This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json) Hash identifier: G7VgTBwLK9oPPa/WI16hCPWojZ9CWodARzKs9dRZPdI= Subject key identifier: 7E:4A:51:48:D2:7D:82:26:F9:C3:BE:EF:9C:FD:B5:16:0D:AB:5A:76 Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Certificate serial: 019B59E36DBC8DC4993FD508A2F9C94F894F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft Manifest number: 1149 Signing time: Fri 26 Dec 2025 09:00:35 +0000 Manifest this update: Fri 26 Dec 2025 09:00:35 +0000 Manifest next update: Sat 27 Dec 2025 09:00:35 +0000 Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: jMyxSlx2cvgVw+v+sfkkna4AusMTmlnREnreRBuqdDY=) 2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=) 3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=) 4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=) 5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=) 6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=) 7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=) 8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:6d:bc:8d:c4:99:3f:d5:08:a2:f9:c9:4f:89:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Validity Not Before: Dec 26 09:00:35 2025 GMT Not After : Dec 27 09:00:35 2025 GMT Subject: CN=7e4a5148d27d8226f9c3beef9cfdb5160dab5a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:80:e8:84:ff:7c:14:30:21:b5:9c:f9:3c:cd: e6:d3:c2:04:26:94:2f:5f:0c:cc:5e:33:20:86:be: 6e:48:12:48:c3:c1:51:73:40:87:f7:b5:c2:b1:62: 3d:35:55:e9:3f:75:6c:12:44:b6:65:5a:b0:45:00: 87:48:bc:fa:dc:f5:d9:63:2a:61:b1:05:4a:bf:e9: 15:69:82:05:f8:ea:38:ad:64:8d:e6:0d:51:dc:b7: 42:e3:79:e3:24:c0:f9:81:d2:b1:6a:66:65:9c:60: db:c1:f4:e8:85:76:88:17:6d:9c:b5:87:d8:de:09: a6:41:8d:55:8e:08:33:d1:5e:29:66:79:78:39:f7: ac:ce:25:b1:03:ea:c2:36:9f:2e:be:fb:b3:e6:ec: e6:0b:01:d0:d9:a4:9a:21:3d:e1:95:1f:5e:86:30: db:6b:1f:64:33:97:90:7d:19:ac:9f:79:06:2d:1c: 61:20:a5:09:cf:11:6e:f4:5d:14:ba:63:4e:14:23: 59:11:e7:fd:39:88:6f:c5:11:ca:a0:c3:ef:48:1f: 37:61:97:e8:99:9b:d2:4a:92:b8:5d:f1:5b:da:9c: 8e:f8:0e:ba:73:ca:ac:eb:9a:30:62:ae:a4:dc:56: af:24:85:4a:58:55:1d:a0:67:c2:35:03:1b:1e:06: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:51:48:D2:7D:82:26:F9:C3:BE:EF:9C:FD:B5:16:0D:AB:5A:76 X509v3 Authority Key Identifier: keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3d:eb:85:34:9e:e2:66:6a:9f:3c:ef:45:a6:c6:4a:d2:e9: 06:f2:5d:66:ab:09:d8:34:d2:58:d6:67:0a:5d:9c:5c:3e:fa: 8f:ec:48:59:41:1b:68:6a:00:d4:40:cc:e4:37:33:a3:c7:d7: 2c:e8:cd:12:10:d4:2f:40:2c:a5:1d:f2:d1:20:bf:d9:40:11: 51:05:1b:38:02:38:d7:a9:47:13:cf:3a:35:3d:9f:b1:8a:a9: 82:e6:c7:70:1a:3b:03:bf:4d:0a:19:73:0f:35:52:ce:de:a2: 78:95:2a:2a:ca:a6:95:bb:38:02:36:06:ee:0e:22:91:98:5d: b7:77:93:2d:93:31:c7:69:06:06:58:8f:6e:6e:c4:99:74:cf: e2:ff:df:1a:2b:40:1f:a1:51:da:82:11:06:5a:d2:be:52:f2: 99:de:53:a6:c8:fe:bc:8e:11:9b:21:d8:01:b4:23:cf:e4:dc: 7c:96:23:ae:19:9c:0b:0f:5b:56:31:bf:9c:42:e2:b9:43:7c: 90:75:f0:c6:5f:4b:c5:97:e4:33:6b:94:8f:cf:10:3b:14:30: 61:a3:cb:3c:fc:52:a5:ed:f6:86:73:2d:92:68:eb:51:df:36: b2:32:61:e8:02:f8:62:90:54:bb:ac:bb:99:ae:e7:9a:d0:40: 7f:e4:30:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4228jcSZP9UIovnJT4lPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj YWE2ZDQwHhcNMjUxMjI2MDkwMDM1WhcNMjUxMjI3MDkwMDM1WjAzMTEwLwYDVQQD Eyg3ZTRhNTE0OGQyN2Q4MjI2ZjljM2JlZWY5Y2ZkYjUxNjBkYWI1YTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioDohP98FDAhtZz5PM3m08IEJpQv XwzMXjMghr5uSBJIw8FRc0CH97XCsWI9NVXpP3VsEkS2ZVqwRQCHSLz63PXZYyph sQVKv+kVaYIF+Oo4rWSN5g1R3LdC43njJMD5gdKxamZlnGDbwfTohXaIF22ctYfY 3gmmQY1Vjggz0V4pZnl4OfesziWxA+rCNp8uvvuz5uzmCwHQ2aSaIT3hlR9ehjDb ax9kM5eQfRmsn3kGLRxhIKUJzxFu9F0UumNOFCNZEef9OYhvxRHKoMPvSB83YZfo mZvSSpK4XfFb2pyO+A66c8qs65owYq6k3FavJIVKWFUdoGfCNQMbHgaWVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5KUUjSfYIm+cO+75z9tRYNq1p2MB8GA1UdIwQY MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt NmJmZmNiN2MwZjBhLzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj3rhTSe 4mZqnzzvRabGStLpBvJdZqsJ2DTSWNZnCl2cXD76j+xIWUEbaGoA1EDM5Dczo8fX LOjNEhDUL0AspR3y0SC/2UARUQUbOAI416lHE886NT2fsYqpgubHcBo7A79NChlz DzVSzt6ieJUqKsqmlbs4AjYG7g4ikZhdt3eTLZMxx2kGBliPbm7EmXTP4v/fGitA H6FR2oIRBlrSvlLymd5Tpsj+vI4RmyHYAbQjz+TcfJYjrhmcCw9bVjG/nELiuUN8 kHXwxl9LxZfkM2uUj88QOxQwYaPLPPxSpe32hnMtkmjrUd82sjJh6AL4YpBUu6y7 ma7nmtBAf+Qwiw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:27 2025 by rpki-client