This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json) Hash identifier: LFUOoo4+7U5E5+DbSnAdOP5Ln8XXmUxdSjIqe/gl2No= Subject key identifier: D2:E4:76:39:1D:30:52:9B:FC:4A:C0:7E:17:4E:9A:34:B1:1C:18:56 Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Certificate serial: 019B2B53A08C783C945725ACEDF95CAF8017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:00:59 +0000 Manifest this update: Wed 17 Dec 2025 08:00:59 +0000 Manifest next update: Thu 18 Dec 2025 08:00:59 +0000 Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=) 2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: ERXNTzncgE5mIcYyeSGUhMOxhbTKuR4SxpXr/kfSFhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:a0:8c:78:3c:94:57:25:ac:ed:f9:5c:af:80:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Validity Not Before: Dec 17 08:00:59 2025 GMT Not After : Dec 18 08:00:59 2025 GMT Subject: CN=d2e476391d30529bfc4ac07e174e9a34b11c1856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:3c:6c:5e:3f:4f:01:37:b0:e6:d4:ec:ae: 7b:b0:c3:51:27:1d:55:20:a6:b1:e1:aa:1d:f6:47: ef:a4:60:d3:96:74:b4:40:3c:23:9b:e9:d0:ad:67: 9e:e5:c2:57:57:67:d8:5b:91:56:0b:fc:d7:9a:d3: 83:c9:17:58:61:d9:49:10:09:94:a3:4b:5d:a2:8d: fd:d2:74:0f:52:59:f7:a6:ce:60:73:be:64:d5:3b: a1:9b:dd:62:41:2a:1b:fe:7d:13:fe:eb:0f:4b:dc: 6c:56:ea:12:a8:46:49:75:d3:cf:21:95:aa:88:c6: 6b:a1:ce:c9:5d:e4:9f:8e:b7:49:9f:c8:9e:40:f2: 8b:68:4b:f7:a3:43:4f:31:bd:81:dd:4e:62:c0:23: 2a:d7:54:70:ea:e7:03:c8:90:d0:98:fa:72:b1:d4: 73:fa:c7:63:43:a8:56:94:9e:e0:0b:e3:3b:12:d6: 6d:23:b1:fd:26:2e:ea:11:25:6e:03:47:82:f8:94: 2e:f5:95:f1:1b:89:47:a6:d3:01:81:41:51:89:98: 8b:c9:b3:30:7d:bb:db:04:3c:c9:12:a4:1f:61:11: 9d:04:32:2a:22:83:af:8d:7c:f3:a2:ce:ad:a8:cd: e1:b8:45:8d:a6:b7:a6:d8:bf:32:03:86:c6:d5:9b: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E4:76:39:1D:30:52:9B:FC:4A:C0:7E:17:4E:9A:34:B1:1C:18:56 X509v3 Authority Key Identifier: keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c3:e5:8d:57:f1:2b:e5:d2:9a:2b:b3:13:3c:34:26:37:91: 5a:a0:47:29:24:b4:3b:4d:9e:d7:1b:92:d3:df:00:9d:af:82: 59:94:ee:33:5f:d2:5f:3d:13:e5:7c:a0:4b:f3:45:ef:39:88: a7:78:1e:79:d0:35:99:98:a0:7a:53:92:98:9a:71:cf:05:aa: b3:4c:c5:d0:bb:3c:0a:ba:5c:33:e2:1c:8c:78:6c:7b:cb:8b: 21:2f:41:9b:42:2a:bd:32:e3:72:37:45:cb:e7:89:85:64:3c: fd:6a:33:ba:9e:2a:3e:b0:23:d8:ca:f7:01:01:d5:b8:3b:cf: 80:5d:50:34:d4:c8:dc:47:17:95:58:f5:ef:4a:4a:ee:43:de: f6:d7:8a:bf:85:07:e4:57:08:7d:63:06:1e:dc:5e:bb:6e:22: 1c:e5:d4:b9:43:14:a9:6a:e4:48:4b:b8:b5:0f:97:c1:b2:6b: 49:10:38:e0:0f:6d:dc:60:4e:06:1b:d1:60:97:ea:a8:c2:7b: 73:e9:1d:91:91:61:13:04:4a:a9:af:61:b1:d0:43:3e:98:db: 03:8b:f6:e4:39:e7:2c:31:33:58:c9:a9:0f:69:04:07:b1:4b: 50:ae:e5:19:82:b2:0d:5c:2e:7f:ed:e4:6b:1b:60:b3:ce:64: bc:93:c8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU6CMeDyUVyWs7flcr4AXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNWEyOWNjZGExZGM4YThhMTYzYWMyNzc4MWU4ZWM1OTdl NzZkYjkwHhcNMjUxMjE3MDgwMDU5WhcNMjUxMjE4MDgwMDU5WjAzMTEwLwYDVQQD EyhkMmU0NzYzOTFkMzA1MjliZmM0YWMwN2UxNzRlOWEzNGIxMWMxODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Q8bF4/TwE3sObU7K57sMNRJx1V IKax4aod9kfvpGDTlnS0QDwjm+nQrWee5cJXV2fYW5FWC/zXmtODyRdYYdlJEAmU o0tdoo390nQPUln3ps5gc75k1Tuhm91iQSob/n0T/usPS9xsVuoSqEZJddPPIZWq iMZroc7JXeSfjrdJn8ieQPKLaEv3o0NPMb2B3U5iwCMq11Rw6ucDyJDQmPpysdRz +sdjQ6hWlJ7gC+M7EtZtI7H9Ji7qESVuA0eC+JQu9ZXxG4lHptMBgUFRiZiLybMw fbvbBDzJEqQfYRGdBDIqIoOvjXzzos6tqM3huEWNprem2L8yA4bG1ZsaEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLkdjkdMFKb/ErAfhdOmjSxHBhWMB8GA1UdIwQY MBaAFP9aKczaHciooWOsJ3gejsWX5225MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQt OWJjNTVmNjJkYWJhLzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQtOWJjNTVmNjJkYWJh LzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8PljVfx K+XSmiuzEzw0JjeRWqBHKSS0O02e1xuS098Ana+CWZTuM1/SXz0T5XygS/NF7zmI p3geedA1mZigelOSmJpxzwWqs0zF0Ls8CrpcM+IcjHhse8uLIS9Bm0IqvTLjcjdF y+eJhWQ8/Wozup4qPrAj2Mr3AQHVuDvPgF1QNNTI3EcXlVj170pK7kPe9teKv4UH 5FcIfWMGHtxeu24iHOXUuUMUqWrkSEu4tQ+XwbJrSRA44A9t3GBOBhvRYJfqqMJ7 c+kdkZFhEwRKqa9hsdBDPpjbA4v25DnnLDEzWMmpD2kEB7FLUK7lGYKyDVwuf+3k axtgs85kvJPIhw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:45 2025 by rpki-client