This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json) Hash identifier: JzZ4ukR3hrfJ6umDHI3TlObrr0cukvkoIL8cRC3f/1k= Subject key identifier: 48:48:8E:28:BC:CB:1F:DE:A9:95:35:5D:D2:61:6F:F8:64:AC:4A:1F Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019B41A4E74A44CEB74736B50C65C07505EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 16:01:24 +0000 Manifest this update: Sun 21 Dec 2025 16:01:24 +0000 Manifest next update: Mon 22 Dec 2025 16:01:24 +0000 Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: F43sAcNinw1K764gPOyJa/04eMK54W1/pIhLk4Drkv8=) 2: DBpy8GqM15mwZnJSLrFuy79x-ls.roa (hash: CRpLC9eGaIL3iQD9GXAwS04kra6vLT84+/umQLGWKqg=) 3: u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa (hash: 3A49iTtZkWt31Q7WNjMXCnTT1/h0nEZHLn7n09wUli4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:e7:4a:44:ce:b7:47:36:b5:0c:65:c0:75:05:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Dec 21 16:01:24 2025 GMT Not After : Dec 22 16:01:24 2025 GMT Subject: CN=48488e28bccb1fdea995355dd2616ff864ac4a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:3d:40:96:a7:42:89:5b:26:6d:c2:e4:08: 17:a8:d2:f6:7f:73:13:54:09:3c:0e:b4:df:14:30: 9e:73:de:17:c4:75:46:e7:31:c4:d5:64:ee:4b:aa: 87:9f:fa:a0:fa:2d:79:b6:6e:a5:9c:72:73:a0:d8: eb:68:a5:58:3d:52:61:46:a5:7e:e4:23:65:b6:e8: 99:6c:0f:34:2d:ff:e3:55:cf:7c:28:41:72:42:93: 0a:e3:31:7a:e9:6d:6d:7f:1d:78:9b:18:2f:67:1b: 2c:c2:4d:f5:6a:6b:4b:74:88:f7:fb:e1:b9:15:c4: 54:5b:bb:f6:d7:7b:1c:de:b5:fa:9b:24:8d:17:1e: 28:bc:86:28:76:30:45:6a:1e:b3:48:4e:d4:2d:af: 08:5f:fb:b3:67:7e:ce:4a:40:90:3c:28:3c:50:77: 3a:47:62:8a:bf:e7:40:53:00:1a:06:22:dc:ab:a5: 09:68:cf:45:04:b9:a2:ab:dc:86:d4:e9:df:53:69: 78:06:8b:26:35:34:9b:38:53:95:4d:7a:13:4d:e8: 0a:da:99:29:74:2e:a7:df:b6:e2:d6:fc:18:36:6b: 52:bc:f0:10:d1:45:1e:9e:8a:cd:eb:e8:4e:20:38: 39:a7:03:df:46:a9:ea:85:5e:4f:26:69:60:5a:c7: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:48:8E:28:BC:CB:1F:DE:A9:95:35:5D:D2:61:6F:F8:64:AC:4A:1F X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1f:a1:e8:a0:b0:a3:e3:89:cd:25:32:01:d4:2c:13:bd:45: ba:52:f7:19:e0:56:6d:71:af:b8:83:81:48:86:c8:5e:a0:64: cf:64:27:80:e2:ed:c9:b6:fa:8f:9b:b5:fd:77:a7:78:ea:5f: 21:eb:54:c7:79:a2:5e:6e:51:a5:66:06:2b:db:6e:60:35:8c: 90:4e:b3:4e:66:35:33:86:ad:36:31:74:69:29:df:c5:61:54: d4:a5:71:20:57:fe:51:c4:d0:96:21:03:79:ca:6b:e0:3d:e3: 6d:15:18:53:08:86:f1:4f:28:8c:43:57:33:79:19:2d:4a:98: 5a:ad:b6:e1:19:c5:ce:e0:0b:a9:92:8b:82:66:3d:67:35:bb: eb:c9:9d:a9:23:1a:15:f3:91:24:99:06:38:97:46:a0:6d:f0: 26:ca:51:78:fd:c5:d9:80:d7:e2:ba:98:d8:73:64:98:03:12: f8:9f:67:17:ff:cf:37:0e:ff:ea:f6:99:7d:d5:8a:e5:d1:1f: 95:0f:a3:ee:c7:af:10:f6:21:be:ab:64:94:9c:77:be:79:88: 6e:32:8a:4d:a9:f0:c8:64:a8:49:8c:17:f9:02:7d:1e:39:4c: cf:c1:a8:27:60:9f:60:b5:b9:11:7f:11:65:f6:f3:2b:63:8b: c3:b8:df:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpOdKRM63Rza1DGXAdQXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjUxMjIxMTYwMTI0WhcNMjUxMjIyMTYwMTI0WjAzMTEwLwYDVQQD Eyg0ODQ4OGUyOGJjY2IxZmRlYTk5NTM1NWRkMjYxNmZmODY0YWM0YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV09QJanQolbJm3C5AgXqNL2f3MT VAk8DrTfFDCec94XxHVG5zHE1WTuS6qHn/qg+i15tm6lnHJzoNjraKVYPVJhRqV+ 5CNltuiZbA80Lf/jVc98KEFyQpMK4zF66W1tfx14mxgvZxsswk31amtLdIj3++G5 FcRUW7v213sc3rX6mySNFx4ovIYodjBFah6zSE7ULa8IX/uzZ37OSkCQPCg8UHc6 R2KKv+dAUwAaBiLcq6UJaM9FBLmiq9yG1OnfU2l4BosmNTSbOFOVTXoTTegK2pkp dC6n37bi1vwYNmtSvPAQ0UUenorN6+hOIDg5pwPfRqnqhV5PJmlgWscE0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhIjii8yx/eqZU1XdJhb/hkrEofMB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB+h6KCw o+OJzSUyAdQsE71FulL3GeBWbXGvuIOBSIbIXqBkz2QngOLtybb6j5u1/XeneOpf IetUx3miXm5RpWYGK9tuYDWMkE6zTmY1M4atNjF0aSnfxWFU1KVxIFf+UcTQliED ecpr4D3jbRUYUwiG8U8ojENXM3kZLUqYWq224RnFzuALqZKLgmY9ZzW768mdqSMa FfORJJkGOJdGoG3wJspReP3F2YDX4rqY2HNkmAMS+J9nF//PNw7/6vaZfdWK5dEf lQ+j7sevEPYhvqtklJx3vnmIbjKKTanwyGSoSYwX+QJ9HjlMz8GoJ2CfYLW5EX8R ZfbzK2OLw7jf0A== -----END CERTIFICATE-----Generated at Sun Dec 21 18:01:38 2025 by rpki-client