNmZC1iMmI1NzJlMjVh ZmQvMS8xLWgxVTRWaGF3SmZELVIzdndEUGRwWEl1b2VZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFd3 bKj6j8svuhQZMKIEdMcgUj3dx7HzonT+bCpz201vlS8bvT/nISlly1IkADmGEzge yhZgbbVUin10PB6rRS10ldFuRWCTz0kLAYGC9pMwHX+N6TYWghw1nAqYtfa0xuhD t1FEiXckBuo24aH8YPhdDkkaOoeRvzGood47HDSc5hrOL7kx33aqiChx77Iv8Z+x b3fFh9iHjsJt3CBjp+vgMLSzojGKgmmzW3UFe+DD4NnE1AHrengIIUe6kljhuP45 n6MTOKTvlAth4UkdNvWI7/8a8KMyuE0FiF3KSuNf24UqLqqNHHMjQFTz/OGWZSAP 6GA3+j1iEHMcGbebBw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:33 2025 by rpki-client