This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json) Hash identifier: JqEDhg7Quk13fUecbWA88TJb2CfKxFafjaz72gxdBt4= Subject key identifier: C6:F4:08:96:F4:70:48:29:4D:5F:53:D2:81:D2:33:36:9E:74:FA:AC Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd Certificate serial: 019B59AD09A7C908AA7B4DA678FC7F55861D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 08:01:10 +0000 Manifest this update: Fri 26 Dec 2025 08:01:10 +0000 Manifest next update: Sat 27 Dec 2025 08:01:10 +0000 Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: aQkmr31+Qxn1KWNRUiiXLRhmrcSdeX1q5MFhR4erze4=) 2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:09:a7:c9:08:aa:7b:4d:a6:78:fc:7f:55:86:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd Validity Not Before: Dec 26 08:01:10 2025 GMT Not After : Dec 27 08:01:10 2025 GMT Subject: CN=c6f40896f47048294d5f53d281d233369e74faac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:e1:73:bd:3e:f5:3e:0a:05:01:e3:19:6f: 3e:fe:ef:c7:38:30:fb:b9:1b:95:cd:f5:c0:42:be: 72:7c:03:6b:d3:50:2c:94:f7:6a:8c:e4:3f:4c:ad: d2:84:ef:33:20:8a:09:5a:d0:76:bf:93:c6:23:9f: 95:4e:51:6d:90:18:4b:8a:3d:c9:86:23:67:bc:05: 7c:82:94:36:f6:cd:9c:0a:be:cb:d5:f2:1b:16:08: e4:5a:40:d7:03:bf:50:9d:63:47:d7:11:1f:75:23: 3c:ee:6c:8e:62:c3:4c:7a:d8:76:db:40:35:d6:8e: 7a:9d:e2:3e:86:42:26:e6:a7:03:d7:fe:1c:75:4b: 3d:18:7b:1d:a5:6e:61:92:c7:74:3f:fc:56:30:22: 8c:05:64:e0:e5:12:7a:f7:05:59:08:ac:78:59:b1: 94:c0:ba:8c:6c:0c:f5:67:56:e6:43:b6:25:7c:1c: 36:b4:aa:16:20:29:10:57:95:cc:38:32:cf:65:f9: 57:64:06:7a:db:7c:7a:9e:6f:0e:2b:a2:8d:69:29: 31:ee:be:ad:0a:26:bd:fb:2d:cc:cd:a9:51:3b:d7: 95:64:4f:ed:6a:7b:0f:54:85:21:7c:86:22:60:90: c2:12:c6:fb:79:17:9f:b4:f9:dd:cb:74:83:13:ff: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:08:96:F4:70:48:29:4D:5F:53:D2:81:D2:33:36:9E:74:FA:AC X509v3 Authority Key Identifier: keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:80:5d:9e:c9:97:cb:14:77:27:f5:c5:f8:89:d7:b1:85:35: 5f:66:42:53:81:60:19:a2:b5:04:0d:68:79:e6:01:a0:78:85: 35:1b:f4:04:a7:bf:5e:13:cd:58:9e:62:fc:a3:e6:43:8f:e0: 0b:3a:42:40:ea:94:f3:10:0e:7a:4f:e0:17:80:57:d4:4c:ef: d0:a8:ec:8e:61:25:6c:e3:cc:fb:98:74:78:19:89:6d:1b:ff: 2d:fa:fa:6a:95:e7:30:4e:56:84:ee:e1:a5:e0:1c:b7:da:92: 85:06:07:36:5f:85:72:8b:f7:fe:1e:8a:ff:47:9c:3d:1d:7e: 2b:20:16:c2:2d:60:c2:47:56:3a:1d:7a:a9:39:e9:cb:a0:d3: 0b:5a:33:5f:c1:aa:41:89:af:08:41:67:30:17:d3:48:ef:9f: e3:bf:f2:2e:d4:c0:31:86:81:d7:bf:ad:25:51:1a:9b:14:b6: bf:16:40:ac:89:d2:e8:1a:40:e2:6d:ab:ab:f0:9e:4d:e5:c6: 89:21:a6:d7:eb:a7:39:d6:ba:5f:76:14:3a:a7:bf:47:e4:d4: d1:fa:0d:ba:cc:1d:c2:8a:93:8d:27:e5:ac:1b:74:5a:3c:0a: 06:2f:28:a1:6e:f9:03:7e:4e:5f:94:aa:3c:4d:3e:ec:11:a4: df:f0:60:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQmnyQiqe02mePx/VYYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MThiZjYwZDFlZjRjNzZjZDA3YTUzZjdlYzY4Mzc3MWFh YjVjZmQwHhcNMjUxMjI2MDgwMTEwWhcNMjUxMjI3MDgwMTEwWjAzMTEwLwYDVQQD EyhjNmY0MDg5NmY0NzA0ODI5NGQ1ZjUzZDI4MWQyMzMzNjllNzRmYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4onhc70+9T4KBQHjGW8+/u/HODD7 uRuVzfXAQr5yfANr01AslPdqjOQ/TK3ShO8zIIoJWtB2v5PGI5+VTlFtkBhLij3J hiNnvAV8gpQ29s2cCr7L1fIbFgjkWkDXA79QnWNH1xEfdSM87myOYsNMeth220A1 1o56neI+hkIm5qcD1/4cdUs9GHsdpW5hksd0P/xWMCKMBWTg5RJ69wVZCKx4WbGU wLqMbAz1Z1bmQ7YlfBw2tKoWICkQV5XMODLPZflXZAZ623x6nm8OK6KNaSkx7r6t Cia9+y3MzalRO9eVZE/tansPVIUhfIYiYJDCEsb7eReftPndy3SDE/9sWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb0CJb0cEgpTV9T0oHSMzaedPqsMB8GA1UdIwQY MBaAFNUYv2DR70x2zQelP37Gg3caq1z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWIt MjQ0ODhiMjdjYTQxLzEvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWItMjQ0ODhiMjdjYTQx LzEvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoBdnsmX yxR3J/XF+InXsYU1X2ZCU4FgGaK1BA1oeeYBoHiFNRv0BKe/XhPNWJ5i/KPmQ4/g CzpCQOqU8xAOek/gF4BX1Ezv0KjsjmElbOPM+5h0eBmJbRv/Lfr6apXnME5WhO7h peAct9qShQYHNl+Fcov3/h6K/0ecPR1+KyAWwi1gwkdWOh16qTnpy6DTC1ozX8Gq QYmvCEFnMBfTSO+f47/yLtTAMYaB17+tJVEamxS2vxZArInS6BpA4m2rq/CeTeXG iSGm1+unOda6X3YUOqe/R+TU0foNuswdwoqTjSflrBt0WjwKBi8ooW75A35OX5Sq PE0+7BGk3/BgTg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:48 2025 by rpki-client