This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft File: 1bAhsehBJlk8722YgDQTqnLQAeA.mft (raw, json) Hash identifier: CGvQCDOFFLh+cRWYYQgeRkl0jTJQpR2nsWjAiRtJioY= Subject key identifier: E1:1D:D5:11:5F:32:BE:C0:3B:D5:12:F7:C7:2F:F9:E3:FA:72:35:9E Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0 Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0 Certificate serial: 019AF088651606AC19801646C9DFF1660898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft Manifest number: 8D Signing time: Fri 05 Dec 2025 22:01:01 +0000 Manifest this update: Fri 05 Dec 2025 22:01:01 +0000 Manifest next update: Sat 06 Dec 2025 22:01:01 +0000 Files and hashes: 1: 0EWA36I6mOSoPIDfmQ0kLWD6rlg.roa (hash: OJc1UNQ6b/j4oso8+DOkIj53sxADM+WwR3tDYFPAPDk=) 2: 1bAhsehBJlk8722YgDQTqnLQAeA.crl (hash: a9ovipmhFuOWZIVgIPQduEjfTkHwflSzgZFR/UWeh28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:65:16:06:ac:19:80:16:46:c9:df:f1:66:08:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0 Validity Not Before: Dec 5 22:01:01 2025 GMT Not After : Dec 6 22:01:01 2025 GMT Subject: CN=e11dd5115f32bec03bd512f7c72ff9e3fa72359e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:4b:e7:a1:9b:5e:e1:52:d1:1d:20:97:55: e8:97:46:33:87:8e:9c:17:31:c5:1a:5f:cf:1f:89: 4d:07:53:ed:35:ae:b3:56:40:ba:08:44:35:26:57: 5e:43:8e:f2:9a:41:54:e3:0c:f7:a3:db:7e:5f:21: dc:93:70:25:52:e9:4d:90:fd:98:c7:3f:e9:15:3e: 27:5f:db:14:67:2e:d5:cb:3f:63:42:36:48:8f:aa: 06:95:4c:4f:57:36:f7:d8:0a:37:26:71:e0:9b:5f: e1:dd:d9:74:09:57:88:64:8d:fd:31:47:52:06:a3: 2d:f6:a7:35:1a:ec:d9:7c:8d:0d:d3:ee:ef:aa:cf: ee:5d:2b:bf:d5:e3:5f:c0:84:44:03:04:17:1f:a3: 65:c2:f2:1c:e5:50:61:fb:24:16:48:88:73:a7:14: 24:00:9c:f0:ec:29:a9:59:51:39:7f:d5:35:e6:40: 37:86:11:24:c1:88:e7:e4:89:c6:50:83:e3:32:73: 59:04:29:2b:aa:45:59:1a:37:14:66:2f:7e:f4:d7: 14:19:5b:c9:be:9c:21:1c:32:03:09:7f:5f:e4:bc: 4a:8f:c0:6e:f6:b7:9e:df:52:08:aa:be:7b:fa:8c: c1:ed:67:e6:e4:b7:93:f5:1e:b1:17:b9:c1:47:13: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1D:D5:11:5F:32:BE:C0:3B:D5:12:F7:C7:2F:F9:E3:FA:72:35:9E X509v3 Authority Key Identifier: keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:4d:8c:f5:f5:50:7b:94:64:a7:12:3b:f2:ac:3a:5f:5f:18: da:ea:3e:fe:1d:de:ef:6c:26:4c:57:da:e8:be:82:44:45:15: 56:6d:70:8f:02:e4:c2:e5:43:7b:52:81:bf:4a:ef:37:a8:3f: d5:41:a8:b6:3a:cd:9c:f7:8f:84:e1:7c:b7:3d:b6:8e:b5:af: 19:46:bc:ab:0f:bc:e4:75:03:4e:36:2c:56:71:e0:6c:7c:f7: de:8c:c7:65:6e:04:02:18:93:36:00:4c:6e:82:f3:bd:81:9d: 3f:a3:78:53:c3:3e:d8:aa:28:01:ab:4e:79:dd:35:f5:56:7b: b4:d5:15:71:7e:e7:af:e1:fd:17:d1:f1:9b:37:ec:c2:27:81: 2d:d0:18:e8:59:28:33:d3:80:04:a8:ce:5f:b6:35:af:51:0a: 2f:17:5a:07:da:7e:2c:71:20:1f:a9:39:a2:da:9d:1c:60:b5: 7c:1f:4f:ff:f5:32:01:1a:e0:88:92:cd:d3:77:a7:ec:98:c1: e9:32:42:58:d3:ac:7e:de:b1:34:4c:41:14:e6:b0:26:a4:f1: 0c:cb:ad:4b:54:19:c0:40:53:23:21:eb:95:5e:f1:a5:1a:80: 80:30:83:9f:e4:aa:51:89:a7:c5:2d:31:d3:70:40:aa:39:91: 20:20:20:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGUWBqwZgBZGyd/xZgiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjAyMWIxZTg0MTI2NTkzY2VmNmQ5ODgwMzQxM2FhNzJk MDAxZTAwHhcNMjUxMjA1MjIwMTAxWhcNMjUxMjA2MjIwMTAxWjAzMTEwLwYDVQQD EyhlMTFkZDUxMTVmMzJiZWMwM2JkNTEyZjdjNzJmZjllM2ZhNzIzNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw61L56GbXuFS0R0gl1Xol0Yzh46c FzHFGl/PH4lNB1PtNa6zVkC6CEQ1JldeQ47ymkFU4wz3o9t+XyHck3AlUulNkP2Y xz/pFT4nX9sUZy7Vyz9jQjZIj6oGlUxPVzb32Ao3JnHgm1/h3dl0CVeIZI39MUdS BqMt9qc1GuzZfI0N0+7vqs/uXSu/1eNfwIREAwQXH6NlwvIc5VBh+yQWSIhzpxQk AJzw7CmpWVE5f9U15kA3hhEkwYjn5InGUIPjMnNZBCkrqkVZGjcUZi9+9NcUGVvJ vpwhHDIDCX9f5LxKj8Bu9ree31IIqr57+ozB7Wfm5LeT9R6xF7nBRxP+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEd1RFfMr7AO9US98cv+eP6cjWeMB8GA1UdIwQY MBaAFNWwIbHoQSZZPO9tmIA0E6py0AHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJBaHNlaEJKbGs4NzIyWWdEUVRxbkxRQWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZGNhMzQtNzQ1Yy00MTgwLWIwZjAt MDFkZGEzNzRkNjdmLzEvMWJBaHNlaEJKbGs4NzIyWWdEUVRxbkxRQWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZGNhMzQtNzQ1Yy00MTgwLWIwZjAtMDFkZGEzNzRkNjdm LzEvMWJBaHNlaEJKbGs4NzIyWWdEUVRxbkxRQWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE2M9fVQ e5RkpxI78qw6X18Y2uo+/h3e72wmTFfa6L6CREUVVm1wjwLkwuVDe1KBv0rvN6g/ 1UGotjrNnPePhOF8tz22jrWvGUa8qw+85HUDTjYsVnHgbHz33ozHZW4EAhiTNgBM boLzvYGdP6N4U8M+2KooAatOed019VZ7tNUVcX7nr+H9F9HxmzfswieBLdAY6Fko M9OABKjOX7Y1r1EKLxdaB9p+LHEgH6k5otqdHGC1fB9P//UyARrgiJLN03en7JjB 6TJCWNOsft6xNExBFOawJqTxDMutS1QZwEBTIyHrlV7xpRqAgDCDn+SqUYmnxS0x 03BAqjmRICAgag== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:48 2025 by rpki-client