This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json) Hash identifier: sfSIgiSRSbmZ4YD6VgEBzv3YWjW7Ev6AM6QbEEtTKtA= Subject key identifier: A1:80:D9:A7:CD:4B:AC:B5:6A:2D:10:B8:26:53:6A:07:8A:C1:0D:46 Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48 Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48 Certificate serial: 019B44A51E2CB4569F4411ACCA5509699548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 06:00:30 +0000 Manifest this update: Mon 22 Dec 2025 06:00:30 +0000 Manifest next update: Tue 23 Dec 2025 06:00:30 +0000 Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: uA7m+0By5d0iZmgsnRHFuX0wX32e5Qe1sZCRKr832d8=) 2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=) 3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:1e:2c:b4:56:9f:44:11:ac:ca:55:09:69:95:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48 Validity Not Before: Dec 22 06:00:30 2025 GMT Not After : Dec 23 06:00:30 2025 GMT Subject: CN=a180d9a7cd4bacb56a2d10b826536a078ac10d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:2a:de:05:bb:d6:f2:8f:ef:01:68:1c:0c: 35:9b:0f:41:97:d6:10:4d:23:a6:71:31:83:df:e6: fb:22:4c:b0:55:b9:ea:fb:8c:64:84:34:4a:bb:23: 10:15:41:12:5a:47:15:1c:04:81:63:aa:21:49:bc: 74:7f:6c:f7:5b:89:ea:70:ec:87:49:83:e8:f7:2b: 4a:7b:8a:c2:5c:b8:bc:3d:40:36:0f:86:3b:07:e1: a9:26:ac:b3:0d:89:e3:2e:9d:3d:58:a2:72:a2:f3: 41:1c:ac:96:be:5f:45:07:ab:24:a7:f9:1a:41:bc: db:e7:a1:a7:57:94:3f:5a:94:44:ac:6b:26:d8:17: f0:55:7a:40:70:ce:81:89:2b:08:bb:3b:57:42:ac: b9:08:be:4b:d1:7c:d9:07:58:45:30:fe:f8:6b:03: ea:b5:3b:d9:9a:5f:e3:c9:03:ec:23:69:b2:d5:93: b2:6d:97:69:60:b8:5a:46:8e:25:ca:74:42:d3:d8: 1c:01:ec:8c:ab:cf:35:f3:e6:f0:c8:ff:a6:f8:ea: 34:10:8d:b5:8a:7a:1e:15:ac:45:85:8f:19:54:e8: a4:4b:49:3c:70:2d:d0:35:f2:fe:15:bf:7a:b1:87: b5:1a:dc:35:11:1a:bb:22:07:b0:01:98:fb:1e:bf: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:80:D9:A7:CD:4B:AC:B5:6A:2D:10:B8:26:53:6A:07:8A:C1:0D:46 X509v3 Authority Key Identifier: keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:aa:53:9d:c3:de:32:9b:24:b2:2a:6f:ca:50:44:53:b5:79: ae:8b:54:de:85:89:c0:5b:2b:2f:df:90:88:23:02:ca:9b:58: 11:7b:39:87:f8:67:e3:f5:0e:5f:7b:4a:d2:b6:6a:b7:8d:2a: 49:1c:1e:26:e2:a7:db:57:b6:88:ca:6c:03:8a:4c:b2:e8:cd: a5:d0:ca:97:7b:ad:bb:16:d3:73:04:34:0a:b8:93:69:68:87: 6e:5e:7c:d2:6b:f2:84:9f:da:56:b9:94:b5:6a:9b:8b:b0:5d: 39:35:61:92:bd:7d:cd:d9:6c:05:40:57:41:66:7e:77:a1:22: 68:3b:c9:13:bb:b3:60:fe:c7:60:54:53:01:c4:62:ef:d1:3a: e1:1d:2c:a1:2f:8d:ec:cf:0d:14:0c:48:67:97:fe:9a:af:5c: 2e:3a:ef:91:5a:33:92:ac:57:8e:f3:b4:9d:8a:2e:ad:87:fe: 93:8b:72:c4:47:34:1f:bb:1a:fa:9a:f0:9b:c9:3a:7b:c4:b9: 66:c9:e5:be:5d:52:35:a1:07:d2:bf:eb:a6:94:40:0b:4d:38: f9:3a:69:03:ea:6d:60:e2:06:ff:e9:0a:96:63:f9:82:9c:74: 49:95:d9:9c:19:92:05:a7:ae:bf:6d:75:81:07:58:64:d3:63: 6a:d2:dd:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpR4stFafRBGsylUJaZVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4 OTZkNDgwHhcNMjUxMjIyMDYwMDMwWhcNMjUxMjIzMDYwMDMwWjAzMTEwLwYDVQQD EyhhMTgwZDlhN2NkNGJhY2I1NmEyZDEwYjgyNjUzNmEwNzhhYzEwZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uAq3gW71vKP7wFoHAw1mw9Bl9YQ TSOmcTGD3+b7IkywVbnq+4xkhDRKuyMQFUESWkcVHASBY6ohSbx0f2z3W4nqcOyH SYPo9ytKe4rCXLi8PUA2D4Y7B+GpJqyzDYnjLp09WKJyovNBHKyWvl9FB6skp/ka Qbzb56GnV5Q/WpRErGsm2BfwVXpAcM6BiSsIuztXQqy5CL5L0XzZB1hFMP74awPq tTvZml/jyQPsI2my1ZOybZdpYLhaRo4lynRC09gcAeyMq8818+bwyP+m+Oo0EI21 inoeFaxFhY8ZVOikS0k8cC3QNfL+Fb96sYe1Gtw1ERq7IgewAZj7Hr9a6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGA2afNS6y1ai0QuCZTageKwQ1GMB8GA1UdIwQY MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt ZTQ5YTllMDZjNzAwLzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqapTncPe MpsksipvylBEU7V5rotU3oWJwFsrL9+QiCMCyptYEXs5h/hn4/UOX3tK0rZqt40q SRweJuKn21e2iMpsA4pMsujNpdDKl3utuxbTcwQ0CriTaWiHbl580mvyhJ/aVrmU tWqbi7BdOTVhkr19zdlsBUBXQWZ+d6EiaDvJE7uzYP7HYFRTAcRi79E64R0soS+N 7M8NFAxIZ5f+mq9cLjrvkVozkqxXjvO0nYourYf+k4tyxEc0H7sa+prwm8k6e8S5 Zsnlvl1SNaEH0r/rppRAC004+TppA+ptYOIG/+kKlmP5gpx0SZXZnBmSBaeuv211 gQdYZNNjatLdCA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:49:07 2025 by rpki-client