This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json) Hash identifier: wfzywDu3eM2tdttTnQzCwIYv+xNZWO5+Bxcq0AA9e/0= Subject key identifier: 0E:F7:63:C5:89:DE:AC:23:FF:23:8F:CC:B2:1C:FF:3E:EB:90:07:1D Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Certificate serial: 019B3C7E0EC8EA39F80A27C2D5BF80F51236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft Manifest number: 166F Signing time: Sat 20 Dec 2025 16:00:52 +0000 Manifest this update: Sat 20 Dec 2025 16:00:52 +0000 Manifest next update: Sun 21 Dec 2025 16:00:52 +0000 Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: K0WuHUI642NFvDkerglylPhzvCXWhQ2nIR6hREg56s8=) 2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:0e:c8:ea:39:f8:0a:27:c2:d5:bf:80:f5:12:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Validity Not Before: Dec 20 16:00:52 2025 GMT Not After : Dec 21 16:00:52 2025 GMT Subject: CN=0ef763c589deac23ff238fccb21cff3eeb90071d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:69:cf:ee:98:93:e9:20:de:fa:c9:6f:2f: e6:21:ae:e0:ab:5c:42:73:a2:8b:1e:bd:cc:d2:73: f2:17:38:1b:72:3b:c9:cf:37:37:57:10:08:04:8e: 79:70:fa:b7:c0:c8:f7:70:64:47:33:79:a0:f1:2f: f5:30:d2:94:05:8b:9e:c3:f0:53:90:f2:1d:f4:00: f2:47:78:0e:d1:62:73:15:66:91:ac:1a:05:29:3b: 77:16:8c:5d:c8:35:a6:f2:3c:53:f1:2b:dc:cf:1e: ca:a8:c0:05:2b:0d:b9:17:13:56:55:7f:9e:1f:1e: e1:46:51:a1:18:23:5b:e0:6a:2e:13:6d:06:83:2b: 6b:f1:57:34:4e:6b:eb:b0:5c:bd:42:02:f2:e4:78: 78:7b:ca:c8:cd:49:51:b3:90:c5:be:e0:fe:2d:45: 78:0d:01:f4:fa:53:34:c3:ce:e0:3d:3b:1e:42:fa: 64:e8:aa:2b:f3:33:f7:11:58:03:92:6d:00:71:be: 67:c3:d9:c5:0a:a7:47:51:cb:4a:b9:47:e5:49:90: 3b:19:08:f6:7a:99:ec:81:c7:4c:28:c4:69:36:18: 1b:a3:1b:3c:48:65:23:1d:23:95:7d:14:6e:79:a4: 67:61:b2:a4:b0:11:98:e9:22:c2:6d:24:14:ea:f4: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F7:63:C5:89:DE:AC:23:FF:23:8F:CC:B2:1C:FF:3E:EB:90:07:1D X509v3 Authority Key Identifier: keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f5:66:20:ab:bc:fb:4a:73:d6:06:e5:c0:ad:5c:8b:3c:0a: 56:eb:fd:a4:01:e6:13:81:fa:5b:92:4e:92:7f:31:72:81:dd: ae:cf:38:23:41:c0:7d:8f:a6:56:78:fc:a2:39:72:00:1f:98: a2:a8:d8:bb:05:f2:68:34:20:d6:b8:ff:a0:94:98:16:69:73: 39:c8:c7:77:23:a9:30:90:e0:b3:e0:ff:59:10:16:1d:74:b6: 8f:e2:35:9b:cb:1d:34:9e:64:0d:88:78:42:a0:ab:3e:bd:76: e0:3a:37:c8:8e:76:65:ca:2e:91:f8:ee:ae:ae:75:57:fa:ba: 90:f4:5e:b8:83:1b:0c:04:a0:34:1e:2d:3b:34:62:25:d8:42: 5f:9d:a0:29:4d:28:ab:12:eb:c6:32:ff:0e:9e:b9:b6:80:3a: 3c:03:12:c2:97:bb:ab:4e:f5:a2:2e:d9:ae:8b:00:f3:28:6b: 11:8f:52:93:6c:68:a4:09:2c:ab:c6:6d:60:59:b3:9d:e0:1a: a5:e5:2f:40:c7:8f:4c:62:bb:e5:0c:41:2d:bc:57:3a:c5:d6: da:73:89:e8:63:82:ce:95:71:96:5a:e7:a7:0d:92:f3:c1:9e: 51:df:11:a7:6c:27:0c:52:2b:38:f8:79:93:23:f0:e6:00:e1: 62:d7:02:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fg7I6jn4CifC1b+A9RI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx MTY2NDQwHhcNMjUxMjIwMTYwMDUyWhcNMjUxMjIxMTYwMDUyWjAzMTEwLwYDVQQD EygwZWY3NjNjNTg5ZGVhYzIzZmYyMzhmY2NiMjFjZmYzZWViOTAwNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFppz+6Yk+kg3vrJby/mIa7gq1xC c6KLHr3M0nPyFzgbcjvJzzc3VxAIBI55cPq3wMj3cGRHM3mg8S/1MNKUBYuew/BT kPId9ADyR3gO0WJzFWaRrBoFKTt3FoxdyDWm8jxT8Svczx7KqMAFKw25FxNWVX+e Hx7hRlGhGCNb4GouE20Ggytr8Vc0TmvrsFy9QgLy5Hh4e8rIzUlRs5DFvuD+LUV4 DQH0+lM0w87gPTseQvpk6Kor8zP3EVgDkm0Acb5nw9nFCqdHUctKuUflSZA7GQj2 epnsgcdMKMRpNhgboxs8SGUjHSOVfRRueaRnYbKksBGY6SLCbSQU6vR4kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA73Y8WJ3qwj/yOPzLIc/z7rkAcdMB8GA1UdIwQY MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfVmIKu8 +0pz1gblwK1cizwKVuv9pAHmE4H6W5JOkn8xcoHdrs84I0HAfY+mVnj8ojlyAB+Y oqjYuwXyaDQg1rj/oJSYFmlzOcjHdyOpMJDgs+D/WRAWHXS2j+I1m8sdNJ5kDYh4 QqCrPr124Do3yI52Zcoukfjurq51V/q6kPReuIMbDASgNB4tOzRiJdhCX52gKU0o qxLrxjL/Dp65toA6PAMSwpe7q071oi7ZrosA8yhrEY9Sk2xopAksq8ZtYFmzneAa peUvQMePTGK75QxBLbxXOsXW2nOJ6GOCzpVxllrnpw2S88GeUd8Rp2wnDFIrOPh5 kyPw5gDhYtcCxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:50 2025 by rpki-client