This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json) Hash identifier: IG1/4wwjcqQKLDFRI++hkTNB9ZPs0JYBKnhjpwWXRe0= Subject key identifier: 58:8C:00:35:C8:E8:44:4F:1C:C6:FB:1B:76:82:76:7A:6B:04:53:77 Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Certificate serial: 019B27DFB128C1C9DDE7634AD4D3CBF995A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft Manifest number: 1434 Signing time: Tue 16 Dec 2025 15:55:29 +0000 Manifest this update: Tue 16 Dec 2025 15:55:29 +0000 Manifest next update: Wed 17 Dec 2025 15:55:29 +0000 Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: vAY+7nlxzo5nckTUTORK+GDleLh78qPKZPcGJBs2AVY=) 2: r5AAElpvoRvsvqDIStvP7OwyqiY.roa (hash: 5QwlL37mFb39gbIRkjIRN+81w2qi6CPjGZSoYRa8lhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:df:b1:28:c1:c9:dd:e7:63:4a:d4:d3:cb:f9:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Validity Not Before: Dec 16 15:55:29 2025 GMT Not After : Dec 17 15:55:29 2025 GMT Subject: CN=588c0035c8e8444f1cc6fb1b7682767a6b045377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:d0:5c:11:10:84:16:98:1f:c5:db:d2:b5: a1:28:41:d2:b4:6c:0d:f2:17:00:82:59:63:51:0a: dd:c5:56:c6:f0:48:67:45:7d:61:60:30:77:37:03: d1:9c:e0:0a:a4:ec:65:95:39:df:9d:9b:41:3a:2a: dc:9d:f7:47:57:99:e1:7f:98:a4:04:ab:9b:24:ed: af:68:d4:1e:54:c1:9e:3c:8a:06:04:85:fc:5c:ef: 6b:0e:f4:09:92:a0:23:46:74:6d:82:d1:4f:7f:b6: 7e:3d:06:9a:bb:80:b3:ac:52:11:cb:32:3d:6d:4b: a4:7b:c2:54:41:82:6e:8d:21:05:fe:91:0c:0f:ec: 67:bb:fa:c1:a2:19:2b:40:23:50:d5:a8:de:c6:ad: 89:6a:91:01:29:72:01:0d:c4:53:d8:87:05:71:58: 4f:de:80:37:d7:2e:10:57:dc:7f:b1:f4:69:aa:0c: a1:0b:36:30:32:ad:a4:76:45:08:27:28:a7:53:51: 90:90:a1:c1:a2:8c:57:f9:10:63:53:10:b3:52:b6: 09:73:29:62:f7:3b:14:67:73:13:a4:48:35:1e:e0: 8f:7d:41:c5:23:37:3d:e3:82:de:8c:15:1d:30:7f: 2d:82:bf:37:02:0f:0e:9f:02:d6:a7:50:86:e8:82: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:00:35:C8:E8:44:4F:1C:C6:FB:1B:76:82:76:7A:6B:04:53:77 X509v3 Authority Key Identifier: keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0d:3f:71:bf:3c:d2:b2:8a:5c:42:14:91:a6:2e:ff:72:a7: 1d:49:4a:eb:5f:a5:b1:2b:04:42:7f:56:a1:42:f5:e9:15:ae: c0:e7:da:89:4b:bb:3b:fa:b7:57:c6:e2:18:d9:2a:ed:f8:a7: f3:00:d6:73:9a:8b:c1:e9:f8:1d:d1:e7:92:7a:a8:14:90:16: 73:65:18:b2:b7:70:5b:de:21:f3:71:f4:dd:41:4f:5f:d2:1a: bf:27:54:1b:49:9d:18:e1:29:b8:2f:a7:f7:8a:16:b4:b8:4a: 57:b7:37:dc:44:32:aa:e1:1e:c7:b7:81:8a:83:a4:72:0e:04: 87:fd:61:80:d5:82:24:d1:e3:30:aa:e1:fb:a5:f3:1a:dc:5c: 6b:0a:90:1e:58:cc:b6:38:25:57:a6:bc:64:a2:63:15:5d:a1: 1d:8f:6c:8a:89:36:0a:21:c0:e1:00:9f:ea:80:c7:94:e7:f7: 82:90:d8:ce:19:83:d4:a7:46:f5:2a:3d:f9:1a:72:ef:10:c2: 1d:ab:cd:eb:58:4c:55:7f:10:8b:a5:c3:11:ed:c9:a8:b6:a6: 94:d0:cf:3a:4d:1f:ee:3e:81:b0:57:74:81:57:dd:4a:1d:95: 40:bc:23:55:1f:2e:8a:8f:cc:60:4e:42:3d:22:d8:b9:bd:62: b9:9b:dc:b2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsn37Eowcnd52NK1NPL+ZWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy NTMwMWEwHhcNMjUxMjE2MTU1NTI5WhcNMjUxMjE3MTU1NTI5WjAzMTEwLwYDVQQD Eyg1ODhjMDAzNWM4ZTg0NDRmMWNjNmZiMWI3NjgyNzY3YTZiMDQ1Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH3QXBEQhBaYH8Xb0rWhKEHStGwN 8hcAglljUQrdxVbG8EhnRX1hYDB3NwPRnOAKpOxllTnfnZtBOircnfdHV5nhf5ik BKubJO2vaNQeVMGePIoGBIX8XO9rDvQJkqAjRnRtgtFPf7Z+PQaau4CzrFIRyzI9 bUuke8JUQYJujSEF/pEMD+xnu/rBohkrQCNQ1ajexq2JapEBKXIBDcRT2IcFcVhP 3oA31y4QV9x/sfRpqgyhCzYwMq2kdkUIJyinU1GQkKHBooxX+RBjUxCzUrYJcyli 9zsUZ3MTpEg1HuCPfUHFIzc944LejBUdMH8tgr83Ag8OnwLWp1CG6IK0pQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFiMADXI6ERPHMb7G3aCdnprBFN3MB8GA1UdIwQY MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz LWRhZDA0MjBiODVkMy8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2LzFjOTgwOS0xZjYwLTQzYzItODEwMy1kYWQwNDIwYjg1 ZDMvMS8xLVJuaDhfNXB0T3ZmOENxYWhYNThiQ3NsTUJvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg0/ cb880rKKXEIUkaYu/3KnHUlK61+lsSsEQn9WoUL16RWuwOfaiUu7O/q3V8biGNkq 7fin8wDWc5qLwen4HdHnknqoFJAWc2UYsrdwW94h83H03UFPX9IavydUG0mdGOEp uC+n94oWtLhKV7c33EQyquEex7eBioOkcg4Eh/1hgNWCJNHjMKrh+6XzGtxcawqQ HljMtjglV6a8ZKJjFV2hHY9siok2CiHA4QCf6oDHlOf3gpDYzhmD1KdG9So9+Rpy 7xDCHavN61hMVX8Qi6XDEe3JqLamlNDPOk0f7j6BsFd0gVfdSh2VQLwjVR8uio/M YE5CPSLYub1iuZvcsg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:13:35 2025 by rpki-client