This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json) Hash identifier: ycnG70RT1xAZEI7XA8ISv3GU+MQpVOYKx4KRrKeOL34= Subject key identifier: 38:E3:2E:2E:A8:99:EF:BA:27:F7:35:3B:F0:AB:60:75:00:74:53:61 Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491 Certificate serial: 019B0DB6E05CF5DA62E1E10C82ABBE675725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft Manifest number: 0371 Signing time: Thu 11 Dec 2025 14:00:47 +0000 Manifest this update: Thu 11 Dec 2025 14:00:47 +0000 Manifest next update: Fri 12 Dec 2025 14:00:47 +0000 Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: SJwKGD2DdIlbA0aaKfZdI6iv3MPSx9+8N+RavCYnoJo=) 2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=) 3: ChX8pazd-3AGexip8e66J_qv-5s.roa (hash: WJAdxZ3OiI7mTsTBH6nQW+FFyZetDh90YtsYr8TxOkE=) 4: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (hash: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e0:5c:f5:da:62:e1:e1:0c:82:ab:be:67:57:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491 Validity Not Before: Dec 11 14:00:47 2025 GMT Not After : Dec 12 14:00:47 2025 GMT Subject: CN=38e32e2ea899efba27f7353bf0ab607500745361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:17:18:51:6c:b0:30:29:88:c4:1a:a8:f2: 5b:68:b8:1f:cd:43:20:e5:e6:1e:9d:39:ee:d9:52: 0d:60:38:b3:ea:04:f9:1a:8e:34:08:7f:46:cd:d9: 27:de:63:ca:6d:5a:ea:15:8c:03:15:26:7a:52:91: 00:31:b6:e3:51:76:1d:1c:cf:3e:96:af:c2:78:e1: d1:9d:22:44:b2:9c:98:cf:00:a5:f5:bf:f8:ca:e1: b8:dd:64:e6:3f:02:26:5e:58:ac:e9:e0:12:d6:eb: 31:08:50:68:70:7d:2e:02:33:30:9b:8a:93:aa:d3: 4e:9e:2d:0e:c9:39:7f:e9:0c:93:22:4f:16:ff:ef: b8:d0:06:59:a5:dd:a6:15:ac:8e:5d:b6:9a:98:34: 58:fd:85:61:97:59:0f:82:f9:87:ff:ba:97:d6:4c: 87:52:6e:c2:08:04:66:1b:e6:53:f7:fe:16:da:34: 3d:c8:19:5c:4b:91:6f:6a:aa:f9:37:09:c8:6a:58: 87:e7:05:4d:83:4a:79:35:c3:33:ea:6a:c9:c1:a7: 02:60:60:aa:37:bd:17:44:8b:46:2e:79:20:3f:e5: e2:6c:75:4b:f2:ab:a6:ac:e7:8c:9e:11:ee:c0:69: 28:1b:73:21:1e:dd:90:94:f1:29:8b:4f:6a:c6:42: 67:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:2E:2E:A8:99:EF:BA:27:F7:35:3B:F0:AB:60:75:00:74:53:61 X509v3 Authority Key Identifier: keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:61:d4:81:51:44:04:eb:de:b6:40:b1:a5:1a:21:06:a4:3b: 41:d5:01:23:24:c5:c5:81:9e:f5:d1:98:1d:42:61:98:46:d2: cb:50:aa:f3:f9:83:f8:d0:5b:ef:e0:c6:f5:9d:dd:13:7a:06: fd:03:b7:47:f3:aa:aa:08:db:e9:ac:d1:0e:97:49:e4:12:15: af:df:75:c3:e0:01:d4:8f:8e:04:03:ca:86:a7:ed:13:6b:cd: ab:8a:4d:9d:61:86:9f:14:ae:31:79:54:c2:60:47:f2:d8:d7: ea:0a:67:2d:8b:91:cf:17:68:5c:f6:31:b8:55:e9:3c:39:3a: f8:83:a7:82:fe:01:e4:a5:92:61:c2:aa:2e:2e:49:0c:33:e4: e9:d6:29:76:61:92:a0:f6:af:87:a5:78:e9:68:29:4a:0e:76: 32:dd:b5:de:79:01:b3:19:ce:fa:24:34:d5:62:d7:c1:a7:f3: a1:8d:c5:15:3f:90:13:85:9c:12:72:06:db:6d:03:44:a8:31: 4c:dd:32:2c:08:24:05:e1:b4:79:80:ac:7b:57:be:87:83:16: 53:76:d6:82:5b:57:ce:b8:86:f1:73:3d:cf:1e:b5:1a:54:e5: 90:b9:e1:13:12:0c:e3:eb:9b:09:b5:11:83:4a:7f:f8:6a:a6: 48:d1:06:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtuBc9dpi4eEMgqu+Z1clMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5 M2M0OTEwHhcNMjUxMjExMTQwMDQ3WhcNMjUxMjEyMTQwMDQ3WjAzMTEwLwYDVQQD EygzOGUzMmUyZWE4OTllZmJhMjdmNzM1M2JmMGFiNjA3NTAwNzQ1MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQEXGFFssDApiMQaqPJbaLgfzUMg 5eYenTnu2VINYDiz6gT5Go40CH9Gzdkn3mPKbVrqFYwDFSZ6UpEAMbbjUXYdHM8+ lq/CeOHRnSJEspyYzwCl9b/4yuG43WTmPwImXlis6eAS1usxCFBocH0uAjMwm4qT qtNOni0OyTl/6QyTIk8W/++40AZZpd2mFayOXbaamDRY/YVhl1kPgvmH/7qX1kyH Um7CCARmG+ZT9/4W2jQ9yBlcS5Fvaqr5NwnIaliH5wVNg0p5NcMz6mrJwacCYGCq N70XRItGLnkgP+XibHVL8qumrOeMnhHuwGkoG3MhHt2QlPEpi09qxkJnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjjLi6ome+6J/c1O/CrYHUAdFNhMB8GA1UdIwQY MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt ZDc5Y2UyZGVlYTcwLzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2HUgVFE BOvetkCxpRohBqQ7QdUBIyTFxYGe9dGYHUJhmEbSy1Cq8/mD+NBb7+DG9Z3dE3oG /QO3R/Oqqgjb6azRDpdJ5BIVr991w+AB1I+OBAPKhqftE2vNq4pNnWGGnxSuMXlU wmBH8tjX6gpnLYuRzxdoXPYxuFXpPDk6+IOngv4B5KWSYcKqLi5JDDPk6dYpdmGS oPavh6V46WgpSg52Mt213nkBsxnO+iQ01WLXwafzoY3FFT+QE4WcEnIG220DRKgx TN0yLAgkBeG0eYCse1e+h4MWU3bWgltXzriG8XM9zx61GlTlkLnhExIM4+ubCbUR g0p/+GqmSNEG1A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:24:30 2025 by rpki-client