This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json) Hash identifier: DYUhvohY58AerfvNj0KPm1noEzsvEp5d0GjMiPgdWnY= Subject key identifier: 1C:79:B1:05:2C:7D:2C:CF:6A:0C:5E:E1:80:7E:44:98:EF:A0:90:84 Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Certificate serial: 019B38D7E775EE0AC6508C2F27CFE22DF8DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft Manifest number: 086F Signing time: Fri 19 Dec 2025 23:00:32 +0000 Manifest this update: Fri 19 Dec 2025 23:00:32 +0000 Manifest next update: Sat 20 Dec 2025 23:00:32 +0000 Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: dxdqp5Y3TYaCpcZysZGz2SIWwAoZQl8Xms6nJBW3Dlw=) 2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:e7:75:ee:0a:c6:50:8c:2f:27:cf:e2:2d:f8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Validity Not Before: Dec 19 23:00:32 2025 GMT Not After : Dec 20 23:00:32 2025 GMT Subject: CN=1c79b1052c7d2ccf6a0c5ee1807e4498efa09084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:61:85:bc:9f:61:9d:7f:b7:ed:70:d2:74: ab:4b:34:5b:68:b3:ff:18:20:55:44:b1:d5:6c:5d: 8c:be:70:5a:6c:e7:d7:3c:b9:78:f6:fe:80:d2:f4: 9c:49:0c:84:32:8d:9a:3f:95:39:88:6f:a9:72:84: 2d:82:d3:fe:a6:52:f8:cb:b6:4e:82:04:44:01:c5: 5c:3d:03:fe:b0:21:75:51:1b:68:6a:3c:eb:4d:ca: 40:51:cb:2d:09:05:d6:9f:17:4b:79:cb:a0:25:35: 3b:03:c5:5d:23:e1:9b:c5:c1:03:c9:fb:8a:17:5b: 43:1b:e2:92:d9:f5:09:a0:1b:8b:46:51:80:4d:1b: 33:63:4c:22:4b:22:5d:0a:28:5d:72:23:06:a5:6d: 99:6a:9d:ee:d6:a1:07:bd:4e:0c:08:73:71:67:23: 3d:b7:0e:b7:17:ba:ad:ea:51:0a:a8:f8:31:3d:9a: d7:cd:b9:63:ae:5c:f7:df:92:b2:7a:92:54:08:14: 76:dc:1a:77:94:9b:6d:e8:a3:47:93:89:0f:45:88: a4:9d:63:fc:35:4f:52:83:25:cd:9e:7e:b5:bc:00: 31:ee:1f:cf:e5:7a:14:00:99:cc:17:47:57:89:a4: b3:24:79:43:fb:51:5c:75:5a:35:7b:6d:ee:ed:dc: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:B1:05:2C:7D:2C:CF:6A:0C:5E:E1:80:7E:44:98:EF:A0:90:84 X509v3 Authority Key Identifier: keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fd:32:0b:22:f8:d2:84:7b:e3:8c:b7:94:6a:ec:12:13:22: 08:6e:fc:b8:50:c9:65:a2:9f:a8:f5:c8:db:32:f4:66:18:60: 27:3d:55:f1:97:b4:a0:84:7b:70:bc:e9:ba:18:cf:d7:d5:d2: 7e:b9:0f:fd:45:7c:90:22:ef:e1:9b:f8:8b:03:2e:22:23:19: c4:36:14:3c:6f:2e:01:cf:d1:cc:cc:09:88:e7:72:2c:13:af: 20:30:ce:31:b9:b9:51:31:bb:d4:5c:22:0d:b7:07:2b:1a:b4: 2a:ec:34:9f:83:9e:38:f8:1f:9e:0b:8f:8c:8e:7c:9e:56:ea: c4:21:6c:71:ba:ef:23:f9:f2:14:7a:9c:bb:94:bb:05:4b:dd: cf:68:80:42:e5:5d:17:60:15:be:3d:00:2d:79:8c:f7:ba:4c: aa:bc:2f:d3:36:02:11:20:a4:ba:eb:d6:56:2a:95:23:77:d9: b1:e1:40:9e:93:e5:43:f5:6d:37:0d:ae:94:a7:5a:e7:2c:db: f2:01:9c:83:c8:e6:59:0e:69:50:b8:38:43:0e:a9:ab:bf:09: ff:fd:b9:f8:8b:46:41:4a:fe:f7:58:ac:61:4b:b6:9c:70:73: e7:1c:28:bd:ba:41:11:2c:80:44:09:82:08:fa:14:4f:5d:17: 0d:8d:1d:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs41+d17grGUIwvJ8/iLfjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4 NDgzZmMwHhcNMjUxMjE5MjMwMDMyWhcNMjUxMjIwMjMwMDMyWjAzMTEwLwYDVQQD EygxYzc5YjEwNTJjN2QyY2NmNmEwYzVlZTE4MDdlNDQ5OGVmYTA5MDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIthhbyfYZ1/t+1w0nSrSzRbaLP/ GCBVRLHVbF2MvnBabOfXPLl49v6A0vScSQyEMo2aP5U5iG+pcoQtgtP+plL4y7ZO ggREAcVcPQP+sCF1URtoajzrTcpAUcstCQXWnxdLecugJTU7A8VdI+GbxcEDyfuK F1tDG+KS2fUJoBuLRlGATRszY0wiSyJdCihdciMGpW2Zap3u1qEHvU4MCHNxZyM9 tw63F7qt6lEKqPgxPZrXzbljrlz335KyepJUCBR23Bp3lJtt6KNHk4kPRYiknWP8 NU9SgyXNnn61vAAx7h/P5XoUAJnMF0dXiaSzJHlD+1FcdVo1e23u7dzedQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBx5sQUsfSzPagxe4YB+RJjvoJCEMB8GA1UdIwQY MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3 LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXP0y CyL40oR744y3lGrsEhMiCG78uFDJZaKfqPXI2zL0ZhhgJz1V8Ze0oIR7cLzpuhjP 19XSfrkP/UV8kCLv4Zv4iwMuIiMZxDYUPG8uAc/RzMwJiOdyLBOvIDDOMbm5UTG7 1FwiDbcHKxq0Kuw0n4OeOPgfnguPjI58nlbqxCFscbrvI/nyFHqcu5S7BUvdz2iA QuVdF2AVvj0ALXmM97pMqrwv0zYCESCkuuvWViqVI3fZseFAnpPlQ/VtNw2ulKda 5yzb8gGcg8jmWQ5pULg4Qw6pq78J//25+ItGQUr+91isYUu2nHBz5xwovbpBESyA RAmCCPoUT10XDY0dFw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:04 2025 by rpki-client