This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json) Hash identifier: qn6y68RyJ7TeCGRSr/oQBfxl7KlB2wT/8qMsqBd0Ygk= Subject key identifier: 49:8D:AB:A9:9A:AD:A1:BA:8C:23:40:60:21:BA:D7:DC:2F:F1:FF:57 Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46 Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46 Certificate serial: 019B593ED8BB2E424734751750FE8754D4F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft Manifest number: 0167 Signing time: Fri 26 Dec 2025 06:00:49 +0000 Manifest this update: Fri 26 Dec 2025 06:00:49 +0000 Manifest next update: Sat 27 Dec 2025 06:00:49 +0000 Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=) 2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: FWs2Dm6QSKMclhuORHq3ppSYKtKWG5bndOWnH9Bpo8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d8:bb:2e:42:47:34:75:17:50:fe:87:54:d4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46 Validity Not Before: Dec 26 06:00:49 2025 GMT Not After : Dec 27 06:00:49 2025 GMT Subject: CN=498daba99aada1ba8c23406021bad7dc2ff1ff57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:07:2d:af:fa:63:00:c8:34:a2:20:11:91: 36:3b:97:fd:c2:95:1e:91:d6:f2:de:c0:16:af:c7: db:1c:7c:72:97:12:9d:8a:96:25:d5:00:28:a3:a2: ae:58:a5:9a:8a:a0:31:81:cf:b5:56:aa:e6:c5:d3: 57:39:30:aa:b2:03:b0:60:fc:1a:70:35:94:97:3d: 6c:5d:2b:ec:70:02:d3:71:84:6f:a9:f0:30:68:cf: 58:c8:48:97:b2:9f:7a:a5:cc:60:45:57:fd:2b:4a: 0a:89:f5:80:a2:42:a1:ed:28:46:3a:ea:b6:c0:b8: a1:83:0f:5f:4e:0f:93:60:e4:4a:98:59:7b:ab:7a: 4f:d5:97:42:ee:72:ac:0f:13:30:60:1a:46:d7:cd: 03:23:f9:f8:2b:c1:63:e8:30:d8:95:65:6f:d6:85: 02:c4:a8:00:2e:5f:ad:71:50:09:0d:a6:d9:8d:42: 90:7e:39:fa:1f:63:0b:1a:10:36:6c:40:2a:2b:6e: 11:8d:fc:53:2e:9c:d5:ff:d0:81:f0:3c:9b:ab:1f: ca:f3:68:88:b2:22:b1:02:c0:db:8b:2d:f0:c8:57: b2:80:5a:fd:4d:4b:61:01:22:4d:a7:b1:2e:d8:87: 79:8a:c3:16:97:cc:2b:59:aa:55:3b:d5:7e:39:e4: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8D:AB:A9:9A:AD:A1:BA:8C:23:40:60:21:BA:D7:DC:2F:F1:FF:57 X509v3 Authority Key Identifier: keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b2:a9:22:89:83:df:61:cb:1e:94:4b:b1:9e:e7:63:9f:31: ee:62:38:68:e4:35:50:4f:b5:0a:0a:dc:78:8b:6d:bc:f4:9b: ab:60:01:d1:01:b9:6b:a1:18:01:23:32:f3:9e:ae:78:fe:bb: b3:b6:29:23:b0:7a:6e:ee:13:8b:a1:43:8b:23:9e:13:9a:32: 67:40:1f:31:77:38:85:0a:79:bc:db:61:cd:d4:82:30:de:23: 8d:db:4f:45:27:37:92:3b:61:1e:79:52:38:96:dc:ea:af:a1: cf:cc:b7:1f:cb:a1:cc:49:ff:05:88:27:25:8d:a5:55:8a:5f: 75:14:17:f4:5a:da:5f:dd:fc:67:76:4d:fc:53:23:a6:f2:f4: 47:d6:52:49:45:6f:45:9c:d5:79:c1:77:a1:f5:c2:b7:04:59: 73:92:2b:06:f5:91:15:91:e5:67:dd:72:d9:da:4a:da:47:4d: cf:4e:bd:60:ff:61:30:7c:33:14:e4:c2:c0:51:1c:61:62:18: 37:a1:8b:d6:f3:ce:f8:db:48:1c:49:e8:a5:87:8a:30:19:6d: 28:63:07:38:d9:da:32:5d:11:52:ff:3b:48:fa:05:52:ca:e1: b7:d5:22:1b:47:42:ed:99:e2:0a:bb:1b:8d:09:d4:b9:7c:33: 6b:04:11:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPti7LkJHNHUXUP6HVNTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NTM2MGYzYTE5MmRjYWExZDNkMTk0ZGI2NGMwMjU0YzM3 NGJkNDYwHhcNMjUxMjI2MDYwMDQ5WhcNMjUxMjI3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg0OThkYWJhOTlhYWRhMWJhOGMyMzQwNjAyMWJhZDdkYzJmZjFmZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgusHLa/6YwDINKIgEZE2O5f9wpUe kdby3sAWr8fbHHxylxKdipYl1QAoo6KuWKWaiqAxgc+1VqrmxdNXOTCqsgOwYPwa cDWUlz1sXSvscALTcYRvqfAwaM9YyEiXsp96pcxgRVf9K0oKifWAokKh7ShGOuq2 wLihgw9fTg+TYORKmFl7q3pP1ZdC7nKsDxMwYBpG180DI/n4K8Fj6DDYlWVv1oUC xKgALl+tcVAJDabZjUKQfjn6H2MLGhA2bEAqK24RjfxTLpzV/9CB8Dybqx/K82iI siKxAsDbiy3wyFeygFr9TUthASJNp7Eu2Id5isMWl8wrWapVO9V+OeSJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmNq6maraG6jCNAYCG619wv8f9XMB8GA1UdIwQY MBaAFEdTYPOhktyqHT0ZTbZMAlTDdL1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjkt YjAzYmE0YWIwYzU0LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjktYjAzYmE0YWIwYzU0 LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7KpIomD 32HLHpRLsZ7nY58x7mI4aOQ1UE+1CgrceIttvPSbq2AB0QG5a6EYASMy856ueP67 s7YpI7B6bu4Ti6FDiyOeE5oyZ0AfMXc4hQp5vNthzdSCMN4jjdtPRSc3kjthHnlS OJbc6q+hz8y3H8uhzEn/BYgnJY2lVYpfdRQX9FraX938Z3ZN/FMjpvL0R9ZSSUVv RZzVecF3ofXCtwRZc5IrBvWRFZHlZ91y2dpK2kdNz069YP9hMHwzFOTCwFEcYWIY N6GL1vPO+NtIHEnopYeKMBltKGMHONnaMl0RUv87SPoFUsrht9UiG0dC7ZniCrsb jQnUuXwzawQRPQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:24 2025 by rpki-client