This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json) Hash identifier: q/UUAZQ0y4q0+p+ndAk+c0mNB/gmBc8WvU0ArKtugDQ= Subject key identifier: AE:44:60:8B:58:0A:3A:D2:0B:AC:9B:DA:A6:04:73:91:56:3E:10:CC Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Certificate serial: 019B0F6EB5697A46E303DC46AA70E751306A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 22:01:12 +0000 Manifest this update: Thu 11 Dec 2025 22:01:12 +0000 Manifest next update: Fri 12 Dec 2025 22:01:12 +0000 Files and hashes: 1: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=) 2: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: uC4MYObzK6SKB6e5EJcgB5byzyxfF1aEiKV5R6R8GB0=) 3: fhcv9zVEJVXyHJ1eaDiH9RUmSQE.roa (hash: NL+aNAoNbkMGbCukVk9uNzqMGkBi6UK6eYdC2KpDM5s=) 4: oPRXnsL5INwqLC1NQuIf4ZAf32c.roa (hash: Q33Xwu3J1rkbAKsrHCB0KfJpoWIRtKaUuoBQYcngjzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:b5:69:7a:46:e3:03:dc:46:aa:70:e7:51:30:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Validity Not Before: Dec 11 22:01:12 2025 GMT Not After : Dec 12 22:01:12 2025 GMT Subject: CN=ae44608b580a3ad20bac9bdaa6047391563e10cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:bb:c2:06:e9:03:61:ce:99:5b:b5:cc:2a: 23:23:2a:f2:40:96:c7:5e:9f:d2:17:30:46:43:e3: cb:50:58:3b:84:a4:bb:a3:7e:ff:8b:fe:9b:d4:c9: f1:43:7f:8b:e2:d9:3c:ec:2e:8c:fb:33:84:91:31: 4d:89:c8:35:e5:60:4c:c6:53:68:fa:60:bf:b7:1b: ae:a8:2f:34:cb:29:47:a6:02:6b:52:77:c4:39:36: 28:b9:28:88:21:de:8f:50:6a:24:e2:9f:a2:57:d9: 45:d3:61:42:4e:a2:78:30:9a:4e:4f:7f:01:aa:aa: e4:11:d9:3e:39:e0:5b:d0:3d:93:09:a4:f8:62:3b: 19:11:cc:e5:fb:c4:2e:f8:9f:42:3f:1a:a0:a7:1c: ea:6f:da:7e:ce:3b:a3:02:eb:b3:34:bc:38:12:23: a3:49:ce:32:89:2d:ef:10:b6:bc:99:31:73:5d:88: 05:35:8c:19:27:ac:37:77:8b:07:07:dd:63:1f:0e: 0e:a5:07:77:5e:51:ab:1c:a6:39:ac:57:6e:8f:b8: 94:5a:f2:b8:3e:9b:d3:2c:6c:a6:57:88:a6:51:60: 76:15:17:1f:29:11:b6:c4:45:a2:ec:fe:a2:66:87: 61:95:9b:a8:3a:86:f0:4e:04:94:a9:1a:c2:37:0e: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:44:60:8B:58:0A:3A:D2:0B:AC:9B:DA:A6:04:73:91:56:3E:10:CC X509v3 Authority Key Identifier: keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7f:06:e6:74:62:31:44:0b:13:b2:58:8a:cd:bd:be:ef:ac: fa:1a:cf:e6:1f:5a:b1:b9:69:cc:33:80:66:57:64:e0:a7:ab: 6b:e5:f8:29:41:20:7a:23:15:d1:1b:d2:dd:df:38:4b:15:e2: 63:ef:0c:76:9e:fa:ca:9b:7d:64:8f:b8:7b:fd:e5:02:aa:eb: 28:0e:7d:24:93:c1:64:7f:9e:5e:df:bd:b0:b3:f3:09:22:f9: 48:6e:ed:d7:87:90:c4:88:f8:d6:40:45:66:14:29:11:6b:6c: 89:64:08:ac:87:24:d3:21:fc:cd:98:51:48:22:d3:b9:16:75: 4d:61:2f:c0:07:f4:6f:5c:0e:ad:f8:b3:9d:67:8f:72:1a:92: ec:6d:d9:de:48:a5:34:18:9b:c3:33:32:75:0c:b0:bc:d2:60: d5:ea:dc:63:42:47:17:58:af:26:00:22:b1:fb:35:95:c6:59: 04:cf:17:21:57:a1:d8:5d:cf:97:e7:85:50:de:eb:4c:44:ae: f2:b9:1d:43:6c:1d:c9:af:74:44:f8:d3:41:05:2b:ed:04:ce: 58:9a:b1:4f:a4:a8:8a:37:08:2f:01:c7:a3:a6:81:b6:96:6e: 86:65:1a:f6:73:06:27:cb:25:6a:cd:4b:11:6e:ed:23:9e:86: 73:a0:30:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbrVpekbjA9xGqnDnUTBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy OGE1YmIwHhcNMjUxMjExMjIwMTEyWhcNMjUxMjEyMjIwMTEyWjAzMTEwLwYDVQQD EyhhZTQ0NjA4YjU4MGEzYWQyMGJhYzliZGFhNjA0NzM5MTU2M2UxMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPu7wgbpA2HOmVu1zCojIyryQJbH Xp/SFzBGQ+PLUFg7hKS7o37/i/6b1MnxQ3+L4tk87C6M+zOEkTFNicg15WBMxlNo +mC/txuuqC80yylHpgJrUnfEOTYouSiIId6PUGok4p+iV9lF02FCTqJ4MJpOT38B qqrkEdk+OeBb0D2TCaT4YjsZEczl+8Qu+J9CPxqgpxzqb9p+zjujAuuzNLw4EiOj Sc4yiS3vELa8mTFzXYgFNYwZJ6w3d4sHB91jHw4OpQd3XlGrHKY5rFduj7iUWvK4 PpvTLGymV4imUWB2FRcfKRG2xEWi7P6iZodhlZuoOobwTgSUqRrCNw7BlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5EYItYCjrSC6yb2qYEc5FWPhDMMB8GA1UdIwQY MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt M2U3Y2FkZDg4YzcwLzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn8G5nRi MUQLE7JYis29vu+s+hrP5h9asblpzDOAZldk4Kera+X4KUEgeiMV0RvS3d84SxXi Y+8Mdp76ypt9ZI+4e/3lAqrrKA59JJPBZH+eXt+9sLPzCSL5SG7t14eQxIj41kBF ZhQpEWtsiWQIrIck0yH8zZhRSCLTuRZ1TWEvwAf0b1wOrfiznWePchqS7G3Z3kil NBibwzMydQywvNJg1ercY0JHF1ivJgAisfs1lcZZBM8XIVeh2F3Pl+eFUN7rTESu 8rkdQ2wdya90RPjTQQUr7QTOWJqxT6SoijcILwHHo6aBtpZuhmUa9nMGJ8slas1L EW7tI56Gc6AwpQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:19 2025 by rpki-client