This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json) Hash identifier: C9kJ/Yg3kpz4z9aShdVzM6TaUl6JJCtGv96do92rMA8= Subject key identifier: B1:76:3A:87:8C:0A:72:53:36:21:3D:FE:94:6E:13:4D:66:11:42:1F Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df Certificate serial: 019B341FE1C50628E5220BE4C9B8F17768DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft Manifest number: 14C1 Signing time: Fri 19 Dec 2025 01:01:02 +0000 Manifest this update: Fri 19 Dec 2025 01:01:02 +0000 Manifest next update: Sat 20 Dec 2025 01:01:02 +0000 Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: 1jtbVF0kuU+C0z4VuityR6JiA/vJ1MOF4HBnyAG51lc=) 2: cEPjBaGbVjdPO-hNsYO67euLYpQ.roa (hash: T605woCbDSzS9CwoW3bIxK7R2PsaKmq7Bur/BezpJTA=) 3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:e1:c5:06:28:e5:22:0b:e4:c9:b8:f1:77:68:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df Validity Not Before: Dec 19 01:01:02 2025 GMT Not After : Dec 20 01:01:02 2025 GMT Subject: CN=b1763a878c0a725336213dfe946e134d6611421f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:7a:37:ed:e7:64:9c:0f:d0:ee:88:40:73: ca:1a:be:ec:32:f6:6b:15:27:a3:74:6d:2d:85:c1: dc:f1:54:7d:c0:45:89:62:2f:e2:08:ff:5a:2c:ce: 5e:80:13:01:9a:c1:ae:57:33:3f:a0:84:d8:2b:90: af:6b:89:07:4a:85:fa:97:58:41:fd:e1:00:88:ad: cc:3a:2b:6c:08:5a:5e:29:58:4f:f9:e6:8b:a4:9f: c8:ec:03:33:11:32:8d:68:aa:cf:4f:13:df:0e:1d: 7f:d5:e5:2f:7c:14:00:9d:b9:35:73:ed:16:c2:3e: 15:47:af:4e:4a:a5:a6:de:0e:28:c3:c2:ed:fa:40: 41:df:54:e2:f4:f5:ac:d6:9e:81:d3:9c:b0:9d:d0: 89:1b:67:0d:e6:19:bf:6a:9f:3e:25:72:66:3a:43: 26:f8:e8:41:7d:79:07:ee:bb:89:d1:b2:48:b5:38: 39:87:89:7c:0a:4a:4b:79:cf:53:9b:66:c3:01:c3: 13:3a:23:fe:ac:4c:f8:80:f3:91:a3:57:33:48:aa: 59:7b:72:eb:ab:99:17:ec:23:2d:9a:be:87:84:13: f6:ee:a2:4b:ba:59:cc:2f:89:12:0f:d4:b8:90:71: 5f:ff:c0:d1:cd:08:11:16:5a:30:36:38:23:3a:10: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:76:3A:87:8C:0A:72:53:36:21:3D:FE:94:6E:13:4D:66:11:42:1F X509v3 Authority Key Identifier: keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ad:cc:53:7c:13:c3:d4:d4:d2:d9:aa:ad:5e:c6:4a:62:42: bf:f6:6c:81:5f:ff:23:8c:99:2f:7d:dc:ca:f5:dc:f7:0b:5b: 5b:50:72:90:6f:29:96:82:bd:3c:11:85:1f:f7:f7:05:aa:a4: 87:1e:94:32:03:40:6d:01:a9:ab:ee:7a:5a:7d:ff:5f:41:41: ce:f6:b5:03:df:71:3b:6e:b7:c4:0c:41:8b:50:25:0e:df:eb: 4a:41:2d:aa:75:91:90:31:69:40:95:f5:42:1b:35:cb:c5:d9: 37:6f:70:68:39:a5:5f:fe:2c:2b:fe:7d:74:1d:5e:48:5a:48: 95:1d:30:05:aa:90:d6:23:d1:cb:a4:62:3f:2d:a0:fd:89:e3: 07:19:c1:06:a6:d4:6d:26:4c:4a:18:5a:77:32:d0:bd:86:d7: 41:33:84:c8:81:9d:c7:cc:e5:55:55:e7:9d:b5:93:0a:9c:98: b9:19:fc:88:d5:38:d6:7f:28:5b:03:0c:18:dc:f5:f9:10:dc: a9:d7:ed:6e:e2:58:25:25:6f:84:cb:e3:d8:70:ae:0a:24:72: 9a:d1:7b:18:3c:49:61:4d:62:94:5b:2e:a3:d2:71:92:bf:3b: 04:a5:32:da:69:67:8e:fd:ae:38:7d:b7:1d:9d:36:34:31:c1: 64:8b:59:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H+HFBijlIgvkybjxd2jeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx ZjgzZGYwHhcNMjUxMjE5MDEwMTAyWhcNMjUxMjIwMDEwMTAyWjAzMTEwLwYDVQQD EyhiMTc2M2E4NzhjMGE3MjUzMzYyMTNkZmU5NDZlMTM0ZDY2MTE0MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUx6N+3nZJwP0O6IQHPKGr7sMvZr FSejdG0thcHc8VR9wEWJYi/iCP9aLM5egBMBmsGuVzM/oITYK5Cva4kHSoX6l1hB /eEAiK3MOitsCFpeKVhP+eaLpJ/I7AMzETKNaKrPTxPfDh1/1eUvfBQAnbk1c+0W wj4VR69OSqWm3g4ow8Lt+kBB31Ti9PWs1p6B05ywndCJG2cN5hm/ap8+JXJmOkMm +OhBfXkH7ruJ0bJItTg5h4l8CkpLec9Tm2bDAcMTOiP+rEz4gPORo1czSKpZe3Lr q5kX7CMtmr6HhBP27qJLulnML4kSD9S4kHFf/8DRzQgRFlowNjgjOhC3VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF2OoeMCnJTNiE9/pRuE01mEUIfMB8GA1UdIwQY MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0 LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY63MU3wT w9TU0tmqrV7GSmJCv/ZsgV//I4yZL33cyvXc9wtbW1BykG8ploK9PBGFH/f3Baqk hx6UMgNAbQGpq+56Wn3/X0FBzva1A99xO263xAxBi1AlDt/rSkEtqnWRkDFpQJX1 Qhs1y8XZN29waDmlX/4sK/59dB1eSFpIlR0wBaqQ1iPRy6RiPy2g/YnjBxnBBqbU bSZMShhadzLQvYbXQTOEyIGdx8zlVVXnnbWTCpyYuRn8iNU41n8oWwMMGNz1+RDc qdftbuJYJSVvhMvj2HCuCiRymtF7GDxJYU1ilFsuo9Jxkr87BKUy2mlnjv2uOH23 HZ02NDHBZItZrw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:00:22 2025 by rpki-client