This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json) Hash identifier: 0ZUh2q2wYlv6FIGRglEv2y/JeXOAevc0NIpJ4le+vqI= Subject key identifier: 58:13:06:35:50:A5:BC:BF:6D:29:0A:1E:92:5F:D3:D9:C1:A2:F9:02 Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Certificate serial: 019B4ADEB4DC43701D3F2C15CD5D67E34FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft Manifest number: 1431 Signing time: Tue 23 Dec 2025 11:01:07 +0000 Manifest this update: Tue 23 Dec 2025 11:01:07 +0000 Manifest next update: Wed 24 Dec 2025 11:01:07 +0000 Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: stn8XfKAKszCx0KFpNnA1l3UxoueKe26UTNq+h3z5EI=) 2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=) 3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:b4:dc:43:70:1d:3f:2c:15:cd:5d:67:e3:4f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Validity Not Before: Dec 23 11:01:07 2025 GMT Not After : Dec 24 11:01:07 2025 GMT Subject: CN=5813063550a5bcbf6d290a1e925fd3d9c1a2f902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:f1:2f:5d:7f:10:a9:0b:a5:d5:87:51:d1: 20:f7:fb:29:28:81:37:8e:63:cf:c8:9b:92:a2:c0: 38:79:2d:d4:af:af:3e:4b:9b:09:ec:84:9a:f7:dc: 75:f6:cc:c4:e5:a6:d8:ee:ce:66:1c:cc:ba:e4:74: a2:e7:7b:12:ab:48:d1:bc:2d:53:2a:c6:5e:56:98: ac:b9:fe:e5:55:83:77:6d:97:c1:a2:d8:cb:b0:91: fb:ad:bf:34:56:75:38:11:ab:fb:fa:b8:e8:71:b2: 5c:1e:e0:83:53:d9:cb:f2:6c:7b:e5:0f:65:45:b1: da:a5:5d:1f:fa:f0:c7:4d:f7:c2:5e:bb:91:b5:e2: 38:06:ac:b5:59:e8:44:f6:49:4f:b6:5d:c6:f8:a7: 24:af:5a:76:c7:c3:ee:79:90:6d:81:07:a3:4d:ea: 92:c3:27:05:a5:40:54:0c:a5:e6:b3:f1:2b:53:8c: 91:c4:f3:a1:28:18:a8:53:a9:eb:87:f7:f3:14:eb: 9f:16:ed:df:7f:78:3e:a9:58:13:76:b8:af:66:1a: 62:92:1d:ae:ad:aa:9b:a4:69:5d:02:61:9c:2a:80: 21:de:be:53:f3:30:7f:00:8c:90:1c:0e:d0:88:27: 03:bd:f2:9a:1f:da:a8:a3:7c:6b:25:d3:d1:41:3f: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:06:35:50:A5:BC:BF:6D:29:0A:1E:92:5F:D3:D9:C1:A2:F9:02 X509v3 Authority Key Identifier: keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b1:0f:49:2b:a9:c4:92:8f:e5:5a:9c:9c:3c:fb:ea:b9:03: 02:17:e5:b6:c9:e5:c8:95:71:e1:d9:43:65:15:bd:58:69:37: d3:19:68:fc:c7:ff:95:5a:78:5c:cb:12:a3:92:cc:c1:f3:16: 68:67:52:2e:96:c4:65:4c:2a:36:77:00:1b:85:73:8a:33:e0: 60:2f:5b:0b:20:94:32:c5:6d:16:63:f5:83:af:ea:e4:9c:6a: 8a:e7:70:57:80:b0:cc:a4:dc:db:25:43:67:8f:41:ed:2e:9f: 96:f3:d1:51:2c:74:a8:9a:fb:bc:39:9e:06:84:6b:4a:b1:d6: c0:bb:2d:59:42:52:74:d1:8b:9f:a8:b4:86:16:bc:7e:9d:7f: 87:5c:bc:b9:a4:f7:83:4f:7e:8d:21:67:ed:6d:c4:ef:31:dc: af:06:c2:b5:3e:4d:f6:af:14:a4:34:86:4c:64:81:46:6f:e1: 6c:5f:c6:2e:1b:e7:b9:4d:2e:30:e5:6f:e8:dc:02:6f:0f:3f: 0a:e3:8f:f3:09:24:5a:ae:95:e5:04:87:ed:9c:01:f3:f8:7d: de:fc:03:85:1e:5e:1c:8f:90:e0:92:77:8d:7e:21:c2:89:c2: 10:9c:b8:2a:82:14:e4:e0:c5:1e:e4:0b:42:37:98:83:36:36: db:86:ba:16 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtK3rTcQ3AdPywVzV1n40/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy MjI4YTQwHhcNMjUxMjIzMTEwMTA3WhcNMjUxMjI0MTEwMTA3WjAzMTEwLwYDVQQD Eyg1ODEzMDYzNTUwYTViY2JmNmQyOTBhMWU5MjVmZDNkOWMxYTJmOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPXxL11/EKkLpdWHUdEg9/spKIE3 jmPPyJuSosA4eS3Ur68+S5sJ7ISa99x19szE5abY7s5mHMy65HSi53sSq0jRvC1T KsZeVpisuf7lVYN3bZfBotjLsJH7rb80VnU4Eav7+rjocbJcHuCDU9nL8mx75Q9l RbHapV0f+vDHTffCXruRteI4Bqy1WehE9klPtl3G+Kckr1p2x8PueZBtgQejTeqS wycFpUBUDKXms/ErU4yRxPOhKBioU6nrh/fzFOufFu3ff3g+qVgTdrivZhpikh2u raqbpGldAmGcKoAh3r5T8zB/AIyQHA7QiCcDvfKaH9qoo3xrJdPRQT801wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFgTBjVQpby/bSkKHpJf09nBovkCMB8GA1UdIwQY MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbEP SSupxJKP5VqcnDz76rkDAhfltsnlyJVx4dlDZRW9WGk30xlo/Mf/lVp4XMsSo5LM wfMWaGdSLpbEZUwqNncAG4VzijPgYC9bCyCUMsVtFmP1g6/q5JxqiudwV4CwzKTc 2yVDZ49B7S6flvPRUSx0qJr7vDmeBoRrSrHWwLstWUJSdNGLn6i0hha8fp1/h1y8 uaT3g09+jSFn7W3E7zHcrwbCtT5N9q8UpDSGTGSBRm/hbF/GLhvnuU0uMOVv6NwC bw8/CuOP8wkkWq6V5QSH7ZwB8/h93vwDhR5eHI+Q4JJ3jX4hwonCEJy4KoIU5ODF HuQLQjeYgzY224a6Fg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:37:18 2025 by rpki-client