This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: USdcZ0IZBbecMAOGY+lPk+IHaviI4QAfDnchZnCqHC4= Subject key identifier: 2F:2B:EF:D3:41:94:E3:EE:51:0F:D6:9A:7D:53:F4:12:51:94:24:A2 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019B341FD8A23FC9B2E3BFEF1C2BE895E71E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 041E Signing time: Fri 19 Dec 2025 01:01:00 +0000 Manifest this update: Fri 19 Dec 2025 01:01:00 +0000 Manifest next update: Sat 20 Dec 2025 01:01:00 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: qgXqUvqgJDw2OhTwb1NZz1Zb5FGE4UHXzoC31GjRWPo=) 2: 3GUm_HsThPUJjf5Xl65FHt13AV8.roa (hash: Lhftb+taQ8v4bYwk3pVYGnzP3vZQbnGHWFTFTRUD1PM=) 3: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=) 4: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 5: Ft-8xYXFXF_pxWdqchjDObURQAQ.roa (hash: Bbe7isVG2thClqzLz0laVwUWwhKyZ8mXmscJ7ADBYEc=) 6: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 7: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 8: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 9: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 10: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=) 11: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 12: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:d8:a2:3f:c9:b2:e3:bf:ef:1c:2b:e8:95:e7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Dec 19 01:01:00 2025 GMT Not After : Dec 20 01:01:00 2025 GMT Subject: CN=2f2befd34194e3ee510fd69a7d53f412519424a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:68:bd:ff:3d:6c:74:19:0b:3f:82:66:a1: 6e:3a:e4:11:38:f8:08:af:c3:1b:e5:87:18:ef:2d: 2b:e0:d1:b9:99:ab:c5:bb:28:14:0c:4f:68:09:cf: e0:54:88:5c:44:15:4c:ff:d0:41:69:1b:b6:11:c4: 82:8b:77:11:a5:1b:c6:83:b7:1d:e2:38:f4:ed:bb: 02:4f:80:be:f5:b4:e1:25:b8:14:b3:b3:fe:c8:d7: e3:97:e0:c7:a4:a1:59:5c:e4:89:f8:9b:18:f8:27: 70:9f:1e:b0:a0:a4:ed:79:20:23:5b:51:45:f7:3f: 6b:7f:da:df:08:b8:e4:a1:50:58:a9:16:64:ab:c6: 8d:6c:94:2a:7a:07:03:41:f3:a4:15:fc:82:e2:a1: 2e:b6:95:d1:fe:98:c6:2f:ef:c5:31:f2:8d:c8:df: 8b:b6:6e:f6:98:99:33:e0:62:26:64:d8:92:46:bb: 1d:1c:b5:42:e2:e5:1c:7d:ee:a8:de:10:89:3b:5c: 50:1e:e3:69:0a:00:4c:52:f0:47:6d:01:2e:92:e9: 0d:d8:b1:f0:2d:8d:9f:33:ef:06:cb:5f:05:5d:79: de:b1:be:00:0a:6c:a9:44:9b:97:df:68:14:20:bc: fb:08:2d:4a:98:15:47:69:7b:e1:37:09:01:28:28: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2B:EF:D3:41:94:E3:EE:51:0F:D6:9A:7D:53:F4:12:51:94:24:A2 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:d3:5c:c6:14:00:54:59:e8:0b:f5:2f:26:f0:2d:4c:d9: 59:7c:1b:34:32:7a:18:ce:aa:e2:14:c3:1a:8d:ed:c2:53:4b: e2:9c:63:2f:24:18:15:39:80:39:d5:86:24:a7:b4:46:49:c8: 86:a8:9b:db:87:47:c2:9b:43:77:85:90:98:91:cd:c4:48:00: d1:69:72:ca:ab:b2:0f:69:96:36:0c:63:0b:80:3d:6b:23:01: 79:51:a9:94:7f:7f:e2:17:c8:d4:ce:a5:54:12:05:cf:b9:4f: b9:78:19:c3:e6:70:62:53:fd:19:02:f0:d8:73:dc:3e:8a:1b: 40:89:6b:2d:88:95:6f:5b:56:c3:e1:93:3a:10:f7:25:e1:57: 59:54:dd:de:0a:4e:5b:4f:1f:b8:95:7d:5e:ce:37:0a:64:70: 7f:28:54:07:df:c8:96:15:58:91:4c:6d:a8:e6:04:e0:e7:9c: 1b:58:6c:14:90:c2:3c:ca:70:54:79:9c:d9:6c:32:15:bc:db: 79:53:db:74:62:70:8d:d3:8d:b2:2a:e3:0a:e5:1e:13:b3:7b: 49:c9:e3:e6:43:e0:12:d2:35:ea:4d:b0:9c:d7:25:f0:00:50: a7:72:83:76:a5:f4:2f:3b:cd:21:ee:71:9a:94:e3:6e:a1:ee: 80:d6:78:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H9iiP8my47/vHCvoleceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUxMjE5MDEwMTAwWhcNMjUxMjIwMDEwMTAwWjAzMTEwLwYDVQQD EygyZjJiZWZkMzQxOTRlM2VlNTEwZmQ2OWE3ZDUzZjQxMjUxOTQyNGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0chovf89bHQZCz+CZqFuOuQROPgI r8Mb5YcY7y0r4NG5mavFuygUDE9oCc/gVIhcRBVM/9BBaRu2EcSCi3cRpRvGg7cd 4jj07bsCT4C+9bThJbgUs7P+yNfjl+DHpKFZXOSJ+JsY+Cdwnx6woKTteSAjW1FF 9z9rf9rfCLjkoVBYqRZkq8aNbJQqegcDQfOkFfyC4qEutpXR/pjGL+/FMfKNyN+L tm72mJkz4GImZNiSRrsdHLVC4uUcfe6o3hCJO1xQHuNpCgBMUvBHbQEukukN2LHw LY2fM+8Gy18FXXnesb4ACmypRJuX32gUILz7CC1KmBVHaXvhNwkBKCj+8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8r79NBlOPuUQ/Wmn1T9BJRlCSiMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPPTXMYU AFRZ6Av1LybwLUzZWXwbNDJ6GM6q4hTDGo3twlNL4pxjLyQYFTmAOdWGJKe0RknI hqib24dHwptDd4WQmJHNxEgA0WlyyquyD2mWNgxjC4A9ayMBeVGplH9/4hfI1M6l VBIFz7lPuXgZw+ZwYlP9GQLw2HPcPoobQIlrLYiVb1tWw+GTOhD3JeFXWVTd3gpO W08fuJV9Xs43CmRwfyhUB9/IlhVYkUxtqOYE4OecG1hsFJDCPMpwVHmc2WwyFbzb eVPbdGJwjdONsirjCuUeE7N7Scnj5kPgEtI16k2wnNcl8ABQp3KDdqX0LzvNIe5x mpTjbqHugNZ4Jg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:25 2025 by rpki-client