This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json) Hash identifier: fOj8JE2sqD48VIgPc8WC7ZFvtu3By7E1pRw6r9Z2Blc= Subject key identifier: FD:B3:70:28:9E:BA:5A:86:54:D1:70:30:DF:C7:BE:E1:2D:47:96:01 Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Certificate serial: 019B5907AAED21C0A5166AF53533FFBF2F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft Manifest number: 01F4 Signing time: Fri 26 Dec 2025 05:00:32 +0000 Manifest this update: Fri 26 Dec 2025 05:00:32 +0000 Manifest next update: Sat 27 Dec 2025 05:00:32 +0000 Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: 0DH/WFi0QBm1dyo4KpHkY/f1JbqfMvRfGlSJhrBf5SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:aa:ed:21:c0:a5:16:6a:f5:35:33:ff:bf:2f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Validity Not Before: Dec 26 05:00:32 2025 GMT Not After : Dec 27 05:00:32 2025 GMT Subject: CN=fdb370289eba5a8654d17030dfc7bee12d479601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:b1:fd:03:9f:11:42:b8:06:3c:fe:46:ae: 46:be:6b:67:2b:6b:a3:34:f0:d5:29:14:9a:e5:0f: 89:97:39:83:5f:f7:f2:7d:b7:3d:52:25:dd:00:0c: d0:3e:6a:4c:78:2d:b8:a3:d1:87:2a:cb:52:ee:18: 22:58:b3:5c:0e:7b:44:75:60:6b:e9:41:17:32:b9: bc:32:eb:76:6f:67:db:f5:a8:c2:a4:60:51:e4:cd: 54:54:ce:35:b0:35:d7:6c:b3:a2:2f:4c:53:4c:4e: e9:af:8c:9e:b2:22:5e:85:d8:69:00:3d:8b:00:35: af:d7:0e:11:25:3f:ee:b4:a5:67:59:92:c2:eb:c6: 34:92:0e:fd:fc:7f:14:90:e6:4c:7c:db:d0:3e:5c: 80:0b:5f:61:0d:60:a9:5c:04:54:fe:25:a7:e8:a1: 1d:28:d6:30:f4:3b:18:71:3e:83:35:96:15:ad:4b: a1:5b:48:58:6e:65:22:1b:df:90:ef:85:90:87:c0: e7:4e:61:47:55:b3:3c:da:f9:a2:c1:4b:d8:9c:d6: 79:5e:cd:62:cb:0e:60:52:ea:e3:76:ea:26:99:4b: 88:c1:81:73:c2:b9:90:3d:a3:af:c9:05:ea:a7:ab: cc:66:79:56:dc:b6:06:2d:2e:75:b8:85:a1:3b:5d: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:70:28:9E:BA:5A:86:54:D1:70:30:DF:C7:BE:E1:2D:47:96:01 X509v3 Authority Key Identifier: keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:34:de:c3:2e:79:09:d3:f9:d9:13:a3:72:96:c7:4b:a8:8f: 09:1a:4f:dd:ac:f5:ad:e8:6e:b1:ad:25:24:0a:43:c5:37:e1: 58:0f:e8:63:45:5c:0d:d8:67:da:e8:dc:73:ba:e1:eb:7a:be: 45:60:2f:89:d6:ee:d0:3b:79:d4:9b:1e:26:c6:de:6b:1e:d1: d5:8b:68:9c:21:cf:6b:02:9d:f0:19:6a:5a:55:16:8d:44:a8: 28:dd:7e:2f:47:3a:b0:a4:df:99:80:e9:2d:d3:c9:36:32:94: 1b:1d:b6:cc:b8:d2:cd:3d:f7:84:e1:5d:1a:1a:7f:ef:55:93: d2:18:25:6f:67:f8:04:77:61:a7:20:17:9c:0a:8b:75:17:41: 98:98:5f:a2:ed:c5:82:c4:46:b9:d5:17:3f:d2:ee:b5:d2:78: cb:9e:ca:b9:6c:6b:a3:ae:af:8c:39:03:cf:6f:b3:31:34:47: 24:ad:f6:71:a6:14:2a:15:45:2d:cd:b4:15:43:a5:d9:f7:05: 17:19:2c:b5:f8:6d:23:3a:ab:d1:51:c6:43:69:f6:b9:fa:97: 02:12:d0:d7:81:d2:54:27:bb:45:a9:86:be:25:43:72:88:18: 81:4a:16:38:8d:42:c0:63:1a:7f:5d:ca:cf:f0:96:25:e5:f5: 0e:3b:59:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZB6rtIcClFmr1NTP/vy+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTRiZTAxNGJmODM5NGU0Y2Q3Y2U2Yzg0YTRmYTg0ZjJl NTlmNWYwHhcNMjUxMjI2MDUwMDMyWhcNMjUxMjI3MDUwMDMyWjAzMTEwLwYDVQQD EyhmZGIzNzAyODllYmE1YTg2NTRkMTcwMzBkZmM3YmVlMTJkNDc5NjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IWx/QOfEUK4Bjz+Rq5GvmtnK2uj NPDVKRSa5Q+JlzmDX/fyfbc9UiXdAAzQPmpMeC24o9GHKstS7hgiWLNcDntEdWBr 6UEXMrm8Mut2b2fb9ajCpGBR5M1UVM41sDXXbLOiL0xTTE7pr4yesiJehdhpAD2L ADWv1w4RJT/utKVnWZLC68Y0kg79/H8UkOZMfNvQPlyAC19hDWCpXARU/iWn6KEd KNYw9DsYcT6DNZYVrUuhW0hYbmUiG9+Q74WQh8DnTmFHVbM82vmiwUvYnNZ5Xs1i yw5gUurjduommUuIwYFzwrmQPaOvyQXqp6vMZnlW3LYGLS51uIWhO1316QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP2zcCieulqGVNFwMN/HvuEtR5YBMB8GA1UdIwQY MBaAFPnkvgFL+DlOTNfObISk+oTy5Z9fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lUy1BVXY0T1U1TTE4NXNoS1Q2aFBMbG4xOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGQ1ODlmLTJkNTAtNDI0Yy05YjQ5 LWFjMzZkODIwNDQzNi8xLzEtZVMtQVV2NE9VNU0xODVzaEtUNmhQTGxuMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg2LzRkNTg5Zi0yZDUwLTQyNGMtOWI0OS1hYzM2ZDgyMDQ0 MzYvMS8xLWVTLUFVdjRPVTVNMTg1c2hLVDZoUExsbjE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDTe wy55CdP52ROjcpbHS6iPCRpP3az1rehusa0lJApDxTfhWA/oY0VcDdhn2ujcc7rh 63q+RWAvidbu0Dt51JseJsbeax7R1YtonCHPawKd8BlqWlUWjUSoKN1+L0c6sKTf mYDpLdPJNjKUGx22zLjSzT33hOFdGhp/71WT0hglb2f4BHdhpyAXnAqLdRdBmJhf ou3FgsRGudUXP9LutdJ4y57KuWxro66vjDkDz2+zMTRHJK32caYUKhVFLc20FUOl 2fcFFxkstfhtIzqr0VHGQ2n2ufqXAhLQ14HSVCe7RamGviVDcogYgUoWOI1CwGMa f13Kz/CWJeX1DjtZkw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:51 2025 by rpki-client