This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json) Hash identifier: sMaIjbXSYfvYnt+BiAE7g8Sc8PypfPcbUBwUrB+myZA= Subject key identifier: 78:94:6B:22:ED:5D:E5:02:F3:F5:DB:88:04:C3:C7:A2:80:2E:59:13 Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d Certificate serial: 019AF98B7F0D8551EFD8A74025AFDC84C53E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 16:01:00 +0000 Manifest this update: Sun 07 Dec 2025 16:01:00 +0000 Manifest next update: Mon 08 Dec 2025 16:01:00 +0000 Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: 4o4ROg9J0e7lbwmuBocf0kJZI1zdEGiYHwzpCoLR1OQ=) 2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:7f:0d:85:51:ef:d8:a7:40:25:af:dc:84:c5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d Validity Not Before: Dec 7 16:01:00 2025 GMT Not After : Dec 8 16:01:00 2025 GMT Subject: CN=78946b22ed5de502f3f5db8804c3c7a2802e5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:c0:20:41:23:ea:cc:a9:ac:62:03:8a:89: 7b:e3:12:01:53:ad:1c:33:2f:63:ea:e0:4a:e5:bf: 02:7a:97:12:52:8e:c4:8c:04:ca:b6:ae:5a:01:3c: 03:a1:ca:6d:71:13:03:3e:ba:4d:e1:7e:76:1e:12: 01:69:8b:e4:c8:53:57:af:af:73:5d:79:d9:5b:e1: ac:ff:f4:c7:1f:d9:bf:35:d5:7b:f3:24:40:73:f9: 1e:75:99:31:ee:02:7b:43:c2:07:68:cf:19:34:db: fb:66:68:80:89:ab:00:3c:3e:96:f0:1b:a7:38:7a: ed:be:f8:fa:a3:07:53:2e:d3:5f:11:ee:ba:8a:d7: 4c:9c:c0:7a:81:ad:74:48:e7:4b:09:9b:fb:98:58: 80:fe:3d:46:e6:0a:56:a2:5c:89:c7:6f:f1:31:26: 19:80:1b:4a:89:b9:8a:b1:b5:be:ff:48:d5:de:40: 27:ce:11:b1:99:97:f9:0b:16:0a:8d:6e:20:7a:81: 7e:dc:c3:cf:93:c7:fb:c4:ac:2a:aa:61:3b:35:b1: 1e:ba:76:4a:98:29:25:bc:2c:66:42:b6:cc:5e:7e: 7a:75:fb:0d:4a:34:19:86:aa:19:81:14:cd:fa:6f: c0:6e:b1:36:83:8c:7f:a9:2c:0e:d7:35:9b:c3:74: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:6B:22:ED:5D:E5:02:F3:F5:DB:88:04:C3:C7:A2:80:2E:59:13 X509v3 Authority Key Identifier: keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bd:51:f9:50:78:d1:84:53:70:33:97:17:49:8b:7d:b9:59: 61:df:83:5d:da:ab:f9:20:12:4e:c0:5a:7f:5a:40:11:53:66: 05:5b:bb:91:85:41:35:80:dd:f8:6a:2d:9d:0d:84:6a:6e:7d: 90:f6:9f:eb:c2:fc:cd:e4:ce:fc:b0:eb:e3:01:63:63:64:ef: e8:7d:7d:39:80:e4:d4:a1:2e:5c:5c:b2:4c:32:4b:24:c2:49: 7a:31:4e:12:79:6e:27:bc:16:e1:f3:e9:36:76:78:e0:23:4a: da:a9:d5:4c:f6:8d:ec:96:d0:46:f5:1c:07:1d:4a:ad:34:6f: 25:83:b7:7b:fb:8e:2b:b9:78:bc:e1:3b:e0:74:d0:f8:8e:a8: 98:6a:59:2a:fc:6b:ba:01:56:a7:ba:3e:bc:bc:b2:f6:16:68: bc:05:3d:03:9e:94:83:12:f7:86:e2:1d:5c:33:c3:ff:ff:54: b9:fa:8c:d1:02:2f:8a:b8:ac:4b:e2:3f:11:4c:e9:e2:0c:d6: c6:eb:8c:8a:f4:42:58:71:c9:40:a9:64:6b:4e:16:cd:fe:00: fc:b2:a3:d7:5f:d7:7b:52:b7:db:62:3f:b9:13:fc:5a:6e:6a: 46:e8:92:29:ce:cf:55:63:c5:3b:e5:1d:64:99:c3:55:fb:3d: fa:7f:fa:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i38NhVHv2KdAJa/chMU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NzdjZTE0MzQyMzJkODA4MTk1ZDBjYTcwYWIzOTFkZmIw N2FmMmQwHhcNMjUxMjA3MTYwMTAwWhcNMjUxMjA4MTYwMTAwWjAzMTEwLwYDVQQD Eyg3ODk0NmIyMmVkNWRlNTAyZjNmNWRiODgwNGMzYzdhMjgwMmU1OTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvXAIEEj6syprGIDiol74xIBU60c My9j6uBK5b8CepcSUo7EjATKtq5aATwDocptcRMDPrpN4X52HhIBaYvkyFNXr69z XXnZW+Gs//THH9m/NdV78yRAc/kedZkx7gJ7Q8IHaM8ZNNv7ZmiAiasAPD6W8Bun OHrtvvj6owdTLtNfEe66itdMnMB6ga10SOdLCZv7mFiA/j1G5gpWolyJx2/xMSYZ gBtKibmKsbW+/0jV3kAnzhGxmZf5CxYKjW4geoF+3MPPk8f7xKwqqmE7NbEeunZK mCklvCxmQrbMXn56dfsNSjQZhqoZgRTN+m/AbrE2g4x/qSwO1zWbw3R0OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiUayLtXeUC8/XbiATDx6KALlkTMB8GA1UdIwQY MBaAFNV3zhQ0Iy2AgZXQynCrOR37B68tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMt NjBlNmIxNDhkMjhiLzEvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMtNjBlNmIxNDhkMjhi LzEvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU71R+VB4 0YRTcDOXF0mLfblZYd+DXdqr+SASTsBaf1pAEVNmBVu7kYVBNYDd+GotnQ2Eam59 kPaf68L8zeTO/LDr4wFjY2Tv6H19OYDk1KEuXFyyTDJLJMJJejFOEnluJ7wW4fPp NnZ44CNK2qnVTPaN7JbQRvUcBx1KrTRvJYO3e/uOK7l4vOE74HTQ+I6omGpZKvxr ugFWp7o+vLyy9hZovAU9A56UgxL3huIdXDPD//9UufqM0QIvirisS+I/EUzp4gzW xuuMivRCWHHJQKlka04Wzf4A/LKj11/Xe1K322I/uRP8Wm5qRuiSKc7PVWPFO+Ud ZJnDVfs9+n/66g== -----END CERTIFICATE-----Generated at Sun Dec 7 23:02:54 2025 by rpki-client