This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json) Hash identifier: 88c4MIkOMJUqpcY8bf8eRmS85ADuuieyxfhY8wh1cbs= Subject key identifier: 19:16:D0:D0:FF:5D:B9:C2:F3:D1:82:D2:71:A9:D1:BB:85:FC:7B:7C Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Certificate serial: 019B36E9A4B4A62874C462C421FFB0A5589B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft Manifest number: 10BC Signing time: Fri 19 Dec 2025 14:00:40 +0000 Manifest this update: Fri 19 Dec 2025 14:00:40 +0000 Manifest next update: Sat 20 Dec 2025 14:00:40 +0000 Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: Tdi+aP/TQVdd4FQFwwRXfBeJFkUV5thYrli8A04czMU=) 2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:a4:b4:a6:28:74:c4:62:c4:21:ff:b0:a5:58:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Validity Not Before: Dec 19 14:00:40 2025 GMT Not After : Dec 20 14:00:40 2025 GMT Subject: CN=1916d0d0ff5db9c2f3d182d271a9d1bb85fc7b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:0d:9f:a5:3d:1e:66:64:38:dd:29:cb:d6: 7e:a1:f3:f2:d7:42:79:66:44:0f:a7:5b:66:40:ec: 87:4e:e0:1d:3a:86:98:4c:a2:c6:74:e6:c9:2c:13: aa:61:12:3c:31:ed:62:81:f9:43:d3:ef:a3:0a:9f: 67:4b:cc:4f:58:7d:ac:28:5f:d2:20:59:a0:5c:d0: 63:0c:ec:1a:f4:d6:8a:4d:44:bc:24:90:1b:c6:87: fd:9f:ef:14:e3:4b:62:b5:81:21:47:39:a7:c6:a6: 49:9b:07:67:79:cd:cb:1b:78:c6:23:05:5f:08:69: 9c:f2:5e:c1:f5:65:9a:c4:e2:49:f1:c8:d6:4e:5e: 02:29:7e:5c:ff:f2:42:d8:d1:0a:85:74:1e:f7:5c: cb:27:e1:7b:55:69:22:12:44:65:5a:f7:3f:dc:72: 51:0f:b9:68:c3:7a:a4:fa:c9:45:43:66:3b:5f:c7: 63:af:b7:f6:3d:a0:05:19:44:b0:d1:2e:01:38:d0: 0f:2c:2b:3a:e0:cf:47:a3:09:5b:ee:4e:65:5f:1d: dd:59:41:9d:6a:53:b4:40:a9:e9:e8:18:ac:8c:ff: df:c3:4a:2e:24:70:37:30:92:12:21:36:b9:1f:9c: 8f:8d:39:f8:f2:cf:1e:25:d7:dc:d2:ed:36:a7:5a: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:16:D0:D0:FF:5D:B9:C2:F3:D1:82:D2:71:A9:D1:BB:85:FC:7B:7C X509v3 Authority Key Identifier: keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b5:d8:58:73:d9:40:d9:f5:7c:d5:af:15:8a:46:d7:81:95: 59:f3:01:36:7a:96:04:dd:00:cd:8c:58:69:e6:96:20:5f:5e: f1:73:b2:60:c0:9b:5a:8f:54:e2:a3:3d:da:df:01:58:c3:fb: f3:8b:56:5f:4b:b6:fb:af:90:5b:17:7e:5e:bc:48:0f:42:23: 98:e2:a9:75:11:69:f8:6e:c5:0f:3a:d1:64:c3:53:82:7e:63: f8:d0:aa:8b:9d:c0:86:8c:58:0a:32:d7:8e:eb:4c:c3:f1:95: 8f:c6:30:6e:8a:9c:9a:20:59:a6:51:9e:44:93:72:ae:15:9b: fd:b3:49:90:ba:aa:cf:41:6a:7e:90:c2:29:08:6e:a9:3b:05: 98:5c:b8:dc:5c:ef:2d:e9:15:0c:41:a1:6e:f7:dd:54:7c:58: 1f:8c:a1:65:f0:7b:90:8f:10:b3:fa:3f:85:33:66:14:73:1f: c5:20:2f:8b:1d:8d:e6:ee:b8:9e:78:69:56:6d:40:8a:3c:d2: a0:14:8a:08:56:58:6a:c7:40:ec:32:c3:5d:10:ea:84:3a:08: 9d:bb:b8:95:72:23:60:fe:cd:40:0b:5b:54:3c:15:5a:c4:22: 9f:47:6a:cb:ca:0f:16:cd:28:58:12:8d:0a:58:08:e0:83:0e: 57:44:d9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26aS0pih0xGLEIf+wpVibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2 ZjUxZjMwHhcNMjUxMjE5MTQwMDQwWhcNMjUxMjIwMTQwMDQwWjAzMTEwLwYDVQQD EygxOTE2ZDBkMGZmNWRiOWMyZjNkMTgyZDI3MWE5ZDFiYjg1ZmM3YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprkNn6U9HmZkON0py9Z+ofPy10J5 ZkQPp1tmQOyHTuAdOoaYTKLGdObJLBOqYRI8Me1igflD0++jCp9nS8xPWH2sKF/S IFmgXNBjDOwa9NaKTUS8JJAbxof9n+8U40titYEhRzmnxqZJmwdnec3LG3jGIwVf CGmc8l7B9WWaxOJJ8cjWTl4CKX5c//JC2NEKhXQe91zLJ+F7VWkiEkRlWvc/3HJR D7low3qk+slFQ2Y7X8djr7f2PaAFGUSw0S4BONAPLCs64M9Howlb7k5lXx3dWUGd alO0QKnp6BisjP/fw0ouJHA3MJISITa5H5yPjTn48s8eJdfc0u02p1rTpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkW0ND/XbnC89GC0nGp0buF/Ht8MB8GA1UdIwQY MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLXYWHPZ QNn1fNWvFYpG14GVWfMBNnqWBN0AzYxYaeaWIF9e8XOyYMCbWo9U4qM92t8BWMP7 84tWX0u2+6+QWxd+XrxID0IjmOKpdRFp+G7FDzrRZMNTgn5j+NCqi53AhoxYCjLX jutMw/GVj8YwboqcmiBZplGeRJNyrhWb/bNJkLqqz0FqfpDCKQhuqTsFmFy43Fzv LekVDEGhbvfdVHxYH4yhZfB7kI8Qs/o/hTNmFHMfxSAvix2N5u64nnhpVm1AijzS oBSKCFZYasdA7DLDXRDqhDoInbu4lXIjYP7NQAtbVDwVWsQin0dqy8oPFs0oWBKN ClgI4IMOV0TZPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:42:58 2025 by rpki-client