This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json) Hash identifier: EWvpYVB5jmo7tT+qn3Rk7sxdRk48eFcle44lHP5X4u0= Subject key identifier: 7B:20:E8:D0:16:0F:89:69:B4:A3:39:69:E9:3E:5C:29:BF:A0:A4:D6 Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2 Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2 Certificate serial: 019B258839C4413789CF7A3A00E4E64FDFE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 05:00:43 +0000 Manifest this update: Tue 16 Dec 2025 05:00:43 +0000 Manifest next update: Wed 17 Dec 2025 05:00:43 +0000 Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: V7hEDToKGAEjKaRAjG5wzZ2l8zqCBb34ceQEerDw0AQ=) 2: k5WIi1Ejnq2UPqn3UpkS8V7jf1M.roa (hash: 0oCwakpSZkb6NAb4lGAZ4tdDGnYcuoaTcDYTLBa8fHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:39:c4:41:37:89:cf:7a:3a:00:e4:e6:4f:df:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2 Validity Not Before: Dec 16 05:00:43 2025 GMT Not After : Dec 17 05:00:43 2025 GMT Subject: CN=7b20e8d0160f8969b4a33969e93e5c29bfa0a4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:d9:25:57:5e:d5:67:95:ad:1d:da:d7:b2: f9:a6:99:36:4f:fe:61:61:c3:2a:1d:6f:1d:d5:1c: 82:b1:96:7f:6c:69:97:56:8d:93:f8:d7:f0:84:3e: 61:d2:be:26:15:52:b9:bd:83:61:fd:32:4e:3c:51: 4a:9f:81:5d:2b:41:47:d1:32:0d:95:b7:57:20:71: 7d:64:1b:d4:b3:84:60:48:eb:63:2b:ea:12:ab:7a: 89:99:59:cf:72:6d:10:1e:24:b2:cc:e7:56:b6:3d: 09:20:81:87:15:54:ad:14:a5:5b:f9:61:30:e9:e6: fd:e1:f0:b1:2e:dc:22:a8:72:89:5a:c9:e7:62:e0: 0e:9b:dc:59:b4:58:a3:43:08:2d:b3:95:b9:13:24: a2:e3:37:00:3b:24:fd:91:55:42:d5:15:9d:59:fb: c2:07:13:07:cf:7f:a5:f9:5e:27:01:00:23:5b:2d: 1e:43:73:9d:c4:8a:6d:f6:0b:67:15:13:ca:56:ac: 33:d8:ff:d7:5e:b4:95:3f:eb:f3:5d:88:4e:85:7b: dd:37:21:a3:fe:3b:06:93:1b:14:a9:ad:76:e2:b3: 64:88:f5:c9:c0:29:ec:4f:a6:3e:de:2f:e3:55:f5: 34:a0:34:e4:40:ce:e9:4a:f7:8a:b2:37:85:aa:c7: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:20:E8:D0:16:0F:89:69:B4:A3:39:69:E9:3E:5C:29:BF:A0:A4:D6 X509v3 Authority Key Identifier: keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:51:5d:c7:e5:10:d4:3f:1b:db:ae:5c:ee:30:e4:e2:5d:54: a3:7b:83:92:24:8b:56:d5:dd:d0:03:72:1f:45:cf:5a:bb:c3: 67:0d:5c:e5:cb:40:1b:ab:32:49:de:d5:ba:c8:34:23:c6:7c: 19:06:9c:f7:6f:20:b9:00:1c:bc:fd:61:1e:80:4b:d7:36:65: bf:94:12:2e:7f:8e:81:24:eb:5e:2d:78:a2:a3:57:5e:ac:88: 3d:95:84:20:a9:6b:5b:64:69:ea:b3:00:29:24:4c:ff:12:d5: aa:a1:92:e9:4c:6d:cd:ab:4f:7e:f0:65:ce:c2:6a:dd:c6:b1: e2:18:4b:da:cf:22:83:96:3e:e1:a9:2f:b0:e0:44:af:33:6e: a1:4b:86:f4:65:7c:10:0f:9b:31:d6:9d:99:df:9a:6d:4e:87: 3d:6c:96:89:10:b3:da:c0:ae:82:39:e0:49:4d:d9:1c:1b:04: e9:9b:ea:74:9d:84:ac:8b:62:8e:46:18:e0:a3:9f:82:73:68: 2a:95:a4:4e:84:91:d1:de:d6:5e:ff:5a:e5:9a:87:e0:68:3c: e0:f4:33:0d:c7:01:75:91:0f:1f:30:d9:63:32:10:63:15:52: df:16:2d:f8:cd:d2:7c:8e:e9:25:2a:a9:30:6f:5e:1d:b0:0f: ec:28:8d:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDnEQTeJz3o6AOTmT9/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTIzZGY0ZGFlOTE5NTBjZjAwZDIzNWZlMzllMDBlZWEz ODE2ZDIwHhcNMjUxMjE2MDUwMDQzWhcNMjUxMjE3MDUwMDQzWjAzMTEwLwYDVQQD Eyg3YjIwZThkMDE2MGY4OTY5YjRhMzM5NjllOTNlNWMyOWJmYTBhNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r3ZJVde1WeVrR3a17L5ppk2T/5h YcMqHW8d1RyCsZZ/bGmXVo2T+NfwhD5h0r4mFVK5vYNh/TJOPFFKn4FdK0FH0TIN lbdXIHF9ZBvUs4RgSOtjK+oSq3qJmVnPcm0QHiSyzOdWtj0JIIGHFVStFKVb+WEw 6eb94fCxLtwiqHKJWsnnYuAOm9xZtFijQwgts5W5EySi4zcAOyT9kVVC1RWdWfvC BxMHz3+l+V4nAQAjWy0eQ3OdxIpt9gtnFRPKVqwz2P/XXrSVP+vzXYhOhXvdNyGj /jsGkxsUqa124rNkiPXJwCnsT6Y+3i/jVfU0oDTkQM7pSveKsjeFqsdQ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsg6NAWD4lptKM5aek+XCm/oKTWMB8GA1UdIwQY MBaAFNaSPfTa6RlQzwDSNf454A7qOBbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYt OGQ2ZmMwMTA1MjNkLzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYtOGQ2ZmMwMTA1MjNk LzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1Fdx+UQ 1D8b265c7jDk4l1Uo3uDkiSLVtXd0ANyH0XPWrvDZw1c5ctAG6sySd7Vusg0I8Z8 GQac928guQAcvP1hHoBL1zZlv5QSLn+OgSTrXi14oqNXXqyIPZWEIKlrW2Rp6rMA KSRM/xLVqqGS6UxtzatPfvBlzsJq3cax4hhL2s8ig5Y+4akvsOBErzNuoUuG9GV8 EA+bMdadmd+abU6HPWyWiRCz2sCugjngSU3ZHBsE6ZvqdJ2ErItijkYY4KOfgnNo KpWkToSR0d7WXv9a5ZqH4Gg84PQzDccBdZEPHzDZYzIQYxVS3xYt+M3SfI7pJSqp MG9eHbAP7CiNeg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:42:01 2025 by rpki-client