This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json) Hash identifier: ZlIggMNBJFvEYUJzRTPA1pHDVpMx4Lp0wLF0MW5Trew= Subject key identifier: B2:AE:42:6B:E8:85:FB:48:BE:FF:ED:75:C7:BF:28:30:92:0A:C1:82 Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Certificate serial: 019B427FFF38EC149B433EA874CECC1C207F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 20:00:43 +0000 Manifest this update: Sun 21 Dec 2025 20:00:43 +0000 Manifest next update: Mon 22 Dec 2025 20:00:43 +0000 Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: mK222yWJPPFRLdxSiRMLihSEpmFxgNRtN0etlWI3SuE=) 2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:ff:38:ec:14:9b:43:3e:a8:74:ce:cc:1c:20:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Validity Not Before: Dec 21 20:00:43 2025 GMT Not After : Dec 22 20:00:43 2025 GMT Subject: CN=b2ae426be885fb48beffed75c7bf2830920ac182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:c2:cf:43:eb:b9:ee:cb:d5:74:28:cf:bc: 57:ee:09:40:5b:93:8b:16:da:5e:2b:eb:7e:c5:2e: 80:cf:6e:bd:80:af:e4:29:76:61:80:d0:af:bd:7b: b2:4d:26:ef:d2:42:72:8a:07:45:92:5c:ab:2e:72: b6:67:92:9f:7d:21:e3:37:33:e3:2b:60:eb:6f:94: 6e:49:b9:de:f8:2d:1a:47:d3:10:e2:83:5e:9d:68: cb:40:bb:6b:34:2a:9f:24:8b:20:a0:f7:45:b5:43: 58:13:50:ea:b8:fd:d5:e0:db:06:d3:42:11:0d:fd: 27:39:da:8e:5b:93:5e:97:56:18:2b:41:2e:20:78: 25:ea:e7:a7:26:31:0f:8b:52:cf:e3:b3:ae:4b:da: 19:77:aa:77:a5:35:13:1b:a3:9b:e0:fe:c3:38:0f: e4:cf:ae:ce:c4:92:7a:e4:41:eb:3b:23:ba:67:dc: d7:08:1e:2e:78:fc:41:90:76:7a:a0:ca:8d:8d:95: 9d:78:41:f7:0c:34:3a:60:7a:1d:0e:2e:57:2d:0a: d3:fe:07:be:35:ad:72:a4:56:59:19:b5:da:4a:51: 22:5c:e6:fb:5f:5c:1d:5c:94:97:6c:e3:14:1a:ad: 49:1e:06:ed:85:65:58:d5:4a:57:5c:83:72:7b:81: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:42:6B:E8:85:FB:48:BE:FF:ED:75:C7:BF:28:30:92:0A:C1:82 X509v3 Authority Key Identifier: keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:64:f3:9d:9c:dd:f4:5a:d5:db:96:26:0e:f6:a8:ea:9b:61: 2f:92:5d:2e:cb:d3:cc:29:be:bd:50:15:ab:a5:44:c3:4f:33: b5:3f:07:30:6a:01:50:94:fe:68:f1:2c:b9:d2:d9:3f:db:a4: 78:35:81:9e:de:b7:3f:91:18:a3:19:a7:7a:12:84:b4:39:ac: 0e:ce:fa:c6:2b:64:c4:99:b7:2e:d9:53:ec:33:46:99:4b:41: 22:b2:52:42:96:aa:02:ff:d5:0d:5b:99:de:ff:07:cc:3e:1f: d2:bb:06:04:2b:ad:06:e2:33:35:e3:84:51:51:d1:cd:2c:01: 72:7b:12:5f:62:53:5a:44:8c:fe:d4:17:b1:80:c2:4e:bb:9a: 74:c5:f6:fa:04:70:00:af:80:23:fb:30:49:79:bf:ea:9d:61: a1:87:90:fc:2d:e0:10:d8:83:c9:06:66:e0:dd:0d:f4:cb:74: 10:45:26:6e:08:51:ea:f6:10:df:27:17:e1:f7:87:47:13:10: fb:7b:59:ad:5e:40:9b:8e:ef:6f:d7:36:9b:06:1a:dd:86:69: d6:b0:36:e6:af:f7:b5:ff:c4:83:1a:d9:af:8c:02:d2:55:cf: 4a:ea:e9:f3:9f:6e:c9:19:16:e7:47:c0:bd:69:e2:89:81:4d: 28:d3:39:1a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCf/847BSbQz6odM7MHCB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm NWZjYjIwHhcNMjUxMjIxMjAwMDQzWhcNMjUxMjIyMjAwMDQzWjAzMTEwLwYDVQQD EyhiMmFlNDI2YmU4ODVmYjQ4YmVmZmVkNzVjN2JmMjgzMDkyMGFjMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr83Cz0Prue7L1XQoz7xX7glAW5OL FtpeK+t+xS6Az269gK/kKXZhgNCvvXuyTSbv0kJyigdFklyrLnK2Z5KffSHjNzPj K2Drb5RuSbne+C0aR9MQ4oNenWjLQLtrNCqfJIsgoPdFtUNYE1DquP3V4NsG00IR Df0nOdqOW5Nel1YYK0EuIHgl6uenJjEPi1LP47OuS9oZd6p3pTUTG6Ob4P7DOA/k z67OxJJ65EHrOyO6Z9zXCB4uePxBkHZ6oMqNjZWdeEH3DDQ6YHodDi5XLQrT/ge+ Na1ypFZZGbXaSlEiXOb7X1wdXJSXbOMUGq1JHgbthWVY1UpXXINye4GitQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLKuQmvohftIvv/tdce/KDCSCsGCMB8GA1UdIwQY MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2 LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2Tz nZzd9FrV25YmDvao6pthL5JdLsvTzCm+vVAVq6VEw08ztT8HMGoBUJT+aPEsudLZ P9ukeDWBnt63P5EYoxmnehKEtDmsDs76xitkxJm3LtlT7DNGmUtBIrJSQpaqAv/V DVuZ3v8HzD4f0rsGBCutBuIzNeOEUVHRzSwBcnsSX2JTWkSM/tQXsYDCTruadMX2 +gRwAK+AI/swSXm/6p1hoYeQ/C3gENiDyQZm4N0N9Mt0EEUmbghR6vYQ3ycX4feH RxMQ+3tZrV5Am47vb9c2mwYa3YZp1rA25q/3tf/EgxrZr4wC0lXPSurp859uyRkW 50fAvWniiYFNKNM5Gg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:50 2025 by rpki-client