This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json) Hash identifier: ZC2w7QxhLZDCdtGqWDHzUOScGPksKZThX8fRnVSwtpI= Subject key identifier: 25:FB:3E:AE:8C:0B:CA:C3:53:8D:D5:53:0E:5A:E8:53:10:A5:BC:66 Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Certificate serial: 019B5A88C6B3E8F00CBD8F65184E2A43E5D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft Manifest number: 02A5 Signing time: Fri 26 Dec 2025 12:01:11 +0000 Manifest this update: Fri 26 Dec 2025 12:01:11 +0000 Manifest next update: Sat 27 Dec 2025 12:01:11 +0000 Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: c3wgkmUG9u6p9rugjty01lxTa/h6S8TthUhL8kEBRCE=) 2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c6:b3:e8:f0:0c:bd:8f:65:18:4e:2a:43:e5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Validity Not Before: Dec 26 12:01:11 2025 GMT Not After : Dec 27 12:01:11 2025 GMT Subject: CN=25fb3eae8c0bcac3538dd5530e5ae85310a5bc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:0b:a7:05:75:69:a6:ae:1f:c0:a2:d4:c5: d8:80:24:0b:fd:17:f6:9d:b3:6d:87:33:50:50:fb: 2b:ab:b7:07:fa:c9:d2:bf:32:08:07:6f:89:b0:3f: 38:c2:27:40:95:a8:f1:01:af:85:96:b1:19:4b:b4: 53:f1:82:98:ca:a8:c3:b7:bb:9b:23:fb:3b:40:f3: e2:17:5f:a3:99:80:b8:52:45:bb:ec:87:bc:a5:e3: 6f:d6:c0:4d:a4:7e:f6:25:e9:c2:e6:5a:d3:ae:5b: ab:8e:ee:f2:7d:bb:00:f4:1b:71:12:f0:47:0f:44: 18:96:1b:ba:65:8b:c5:cc:6a:6b:05:cc:bb:57:6f: 78:d2:9c:15:ce:62:c6:21:42:9b:5d:e7:f0:54:01: 8d:1c:06:52:b3:34:a6:fd:b7:3d:43:fa:a7:3d:0c: af:81:1b:7d:0b:8e:b3:5d:1c:2f:4c:aa:2f:7e:d5: 7a:d5:77:56:d9:06:04:48:fc:1a:bf:cb:e6:5e:d1: be:7d:45:67:3a:49:be:44:e0:3c:93:10:9f:75:4c: aa:ba:1d:d7:b3:a2:f0:c1:30:67:f3:67:ae:8d:7c: b5:13:e1:1f:f0:0e:88:f8:61:78:62:a0:86:ff:f2: 9d:85:8a:50:af:a4:30:91:3b:4c:ca:9d:46:94:b8: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FB:3E:AE:8C:0B:CA:C3:53:8D:D5:53:0E:5A:E8:53:10:A5:BC:66 X509v3 Authority Key Identifier: keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:05:a2:78:c4:6c:87:6c:77:28:4a:a0:33:4b:88:34:16:a6: 56:1d:08:47:f2:68:95:8b:af:e8:d4:7a:df:17:ae:85:01:db: a8:27:65:93:a2:c4:eb:99:c1:61:9d:61:bc:d7:c9:2f:5b:36: 04:e4:17:ff:17:3c:68:18:ec:62:36:26:23:a8:9b:9e:e8:e1: 3d:20:b1:70:ab:7d:f1:22:95:c7:c9:8b:d2:e5:a1:bd:de:f1: 2b:13:a6:7a:f5:1a:af:15:de:05:1b:2b:c5:98:8f:fd:b0:60: a1:eb:57:1b:ef:11:05:c6:ef:77:92:6b:a3:bb:16:fb:98:53: e1:93:81:90:f3:3a:f9:37:ad:cb:55:a3:56:a2:45:ce:a8:56: 57:d6:28:98:57:d4:18:d5:5c:62:b3:a7:ba:8d:61:37:83:9b: d3:f6:e0:fc:e9:d9:2d:f5:80:c4:0b:36:18:98:e3:b8:ce:39: de:f7:17:40:db:72:f0:0f:45:14:b8:dd:91:cd:c7:a5:16:48: d5:71:41:0e:f1:0a:e4:89:e7:85:98:62:0e:f0:79:47:6c:4f: d0:b8:ee:05:95:44:42:47:27:89:be:b2:09:61:29:53:14:55: f5:80:47:ec:a6:a4:71:0f:3b:05:e4:ae:50:1b:2b:c7:3b:8b: bc:58:cd:72 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaiMaz6PAMvY9lGE4qQ+XZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3 YTk0NmYwHhcNMjUxMjI2MTIwMTExWhcNMjUxMjI3MTIwMTExWjAzMTEwLwYDVQQD EygyNWZiM2VhZThjMGJjYWMzNTM4ZGQ1NTMwZTVhZTg1MzEwYTViYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh4LpwV1aaauH8Ci1MXYgCQL/Rf2 nbNthzNQUPsrq7cH+snSvzIIB2+JsD84widAlajxAa+FlrEZS7RT8YKYyqjDt7ub I/s7QPPiF1+jmYC4UkW77Ie8peNv1sBNpH72JenC5lrTrlurju7yfbsA9BtxEvBH D0QYlhu6ZYvFzGprBcy7V2940pwVzmLGIUKbXefwVAGNHAZSszSm/bc9Q/qnPQyv gRt9C46zXRwvTKovftV61XdW2QYESPwav8vmXtG+fUVnOkm+ROA8kxCfdUyquh3X s6LwwTBn82eujXy1E+Ef8A6I+GF4YqCG//KdhYpQr6QwkTtMyp1GlLhZYQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCX7Pq6MC8rDU43VUw5a6FMQpbxmMB8GA1UdIwQY MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAWi eMRsh2x3KEqgM0uINBamVh0IR/JolYuv6NR63xeuhQHbqCdlk6LE65nBYZ1hvNfJ L1s2BOQX/xc8aBjsYjYmI6ibnujhPSCxcKt98SKVx8mL0uWhvd7xKxOmevUarxXe BRsrxZiP/bBgoetXG+8RBcbvd5Jro7sW+5hT4ZOBkPM6+Tety1WjVqJFzqhWV9Yo mFfUGNVcYrOnuo1hN4Ob0/bg/OnZLfWAxAs2GJjjuM453vcXQNty8A9FFLjdkc3H pRZI1XFBDvEK5InnhZhiDvB5R2xP0LjuBZVEQkcnib6yCWEpUxRV9YBH7KakcQ87 BeSuUBsrxzuLvFjNcg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:17 2025 by rpki-client