This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json) Hash identifier: MdwZz3m71LsaawVnuB93Zm4rl5++lY+NqMzqUIF9KEQ= Subject key identifier: F2:72:91:28:24:8B:9D:23:1D:0E:F4:B3:26:4C:B2:40:0A:BF:4F:E0 Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95 Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495 Certificate serial: 019AF5AF22981020B661A484389CDB355C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 22:01:26 +0000 Manifest this update: Sat 06 Dec 2025 22:01:26 +0000 Manifest next update: Sun 07 Dec 2025 22:01:26 +0000 Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: RDx4iRUnRxAFAcLlt7lZ2r68uUUWXjDyRhniZoIy2Cc=) 2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:22:98:10:20:b6:61:a4:84:38:9c:db:35:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495 Validity Not Before: Dec 6 22:01:26 2025 GMT Not After : Dec 7 22:01:26 2025 GMT Subject: CN=f2729128248b9d231d0ef4b3264cb2400abf4fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:fa:f6:08:a5:75:13:bf:cf:a1:e3:3d:24: 2f:22:f1:c6:6a:74:7f:f7:8e:bd:0c:e9:15:6f:8f: 65:69:c1:80:06:98:b0:8a:77:10:6d:66:ac:f4:b8: e1:c9:f5:0f:61:29:2d:28:5a:97:4d:22:f7:6f:2c: 08:d8:1e:98:aa:42:10:ae:09:84:30:d2:20:fd:ba: 16:e3:15:f8:e3:b4:b4:b4:63:a1:46:1f:06:73:ea: 0b:b7:92:68:77:6b:dc:41:7c:e7:4a:0b:e7:32:91: 4d:29:97:0e:22:39:ba:63:bc:40:0d:8e:f5:7e:58: e3:f9:52:02:2b:5b:6d:45:af:aa:13:e2:83:99:e9: ba:2e:35:54:7b:c8:40:f2:c3:e9:08:8f:f1:ba:b1: 5d:28:85:2b:91:23:5e:d1:a3:93:48:8b:07:75:5e: d3:f6:a9:fe:68:43:1f:52:a8:2b:b4:78:f9:79:5e: 5b:98:83:c2:e9:37:68:ff:da:0d:d6:a8:1e:f0:1b: 3b:8b:9e:74:b7:55:3b:1f:3c:fd:94:72:06:b3:69: 19:de:f4:2f:16:43:d1:9d:76:b7:8c:e7:5f:41:b3: 59:23:a7:17:5c:86:eb:cd:b4:ff:1f:b7:a9:0f:83: d3:45:59:40:17:ff:f6:47:1c:85:c9:9f:70:3a:cb: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:91:28:24:8B:9D:23:1D:0E:F4:B3:26:4C:B2:40:0A:BF:4F:E0 X509v3 Authority Key Identifier: keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:59:36:55:37:05:d5:01:9e:2c:f7:55:1e:02:40:28:4e:d5: cc:a9:57:8c:ea:16:15:b2:e4:52:38:a1:81:b1:6f:ef:eb:80: f6:3d:4b:8f:36:1e:a2:b0:cb:9a:aa:bd:7b:e2:8c:2c:24:ff: 88:7a:d9:79:d4:86:bd:ac:74:f8:07:84:08:2a:0b:b1:45:ee: 37:b3:18:ef:24:af:12:33:e8:d1:da:03:6d:0e:95:c8:e1:01: 3e:a0:2c:56:f3:44:c8:c9:2b:4f:c5:01:5f:97:75:90:3b:0f: 32:4f:76:5e:ad:0c:c1:b8:c1:71:27:43:58:f4:d4:8b:c8:48: 77:07:6f:0f:3b:ea:6f:a3:8d:44:02:57:92:59:12:15:24:48: 5e:26:b5:af:25:f7:2c:3d:57:81:59:dc:9a:21:79:7e:c7:51: 69:2d:93:15:8f:35:7e:7f:6b:8f:9c:ff:96:85:0f:41:2a:82: 50:f7:90:99:0c:3b:11:61:77:fa:d2:f3:d6:24:f7:20:84:36: ef:2c:cd:10:f3:f0:5b:9b:3f:47:11:0f:67:33:6a:8b:b3:bb: 53:a1:8b:fd:64:3b:68:18:38:38:c1:e1:1d:01:7f:fd:97:8b: 84:c6:7b:8c:74:8d:a6:e0:26:f0:f4:d7:c6:4d:61:ce:47:2b: 7d:ae:e8:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryKYECC2YaSEOJzbNVxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz Y2I0OTUwHhcNMjUxMjA2MjIwMTI2WhcNMjUxMjA3MjIwMTI2WjAzMTEwLwYDVQQD EyhmMjcyOTEyODI0OGI5ZDIzMWQwZWY0YjMyNjRjYjI0MDBhYmY0ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Br69gildRO/z6HjPSQvIvHGanR/ 9469DOkVb49lacGABpiwincQbWas9LjhyfUPYSktKFqXTSL3bywI2B6YqkIQrgmE MNIg/boW4xX447S0tGOhRh8Gc+oLt5Jod2vcQXznSgvnMpFNKZcOIjm6Y7xADY71 fljj+VICK1ttRa+qE+KDmem6LjVUe8hA8sPpCI/xurFdKIUrkSNe0aOTSIsHdV7T 9qn+aEMfUqgrtHj5eV5bmIPC6Tdo/9oN1qge8Bs7i550t1U7Hzz9lHIGs2kZ3vQv FkPRnXa3jOdfQbNZI6cXXIbrzbT/H7epD4PTRVlAF//2RxyFyZ9wOssHSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJykSgki50jHQ70syZMskAKv0/gMB8GA1UdIwQY MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1k2VTcF 1QGeLPdVHgJAKE7VzKlXjOoWFbLkUjihgbFv7+uA9j1LjzYeorDLmqq9e+KMLCT/ iHrZedSGvax0+AeECCoLsUXuN7MY7ySvEjPo0doDbQ6VyOEBPqAsVvNEyMkrT8UB X5d1kDsPMk92Xq0MwbjBcSdDWPTUi8hIdwdvDzvqb6ONRAJXklkSFSRIXia1ryX3 LD1XgVncmiF5fsdRaS2TFY81fn9rj5z/loUPQSqCUPeQmQw7EWF3+tLz1iT3IIQ2 7yzNEPPwW5s/RxEPZzNqi7O7U6GL/WQ7aBg4OMHhHQF//ZeLhMZ7jHSNpuAm8PTX xk1hzkcrfa7ojg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:23 2025 by rpki-client