This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json) Hash identifier: b9K89niH1VdaTpNII4EmIBt8/1xzuxOp2UTLdgE1hLI= Subject key identifier: 58:96:66:0B:CD:34:06:EB:5F:D8:D0:98:A7:FB:0F:6D:A8:D7:2A:09 Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097 Certificate serial: 019B405A9D8A5C8D6E082E6B49A487430C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft Manifest number: 0415 Signing time: Sun 21 Dec 2025 10:00:38 +0000 Manifest this update: Sun 21 Dec 2025 10:00:38 +0000 Manifest next update: Mon 22 Dec 2025 10:00:38 +0000 Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: /dL0I/DOgRLyNSsyVYdKqiDUmPNcC4JTBdwbe3gGnxk=) 2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:9d:8a:5c:8d:6e:08:2e:6b:49:a4:87:43:0c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097 Validity Not Before: Dec 21 10:00:38 2025 GMT Not After : Dec 22 10:00:38 2025 GMT Subject: CN=5896660bcd3406eb5fd8d098a7fb0f6da8d72a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:d7:8c:61:a3:ed:8f:71:52:11:aa:e4:a2: c3:92:2c:b2:6a:5a:8e:8e:a3:65:6e:5f:43:2b:2c: 8a:2f:92:25:d0:8f:49:d7:8b:33:56:43:7d:34:bf: 60:77:03:1d:45:a1:b6:e8:95:ba:68:5f:04:31:b6: 6c:23:d4:d5:92:3b:64:f9:a5:68:9b:dc:38:5b:29: a7:db:42:f1:47:0d:25:2e:48:01:7e:3d:f5:5d:f5: 4f:7d:66:1f:c7:5e:53:84:a2:30:db:0e:e9:5b:ad: 6a:6e:91:e4:e1:ad:76:0b:8d:4a:2e:e1:74:8c:08: a4:c9:34:08:52:e7:5f:19:76:2f:49:a0:6f:bf:f9: 4b:9d:d3:db:79:b4:9b:91:60:47:5f:6e:9f:7b:d9: e5:e2:41:f5:0e:a7:28:7d:35:2f:ec:e6:9b:50:18: 94:d2:81:c2:7e:0a:1b:b1:cb:de:c6:fb:04:1e:cc: a3:9e:96:5c:46:f1:6a:6c:6b:53:d9:af:4f:22:1d: b4:39:12:6a:c0:9e:d6:d4:53:8e:12:b3:d5:79:6c: 37:12:e6:a9:23:9c:f5:b4:1e:6a:c0:89:6e:25:ae: dc:e3:19:85:23:57:b6:0f:0b:80:08:8b:79:b1:9d: c8:83:92:84:28:fb:fe:5a:c8:7c:b5:e3:72:e7:13: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:96:66:0B:CD:34:06:EB:5F:D8:D0:98:A7:FB:0F:6D:A8:D7:2A:09 X509v3 Authority Key Identifier: keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:45:56:da:4c:c4:93:1b:08:2b:fa:15:ba:fa:fb:87:a4:e1: 1c:8c:06:b7:25:18:15:9b:ae:37:51:56:d7:03:a8:8b:e4:e5: 40:43:25:f7:a5:94:1a:88:af:06:35:bd:1b:b9:40:8c:06:7c: e8:4b:55:b6:01:f6:2b:f2:2d:f5:7e:db:a7:ca:45:3d:80:de: 16:db:5b:b7:12:39:51:0d:1f:05:1c:c8:76:5d:23:a3:a1:3f: 20:40:85:fa:55:f4:90:55:00:42:70:c7:99:71:d0:ff:8b:87: 9c:4f:47:f6:f2:5a:65:f0:c1:d2:04:26:43:38:36:9a:52:56: c7:05:92:74:4a:f8:14:35:bb:73:e5:0f:35:f6:77:35:e3:5c: 52:f2:87:6a:47:da:08:84:d4:7d:78:f5:b4:4e:89:f3:ed:c2: 0e:e5:2f:5c:ac:18:d2:c9:55:f7:ed:a9:37:92:10:51:c8:ec: e5:15:28:c5:46:4e:bc:3c:31:45:9c:b9:f8:e9:59:86:4f:bb: 3d:7a:f4:50:d2:bd:1b:3f:32:3c:f8:94:23:d8:36:6c:e5:c3: 93:a5:9f:04:e1:eb:ba:0b:34:32:6f:c5:5e:0b:7f:f3:36:38: 1c:0c:c3:99:c7:c4:dd:04:b3:45:40:0d:d2:57:1f:58:0e:89: 1f:79:75:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWp2KXI1uCC5rSaSHQwxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4 MzkwOTcwHhcNMjUxMjIxMTAwMDM4WhcNMjUxMjIyMTAwMDM4WjAzMTEwLwYDVQQD Eyg1ODk2NjYwYmNkMzQwNmViNWZkOGQwOThhN2ZiMGY2ZGE4ZDcyYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1rXjGGj7Y9xUhGq5KLDkiyyalqO jqNlbl9DKyyKL5Il0I9J14szVkN9NL9gdwMdRaG26JW6aF8EMbZsI9TVkjtk+aVo m9w4Wymn20LxRw0lLkgBfj31XfVPfWYfx15ThKIw2w7pW61qbpHk4a12C41KLuF0 jAikyTQIUudfGXYvSaBvv/lLndPbebSbkWBHX26fe9nl4kH1DqcofTUv7OabUBiU 0oHCfgobscvexvsEHsyjnpZcRvFqbGtT2a9PIh20ORJqwJ7W1FOOErPVeWw3Euap I5z1tB5qwIluJa7c4xmFI1e2DwuACIt5sZ3Ig5KEKPv+Wsh8teNy5xN8BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiWZgvNNAbrX9jQmKf7D22o1yoJMB8GA1UdIwQY MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1kVW2kzE kxsIK/oVuvr7h6ThHIwGtyUYFZuuN1FW1wOoi+TlQEMl96WUGoivBjW9G7lAjAZ8 6EtVtgH2K/It9X7bp8pFPYDeFttbtxI5UQ0fBRzIdl0jo6E/IECF+lX0kFUAQnDH mXHQ/4uHnE9H9vJaZfDB0gQmQzg2mlJWxwWSdEr4FDW7c+UPNfZ3NeNcUvKHakfa CITUfXj1tE6J8+3CDuUvXKwY0slV9+2pN5IQUcjs5RUoxUZOvDwxRZy5+OlZhk+7 PXr0UNK9Gz8yPPiUI9g2bOXDk6WfBOHrugs0Mm/FXgt/8zY4HAzDmcfE3QSzRUAN 0lcfWA6JH3l1Uw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:52:20 2025 by rpki-client