This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json) Hash identifier: U6MA2hYVB8qFrKj95t6iZRZyvpjgmGnGmiQEAf0WPCw= Subject key identifier: 1E:08:A1:E1:41:34:CB:41:EB:18:D0:11:57:03:D3:E3:78:C4:D2:12 Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Certificate serial: 019B3A21DD58ABBB88C09B3854B3039CBA1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:00:56 +0000 Manifest this update: Sat 20 Dec 2025 05:00:56 +0000 Manifest next update: Sun 21 Dec 2025 05:00:56 +0000 Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: 3qhAIrTxkpeWw4oNtt22ui++tX/8gDMphjgMWOqqotQ=) 2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:dd:58:ab:bb:88:c0:9b:38:54:b3:03:9c:ba:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Validity Not Before: Dec 20 05:00:56 2025 GMT Not After : Dec 21 05:00:56 2025 GMT Subject: CN=1e08a1e14134cb41eb18d0115703d3e378c4d212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:b8:56:81:9a:a4:f6:58:44:7d:4b:e0:d1: 40:f6:4f:de:ce:2d:e0:40:f9:6a:cf:61:6e:0d:b4: 8b:0b:3b:09:fe:40:38:e5:68:a7:57:5b:33:f6:1f: 2e:23:fd:2e:2b:38:b3:fa:5e:e7:73:3e:1e:ca:cc: 02:36:aa:d2:82:fa:b2:8b:4b:c4:a8:84:6a:25:6e: 3d:0e:d4:db:08:b7:30:cd:a8:e1:0f:ba:d5:8e:14: 19:1c:4f:2d:1f:c8:f5:95:17:6f:f3:12:15:d1:6c: f8:0c:b4:d5:81:f8:49:5f:c4:05:26:8a:1e:63:2e: b9:9b:65:ee:86:58:4f:dd:99:98:ac:2e:4e:11:da: ad:ca:41:4c:55:7b:dc:d5:fa:7a:2e:9c:cc:2c:8f: d8:11:fa:c0:a4:69:03:1e:2c:d7:9a:ab:1f:03:09: 44:55:06:dc:e1:39:9c:37:19:6d:c3:e2:19:c3:71: be:fa:5e:cc:ac:32:0c:61:d6:05:b4:6c:8a:06:9d: e0:06:45:52:c8:5e:66:34:21:d6:6e:b1:f4:36:22: d8:7a:10:0b:59:6b:7c:da:6d:72:31:b4:35:bb:cc: 96:73:a3:3d:81:14:73:53:de:aa:95:69:c8:83:d5: a3:78:23:2c:c5:29:f2:2e:df:4f:71:37:72:ef:5a: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:A1:E1:41:34:CB:41:EB:18:D0:11:57:03:D3:E3:78:C4:D2:12 X509v3 Authority Key Identifier: keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:43:a0:06:10:86:2c:09:c0:7b:95:da:ce:8a:55:24:80:5b: dc:ec:24:1c:a0:76:f2:8b:31:46:1a:be:aa:16:df:5e:ee:99: 27:24:62:95:8c:3b:4f:d4:37:e5:78:76:fb:34:21:df:d2:63: ce:5f:8e:69:72:d5:06:c5:bd:d3:aa:eb:7d:5c:62:f2:cb:9b: c7:fa:1c:b5:18:bb:42:e8:d7:f5:d5:05:1e:aa:71:2c:9c:c7: 5d:fe:88:44:ff:54:80:5e:85:a2:d4:38:8c:5a:c0:43:5a:af: 23:55:41:94:ca:21:3d:fc:1c:fb:a7:91:28:d1:f0:1a:7e:a1: 02:b2:a4:fa:20:d9:a4:92:d9:5f:0f:ff:a5:8f:ac:94:0e:8f: 6f:52:7f:1b:8c:a4:81:97:40:0c:39:08:55:30:be:90:01:0c: d1:e6:a3:1c:81:ca:04:1c:c8:9c:c7:ca:02:26:a3:ae:2b:78: e0:ae:04:e6:a6:55:be:7f:36:ec:63:4f:45:1b:8b:6d:8b:5d: 5c:5a:8f:c0:89:11:1e:75:9d:cf:bc:13:76:4d:6e:73:19:f6: 36:c5:e9:48:7c:2d:6e:e9:d8:55:27:f1:fd:4f:89:50:1f:f3: c0:16:52:92:0f:86:2d:a9:21:f2:c0:b2:a5:bb:68:d5:09:48: 4b:b5:09:33 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6Id1Yq7uIwJs4VLMDnLofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzVkZjEzYmY4YzFiYThiMTBlMmRhNDgwYWU2MWE1MzQ4 YWI4ZTkwHhcNMjUxMjIwMDUwMDU2WhcNMjUxMjIxMDUwMDU2WjAzMTEwLwYDVQQD EygxZTA4YTFlMTQxMzRjYjQxZWIxOGQwMTE1NzAzZDNlMzc4YzRkMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Di4VoGapPZYRH1L4NFA9k/ezi3g QPlqz2FuDbSLCzsJ/kA45WinV1sz9h8uI/0uKziz+l7ncz4eyswCNqrSgvqyi0vE qIRqJW49DtTbCLcwzajhD7rVjhQZHE8tH8j1lRdv8xIV0Wz4DLTVgfhJX8QFJooe Yy65m2XuhlhP3ZmYrC5OEdqtykFMVXvc1fp6LpzMLI/YEfrApGkDHizXmqsfAwlE VQbc4TmcNxltw+IZw3G++l7MrDIMYdYFtGyKBp3gBkVSyF5mNCHWbrH0NiLYehAL WWt82m1yMbQ1u8yWc6M9gRRzU96qlWnIg9WjeCMsxSnyLt9PcTdy71od3wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB4IoeFBNMtB6xjQEVcD0+N4xNISMB8GA1UdIwQY MBaAFPh13xO/jBuosQ4tpICuYaU0irjpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IWGZFNy1NRzZpeERpMmtnSzVocFRTS3VPay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5 LWZjODNkYjEzZjNhMS8xLzEtSFhmRTctTUc2aXhEaTJrZ0s1aHBUU0t1T2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNiL2FiYWNmMS1mNGM2LTQ3MTAtOTNlOS1mYzgzZGIxM2Yz YTEvMS8xLUhYZkU3LU1HNml4RGkya2dLNWhwVFNLdU9rLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEOg BhCGLAnAe5XazopVJIBb3OwkHKB28osxRhq+qhbfXu6ZJyRilYw7T9Q35Xh2+zQh 39Jjzl+OaXLVBsW906rrfVxi8subx/octRi7QujX9dUFHqpxLJzHXf6IRP9UgF6F otQ4jFrAQ1qvI1VBlMohPfwc+6eRKNHwGn6hArKk+iDZpJLZXw//pY+slA6Pb1J/ G4ykgZdADDkIVTC+kAEM0eajHIHKBBzInMfKAiajrit44K4E5qZVvn827GNPRRuL bYtdXFqPwIkRHnWdz7wTdk1ucxn2NsXpSHwtbunYVSfx/U+JUB/zwBZSkg+GLakh 8sCypbto1QlIS7UJMw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:15:52 2025 by rpki-client