This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json) Hash identifier: xprcvSlz26BvzI1KpY5ZanIGDESKohNGgmoQqE76qh8= Subject key identifier: 18:8D:C2:0D:87:0D:A6:2A:97:E7:0B:41:94:30:34:C2:74:F8:05:4A Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019B07B5B6B5CCD96F5C56F1D362F0730D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft Manifest number: 176F Signing time: Wed 10 Dec 2025 10:01:47 +0000 Manifest this update: Wed 10 Dec 2025 10:01:47 +0000 Manifest next update: Thu 11 Dec 2025 10:01:47 +0000 Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: Bt2XN5J9qOYSM6w9unXxEBGpgk5Naj67NydrBlHEEQQ=) 2: DBpy8GqM15mwZnJSLrFuy79x-ls.roa (hash: CRpLC9eGaIL3iQD9GXAwS04kra6vLT84+/umQLGWKqg=) 3: u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa (hash: 3A49iTtZkWt31Q7WNjMXCnTT1/h0nEZHLn7n09wUli4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:b6:b5:cc:d9:6f:5c:56:f1:d3:62:f0:73:0d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Dec 10 10:01:47 2025 GMT Not After : Dec 11 10:01:47 2025 GMT Subject: CN=188dc20d870da62a97e70b41943034c274f8054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:48:97:55:15:d6:37:7e:9a:3b:91:49:df: 84:3e:bd:3c:95:b4:69:e3:4a:eb:52:de:dd:b0:22: ac:5d:57:c6:8a:44:e7:43:73:3a:32:65:8a:a3:02: 01:8f:35:e5:b8:27:95:42:cc:81:b4:f6:0f:cd:2d: de:bf:c8:e6:7f:66:b9:40:d8:b6:ee:fe:ff:fd:5d: 09:c0:98:77:1c:ca:75:dd:e5:24:cb:85:15:8a:3c: d1:3a:f4:ec:b2:4c:7b:d9:7e:7c:9f:08:00:16:7a: e8:79:d3:36:32:bd:b7:b7:5b:a6:4c:01:b7:59:c6: d5:8c:7c:77:bd:34:f6:2e:0d:56:d2:aa:aa:3a:c2: 54:8c:b1:b9:49:d9:31:d1:08:1e:3d:13:c3:7b:92: aa:a9:69:20:05:27:4a:7a:ae:bd:59:6e:12:ae:c3: 5c:50:43:45:c0:ba:22:02:b7:4f:db:40:3b:6a:eb: 18:66:28:16:24:d1:2a:67:2d:23:1e:fc:7f:7d:14: 43:64:ba:b6:cd:b3:60:46:f6:17:f4:54:ab:e8:5d: 56:da:ee:73:6f:97:95:ab:c5:2c:54:e5:eb:ae:91: 7f:68:c2:e2:58:0b:c8:a0:bf:4d:dc:3f:3d:e5:74: 22:a5:39:91:89:06:a5:fc:7e:ed:64:7e:2e:dd:37: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8D:C2:0D:87:0D:A6:2A:97:E7:0B:41:94:30:34:C2:74:F8:05:4A X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6e:30:b7:54:41:94:8b:6b:23:47:37:02:b6:32:78:90:02: 34:c6:76:d9:6d:9c:4b:f4:16:33:7b:65:7e:74:48:1d:47:70: d6:de:a1:07:2d:e8:ea:f4:34:e8:20:cb:29:a1:cf:c2:ea:0f: 61:1e:8a:77:37:40:db:a6:11:4f:b9:87:25:6f:12:7f:53:4e: cf:38:6f:0a:ff:56:e3:00:4b:e9:0b:03:76:4c:67:fe:06:89: fc:1b:53:78:20:cc:74:64:a8:7f:b2:de:24:2e:c0:d3:a9:79: d7:c9:be:b1:03:ae:f8:cc:80:12:d3:12:af:69:52:2c:33:14: c5:23:75:93:7e:8c:b2:1e:32:30:a1:0e:06:02:88:8b:53:46: 17:97:b3:d1:2e:1f:29:78:ad:0f:ec:ee:1a:71:7b:a9:3f:56: 7c:e6:0f:e1:a3:b3:0d:52:e3:a1:7d:62:4b:d1:b0:44:f5:4c: 6e:71:24:6f:6d:f5:cf:90:ff:aa:23:16:f5:75:85:0a:3a:ee: 43:33:e6:e2:37:29:fa:83:5f:ec:b2:14:25:d0:be:fd:4a:94: a1:75:59:aa:44:a2:bc:07:d1:1d:18:62:b4:69:3c:fc:2d:30: 45:c7:16:63:1a:25:34:c9:12:cf:a5:d9:1b:18:f7:a4:8d:9d: 14:95:4e:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtba1zNlvXFbx02Lwcw2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjUxMjEwMTAwMTQ3WhcNMjUxMjExMTAwMTQ3WjAzMTEwLwYDVQQD EygxODhkYzIwZDg3MGRhNjJhOTdlNzBiNDE5NDMwMzRjMjc0ZjgwNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzadIl1UV1jd+mjuRSd+EPr08lbRp 40rrUt7dsCKsXVfGikTnQ3M6MmWKowIBjzXluCeVQsyBtPYPzS3ev8jmf2a5QNi2 7v7//V0JwJh3HMp13eUky4UVijzROvTsskx72X58nwgAFnroedM2Mr23t1umTAG3 WcbVjHx3vTT2Lg1W0qqqOsJUjLG5Sdkx0QgePRPDe5KqqWkgBSdKeq69WW4SrsNc UENFwLoiArdP20A7ausYZigWJNEqZy0jHvx/fRRDZLq2zbNgRvYX9FSr6F1W2u5z b5eVq8UsVOXrrpF/aMLiWAvIoL9N3D895XQipTmRiQal/H7tZH4u3Te04QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiNwg2HDaYql+cLQZQwNMJ0+AVKMB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG4wt1RB lItrI0c3ArYyeJACNMZ22W2cS/QWM3tlfnRIHUdw1t6hBy3o6vQ06CDLKaHPwuoP YR6KdzdA26YRT7mHJW8Sf1NOzzhvCv9W4wBL6QsDdkxn/gaJ/BtTeCDMdGSof7Le JC7A06l518m+sQOu+MyAEtMSr2lSLDMUxSN1k36Msh4yMKEOBgKIi1NGF5ez0S4f KXitD+zuGnF7qT9WfOYP4aOzDVLjoX1iS9GwRPVMbnEkb231z5D/qiMW9XWFCjru QzPm4jcp+oNf7LIUJdC+/UqUoXVZqkSivAfRHRhitGk8/C0wRccWYxolNMkSz6XZ Gxj3pI2dFJVOGQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:36:12 2025 by rpki-client