This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json) Hash identifier: /RyVjC5VdAT4wlMn1afBxvkDAUNXwEwbGq/PCDWNPLw= Subject key identifier: 45:F7:46:1F:21:B4:9D:E6:58:1D:B4:35:FE:B0:25:76:DA:66:48:72 Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Certificate serial: 019B23632D79A239F4F207C2FADD9A854D2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft Manifest number: 098F Signing time: Mon 15 Dec 2025 19:01:00 +0000 Manifest this update: Mon 15 Dec 2025 19:01:00 +0000 Manifest next update: Tue 16 Dec 2025 19:01:00 +0000 Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: 3DQ9SLtM3pGFluk5zvaQ4upNpfbqHPy0RbplDs2H234=) 2: QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa (hash: MDrtXAxZplUH7/qxVqW6e+250Fu4R4SP6B723HR2u5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:2d:79:a2:39:f4:f2:07:c2:fa:dd:9a:85:4d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Validity Not Before: Dec 15 19:01:00 2025 GMT Not After : Dec 16 19:01:00 2025 GMT Subject: CN=45f7461f21b49de6581db435feb02576da664872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:51:3b:e7:31:c3:ec:4b:de:b5:ad:10:27: ac:c5:91:b1:54:9b:98:bd:88:fd:49:fe:c7:71:6f: 2a:63:56:57:e0:4d:69:24:21:97:ee:3a:d4:f9:fd: c0:c1:61:86:4f:a9:f9:4d:f9:6f:4f:77:3e:c3:20: ef:39:95:54:38:11:79:0a:31:c2:cd:b7:29:a5:15: 99:57:24:7a:bd:9f:0e:90:89:23:fa:88:b7:d1:27: 2b:0c:43:74:fd:02:d3:7a:ff:aa:ef:44:0c:61:2f: 00:fa:cc:ad:cc:a7:3f:41:58:a4:22:22:4a:73:9e: fe:b4:4d:d7:ca:cf:a5:b8:95:f2:d6:e7:49:aa:e5: 3c:d1:80:b3:b2:1a:ca:e2:52:14:77:08:4d:81:e8: 02:3f:93:5f:36:41:28:e4:ff:41:ba:35:6a:38:06: 93:8b:da:fc:80:99:80:e4:3d:2d:18:e5:63:e7:62: 9a:bc:10:fd:35:b8:b7:3b:03:31:a0:d1:e0:d4:3e: 51:2f:37:9c:d0:1f:01:92:cb:5e:e2:45:6e:fb:b9: 38:79:ba:40:a1:b0:4f:28:f8:92:1c:a5:d3:8f:6a: eb:a2:8e:61:e1:d5:2e:4f:a0:8d:11:24:fe:14:54: 28:f3:59:a6:2c:6d:f8:b6:1d:b5:00:c7:a2:13:5c: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:46:1F:21:B4:9D:E6:58:1D:B4:35:FE:B0:25:76:DA:66:48:72 X509v3 Authority Key Identifier: keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a6:88:38:e9:75:bb:b0:1e:9d:f1:19:95:c9:c2:34:75:c5: 05:31:ec:dd:d0:0a:e7:55:b4:eb:b8:53:54:fe:0b:1b:7d:37: 03:eb:16:d2:5d:0b:91:e2:5d:c4:bf:5b:b0:24:3c:d6:6f:97: 3f:f7:09:d0:f9:ce:54:c3:63:79:b7:26:7f:8e:f9:61:8f:9d: 5a:20:89:29:0f:fd:f9:e0:d4:88:00:24:79:18:e7:a5:0c:34: 19:5a:fd:fd:7d:a6:91:66:ad:0b:c0:5a:da:44:77:04:d2:a3: 6a:4a:37:9b:8c:2c:dc:28:be:e1:39:8b:77:87:2e:0f:b7:7d: 61:8b:45:7d:94:5e:f7:56:37:8c:e2:c2:c7:3e:74:ca:40:7a: 48:a7:5d:1a:93:8c:8d:34:5c:fa:c6:42:48:ff:62:bb:d0:c7: 60:43:40:fa:81:8e:c5:4c:f1:56:8a:d4:bf:7d:96:61:4f:39: 10:ce:26:54:a5:a1:52:1d:b8:ff:11:94:f2:18:33:27:6f:a2: 2f:bc:c1:d7:c3:5e:cc:6d:f5:c3:5b:c4:a1:d3:0f:57:1b:17: ba:67:32:5b:b0:bb:e5:50:82:ce:01:ff:a8:58:dd:23:4d:40: c7:51:bc:87:47:fa:df:df:15:d7:2c:82:90:7c:d4:49:13:ce: df:7a:23:02 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsjYy15ojn08gfC+t2ahU0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTIwZjdkM2EyY2M5NWQ5ZGU2ZjRlMzM0Y2I0YjY3OTIy ZTcwZjUwHhcNMjUxMjE1MTkwMTAwWhcNMjUxMjE2MTkwMTAwWjAzMTEwLwYDVQQD Eyg0NWY3NDYxZjIxYjQ5ZGU2NTgxZGI0MzVmZWIwMjU3NmRhNjY0ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb9RO+cxw+xL3rWtECesxZGxVJuY vYj9Sf7HcW8qY1ZX4E1pJCGX7jrU+f3AwWGGT6n5TflvT3c+wyDvOZVUOBF5CjHC zbcppRWZVyR6vZ8OkIkj+oi30ScrDEN0/QLTev+q70QMYS8A+sytzKc/QVikIiJK c57+tE3Xys+luJXy1udJquU80YCzshrK4lIUdwhNgegCP5NfNkEo5P9BujVqOAaT i9r8gJmA5D0tGOVj52KavBD9Nbi3OwMxoNHg1D5RLzec0B8Bkste4kVu+7k4ebpA obBPKPiSHKXTj2rroo5h4dUuT6CNEST+FFQo81mmLG34th21AMeiE1yLRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEX3Rh8htJ3mWB20Nf6wJXbaZkhyMB8GA1UdIwQY MBaAFPniD306LMldneb04zTLS2eSLnD1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lSVBmVG9zeVYyZDV2VGpOTXRMWjVJdWNQVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMw LWE1NGViODU2NmJlZi8xLzEtZUlQZlRvc3lWMmQ1dlRqTk10TFo1SXVjUFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhLzdlN2ZjZS00ODQxLTQ3NmItODRjMC1hNTRlYjg1NjZi ZWYvMS8xLWVJUGZUb3N5VjJkNXZUak5NdExaNUl1Y1BVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6aI OOl1u7AenfEZlcnCNHXFBTHs3dAK51W067hTVP4LG303A+sW0l0LkeJdxL9bsCQ8 1m+XP/cJ0PnOVMNjebcmf475YY+dWiCJKQ/9+eDUiAAkeRjnpQw0GVr9/X2mkWat C8Ba2kR3BNKjako3m4ws3Ci+4TmLd4cuD7d9YYtFfZRe91Y3jOLCxz50ykB6SKdd GpOMjTRc+sZCSP9iu9DHYENA+oGOxUzxVorUv32WYU85EM4mVKWhUh24/xGU8hgz J2+iL7zB18NezG31w1vEodMPVxsXumcyW7C75VCCzgH/qFjdI01Ax1G8h0f6398V 1yyCkHzUSRPO33ojAg== -----END CERTIFICATE-----Generated at Tue Dec 16 03:38:09 2025 by rpki-client