This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft File: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json) Hash identifier: rbD+oX4xXGGS/L2JqGnEkoQa2+5pcqlGP4qBeuzM3cM= Subject key identifier: 97:88:1E:99:67:F6:F9:20:25:35:C6:BA:98:A8:DE:C8:27:84:C7:8F Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B4A39E73919DFDDDCB329AF313D4F3686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft Manifest number: 14D7 Signing time: Tue 23 Dec 2025 08:01:07 +0000 Manifest this update: Tue 23 Dec 2025 08:01:07 +0000 Manifest next update: Wed 24 Dec 2025 08:01:07 +0000 Files and hashes: 1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: Pgoaz88QE5gqodaJlogX91Us1xWV4upxjrpJszJmvWk=) 2: 1f2tT71vV1MiLQenFigoQuxRwqM.roa (hash: wpjdNTt4b7V2ll6KY5o5hcvRIp5mFl1TvHli6R2tBq8=) 3: Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa (hash: zKd/skTxKlvTPvFh0ifMkaguOQnO05Ys88KWivYuLNY=) 4: CmmKhdciV_F_mra-YOcbKmrYhbY.roa (hash: VT8xbl1Jji+4wsCUPpHnl/UFnhMgpu5zo/k26EaRMFM=) 5: Nc9h3qvLuJI4WP6YkQa2jYc6rJI.roa (hash: 5Bmg9YYyOOpJwhqaN3H4Zio8XFaxyte8HHt0oAAzH5g=) 6: RSsMaCl57szGFCkhCpSEu-SYKeY.roa (hash: oRvnshX7DCElI5ZaHCvWWYGxI4E7w9fzHzlAFCyFjaQ=) 7: g21ix9lsPN1aDIX0bqCC1gdAPmM.roa (hash: W8EV6Gvgx+m/11ynvueehGaUvQkCO2v1KpATl4K+wEo=) 8: geP9toPWAOd-61VI__Y1Av416ac.roa (hash: 1O2o1nFJwlxv6rt2UEY74JBc/AG0NZbX/IF9C2wOTds=) 9: tyq7k6T4xEqQgbGkJ2fusYhPOJQ.roa (hash: IGWJpPuzQqbP565czDocwJaMa5FKL3JQeJDF/Y2DnIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:e7:39:19:df:dd:dc:b3:29:af:31:3d:4f:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Dec 23 08:01:07 2025 GMT Not After : Dec 24 08:01:07 2025 GMT Subject: CN=97881e9967f6f9202535c6ba98a8dec82784c78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:a6:f2:14:62:cf:e0:12:36:ad:6d:b5:3c: 30:c7:2e:f6:f7:53:f5:8d:6e:92:7a:36:81:74:e5: 6d:43:52:92:dc:29:42:45:a3:3f:b0:75:e1:89:72: 42:14:f5:6e:10:82:b4:18:95:cf:3c:d7:6e:9c:88: 53:9d:9f:a8:41:f2:c7:2e:d4:2f:39:1f:cc:27:f2: 2f:c0:45:79:fb:11:9d:35:93:53:2f:03:be:b7:20: 5f:68:0a:8b:0e:d0:04:d6:04:7b:67:ad:09:ae:72: eb:75:df:50:49:26:b7:7e:2d:80:45:88:c5:49:f9: 66:80:09:e0:88:97:67:e5:c3:ed:61:98:3a:e4:8a: ff:a2:65:93:c2:61:6c:2c:28:ac:0e:65:d0:6d:ec: 89:fd:37:7b:85:27:ad:ec:a9:e6:ca:23:37:e3:b7: a9:d6:77:8b:b9:24:48:34:d4:eb:60:4e:a1:16:5e: 55:d7:93:1b:12:6c:8d:34:6a:1c:20:44:a1:80:79: a4:15:9f:31:ea:f0:98:c7:14:fc:24:f3:39:96:51: 42:9e:cb:93:f4:3c:52:53:80:c7:4f:36:a3:e8:86: ab:1d:37:f2:61:8c:72:b1:36:f2:89:6d:03:28:7b: 03:75:cf:89:f5:8f:fb:54:7f:4a:e7:c9:86:99:48: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:88:1E:99:67:F6:F9:20:25:35:C6:BA:98:A8:DE:C8:27:84:C7:8F X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5f:fb:2d:76:bd:1b:b2:01:b9:03:23:e0:0b:6b:4a:e1:f1: 21:68:4e:36:3e:de:64:ee:40:31:28:15:33:b4:d4:ec:7f:c1: ab:48:3c:76:d8:4d:58:8b:f7:3c:74:0d:71:91:02:f0:31:33: 5d:a4:5a:96:a7:00:cc:e8:3d:3c:45:90:ae:71:47:87:f7:7d: 74:3f:94:cf:52:64:aa:f9:2e:a1:a6:82:9c:f1:35:92:9d:6a: f2:75:48:b0:10:f0:49:c4:1d:50:04:2f:77:2b:8d:12:ae:fb: ae:59:79:f1:d2:7b:3d:c6:49:5a:04:bd:cb:00:94:56:c3:20: 4e:f5:a7:8f:1f:8e:de:0e:6e:42:93:3d:a6:6c:9b:6f:cc:51: 3a:85:bb:81:c2:78:c5:8f:ee:7a:70:52:12:a7:d7:0c:20:c1: d5:47:b0:23:a2:60:4f:53:20:00:53:06:36:cb:a6:c5:87:a7: aa:78:12:71:46:63:39:0c:76:1a:d5:b6:ff:e5:f0:b4:de:a4: 20:c1:c9:1e:1b:67:03:f3:84:f2:b7:06:c2:13:ae:ac:e6:8e: 61:41:11:ac:41:33:14:e8:66:18:46:f4:d3:63:98:2c:1f:26: 91:da:1b:5b:bd:b2:89:45:e8:fd:4f:32:2c:dd:25:98:b2:27: 8d:5b:e7:fb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtKOec5Gd/d3LMprzE9TzaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjUxMjIzMDgwMTA3WhcNMjUxMjI0MDgwMTA3WjAzMTEwLwYDVQQD Eyg5Nzg4MWU5OTY3ZjZmOTIwMjUzNWM2YmE5OGE4ZGVjODI3ODRjNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVym8hRiz+ASNq1ttTwwxy7291P1 jW6SejaBdOVtQ1KS3ClCRaM/sHXhiXJCFPVuEIK0GJXPPNdunIhTnZ+oQfLHLtQv OR/MJ/IvwEV5+xGdNZNTLwO+tyBfaAqLDtAE1gR7Z60JrnLrdd9QSSa3fi2ARYjF SflmgAngiJdn5cPtYZg65Ir/omWTwmFsLCisDmXQbeyJ/Td7hSet7KnmyiM347ep 1neLuSRINNTrYE6hFl5V15MbEmyNNGocIEShgHmkFZ8x6vCYxxT8JPM5llFCnsuT 9DxSU4DHTzaj6IarHTfyYYxysTbyiW0DKHsDdc+J9Y/7VH9K58mGmUiQhQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJeIHpln9vkgJTXGupio3sgnhMePMB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYyL2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2 MDQvMS8xLUVFb0ZHdDc3SXZSR0Z1LUREdVRRS3IxdHhRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1/7 LXa9G7IBuQMj4AtrSuHxIWhONj7eZO5AMSgVM7TU7H/Bq0g8dthNWIv3PHQNcZEC 8DEzXaRalqcAzOg9PEWQrnFHh/d9dD+Uz1JkqvkuoaaCnPE1kp1q8nVIsBDwScQd UAQvdyuNEq77rll58dJ7PcZJWgS9ywCUVsMgTvWnjx+O3g5uQpM9pmybb8xROoW7 gcJ4xY/uenBSEqfXDCDB1UewI6JgT1MgAFMGNsumxYenqngScUZjOQx2GtW2/+Xw tN6kIMHJHhtnA/OE8rcGwhOurOaOYUERrEEzFOhmGEb002OYLB8mkdobW72yiUXo /U8yLN0lmLInjVvn+w== -----END CERTIFICATE-----Generated at Tue Dec 23 11:05:39 2025 by rpki-client