This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json) Hash identifier: YAYrRTofRsmmkmzwL2PsLpVvS8bU1XMWdyX9XCcu+5k= Subject key identifier: C9:02:BF:53:B5:FD:FF:7D:17:72:7F:FB:13:CB:8B:C1:88:9F:5B:12 Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0 Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0 Certificate serial: 019B3231F662680F9C5C25A56410F7F816B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft Manifest number: 1551 Signing time: Thu 18 Dec 2025 16:01:33 +0000 Manifest this update: Thu 18 Dec 2025 16:01:33 +0000 Manifest next update: Fri 19 Dec 2025 16:01:33 +0000 Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: zLC5dzmcEFCDmJaEZWsA762VBXfPwP6u/ZgiQsktgqc=) 2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=) 3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:f6:62:68:0f:9c:5c:25:a5:64:10:f7:f8:16:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0 Validity Not Before: Dec 18 16:01:33 2025 GMT Not After : Dec 19 16:01:33 2025 GMT Subject: CN=c902bf53b5fdff7d17727ffb13cb8bc1889f5b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:31:3d:96:25:12:f3:ed:13:7d:9b:e6:64: 85:da:f7:80:5b:46:63:99:a6:70:71:fe:8d:92:27: a3:6b:6a:5f:e7:dc:f1:24:f3:26:49:d8:73:fd:91: 92:d5:6e:dc:aa:08:2d:74:b0:88:d8:d5:0f:eb:bb: bd:b5:a4:03:39:7c:4e:1f:a0:25:50:6f:58:27:ef: 70:16:6d:90:33:b1:52:2c:b9:80:73:0d:b9:72:c4: 8c:0e:3f:0a:99:70:49:8d:f4:4e:18:5c:5d:b2:f2: 9b:82:96:0f:cc:80:87:67:05:2d:c4:c7:53:07:e8: 1b:b1:3c:51:33:be:d3:51:b2:c7:e1:30:5e:64:eb: 03:9f:a9:31:d7:55:18:d4:f0:a2:41:a7:ca:21:f1: 76:68:6b:3e:20:32:3c:af:19:f7:ee:e9:6b:19:2c: 41:7c:4a:94:37:fb:16:f3:4c:26:00:d4:a9:ea:29: 68:70:a7:c6:b0:eb:13:31:f4:de:d1:ba:15:f1:58: 41:bb:21:96:3f:a1:2b:e8:34:dc:ca:7c:df:e6:bb: d3:9c:45:d8:9b:79:b8:d1:9d:79:60:e1:7e:e6:1e: 02:1b:6a:c7:b2:d9:58:fb:1f:5e:04:1c:db:44:9e: bb:37:f6:f7:12:c8:cb:98:d3:c3:c9:2e:ea:13:03: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:02:BF:53:B5:FD:FF:7D:17:72:7F:FB:13:CB:8B:C1:88:9F:5B:12 X509v3 Authority Key Identifier: keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d6:68:bd:31:6d:03:f0:78:88:d0:b4:2c:05:72:27:e2:a9: 6c:93:16:2b:38:cc:40:93:0e:ae:4d:ac:3a:2e:a8:e6:fe:06: 43:9f:89:78:a8:2a:b9:aa:b6:49:4a:e3:a4:53:5d:62:6a:f8: 44:58:ab:c6:31:61:d3:71:1e:94:85:79:ce:92:cd:41:17:b0: d9:44:36:20:e9:3a:20:30:a5:16:e8:a0:36:46:74:0d:00:8f: 31:ae:a5:2e:cd:69:28:57:b7:62:91:bc:f9:4a:a2:e1:d4:66: d9:6a:34:b6:ea:66:a6:0a:f4:0d:62:25:3d:52:8d:aa:ae:a3: 9e:cc:7d:7f:13:d9:9c:8b:8a:70:53:bf:f1:48:5b:68:a1:46: 04:d2:3b:04:86:1a:26:0e:e4:f9:c9:3d:3b:1c:d7:bc:36:36: c2:3a:9a:07:e4:8c:6a:8a:4f:3d:a9:72:fb:40:79:7a:8f:a9: 48:12:b0:3e:84:7a:38:47:5d:80:a8:9e:3a:16:b5:a9:3c:ef: 76:92:04:0e:99:12:6d:3b:ab:c8:7c:27:02:ef:30:ed:80:1f: be:cf:1b:f6:76:7b:ac:09:b3:c0:40:d4:a7:a5:24:e4:e3:21: ba:46:fb:c8:46:82:79:47:8a:19:fa:f0:41:f8:7e:d4:fd:1e: e7:4c:62:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMfZiaA+cXCWlZBD3+Ba1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1N2M3ZGIwNGU3OGMyMjFmM2RmMmEyYWYwODJiNTE4ZDk2 MmE4ZjAwHhcNMjUxMjE4MTYwMTMzWhcNMjUxMjE5MTYwMTMzWjAzMTEwLwYDVQQD EyhjOTAyYmY1M2I1ZmRmZjdkMTc3MjdmZmIxM2NiOGJjMTg4OWY1YjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhMxPZYlEvPtE32b5mSF2veAW0Zj maZwcf6Nkieja2pf59zxJPMmSdhz/ZGS1W7cqggtdLCI2NUP67u9taQDOXxOH6Al UG9YJ+9wFm2QM7FSLLmAcw25csSMDj8KmXBJjfROGFxdsvKbgpYPzICHZwUtxMdT B+gbsTxRM77TUbLH4TBeZOsDn6kx11UY1PCiQafKIfF2aGs+IDI8rxn37ulrGSxB fEqUN/sW80wmANSp6ilocKfGsOsTMfTe0boV8VhBuyGWP6Er6DTcynzf5rvTnEXY m3m40Z15YOF+5h4CG2rHstlY+x9eBBzbRJ67N/b3EsjLmNPDyS7qEwOBfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkCv1O1/f99F3J/+xPLi8GIn1sSMB8GA1UdIwQY MBaAFNV8fbBOeMIh898qKvCCtRjZYqjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgt ZmU5NWE5YWYzYWRjLzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgtZmU5NWE5YWYzYWRj LzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9ZovTFt A/B4iNC0LAVyJ+KpbJMWKzjMQJMOrk2sOi6o5v4GQ5+JeKgquaq2SUrjpFNdYmr4 RFirxjFh03EelIV5zpLNQRew2UQ2IOk6IDClFuigNkZ0DQCPMa6lLs1pKFe3YpG8 +Uqi4dRm2Wo0tupmpgr0DWIlPVKNqq6jnsx9fxPZnIuKcFO/8UhbaKFGBNI7BIYa Jg7k+ck9OxzXvDY2wjqaB+SMaopPPaly+0B5eo+pSBKwPoR6OEddgKieOha1qTzv dpIEDpkSbTuryHwnAu8w7YAfvs8b9nZ7rAmzwEDUp6Uk5OMhukb7yEaCeUeKGfrw Qfh+1P0e50xirA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:08:40 2025 by rpki-client