This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json) Hash identifier: jxPjnqawapEyutyCuB4Soks7+9CUj9hVE2gvo+cE1xU= Subject key identifier: 58:00:41:F6:EE:CC:D4:08:1E:64:91:6F:D2:4A:BD:9D:3D:13:9E:90 Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Certificate serial: 019B5A51C854407EF63725A6C04C55485835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 11:01:07 +0000 Manifest this update: Fri 26 Dec 2025 11:01:07 +0000 Manifest next update: Sat 27 Dec 2025 11:01:07 +0000 Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=) 2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=) 3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: gcgVctecBqFBzSeZrnvHUkq6wzYdG+3VrnvEDYlechc=) 4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c8:54:40:7e:f6:37:25:a6:c0:4c:55:48:58:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Validity Not Before: Dec 26 11:01:07 2025 GMT Not After : Dec 27 11:01:07 2025 GMT Subject: CN=580041f6eeccd4081e64916fd24abd9d3d139e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:7c:14:78:b6:b6:ab:1a:07:1e:ae:27:e8: 7c:19:e7:01:9b:58:f5:e5:23:61:cf:53:ea:ba:67: 27:54:0b:8d:0b:58:2b:be:84:2d:71:ed:6a:88:62: 21:b7:1e:39:2b:63:cb:7c:10:9f:3c:eb:05:f9:85: 04:89:5e:e0:16:dc:0e:b0:32:16:eb:c3:e1:cd:d6: 9c:17:ed:ad:8c:06:f1:a4:72:c5:39:2d:75:09:58: 3f:e5:31:c3:8f:25:49:05:15:81:19:a4:00:9d:cd: f4:cf:1b:25:a0:63:3f:37:17:28:fc:a2:fd:0d:be: 40:e3:78:84:d9:aa:a5:e8:91:a7:32:4c:30:db:28: 3a:5d:8e:64:88:44:aa:d9:90:39:a1:e4:de:cb:72: 4a:17:0c:d3:ca:44:ca:70:51:e8:0e:ef:a1:ac:5b: 62:b0:62:ed:1a:1e:0b:93:34:7e:25:b9:8a:9c:5f: e8:03:2e:a6:35:65:16:03:6f:e6:da:01:eb:ba:af: bc:b1:66:8c:1c:fc:46:32:e9:e6:aa:63:d3:70:92: a7:b5:82:3d:96:d7:58:6c:9f:b7:a5:1d:a2:da:47: e8:0d:eb:b4:a8:5c:1a:54:2c:71:27:e0:02:fa:80: 0a:14:71:be:50:06:0d:9c:4b:d1:29:00:32:5e:23: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:00:41:F6:EE:CC:D4:08:1E:64:91:6F:D2:4A:BD:9D:3D:13:9E:90 X509v3 Authority Key Identifier: keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:27:fa:10:ec:0e:6d:06:13:34:7a:a6:1f:60:95:37:ac:b9: b8:4a:f1:21:58:ae:13:d7:3d:51:0d:8d:a5:de:d4:27:43:21: b2:14:4c:54:3c:6f:19:40:44:95:7d:54:88:e3:84:b8:54:f7: 82:12:48:14:ca:2e:cf:d2:70:48:f1:c8:a5:f8:e6:93:f0:6d: b8:f4:f0:46:38:06:b2:1b:31:98:44:1f:bd:51:27:10:b9:8d: 69:85:43:c5:a4:ee:f0:9b:71:a4:54:a9:6e:bf:07:46:63:d8: da:1a:b3:4c:09:65:50:12:1e:a2:b4:64:ad:4e:32:32:21:62: 26:c6:fb:fc:f8:01:41:2a:5f:30:4c:b4:4d:59:98:f8:05:02: 48:7b:ba:11:09:ef:cf:eb:e9:d5:13:e0:1b:68:6f:7e:bd:5a: 91:55:07:d8:5a:c3:85:3c:df:e0:d5:5e:a9:7e:72:3d:22:11: 68:3e:aa:cf:5b:da:67:b9:1f:29:cf:de:3a:2a:80:43:ba:52: b2:0f:df:04:2f:1b:10:d2:ae:4e:fd:bc:96:d7:86:63:9a:b4: 55:2c:69:8f:53:23:af:7c:43:e3:5c:23:33:92:a0:f7:ec:71: 96:e1:c7:a8:18:71:a8:29:87:4d:a3:21:a8:61:05:b1:97:4c: fe:87:e8:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUchUQH72NyWmwExVSFg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk ZGYyM2QwHhcNMjUxMjI2MTEwMTA3WhcNMjUxMjI3MTEwMTA3WjAzMTEwLwYDVQQD Eyg1ODAwNDFmNmVlY2NkNDA4MWU2NDkxNmZkMjRhYmQ5ZDNkMTM5ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIt8FHi2tqsaBx6uJ+h8GecBm1j1 5SNhz1PqumcnVAuNC1grvoQtce1qiGIhtx45K2PLfBCfPOsF+YUEiV7gFtwOsDIW 68PhzdacF+2tjAbxpHLFOS11CVg/5THDjyVJBRWBGaQAnc30zxsloGM/Nxco/KL9 Db5A43iE2aql6JGnMkww2yg6XY5kiESq2ZA5oeTey3JKFwzTykTKcFHoDu+hrFti sGLtGh4LkzR+JbmKnF/oAy6mNWUWA2/m2gHruq+8sWaMHPxGMunmqmPTcJKntYI9 ltdYbJ+3pR2i2kfoDeu0qFwaVCxxJ+AC+oAKFHG+UAYNnEvRKQAyXiPdTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgAQfbuzNQIHmSRb9JKvZ09E56QMB8GA1UdIwQY MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct M2M1ZTE3NDRhY2RkLzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABif6EOwO bQYTNHqmH2CVN6y5uErxIViuE9c9UQ2Npd7UJ0MhshRMVDxvGUBElX1UiOOEuFT3 ghJIFMouz9JwSPHIpfjmk/BtuPTwRjgGshsxmEQfvVEnELmNaYVDxaTu8JtxpFSp br8HRmPY2hqzTAllUBIeorRkrU4yMiFiJsb7/PgBQSpfMEy0TVmY+AUCSHu6EQnv z+vp1RPgG2hvfr1akVUH2FrDhTzf4NVeqX5yPSIRaD6qz1vaZ7kfKc/eOiqAQ7pS sg/fBC8bENKuTv28lteGY5q0VSxpj1Mjr3xD41wjM5Kg9+xxluHHqBhxqCmHTaMh qGEFsZdM/ofoXg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:42 2025 by rpki-client