This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json) Hash identifier: UdFQ7d4ns1qrjJQrWAWIyle23+BMt1qMEBbK1XW6/zs= Subject key identifier: F3:56:A5:60:F6:C9:60:C6:FB:89:77:C5:70:8A:7D:D1:56:88:60:E5 Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Certificate serial: 019B2965666C517ACD3544028FA66B26D00A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft Manifest number: 0867 Signing time: Tue 16 Dec 2025 23:01:09 +0000 Manifest this update: Tue 16 Dec 2025 23:01:09 +0000 Manifest next update: Wed 17 Dec 2025 23:01:09 +0000 Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: 2o9Oh+1FrrxP8ZcHSigckOpfxsTDHAUm4b67fbPryaw=) 2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:66:6c:51:7a:cd:35:44:02:8f:a6:6b:26:d0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Validity Not Before: Dec 16 23:01:09 2025 GMT Not After : Dec 17 23:01:09 2025 GMT Subject: CN=f356a560f6c960c6fb8977c5708a7dd1568860e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:20:8b:c4:4c:3d:42:03:1f:b5:97:25:e9: 97:59:7e:a4:49:79:53:53:8c:7e:d6:56:53:ce:dc: c1:fb:90:9c:29:a1:f6:8c:7b:ae:3c:5e:25:e7:b0: b2:5c:c7:48:d4:5b:c6:42:44:a2:68:8b:83:19:dc: 99:bd:54:2c:db:77:b6:3a:5a:bd:95:c9:16:83:78: 73:c0:bb:3b:f3:fd:c0:22:b8:36:b8:d8:f6:1f:84: 53:0a:d7:c7:0a:e5:82:83:0e:dd:58:09:16:bb:73: 35:61:98:91:ae:13:f9:02:a0:4c:02:9e:2d:42:e7: 76:20:92:22:71:af:72:94:aa:ba:19:33:d5:f2:e9: 59:11:6c:72:6b:7d:f0:41:44:b0:ef:28:ac:c9:7e: 08:ec:2e:d5:11:d1:4e:4f:af:2a:1c:5d:b3:87:b0: ec:ad:34:b8:92:87:3e:47:34:0d:28:e8:cc:8d:9c: 14:2c:a2:cf:1a:b2:b9:32:7b:9d:86:27:3b:62:b8: 80:17:03:ac:c4:e4:af:26:42:67:71:63:cc:75:e8: 7a:f1:c0:bd:55:ee:8e:0a:be:8a:80:ae:5e:c4:fe: d0:e4:ca:c6:0d:c3:0a:67:4a:90:fe:8c:8c:79:cf: 7e:8a:25:3e:05:a9:5b:ac:aa:c3:ef:32:65:94:82: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:56:A5:60:F6:C9:60:C6:FB:89:77:C5:70:8A:7D:D1:56:88:60:E5 X509v3 Authority Key Identifier: keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a2:d8:04:6c:a0:43:d5:4e:37:0d:3f:ef:69:47:38:4c:55: a8:20:d3:b1:09:2f:2d:e1:6f:58:fd:e7:cc:10:f6:99:93:ee: 5d:0e:26:88:3b:15:91:47:be:a3:03:63:0f:b5:f6:d3:e3:60: 11:29:9a:98:9b:0b:37:62:fa:6e:cc:14:16:31:ec:fa:ca:e3: 28:13:8e:9f:af:48:70:f4:2f:dd:5e:e3:4a:78:60:54:b4:6c: eb:33:cd:17:a2:19:1e:5b:cd:f4:e4:9f:a9:1b:09:48:d1:e9: e4:6d:90:3f:52:70:54:5e:89:71:23:38:bf:44:84:bf:64:92: 26:1b:84:32:19:41:5b:5e:ea:0c:c3:77:69:7b:57:ff:ef:be: c6:3d:a8:a4:93:f2:4e:2e:e0:27:4d:f0:99:51:6f:6a:dc:59: 20:9f:57:6f:ae:4d:f4:be:97:c1:4d:b3:16:78:ef:69:24:39: 78:33:7f:c5:49:79:95:cc:4a:b4:ee:b1:57:f1:e3:09:72:c0: eb:0f:9f:eb:18:aa:2e:eb:a4:1b:29:a0:8a:53:53:61:60:b9: ed:fd:39:6f:3b:97:be:14:d4:3b:46:a2:12:fa:ab:0d:fc:bf: f2:ce:67:0e:9c:8b:9a:3b:bf:e9:2b:3a:d5:03:4f:94:e9:56: 6d:b8:98:57 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZspZWZsUXrNNUQCj6ZrJtAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4 NDgzZmMwHhcNMjUxMjE2MjMwMTA5WhcNMjUxMjE3MjMwMTA5WjAzMTEwLwYDVQQD EyhmMzU2YTU2MGY2Yzk2MGM2ZmI4OTc3YzU3MDhhN2RkMTU2ODg2MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/0gi8RMPUIDH7WXJemXWX6kSXlT U4x+1lZTztzB+5CcKaH2jHuuPF4l57CyXMdI1FvGQkSiaIuDGdyZvVQs23e2Olq9 lckWg3hzwLs78/3AIrg2uNj2H4RTCtfHCuWCgw7dWAkWu3M1YZiRrhP5AqBMAp4t Qud2IJIica9ylKq6GTPV8ulZEWxya33wQUSw7yisyX4I7C7VEdFOT68qHF2zh7Ds rTS4koc+RzQNKOjMjZwULKLPGrK5Mnudhic7YriAFwOsxOSvJkJncWPMdeh68cC9 Ve6OCr6KgK5exP7Q5MrGDcMKZ0qQ/oyMec9+iiU+BalbrKrD7zJllIJa/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPNWpWD2yWDG+4l3xXCKfdFWiGDlMB8GA1UdIwQY MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3 LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqLY BGygQ9VONw0/72lHOExVqCDTsQkvLeFvWP3nzBD2mZPuXQ4miDsVkUe+owNjD7X2 0+NgESmamJsLN2L6bswUFjHs+srjKBOOn69IcPQv3V7jSnhgVLRs6zPNF6IZHlvN 9OSfqRsJSNHp5G2QP1JwVF6JcSM4v0SEv2SSJhuEMhlBW17qDMN3aXtX/+++xj2o pJPyTi7gJ03wmVFvatxZIJ9Xb65N9L6XwU2zFnjvaSQ5eDN/xUl5lcxKtO6xV/Hj CXLA6w+f6xiqLuukGymgilNTYWC57f05bzuXvhTUO0aiEvqrDfy/8s5nDpyLmju/ 6Ss61QNPlOlWbbiYVw== -----END CERTIFICATE-----Generated at Wed Dec 17 07:56:32 2025 by rpki-client