This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft File: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json) Hash identifier: QH52TsfWlK2srnv6IQMcLfBELp4ys4ut3ag6+kMaLkA= Subject key identifier: 8F:0E:7F:5B:35:0F:1B:56:D7:08:8B:50:24:E7:79:68:35:52:47:B4 Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3 Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3 Certificate serial: 019AF3C0784A9C7EBAE269482D1C6AF3E664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft Manifest number: 178E Signing time: Sat 06 Dec 2025 13:01:08 +0000 Manifest this update: Sat 06 Dec 2025 13:01:08 +0000 Manifest next update: Sun 07 Dec 2025 13:01:08 +0000 Files and hashes: 1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: imOYS96jr4lsEuSpH+uK22b5PxlsDnwb8gP/mpy0K50=) 2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=) 3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=) 4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=) 5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=) 6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:78:4a:9c:7e:ba:e2:69:48:2d:1c:6a:f3:e6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3 Validity Not Before: Dec 6 13:01:08 2025 GMT Not After : Dec 7 13:01:08 2025 GMT Subject: CN=8f0e7f5b350f1b56d7088b5024e77968355247b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:e3:ed:dd:ad:c7:19:c3:cd:5f:09:40:23: 28:1c:88:74:4d:69:4a:0b:22:75:4b:22:fa:9d:8c: 5a:97:0e:cb:74:c6:17:b9:1a:4f:59:27:1e:cd:7c: a1:d5:69:e2:76:ed:0d:38:01:59:e9:dd:cc:40:8c: 51:1d:97:10:e6:96:3f:e6:0f:94:e6:05:1c:97:2c: 71:87:95:b6:20:98:c8:3d:b0:a2:c5:95:1e:90:88: d8:b7:74:f3:c5:21:7f:00:91:71:86:82:97:6c:62: d1:dc:09:74:21:c6:10:69:64:7f:81:d9:08:b5:75: be:71:97:8c:3a:ed:31:eb:af:0a:92:1f:77:68:a9: 93:13:13:35:32:87:33:ec:9f:74:0a:9d:a3:6e:cd: 61:3e:a5:fb:7e:2c:43:74:c1:fd:c2:8f:42:c6:4c: d7:78:3a:33:65:14:ba:1b:b3:8d:50:28:44:13:a0: 7c:8a:9a:83:2d:72:43:a8:d4:23:d9:94:b6:92:02: ea:f9:11:d2:f8:70:cb:18:70:47:6a:6c:f9:70:34: 1b:e1:cc:14:f2:47:ba:4b:87:02:25:3e:4a:43:40: 50:55:9c:dc:ef:11:6a:7d:65:d4:69:83:44:f5:de: 04:79:24:12:73:e2:f9:de:2d:da:18:ef:af:6d:03: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0E:7F:5B:35:0F:1B:56:D7:08:8B:50:24:E7:79:68:35:52:47:B4 X509v3 Authority Key Identifier: keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:22:7e:69:f5:29:21:d9:3f:7a:11:d6:b5:d0:6c:e5:a4:38: b2:b8:de:2a:6a:76:31:49:b7:8b:00:8d:ae:2c:d7:39:63:1b: a3:31:f5:81:02:88:5c:3d:2d:40:64:de:ac:fc:3e:05:94:84: 71:a9:52:77:e3:19:ac:36:35:00:39:fc:d6:f3:b5:08:41:a5: 5a:f2:4a:0e:d0:81:56:91:70:57:5d:47:5f:11:dc:be:b6:75: 6a:3e:15:b6:53:60:36:b1:ec:c4:a6:52:a1:5a:bc:2e:20:d8: 48:1b:36:2d:e4:bb:46:5d:bc:80:e6:b8:4c:35:f4:4b:97:3c: 33:28:b4:93:3b:d4:5b:f4:1b:53:11:6a:b6:66:d7:db:4d:57: 9e:77:13:48:f9:9b:64:76:33:f2:4e:05:04:1b:97:b9:c1:8d: 50:7c:e7:2d:4a:57:33:bb:7e:9a:b5:85:63:0b:81:e0:fe:ae: af:a5:a0:dc:bb:fa:59:dd:15:54:85:40:a9:a5:45:b4:97:f6: 26:5d:c2:e8:40:e4:d8:16:62:a2:b0:68:e3:77:49:8b:f7:34: 82:cc:0b:85:d0:e3:ca:af:0d:f0:7f:e2:48:9a:40:36:a3:db: e3:f8:e8:3f:8b:2e:76:b3:59:09:34:f4:bc:a4:6c:9d:57:4d: 90:c1:6d:6c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzwHhKnH664mlILRxq8+ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMzJlOWY0YWEzMmFiYTczMTJmYWIwNTRiMTc0ZGNlOGM1 MTVjYTMwHhcNMjUxMjA2MTMwMTA4WhcNMjUxMjA3MTMwMTA4WjAzMTEwLwYDVQQD Eyg4ZjBlN2Y1YjM1MGYxYjU2ZDcwODhiNTAyNGU3Nzk2ODM1NTI0N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSLj7d2txxnDzV8JQCMoHIh0TWlK CyJ1SyL6nYxalw7LdMYXuRpPWScezXyh1Wnidu0NOAFZ6d3MQIxRHZcQ5pY/5g+U 5gUclyxxh5W2IJjIPbCixZUekIjYt3TzxSF/AJFxhoKXbGLR3Al0IcYQaWR/gdkI tXW+cZeMOu0x668Kkh93aKmTExM1Mocz7J90Cp2jbs1hPqX7fixDdMH9wo9CxkzX eDozZRS6G7ONUChEE6B8ipqDLXJDqNQj2ZS2kgLq+RHS+HDLGHBHamz5cDQb4cwU 8ke6S4cCJT5KQ0BQVZzc7xFqfWXUaYNE9d4EeSQSc+L53i3aGO+vbQNEewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI8Of1s1DxtW1wiLUCTneWg1Uke0MB8GA1UdIwQY MBaAFPsy6fSqMqunMS+rBUsXTc6MUVyjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16THA5S295cTZjeEw2c0ZTeGROem94UlhLTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMjc4NjYzLWIxMzUtNGRiMS1hMDQ0 LTIwNjI0YjNjMTU3Zi8xLzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UyLzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1 N2YvMS8xLXpMcDlLb3lxNmN4TDZzRlN4ZE56b3hSWEtNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCJ+ afUpIdk/ehHWtdBs5aQ4srjeKmp2MUm3iwCNrizXOWMbozH1gQKIXD0tQGTerPw+ BZSEcalSd+MZrDY1ADn81vO1CEGlWvJKDtCBVpFwV11HXxHcvrZ1aj4VtlNgNrHs xKZSoVq8LiDYSBs2LeS7Rl28gOa4TDX0S5c8Myi0kzvUW/QbUxFqtmbX201XnncT SPmbZHYz8k4FBBuXucGNUHznLUpXM7t+mrWFYwuB4P6ur6Wg3Lv6Wd0VVIVAqaVF tJf2Jl3C6EDk2BZiorBo43dJi/c0gswLhdDjyq8N8H/iSJpANqPb4/joP4sudrNZ CTT0vKRsnVdNkMFtbA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:35 2025 by rpki-client