This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json) Hash identifier: /y/hPIGB4fpzTyS4Jkh4P3a1b/0ELNdRfFmgvtOy/IQ= Subject key identifier: A0:3E:BB:0A:64:35:AB:24:33:91:B7:0F:A5:BD:40:49:A6:00:E5:64 Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Certificate serial: 019B0E5BB8DD0BADF5CE45C975769B03DC01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft Manifest number: 017B Signing time: Thu 11 Dec 2025 17:00:50 +0000 Manifest this update: Thu 11 Dec 2025 17:00:50 +0000 Manifest next update: Fri 12 Dec 2025 17:00:50 +0000 Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: c4BXxlJxlG3dZpw0AIqrvHcOknf7SKPXjzpkCUQQjfo=) 2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=) 3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:b8:dd:0b:ad:f5:ce:45:c9:75:76:9b:03:dc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Validity Not Before: Dec 11 17:00:50 2025 GMT Not After : Dec 12 17:00:50 2025 GMT Subject: CN=a03ebb0a6435ab243391b70fa5bd4049a600e564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:6c:2d:95:ed:a5:17:77:bb:dc:f1:47:45: 1f:89:bd:46:e3:3c:c6:5a:3b:e6:e9:ac:67:80:10: fb:64:78:78:00:4e:36:30:e4:57:77:64:82:ac:f3: df:80:4a:56:cc:5f:02:0e:08:15:09:8f:e9:65:c6: 7d:a8:ca:52:25:f5:dd:14:cb:ba:ed:7c:3f:a2:b5: 07:10:2f:71:7f:a9:62:a4:98:5a:62:55:f9:cc:43: 9b:ad:7e:54:d2:21:ef:cf:35:d5:47:a0:7b:f4:fb: 10:89:44:ad:ea:97:46:9c:58:5c:f8:d4:dd:0b:93: 57:a2:c0:ef:88:88:bc:d0:a0:94:cc:0a:45:a1:1b: 63:c5:9f:92:a2:95:62:c5:0c:cc:88:0e:81:46:3e: 3a:49:95:bd:97:69:ea:e7:04:2c:7e:13:45:5b:a7: 18:0b:04:25:49:71:39:56:ef:fc:9f:95:59:8c:fd: 74:70:54:db:bb:f6:50:39:ff:e4:40:4c:f8:e7:14: 54:fa:41:99:cc:87:c9:02:4c:3c:f2:6a:db:10:4c: 6c:d2:87:d4:39:0f:3d:99:31:77:0c:03:4e:b3:60: 4f:34:7c:90:ce:fe:ea:30:06:c1:00:cf:a7:d7:2e: 70:f2:0e:d3:10:a1:ce:3f:be:7d:1d:87:3e:9a:d1: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:BB:0A:64:35:AB:24:33:91:B7:0F:A5:BD:40:49:A6:00:E5:64 X509v3 Authority Key Identifier: keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:61:bf:e3:16:3b:00:d4:ed:ed:ba:be:3b:ae:f6:0a:8b:2e: db:9f:f7:07:5d:ef:25:37:29:22:b9:d5:06:55:13:40:b4:66: 29:ee:27:4f:93:93:12:87:e2:12:72:dd:af:85:f1:4f:3b:2b: c8:30:12:b3:f2:bd:eb:9a:fa:17:24:62:a5:de:ae:0b:e6:c7: 94:7d:80:bf:bb:a6:ce:a3:b7:bf:e3:aa:5d:b6:14:f8:1b:bf: 7a:f3:5c:7f:2e:c5:f7:c1:eb:e0:9c:ea:86:07:be:bf:a5:cb: 72:4f:22:28:44:81:1a:6d:85:2b:4d:10:9c:ae:d3:77:0d:d6: 70:29:4d:6f:29:7e:67:48:8b:ed:62:e5:3d:ae:52:79:3a:c1: a2:37:c1:26:e8:33:17:35:da:74:34:fa:64:51:21:f9:4d:95: 77:be:42:d9:95:8f:29:62:3f:38:a9:49:6b:0f:18:9d:d4:67: 50:b6:9f:98:11:9e:ad:67:7a:43:08:2b:38:49:85:b0:81:17: b1:c7:58:fb:15:d0:f9:25:cb:39:ef:b5:bf:c2:a5:27:1f:87: 4d:1b:37:8f:b4:97:0e:94:44:49:47:7f:5e:bd:e8:98:4f:90: a0:bd:03:f8:af:23:a4:69:3a:c6:40:88:37:c7:06:46:c2:32: c7:48:9b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7jdC631zkXJdXabA9wBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzAwMzQxMDRmMWJmNjU4MTQ0YjRhYTQ1YjQxYTNmNTc3 OWRjMGYwHhcNMjUxMjExMTcwMDUwWhcNMjUxMjEyMTcwMDUwWjAzMTEwLwYDVQQD EyhhMDNlYmIwYTY0MzVhYjI0MzM5MWI3MGZhNWJkNDA0OWE2MDBlNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7VsLZXtpRd3u9zxR0Ufib1G4zzG Wjvm6axngBD7ZHh4AE42MORXd2SCrPPfgEpWzF8CDggVCY/pZcZ9qMpSJfXdFMu6 7Xw/orUHEC9xf6lipJhaYlX5zEObrX5U0iHvzzXVR6B79PsQiUSt6pdGnFhc+NTd C5NXosDviIi80KCUzApFoRtjxZ+SopVixQzMiA6BRj46SZW9l2nq5wQsfhNFW6cY CwQlSXE5Vu/8n5VZjP10cFTbu/ZQOf/kQEz45xRU+kGZzIfJAkw88mrbEExs0ofU OQ89mTF3DANOs2BPNHyQzv7qMAbBAM+n1y5w8g7TEKHOP759HYc+mtHpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA+uwpkNaskM5G3D6W9QEmmAOVkMB8GA1UdIwQY MBaAFNZwA0EE8b9lgUS0qkW0Gj9XedwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQt ZjkxNzJjY2JjNWFmLzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQtZjkxNzJjY2JjNWFm LzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2G/4xY7 ANTt7bq+O672Cosu25/3B13vJTcpIrnVBlUTQLRmKe4nT5OTEofiEnLdr4XxTzsr yDASs/K965r6FyRipd6uC+bHlH2Av7umzqO3v+OqXbYU+Bu/evNcfy7F98Hr4Jzq hge+v6XLck8iKESBGm2FK00QnK7Tdw3WcClNbyl+Z0iL7WLlPa5SeTrBojfBJugz FzXadDT6ZFEh+U2Vd75C2ZWPKWI/OKlJaw8YndRnULafmBGerWd6QwgrOEmFsIEX scdY+xXQ+SXLOe+1v8KlJx+HTRs3j7SXDpRESUd/Xr3omE+QoL0D+K8jpGk6xkCI N8cGRsIyx0ibnQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:11 2025 by rpki-client