This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json) Hash identifier: 8SbGczoXuyfYmS1kvUGFXHtll7M4s/GMngXLECiX9pg= Subject key identifier: 94:B1:F6:32:20:62:3E:2B:A9:82:65:3E:9C:77:C6:A5:96:5C:55:F1 Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d Certificate serial: 019B59E4640D34ACB95E11DDBE0E4FE95DA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:01:38 +0000 Manifest this update: Fri 26 Dec 2025 09:01:38 +0000 Manifest next update: Sat 27 Dec 2025 09:01:38 +0000 Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: cSCmvul++IJeYXdBxiTxFAlsuBzAMWGVTjSII4OK4Sc=) 2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=) 3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:64:0d:34:ac:b9:5e:11:dd:be:0e:4f:e9:5d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d Validity Not Before: Dec 26 09:01:38 2025 GMT Not After : Dec 27 09:01:38 2025 GMT Subject: CN=94b1f63220623e2ba982653e9c77c6a5965c55f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:77:ef:2f:e2:ab:81:57:43:0d:db:d2:86: fc:ac:cf:6d:9c:bd:f4:ff:a0:33:3e:f1:be:d0:04: d1:f9:b4:23:fd:91:49:ae:4a:80:44:c5:11:89:e8: 0c:02:1c:6a:ca:0f:58:7c:78:fb:2a:56:f9:d3:4d: f6:c3:2e:46:45:74:64:aa:27:db:e8:d3:bc:28:ae: 74:5e:6f:3c:d3:4c:a1:03:83:d8:66:ae:05:0a:7d: 65:fd:22:4a:39:c5:a0:3d:dc:15:7c:15:a0:4b:ce: e8:5c:db:98:f4:21:b9:6e:bd:1d:68:0c:35:e9:d3: f2:48:69:d1:10:b2:7b:9b:17:29:58:1c:72:ce:2b: b9:13:d5:40:10:70:67:30:5a:c3:4d:d5:6b:4a:b4: a5:24:0a:c3:8c:c0:16:43:ae:f1:c6:b1:66:74:78: 22:81:b7:97:81:41:c8:f3:0d:7f:69:23:38:3c:ec: ec:c2:6c:da:85:18:93:f0:8a:41:ab:b7:e3:af:be: 58:27:30:f0:43:bc:44:2f:61:72:e0:3e:f5:f2:6b: a8:34:a9:fa:d6:13:b1:5d:1c:41:ae:d9:c5:54:65: 64:3c:9e:b3:fe:56:45:a6:9f:8e:a0:33:ae:f3:cb: 03:67:46:3e:10:a2:81:a8:ac:2b:b8:3d:e8:1e:11: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:F6:32:20:62:3E:2B:A9:82:65:3E:9C:77:C6:A5:96:5C:55:F1 X509v3 Authority Key Identifier: keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:af:56:5d:c5:75:a8:09:6b:47:77:5f:c6:5b:0c:d7:53:3a: 0f:3b:ab:7a:ba:62:18:36:1b:e4:d1:08:02:45:28:ea:67:12: f1:2e:0f:fb:b0:58:16:72:f8:4a:ce:82:26:92:be:c3:98:bf: b7:37:07:1e:5a:33:b1:52:8b:f9:bd:db:49:ba:c5:d6:45:b9: b6:cc:8f:f2:96:8e:86:b5:f6:f5:24:d9:41:fc:a5:09:4f:23: af:04:e4:a8:81:8b:42:a0:8a:ab:64:a6:9e:4f:89:ba:03:4b: 2e:6f:d0:b2:e8:5d:09:cb:1b:b3:f1:42:0f:04:67:14:ec:7b: 37:fb:70:73:ce:df:56:4d:37:59:01:97:99:e7:03:82:03:f3: 41:7a:4b:45:10:b0:ac:76:2f:bc:f4:82:dd:a8:96:72:2d:cf: c8:3c:55:86:28:9c:be:f8:13:de:11:08:70:91:01:8f:f4:f8: 25:13:69:47:a3:53:23:6d:29:99:48:f7:a8:08:ab:26:a9:45: 89:bf:86:ac:af:52:f7:ce:c6:32:46:a4:ee:9a:48:d8:3d:dd: ac:31:31:4f:27:fb:ad:56:fa:94:b4:eb:f9:94:17:74:63:30: 02:9f:98:93:04:3f:04:6d:71:6f:dc:28:aa:e0:8b:a9:a8:18: 91:53:ba:e8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZ5GQNNKy5XhHdvg5P6V2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZWQ5NDM5YTRlNGIyZDMyZTRiZWU2NDdmM2I2MTA1NWIx NjllM2QwHhcNMjUxMjI2MDkwMTM4WhcNMjUxMjI3MDkwMTM4WjAzMTEwLwYDVQQD Eyg5NGIxZjYzMjIwNjIzZTJiYTk4MjY1M2U5Yzc3YzZhNTk2NWM1NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ul37y/iq4FXQw3b0ob8rM9tnL30 /6AzPvG+0ATR+bQj/ZFJrkqARMURiegMAhxqyg9YfHj7Klb50032wy5GRXRkqifb 6NO8KK50Xm8800yhA4PYZq4FCn1l/SJKOcWgPdwVfBWgS87oXNuY9CG5br0daAw1 6dPySGnRELJ7mxcpWBxyziu5E9VAEHBnMFrDTdVrSrSlJArDjMAWQ67xxrFmdHgi gbeXgUHI8w1/aSM4POzswmzahRiT8IpBq7fjr75YJzDwQ7xEL2Fy4D718muoNKn6 1hOxXRxBrtnFVGVkPJ6z/lZFpp+OoDOu88sDZ0Y+EKKBqKwruD3oHhHtpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJSx9jIgYj4rqYJlPpx3xqWWXFXxMB8GA1UdIwQY MBaAFPvtlDmk5LLTLkvuZH87YQVbFp49MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0tMlVPYVRrc3RNdVMtNWtmenRoQlZzV25qMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZDA3YzA3LWI5NjItNGY0Yi1hM2Ew LWI1MWIzNWRlZjZkZS8xLzEtLTJVT2FUa3N0TXVTLTVrZnp0aEJWc1duajAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzkwL2QwN2MwNy1iOTYyLTRmNGItYTNhMC1iNTFiMzVkZWY2 ZGUvMS8xLS0yVU9hVGtzdE11Uy01a2Z6dGhCVnNXbmowLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa9W XcV1qAlrR3dfxlsM11M6DzurerpiGDYb5NEIAkUo6mcS8S4P+7BYFnL4Ss6CJpK+ w5i/tzcHHlozsVKL+b3bSbrF1kW5tsyP8paOhrX29STZQfylCU8jrwTkqIGLQqCK q2Smnk+JugNLLm/QsuhdCcsbs/FCDwRnFOx7N/twc87fVk03WQGXmecDggPzQXpL RRCwrHYvvPSC3aiWci3PyDxVhiicvvgT3hEIcJEBj/T4JRNpR6NTI20pmUj3qAir JqlFib+GrK9S987GMkak7ppI2D3drDExTyf7rVb6lLTr+ZQXdGMwAp+YkwQ/BG1x b9woquCLqagYkVO66A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:43 2025 by rpki-client