This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json) Hash identifier: woZQnJDv6W1oYaMPgLo1Y8FWLMubFxfv0BwTw/gcAys= Subject key identifier: 21:75:17:E8:69:8F:96:E9:4B:AE:E6:A5:50:C9:98:D3:92:4E:25:0E Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55 Certificate serial: 019B47A690887915629FB20250E98651070F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft Manifest number: 179A Signing time: Mon 22 Dec 2025 20:00:56 +0000 Manifest this update: Mon 22 Dec 2025 20:00:56 +0000 Manifest next update: Tue 23 Dec 2025 20:00:56 +0000 Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: PN7yKPMlH7aYtdGmBW7dpPO9cRerpmhhbUc8cfVCvVk=) 2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=) 3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=) 4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:90:88:79:15:62:9f:b2:02:50:e9:86:51:07:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55 Validity Not Before: Dec 22 20:00:56 2025 GMT Not After : Dec 23 20:00:56 2025 GMT Subject: CN=217517e8698f96e94baee6a550c998d3924e250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:12:be:68:14:b3:e0:55:2b:36:31:53:08:39: 48:a2:44:cb:82:bf:7c:cc:7a:0a:4d:84:fa:41:74: c9:7a:54:3b:53:f1:4c:92:58:c4:e5:58:2a:1b:07: a2:9d:2a:f3:f3:9d:c5:66:b3:3c:97:4c:38:0f:58: e0:5e:f3:35:c5:8d:ae:34:d1:46:4b:e5:a2:57:77: c1:91:24:1a:bd:ea:5f:43:02:6f:ce:f7:49:71:b3: e0:3c:02:32:4a:9c:cd:a2:00:00:a0:2d:72:e7:85: 27:93:96:6a:6d:76:d6:c7:cb:22:1a:72:63:d9:6c: 47:65:35:30:ac:15:71:0a:48:51:d0:4e:73:b9:d7: 74:da:d9:8d:ac:0f:f1:81:9a:09:47:f0:4d:2a:d5: b8:16:7d:ee:a8:70:ee:08:50:c5:96:d8:d8:25:e2: b8:08:ab:09:41:94:80:41:e2:d0:e6:15:16:87:5a: 16:49:d0:60:96:13:97:9f:7a:2f:b9:31:1f:15:92: 5b:b7:4f:82:38:c8:67:de:3e:75:b0:84:51:48:b2: e6:f3:c0:80:ed:62:b9:e4:ee:47:1c:2a:17:ff:66: 31:7b:a8:3f:61:1c:d2:4d:b2:d3:f4:49:44:fb:f5: fc:c8:5b:07:f0:f8:cc:59:44:18:f6:7c:03:b8:f1: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:75:17:E8:69:8F:96:E9:4B:AE:E6:A5:50:C9:98:D3:92:4E:25:0E X509v3 Authority Key Identifier: keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1d:d8:da:86:13:84:8a:16:d2:5d:90:bb:4f:65:50:c8:92: d6:8f:63:77:3c:39:e0:a4:83:4a:de:98:41:f6:78:e4:37:c8: 36:08:84:e9:ba:53:87:50:42:f9:2f:7b:22:4f:55:e4:2a:1e: 95:a9:14:e5:92:27:6c:77:5e:75:7c:cb:dd:93:1c:0b:3d:46: b0:c4:29:c4:ea:13:d9:de:c2:e8:ac:91:84:14:c3:da:e6:1a: 1e:2a:eb:c0:3d:3d:82:72:3c:9a:39:69:70:a2:2d:c1:8c:86: 2f:3c:39:45:81:90:61:d2:9d:a9:b2:00:43:38:72:02:35:60: c2:f6:74:7c:72:e9:89:18:ff:c0:d6:f1:ab:92:06:83:a7:d3: 72:bd:dd:a3:fd:73:b6:de:08:6f:e5:4e:f5:9a:c0:ed:a8:af: c9:7f:f8:28:59:9c:03:f0:44:47:b3:32:43:25:7f:7d:ba:d4: 3b:64:66:39:12:a1:9f:12:87:da:4d:f5:c5:3b:2b:e4:75:71: 2f:db:2c:9a:5c:98:68:40:a4:0c:04:a1:2e:89:f3:36:41:91: 18:f5:52:c1:69:a1:59:9e:b7:87:26:33:92:7c:bc:31:3d:d0: a4:af:52:2d:7b:4f:a6:bf:b3:4b:95:43:fa:7a:f6:dc:fa:8a: c3:13:e4:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHppCIeRVin7ICUOmGUQcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3 MjFlNTUwHhcNMjUxMjIyMjAwMDU2WhcNMjUxMjIzMjAwMDU2WjAzMTEwLwYDVQQD EygyMTc1MTdlODY5OGY5NmU5NGJhZWU2YTU1MGM5OThkMzkyNGUyNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xK+aBSz4FUrNjFTCDlIokTLgr98 zHoKTYT6QXTJelQ7U/FMkljE5VgqGweinSrz853FZrM8l0w4D1jgXvM1xY2uNNFG S+WiV3fBkSQavepfQwJvzvdJcbPgPAIySpzNogAAoC1y54Unk5ZqbXbWx8siGnJj 2WxHZTUwrBVxCkhR0E5zudd02tmNrA/xgZoJR/BNKtW4Fn3uqHDuCFDFltjYJeK4 CKsJQZSAQeLQ5hUWh1oWSdBglhOXn3ovuTEfFZJbt0+COMhn3j51sIRRSLLm88CA 7WK55O5HHCoX/2Yxe6g/YRzSTbLT9ElE+/X8yFsH8PjMWUQY9nwDuPFvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF1F+hpj5bpS67mpVDJmNOSTiUOMB8GA1UdIwQY MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt NmQ2NTVjZDk0NDY4LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4 LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx3Y2oYT hIoW0l2Qu09lUMiS1o9jdzw54KSDSt6YQfZ45DfINgiE6bpTh1BC+S97Ik9V5Coe lakU5ZInbHdedXzL3ZMcCz1GsMQpxOoT2d7C6KyRhBTD2uYaHirrwD09gnI8mjlp cKItwYyGLzw5RYGQYdKdqbIAQzhyAjVgwvZ0fHLpiRj/wNbxq5IGg6fTcr3do/1z tt4Ib+VO9ZrA7aivyX/4KFmcA/BER7MyQyV/fbrUO2RmORKhnxKH2k31xTsr5HVx L9ssmlyYaECkDAShLonzNkGRGPVSwWmhWZ63hyYzkny8MT3QpK9SLXtPpr+zS5VD +nr23PqKwxPkOA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:12:20 2025 by rpki-client