This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json) Hash identifier: CQD28sInRSoGTtX2QxjZheErp1lPf5U+kUihQ1zde6o= Subject key identifier: AF:39:30:0C:C2:A6:F5:B8:4F:44:C0:F8:34:F1:E4:AE:80:6A:47:E6 Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2 Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2 Certificate serial: 019B42B7C4BF4E9BCD757154252950D90C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:01:38 +0000 Manifest this update: Sun 21 Dec 2025 21:01:38 +0000 Manifest next update: Mon 22 Dec 2025 21:01:38 +0000 Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: 3GgL/zCtzlY54/3yAd9XGlTKYggHs4UROLik/BqQC1g=) 2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:c4:bf:4e:9b:cd:75:71:54:25:29:50:d9:0c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2 Validity Not Before: Dec 21 21:01:38 2025 GMT Not After : Dec 22 21:01:38 2025 GMT Subject: CN=af39300cc2a6f5b84f44c0f834f1e4ae806a47e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:50:d9:84:31:a9:b8:51:ef:00:dd:cd:fc: 08:89:2a:96:38:df:96:8f:c2:8f:bf:76:fa:1a:f2: 54:d4:fe:2f:10:66:7b:0e:97:38:3b:e6:52:92:36: 71:bd:24:54:5a:6b:43:7a:81:42:e7:48:0d:c7:4b: d6:30:6f:cf:9e:f2:18:60:b5:1c:c9:15:c7:e1:c6: ad:f0:df:b1:dc:1f:7f:aa:95:42:2a:19:fc:6c:43: f1:89:3e:c1:68:b9:e4:31:8d:72:04:57:89:87:9c: 86:d8:06:fb:b0:c0:64:fb:12:a0:11:fa:a8:8b:22: 33:16:9f:78:74:79:87:b8:83:80:7d:4e:40:ce:77: c0:8a:cf:81:91:fe:bb:b8:d6:ed:3e:07:af:b1:69: d9:fb:6c:6e:4b:3f:e5:a7:07:b0:9e:98:4d:73:29: 26:1e:21:ed:3a:0f:fc:43:7e:f4:f8:94:ff:40:33: 75:58:f3:e5:d2:24:7f:5a:71:6b:ab:20:f6:36:5b: 3c:48:40:e8:a9:4d:01:1c:c5:d0:a1:e5:9f:54:0c: 1e:0c:f2:1e:7e:01:32:74:79:0a:03:1d:1f:c5:c2: 43:21:fd:d4:7a:89:20:aa:14:b5:2a:53:a6:b2:4d: b7:56:c1:b7:2c:22:ef:5d:20:9d:3b:52:22:ed:1f: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:30:0C:C2:A6:F5:B8:4F:44:C0:F8:34:F1:E4:AE:80:6A:47:E6 X509v3 Authority Key Identifier: keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c4:66:19:39:2e:60:92:49:c7:8a:46:e7:eb:a8:89:8f:03: b5:e2:1b:b1:59:d2:01:cd:73:0f:2d:eb:a8:20:b2:12:f1:66: f7:5e:57:5b:05:41:d3:8e:f7:14:e2:19:89:36:94:79:b3:91: 3f:49:24:f4:e7:f8:aa:67:fd:83:48:d4:01:bd:a5:2f:64:b2: c4:9a:4e:41:35:9e:b0:59:80:9e:73:0d:5d:03:cd:8f:11:b1: 57:56:14:d6:77:da:93:70:f4:95:68:1a:21:a4:c2:b4:ff:3d: 98:8d:f4:4c:41:d4:b8:6e:b1:8f:0e:88:89:18:32:50:fc:16: f6:7b:e3:d9:02:37:4b:63:51:03:af:b4:be:cd:64:71:50:e2: a5:da:d6:b7:bd:21:78:e8:ad:3a:b7:a1:d8:d2:f4:23:9e:b6: 35:c0:2c:94:3a:0d:fe:d8:e2:35:e3:9c:73:58:ad:59:59:2d: 14:4b:a9:ea:70:ee:57:17:ef:86:41:f4:be:9e:57:69:df:e1: 68:0f:1b:f1:d2:4c:78:6e:8c:cd:d6:09:ad:c6:70:a8:6f:7b: 8a:0e:64:4f:f7:c6:c0:87:87:9c:7a:5c:c8:27:1c:1c:e8:e1: 6b:2e:2f:ff:63:ff:3b:b4:97:a0:f3:0f:98:45:a9:bb:db:b1: 38:12:00:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt8S/TpvNdXFUJSlQ2QwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmJjNzRjZDFmODdhMGJmMTZjNDgyZjYyMDFjOWI5ZWIy NDRlYTIwHhcNMjUxMjIxMjEwMTM4WhcNMjUxMjIyMjEwMTM4WjAzMTEwLwYDVQQD EyhhZjM5MzAwY2MyYTZmNWI4NGY0NGMwZjgzNGYxZTRhZTgwNmE0N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dNQ2YQxqbhR7wDdzfwIiSqWON+W j8KPv3b6GvJU1P4vEGZ7Dpc4O+ZSkjZxvSRUWmtDeoFC50gNx0vWMG/PnvIYYLUc yRXH4cat8N+x3B9/qpVCKhn8bEPxiT7BaLnkMY1yBFeJh5yG2Ab7sMBk+xKgEfqo iyIzFp94dHmHuIOAfU5AznfAis+Bkf67uNbtPgevsWnZ+2xuSz/lpwewnphNcykm HiHtOg/8Q370+JT/QDN1WPPl0iR/WnFrqyD2Nls8SEDoqU0BHMXQoeWfVAweDPIe fgEydHkKAx0fxcJDIf3UeokgqhS1KlOmsk23VsG3LCLvXSCdO1Ii7R+bXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK85MAzCpvW4T0TA+DTx5K6AakfmMB8GA1UdIwQY MBaAFNT7x0zR+HoL8WxIL2IBybnrJE6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVB2SFROSDRlZ3Z4YkVndllnSEp1ZXNrVHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84NzMxMmMtNjljNC00ODEzLWI3NDAt MWM5NjY3NzMwNTM0LzEvMVB2SFROSDRlZ3Z4YkVndllnSEp1ZXNrVHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84NzMxMmMtNjljNC00ODEzLWI3NDAtMWM5NjY3NzMwNTM0 LzEvMVB2SFROSDRlZ3Z4YkVndllnSEp1ZXNrVHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsRmGTku YJJJx4pG5+uoiY8DteIbsVnSAc1zDy3rqCCyEvFm915XWwVB0473FOIZiTaUebOR P0kk9Of4qmf9g0jUAb2lL2SyxJpOQTWesFmAnnMNXQPNjxGxV1YU1nfak3D0lWga IaTCtP89mI30TEHUuG6xjw6IiRgyUPwW9nvj2QI3S2NRA6+0vs1kcVDipdrWt70h eOitOreh2NL0I562NcAslDoN/tjiNeOcc1itWVktFEup6nDuVxfvhkH0vp5Xad/h aA8b8dJMeG6MzdYJrcZwqG97ig5kT/fGwIeHnHpcyCccHOjhay4v/2P/O7SXoPMP mEWpu9uxOBIAyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:20:04 2025 by rpki-client