This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json) Hash identifier: xmcADdlZsaAXXlWYXHe6pPmzs/penF5Qn6f/PseDBW8= Subject key identifier: 79:6B:DC:A0:F5:E6:B2:6C:79:D3:86:7F:DD:BB:F9:DE:58:51:4F:E9 Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Certificate serial: 019B58D19F9BE05D1F4A827B9D22C08AA47C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft Manifest number: 0167 Signing time: Fri 26 Dec 2025 04:01:31 +0000 Manifest this update: Fri 26 Dec 2025 04:01:31 +0000 Manifest next update: Sat 27 Dec 2025 04:01:31 +0000 Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: FgcdRNQH5ltB3gYHqb6DgtBU0ngpSLGJfYx3tT9UrsQ=) 2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:9f:9b:e0:5d:1f:4a:82:7b:9d:22:c0:8a:a4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca Validity Not Before: Dec 26 04:01:31 2025 GMT Not After : Dec 27 04:01:31 2025 GMT Subject: CN=796bdca0f5e6b26c79d3867fddbbf9de58514fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ab:f1:2e:07:09:d5:7a:86:46:9a:d8:d3:25: 62:5d:79:10:6b:af:70:3f:b6:a2:88:c9:bb:f5:08: 24:8b:30:3a:04:ef:09:d5:73:77:77:e9:c9:40:87: 2d:1c:c1:94:6d:2c:77:37:9c:aa:63:83:e2:d6:e9: 2e:e9:72:3d:c3:d1:eb:63:cd:86:78:b4:42:28:fa: 1e:97:fe:09:2f:b6:7a:e0:a7:48:cf:63:af:37:6a: f0:a2:6a:9d:65:9d:2e:c4:fd:e8:3a:3e:4b:64:aa: 1b:84:69:50:dc:23:12:61:3b:6e:78:ab:22:93:05: dd:3f:73:8e:c0:8f:8f:2b:22:45:27:53:dc:be:98: dd:db:7c:73:42:ef:85:e1:6f:96:88:a3:79:2c:ec: fa:be:75:a9:8d:b3:57:95:8f:2b:33:6d:c3:b1:ff: a6:b4:5f:8a:4b:31:91:36:4a:ad:83:48:69:f5:22: 48:8d:4e:d4:35:46:9d:d5:0d:60:48:83:10:1a:9c: 41:03:d4:35:47:a2:6f:a2:d9:03:fc:6c:88:65:7f: a3:85:ac:a0:90:8b:e0:ce:db:fc:ee:48:da:e7:2a: 4e:41:4e:41:42:d3:f8:cb:f7:b4:66:4d:6e:dd:b1: 0e:bf:e2:19:09:43:5f:15:df:39:dd:7a:a3:28:89: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:DC:A0:F5:E6:B2:6C:79:D3:86:7F:DD:BB:F9:DE:58:51:4F:E9 X509v3 Authority Key Identifier: keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8e:97:1d:2e:ad:c6:7f:ed:6e:1e:2e:de:5c:91:5e:4d:ff: 36:40:83:05:e2:c7:6e:54:ef:95:c8:94:59:9f:14:b5:e0:9f: 0b:b6:c6:31:e9:3c:36:94:8e:a0:2d:38:38:23:b4:b5:71:d1: 0b:bb:20:6f:52:6e:6d:5a:ec:f3:c5:12:11:5b:1a:11:d2:98: e3:86:e7:65:26:be:62:c0:9c:37:4f:3f:56:19:4c:80:c8:41: 46:57:1e:4c:30:9c:e2:f6:64:3b:82:9a:f3:b4:c7:38:d2:9b: be:ae:f9:54:dd:be:2f:eb:23:a5:d0:d9:aa:2b:dd:b2:82:6a: 59:ac:94:ff:b5:69:b5:c8:a8:64:21:11:27:0b:43:43:ea:60: df:65:63:92:68:d9:af:9f:d5:30:aa:b3:54:f5:ef:4c:3c:f7: 65:d0:17:d3:1a:24:b5:21:d0:af:70:3b:4b:c7:94:b2:24:75: ed:1c:0e:09:12:e7:2c:b8:1e:8c:27:74:9a:7a:12:97:f0:d0: da:b2:0e:8c:e2:91:a2:c6:2f:ac:0b:82:e6:06:17:61:9c:06: cd:46:a7:2a:0e:63:2a:b1:e3:38:20:39:d9:36:94:45:0a:23: 0c:bc:d7:1d:4a:99:86:7a:c2:00:ab:50:fa:cf:71:46:89:3a: a7:68:4d:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Z+b4F0fSoJ7nSLAiqR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx ZmRlY2EwHhcNMjUxMjI2MDQwMTMxWhcNMjUxMjI3MDQwMTMxWjAzMTEwLwYDVQQD Eyg3OTZiZGNhMGY1ZTZiMjZjNzlkMzg2N2ZkZGJiZjlkZTU4NTE0ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66vxLgcJ1XqGRprY0yViXXkQa69w P7aiiMm79QgkizA6BO8J1XN3d+nJQIctHMGUbSx3N5yqY4Pi1uku6XI9w9HrY82G eLRCKPoel/4JL7Z64KdIz2OvN2rwomqdZZ0uxP3oOj5LZKobhGlQ3CMSYTtueKsi kwXdP3OOwI+PKyJFJ1Pcvpjd23xzQu+F4W+WiKN5LOz6vnWpjbNXlY8rM23Dsf+m tF+KSzGRNkqtg0hp9SJIjU7UNUad1Q1gSIMQGpxBA9Q1R6JvotkD/GyIZX+jhayg kIvgztv87kja5ypOQU5BQtP4y/e0Zk1u3bEOv+IZCUNfFd853XqjKIl/VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlr3KD15rJsedOGf927+d5YUU/pMB8GA1UdIwQY MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY6XHS6t xn/tbh4u3lyRXk3/NkCDBeLHblTvlciUWZ8UteCfC7bGMek8NpSOoC04OCO0tXHR C7sgb1JubVrs88USEVsaEdKY44bnZSa+YsCcN08/VhlMgMhBRlceTDCc4vZkO4Ka 87THONKbvq75VN2+L+sjpdDZqivdsoJqWayU/7VptcioZCERJwtDQ+pg32VjkmjZ r5/VMKqzVPXvTDz3ZdAX0xoktSHQr3A7S8eUsiR17RwOCRLnLLgejCd0mnoSl/DQ 2rIOjOKRosYvrAuC5gYXYZwGzUanKg5jKrHjOCA52TaURQojDLzXHUqZhnrCAKtQ +s9xRok6p2hNEw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:22 2025 by rpki-client