This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json) Hash identifier: J72sq7t2HcZYipsYHoitonJhoZlREbfNAS8EXuzijZ8= Subject key identifier: 45:99:EC:FD:94:F2:AF:41:11:61:5C:4C:4F:75:5C:31:42:5F:AE:F8 Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31 Certificate serial: 019B22512B0CE3C0A76756A33B1A7B328820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 14:01:43 +0000 Manifest this update: Mon 15 Dec 2025 14:01:43 +0000 Manifest next update: Tue 16 Dec 2025 14:01:43 +0000 Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: /Kn9omfdhImUJx2HI0amzi8KlXJaURWWreJjeSDaJzk=) 2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=) 3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:2b:0c:e3:c0:a7:67:56:a3:3b:1a:7b:32:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31 Validity Not Before: Dec 15 14:01:43 2025 GMT Not After : Dec 16 14:01:43 2025 GMT Subject: CN=4599ecfd94f2af4111615c4c4f755c31425faef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:f8:4a:4d:af:f0:18:7f:13:aa:d7:3a:d9: 9e:0e:27:9d:f5:64:04:59:2e:1d:be:90:f9:65:4e: 43:b7:79:e4:13:fd:b7:f8:29:21:e8:76:d6:20:07: ee:00:fc:56:d1:64:33:72:33:54:12:af:7c:bd:b9: ef:6f:aa:93:fb:63:56:3e:81:c1:27:cf:1d:03:8b: 9a:eb:00:46:5e:ca:02:4f:f7:8b:f6:b0:1b:2f:18: 41:2f:ef:93:e1:bc:db:7e:91:dd:ae:d1:34:79:a7: 71:c0:e1:51:09:82:53:bc:3b:9c:30:e5:3d:b8:45: 02:94:5c:02:d1:05:8b:fe:98:2f:75:c1:fa:0d:58: e5:b2:b5:b4:4f:f8:37:da:c5:fe:ee:80:3f:b0:e4: 19:1a:88:ae:91:d2:93:24:52:f5:b8:a6:57:75:c1: b2:55:73:06:3a:39:02:ff:8b:4c:ad:f3:7e:9d:19: 2c:d7:1a:6c:49:ba:23:4e:19:c2:48:0e:d7:b7:b0: fd:90:31:8b:48:02:b5:fc:21:06:54:1d:8c:96:94: 14:9e:59:8c:4a:e9:d2:4d:9a:5d:8a:ea:1d:05:f7: 98:cf:be:32:5e:63:69:11:39:70:dc:f3:15:d9:68: 51:bb:23:a0:b8:42:bd:78:1f:12:c6:6a:a2:45:7a: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:EC:FD:94:F2:AF:41:11:61:5C:4C:4F:75:5C:31:42:5F:AE:F8 X509v3 Authority Key Identifier: keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8f:8c:cc:65:82:95:a9:ea:45:e4:a2:11:3a:56:b3:b9:6e: f0:ae:e5:c3:d3:f0:28:53:fc:47:cc:9a:88:2c:92:34:1b:67: 97:24:db:72:e5:39:16:9e:cc:fb:ba:0b:7e:45:b4:fa:82:d8: 18:b6:fc:50:57:b7:86:e3:5e:36:e7:48:cc:07:31:60:5d:dc: 7d:43:80:87:70:49:6c:87:b4:36:c5:29:54:0c:44:b9:c9:98: 73:27:00:17:4d:33:6e:c8:e7:87:96:49:d7:6e:e6:46:03:fd: f2:e9:9a:4d:5c:97:48:96:8e:5e:1f:ee:bc:cd:8c:e1:79:90: 93:84:f9:b1:dc:b3:24:dd:be:38:2b:e0:da:5d:89:eb:a8:59: 47:c9:70:2a:e8:9b:d4:3a:c4:ae:5b:3c:1e:4f:97:42:bb:83: 42:ec:2f:f3:6b:01:91:2f:be:9e:e8:59:ee:94:f4:11:8d:08: 95:fe:4c:80:b4:85:6a:6e:1e:4e:a3:8d:3b:d9:bb:12:44:7e: 3f:1b:14:b1:47:a0:1e:93:0c:d9:a5:88:6a:bf:80:5c:da:8e: ef:5f:37:d6:1a:33:94:ef:90:b5:2d:ef:57:66:3b:54:4a:61: 82:5b:18:1e:9d:20:c8:c3:2c:3e:3f:08:2a:a2:d8:81:ba:8d: f7:4c:99:14 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsiUSsM48CnZ1ajOxp7MoggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3 ODFkMzEwHhcNMjUxMjE1MTQwMTQzWhcNMjUxMjE2MTQwMTQzWjAzMTEwLwYDVQQD Eyg0NTk5ZWNmZDk0ZjJhZjQxMTE2MTVjNGM0Zjc1NWMzMTQyNWZhZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8T4Sk2v8Bh/E6rXOtmeDied9WQE WS4dvpD5ZU5Dt3nkE/23+Ckh6HbWIAfuAPxW0WQzcjNUEq98vbnvb6qT+2NWPoHB J88dA4ua6wBGXsoCT/eL9rAbLxhBL++T4bzbfpHdrtE0eadxwOFRCYJTvDucMOU9 uEUClFwC0QWL/pgvdcH6DVjlsrW0T/g32sX+7oA/sOQZGoiukdKTJFL1uKZXdcGy VXMGOjkC/4tMrfN+nRks1xpsSbojThnCSA7Xt7D9kDGLSAK1/CEGVB2MlpQUnlmM SunSTZpdiuodBfeYz74yXmNpETlw3PMV2WhRuyOguEK9eB8SxmqiRXoRXwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEWZ7P2U8q9BEWFcTE91XDFCX674MB8GA1UdIwQY MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz LWViN2JmMmJkZGQwOC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2E4YTM2NC03NDMwLTRkYTYtOGY0My1lYjdiZjJiZGRk MDgvMS8xLVhfZXl0c3lZVE5EaDg4SkhRTGdjVHQ0SFRFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4+M zGWClanqReSiETpWs7lu8K7lw9PwKFP8R8yaiCySNBtnlyTbcuU5Fp7M+7oLfkW0 +oLYGLb8UFe3huNeNudIzAcxYF3cfUOAh3BJbIe0NsUpVAxEucmYcycAF00zbsjn h5ZJ127mRgP98umaTVyXSJaOXh/uvM2M4XmQk4T5sdyzJN2+OCvg2l2J66hZR8lw Kuib1DrErls8Hk+XQruDQuwv82sBkS++nuhZ7pT0EY0Ilf5MgLSFam4eTqONO9m7 EkR+PxsUsUegHpMM2aWIar+AXNqO71831hozlO+QtS3vV2Y7VEphglsYHp0gyMMs Pj8IKqLYgbqN90yZFA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:29:58 2025 by rpki-client