This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json) Hash identifier: akvKiD/0Yd/MhJShGd1M2RJasfK04LPL6jeu59YNPIM= Subject key identifier: 58:7C:1F:E2:7B:B1:A7:83:08:3B:82:61:19:8E:56:33:7D:E4:68:54 Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Certificate serial: 019B0DEDDC590442153783264D0EA35D6414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft Manifest number: 017A Signing time: Thu 11 Dec 2025 15:00:50 +0000 Manifest this update: Thu 11 Dec 2025 15:00:50 +0000 Manifest next update: Fri 12 Dec 2025 15:00:50 +0000 Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: Ckk3FVsQumILnl+O2uW6tlgMiuF7cti09cC7Rez1HTw=) 2: i9PMkFjZgddcdQkvP1yxnZzZAzQ.roa (hash: AH1/HP90I2Jx2/ajhEGYd7uNt41g8Pva2Gq/dNXs1dY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:dc:59:04:42:15:37:83:26:4d:0e:a3:5d:64:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Validity Not Before: Dec 11 15:00:50 2025 GMT Not After : Dec 12 15:00:50 2025 GMT Subject: CN=587c1fe27bb1a783083b8261198e56337de46854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:66:b9:e5:84:de:d5:45:94:c2:9b:d7:1b: d3:58:81:48:da:44:7e:fb:be:ac:24:fb:34:31:c7: f7:50:05:f9:99:48:e9:71:d7:2b:0a:3b:47:1a:e1: 79:3e:0d:39:7b:f2:29:56:f0:0c:a7:d5:71:ae:70: a6:25:ed:86:10:56:b9:b1:70:65:c8:e9:34:88:fa: 33:62:ac:98:72:97:85:df:8c:58:6f:91:0b:80:32: 37:8a:19:95:a3:0f:e5:23:f7:ab:15:f8:b0:64:1e: b0:68:5f:cf:7b:d8:15:61:46:ff:97:97:86:73:a0: 6a:c2:13:82:28:e4:16:51:8d:1b:af:37:12:14:69: a4:43:3a:fa:01:6f:8a:c5:16:30:4b:98:ee:4b:cf: 5e:34:f8:60:20:ee:f9:4c:5c:25:2e:a6:6e:3a:8a: bc:83:e9:05:b7:ff:35:9e:51:3a:90:e2:a3:b7:02: fa:53:ea:d4:2b:19:25:b9:83:ff:14:63:9b:3e:f3: c6:96:66:e7:22:97:2a:d6:c8:3d:1e:3c:3a:e8:b6: 47:9b:eb:15:4f:d1:7f:eb:9b:02:d5:6a:55:f3:68: 94:b5:76:0f:02:06:21:7a:09:91:46:28:d1:80:02: 78:ec:02:b0:3c:16:4b:5f:43:b8:d8:85:68:78:5e: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:1F:E2:7B:B1:A7:83:08:3B:82:61:19:8E:56:33:7D:E4:68:54 X509v3 Authority Key Identifier: keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6a:5b:6f:4b:c8:af:d3:96:02:68:c2:23:cd:a5:5e:b0:e0: 16:6b:71:1a:51:90:56:03:f6:45:93:31:9c:5d:c6:6d:76:51: 80:b8:49:4c:15:9d:ef:d4:60:7c:17:48:09:59:5e:58:87:0f: a1:88:12:f5:46:97:3f:5d:79:a6:da:1e:8a:5b:13:b6:99:c2: 82:62:b8:6a:d6:4a:ae:4b:17:0e:98:a7:f6:0f:c6:8b:11:2c: 76:b7:7b:83:73:fa:1e:7d:ca:12:1b:f7:e7:90:8b:ba:39:5c: cb:e5:b2:7a:5f:ca:69:86:bb:81:c4:ee:6a:cf:05:1a:3b:18: 2e:7f:76:cb:d3:b6:25:ae:3a:77:42:cf:b7:bb:76:bd:b5:06: 7b:a5:87:55:0e:6e:02:ce:c4:45:72:26:51:7a:a3:e9:99:10: 6a:77:51:56:63:ce:07:b8:07:a3:1c:b7:29:5d:c7:23:1c:6c: 04:fa:9f:1b:59:77:3a:9f:fb:f7:65:3e:50:f0:b4:15:64:52: 00:d5:c4:91:f0:6b:38:08:ac:40:36:76:db:ca:d3:da:ce:11: c5:4f:99:6d:69:d4:4c:1e:10:b1:59:3b:cc:7b:11:fa:dd:5b: 89:cb:d5:90:16:0b:74:38:c2:d6:75:c6:2d:bf:e1:2e:9d:2e: 3c:e0:01:3d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsN7dxZBEIVN4MmTQ6jXWQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTRlODE1M2NkM2Y5MWMzMzM5N2Y5YjdkZjkxYmYxNzNj NGQxNmIwHhcNMjUxMjExMTUwMDUwWhcNMjUxMjEyMTUwMDUwWjAzMTEwLwYDVQQD Eyg1ODdjMWZlMjdiYjFhNzgzMDgzYjgyNjExOThlNTYzMzdkZTQ2ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUlmueWE3tVFlMKb1xvTWIFI2kR+ +76sJPs0Mcf3UAX5mUjpcdcrCjtHGuF5Pg05e/IpVvAMp9VxrnCmJe2GEFa5sXBl yOk0iPozYqyYcpeF34xYb5ELgDI3ihmVow/lI/erFfiwZB6waF/Pe9gVYUb/l5eG c6BqwhOCKOQWUY0brzcSFGmkQzr6AW+KxRYwS5juS89eNPhgIO75TFwlLqZuOoq8 g+kFt/81nlE6kOKjtwL6U+rUKxkluYP/FGObPvPGlmbnIpcq1sg9Hjw66LZHm+sV T9F/65sC1WpV82iUtXYPAgYhegmRRijRgAJ47AKwPBZLX0O42IVoeF4l9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFh8H+J7saeDCDuCYRmOVjN95GhUMB8GA1UdIwQY MBaAFPoU6BU80/kcMzl/m335G/FzxNFrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oVG9GVHpULVJ3ek9YLWJmZmtiOFhQRTBXcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQwNzgwLTgxMTAtNDVkNy1iZDcz LWZkZmQyZDcyYjU0MS8xLzEtaFRvRlR6VC1Sd3pPWC1iZmZrYjhYUEUwV3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M3LzI0MDc4MC04MTEwLTQ1ZDctYmQ3My1mZGZkMmQ3MmI1 NDEvMS8xLWhUb0ZUelQtUnd6T1gtYmZma2I4WFBFMFdzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmpb b0vIr9OWAmjCI82lXrDgFmtxGlGQVgP2RZMxnF3GbXZRgLhJTBWd79RgfBdICVle WIcPoYgS9UaXP115ptoeilsTtpnCgmK4atZKrksXDpin9g/GixEsdrd7g3P6Hn3K Ehv355CLujlcy+Wyel/KaYa7gcTuas8FGjsYLn92y9O2Ja46d0LPt7t2vbUGe6WH VQ5uAs7ERXImUXqj6ZkQandRVmPOB7gHoxy3KV3HIxxsBPqfG1l3Op/792U+UPC0 FWRSANXEkfBrOAisQDZ228rT2s4RxU+ZbWnUTB4QsVk7zHsR+t1bicvVkBYLdDjC 1nXGLb/hLp0uPOABPQ== -----END CERTIFICATE-----Generated at Thu Dec 11 17:03:30 2025 by rpki-client