This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json) Hash identifier: 1muE9IjHT333C+AGzTmrWoSFPJPbA4+rNxhO0SIWt+k= Subject key identifier: 0F:99:E5:33:DA:77:7E:EC:9F:30:30:D9:53:E2:D7:4A:34:99:B6:88 Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Certificate serial: 019B1B053A532C53DD2F1D76DFE86C1AAEC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft Manifest number: 177D Signing time: Sun 14 Dec 2025 04:01:25 +0000 Manifest this update: Sun 14 Dec 2025 04:01:25 +0000 Manifest next update: Mon 15 Dec 2025 04:01:25 +0000 Files and hashes: 1: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=) 2: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: tkAcyUiY/tNQmufsPiw5tJhgOSvL4fCT9Nmqbhxlxrk=) 3: fhcv9zVEJVXyHJ1eaDiH9RUmSQE.roa (hash: NL+aNAoNbkMGbCukVk9uNzqMGkBi6UK6eYdC2KpDM5s=) 4: oPRXnsL5INwqLC1NQuIf4ZAf32c.roa (hash: Q33Xwu3J1rkbAKsrHCB0KfJpoWIRtKaUuoBQYcngjzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:3a:53:2c:53:dd:2f:1d:76:df:e8:6c:1a:ae:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Validity Not Before: Dec 14 04:01:25 2025 GMT Not After : Dec 15 04:01:25 2025 GMT Subject: CN=0f99e533da777eec9f3030d953e2d74a3499b688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:4b:1d:72:e8:92:17:27:23:d0:81:db:ca: c9:a2:f6:d5:9d:45:79:79:93:a1:d4:6f:e8:b9:a4: fc:ab:c2:a0:c9:a6:e8:a2:73:5c:bf:1d:d6:34:6b: 46:c0:ec:f2:8d:c4:6a:cd:98:40:28:b7:bd:e7:47: 0a:1e:5f:7a:9d:67:e8:76:01:65:86:3c:46:47:78: 6a:cd:96:c8:64:3f:f0:ba:8d:3e:98:b2:24:4b:48: 41:41:7f:96:b2:cd:86:e5:63:1b:4d:51:91:eb:97: db:94:27:37:94:c9:cc:8a:0d:b0:ac:fb:f5:0b:c6: e9:a0:6f:58:d4:da:50:13:b8:99:3a:39:5b:57:0a: 1f:12:bd:16:83:52:84:9e:e3:f2:67:f9:26:12:53: 73:97:a9:f6:f7:f1:87:bd:1e:e4:27:d5:0c:b7:8d: bc:2c:55:d6:cb:9b:1a:bd:ba:45:fc:c0:85:f6:97: 11:e5:66:92:45:34:8c:e2:5b:86:56:00:00:c8:a9: 3f:bd:25:c1:72:ad:4e:ba:1c:a6:93:ec:62:49:d6: cb:a3:c2:0d:97:95:cc:7b:d2:a3:8e:05:6e:b2:26: 4e:8f:15:cb:db:66:0d:b0:3b:b5:a7:0a:62:f1:83: ed:4d:a2:7e:2a:95:ae:e0:68:dc:a1:49:8e:2a:df: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:99:E5:33:DA:77:7E:EC:9F:30:30:D9:53:E2:D7:4A:34:99:B6:88 X509v3 Authority Key Identifier: keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:62:c7:e1:0d:c0:c7:2d:9b:c1:09:ea:b1:c8:22:66:55:11: 44:dd:69:85:35:46:62:80:f5:11:75:25:90:9c:0f:4f:68:02: d3:55:d5:0a:fb:cf:67:5f:93:a3:1f:43:23:76:6d:fc:a6:06: 5c:f0:7a:7c:2b:6a:82:52:8f:da:72:1c:45:39:a4:a2:28:ae: 76:17:9d:e7:ba:a2:10:cd:56:e9:c6:5f:1f:20:dc:c3:18:12: d7:c7:36:28:dc:51:b1:09:c2:15:61:6e:94:df:5a:33:5e:46: 81:fc:6f:f7:d3:a9:21:7b:78:7a:f8:4d:61:77:ec:fc:c9:44: e3:58:44:6b:1d:9c:39:81:dc:4a:10:33:a6:1a:e0:96:41:d8: ae:eb:9d:97:32:33:88:a9:0e:9c:f0:5b:37:21:96:2c:e4:59: eb:72:f0:ac:d7:86:78:f6:d3:f0:c7:ba:d0:a1:b1:77:3e:a2: 4a:bc:7b:3c:89:7a:50:45:33:0a:2e:44:8e:62:1d:bb:66:89: e3:60:fa:5c:43:13:b6:71:73:91:4e:c3:90:99:99:b4:0e:95: 3d:87:8c:d8:7a:b6:47:a3:83:49:83:c3:8c:92:7c:0c:74:d4: 15:73:76:2c:1a:16:19:6e:a8:e6:eb:7e:4b:11:70:00:b6:f2: cc:a6:bd:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBTpTLFPdLx123+hsGq7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy OGE1YmIwHhcNMjUxMjE0MDQwMTI1WhcNMjUxMjE1MDQwMTI1WjAzMTEwLwYDVQQD EygwZjk5ZTUzM2RhNzc3ZWVjOWYzMDMwZDk1M2UyZDc0YTM0OTliNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DlLHXLokhcnI9CB28rJovbVnUV5 eZOh1G/ouaT8q8KgyaboonNcvx3WNGtGwOzyjcRqzZhAKLe950cKHl96nWfodgFl hjxGR3hqzZbIZD/wuo0+mLIkS0hBQX+Wss2G5WMbTVGR65fblCc3lMnMig2wrPv1 C8bpoG9Y1NpQE7iZOjlbVwofEr0Wg1KEnuPyZ/kmElNzl6n29/GHvR7kJ9UMt428 LFXWy5savbpF/MCF9pcR5WaSRTSM4luGVgAAyKk/vSXBcq1Ouhymk+xiSdbLo8IN l5XMe9KjjgVusiZOjxXL22YNsDu1pwpi8YPtTaJ+KpWu4GjcoUmOKt8t6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+Z5TPad37snzAw2VPi10o0mbaIMB8GA1UdIwQY MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt M2U3Y2FkZDg4YzcwLzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmLH4Q3A xy2bwQnqscgiZlURRN1phTVGYoD1EXUlkJwPT2gC01XVCvvPZ1+Tox9DI3Zt/KYG XPB6fCtqglKP2nIcRTmkoiiudhed57qiEM1W6cZfHyDcwxgS18c2KNxRsQnCFWFu lN9aM15Ggfxv99OpIXt4evhNYXfs/MlE41hEax2cOYHcShAzphrglkHYruudlzIz iKkOnPBbNyGWLORZ63LwrNeGePbT8Me60KGxdz6iSrx7PIl6UEUzCi5EjmIdu2aJ 42D6XEMTtnFzkU7DkJmZtA6VPYeM2Hq2R6ODSYPDjJJ8DHTUFXN2LBoWGW6o5ut+ SxFwALbyzKa92Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:35 2025 by rpki-client