This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft File: 1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json) Hash identifier: 9CeM7vD48KtJXSxjLtgNOwVo5hcgzcDIPwZ+vFH8rQQ= Subject key identifier: 41:13:D7:56:69:BB:87:3A:9E:AE:C3:C5:83:52:43:CA:BA:97:4F:5F Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019B37C573752BF556A9B15C732D65B0C655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 18:00:45 +0000 Manifest this update: Fri 19 Dec 2025 18:00:45 +0000 Manifest next update: Sat 20 Dec 2025 18:00:45 +0000 Files and hashes: 1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: VEmiVQIyWkw5Ja70NuHjzJ5Xz2D2VogxMFLxRz//px8=) 2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=) 3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=) 4: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (hash: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=) 5: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=) 6: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=) 7: XDE5yWHym2A5ak6WQEhkh6UG6-E.roa (hash: ZtYfbKKZBHtlgDqAoKqJ/Mw8EPVT2w6fQRb3QDPCDXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:73:75:2b:f5:56:a9:b1:5c:73:2d:65:b0:c6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Dec 19 18:00:45 2025 GMT Not After : Dec 20 18:00:45 2025 GMT Subject: CN=4113d75669bb873a9eaec3c5835243caba974f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:85:2a:0d:69:de:01:e7:51:03:2e:b7:28: 32:09:a1:93:b0:d6:6c:7d:f4:bc:4e:6a:18:80:af: e1:c5:3f:29:c1:f9:19:ad:0d:14:bf:4e:8c:64:8c: 4c:11:1b:43:e6:87:22:e1:05:85:3a:14:e8:78:eb: a7:7c:91:b9:c2:c0:d1:bf:af:0c:3c:3e:25:d2:9d: 0d:0b:e7:93:27:35:7a:ed:18:6a:f8:d0:f8:dd:55: fb:7c:7d:7e:70:fa:e9:73:0f:a9:e1:9d:33:1f:4e: fd:30:7c:34:e5:77:fb:9c:8b:33:9b:2b:f1:79:3d: 2e:80:20:eb:e9:81:83:16:b5:b0:2a:b1:6f:d1:d2: 7b:c9:87:33:82:df:0d:8e:89:7d:02:eb:47:4b:a1: 7e:f9:e6:86:18:50:36:21:74:80:2f:fb:7b:df:52: c7:63:d3:4d:41:14:e7:51:a4:30:ee:e7:c4:92:c4: 6f:64:19:ff:61:cf:71:7d:b2:cb:2f:52:d0:e9:2b: ed:cc:d5:41:98:c8:d6:50:09:c7:46:e3:a2:b7:6e: 04:87:b0:7d:b0:28:95:9f:b3:46:0a:2b:d1:b7:5c: 6a:12:68:6c:ca:0e:0d:6d:b4:fe:3a:ac:7f:5b:d9: b7:0d:43:bb:fe:55:7c:d1:9a:60:79:2b:55:d5:0c: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:D7:56:69:BB:87:3A:9E:AE:C3:C5:83:52:43:CA:BA:97:4F:5F X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:59:1b:b0:17:41:b0:6b:af:95:ff:a9:a1:f8:12:39:30:7a: 46:58:d5:28:27:45:8c:2b:58:62:ff:98:2f:b2:78:e7:e4:aa: aa:9a:6e:a2:89:ad:90:87:df:72:ed:25:2f:18:d1:f4:b6:95: 06:97:f8:74:2a:97:73:b4:72:21:c5:1f:74:b5:69:c4:3e:75: 68:1b:6d:f1:50:19:59:04:6f:7d:34:c7:4d:36:97:4b:fb:0c: 52:3d:0a:63:46:f5:21:07:8d:ef:ad:20:2e:6f:f5:29:ca:1a: 1d:6e:27:37:48:62:2f:c2:6f:3e:0f:04:30:c5:1f:ad:c0:9f: 0a:fe:9b:a9:97:1e:43:eb:3f:c0:ee:41:c6:9a:63:e7:76:84: b3:26:03:44:54:07:4e:e6:76:39:32:aa:19:91:e1:7e:2a:e2: 35:fc:06:93:86:33:3b:83:07:03:b3:41:84:3e:79:a8:c7:db: 9d:ff:45:5a:e4:b6:e8:a8:83:f1:ae:8d:d6:3e:95:bf:ef:9d: 06:5d:7d:55:93:29:3e:a1:42:a4:48:e7:34:eb:ec:23:17:67: 42:0a:c6:14:aa:1e:20:86:fc:ca:4d:12:71:1f:68:70:a7:10: 57:ae:03:90:ca:55:64:20:37:e5:70:aa:96:ba:ae:8d:b7:b3: 51:c5:e1:80 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs3xXN1K/VWqbFccy1lsMZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjUxMjE5MTgwMDQ1WhcNMjUxMjIwMTgwMDQ1WjAzMTEwLwYDVQQD Eyg0MTEzZDc1NjY5YmI4NzNhOWVhZWMzYzU4MzUyNDNjYWJhOTc0ZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF6FKg1p3gHnUQMutygyCaGTsNZs ffS8TmoYgK/hxT8pwfkZrQ0Uv06MZIxMERtD5oci4QWFOhToeOunfJG5wsDRv68M PD4l0p0NC+eTJzV67Rhq+ND43VX7fH1+cPrpcw+p4Z0zH079MHw05Xf7nIszmyvx eT0ugCDr6YGDFrWwKrFv0dJ7yYczgt8Njol9AutHS6F++eaGGFA2IXSAL/t731LH Y9NNQRTnUaQw7ufEksRvZBn/Yc9xfbLLL1LQ6SvtzNVBmMjWUAnHRuOit24Eh7B9 sCiVn7NGCivRt1xqEmhsyg4NbbT+Oqx/W9m3DUO7/lV80ZpgeStV1QywWwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEET11Zpu4c6nq7DxYNSQ8q6l09fMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI2LzAzY2NlMy1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5 YWEvMS8xLVBjOFhBODZFR3FMcDlfejQxeUJiUkI0M0hFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFkb sBdBsGuvlf+pofgSOTB6RljVKCdFjCtYYv+YL7J45+SqqppuoomtkIffcu0lLxjR 9LaVBpf4dCqXc7RyIcUfdLVpxD51aBtt8VAZWQRvfTTHTTaXS/sMUj0KY0b1IQeN 760gLm/1KcoaHW4nN0hiL8JvPg8EMMUfrcCfCv6bqZceQ+s/wO5Bxppj53aEsyYD RFQHTuZ2OTKqGZHhfiriNfwGk4YzO4MHA7NBhD55qMfbnf9FWuS26KiD8a6N1j6V v++dBl19VZMpPqFCpEjnNOvsIxdnQgrGFKoeIIb8yk0ScR9ocKcQV64DkMpVZCA3 5XCqlrqujbezUcXhgA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:56:37 2025 by rpki-client