This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json) Hash identifier: TuHEt5MfKt/9PraC3HBDpdxaOWFc9oItCfDxABKfRBg= Subject key identifier: CD:8E:E5:F2:B6:5B:67:8B:52:D0:03:14:A2:2B:CC:75:28:25:FD:92 Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0 Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0 Certificate serial: 019B5ABFE8A6CE97549692178BE64325FBF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft Manifest number: 1566 Signing time: Fri 26 Dec 2025 13:01:24 +0000 Manifest this update: Fri 26 Dec 2025 13:01:24 +0000 Manifest next update: Sat 27 Dec 2025 13:01:24 +0000 Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: DMg+McYhNuzJdrWom8tyu0WVkUbfNR3ko7swpnYU5CM=) 2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=) 3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e8:a6:ce:97:54:96:92:17:8b:e6:43:25:fb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0 Validity Not Before: Dec 26 13:01:24 2025 GMT Not After : Dec 27 13:01:24 2025 GMT Subject: CN=cd8ee5f2b65b678b52d00314a22bcc752825fd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:62:bb:f0:5f:7d:ee:b7:5a:f1:bc:1a:1c: 3a:fa:78:3e:8a:a9:cd:d7:b2:a2:7a:58:87:f5:82: 57:48:e7:c1:6f:30:63:ac:18:42:15:53:5e:38:79: 4a:4b:a1:eb:61:01:3d:0e:51:32:23:af:e3:07:b2: 31:58:3b:c7:77:c4:e9:56:d2:48:93:58:fe:e1:77: 32:13:e7:c7:c9:19:d8:c1:4f:96:ad:1d:7e:1a:74: ea:4d:59:c8:01:bf:33:11:35:1f:f0:e7:c7:a8:a6: e6:12:82:3b:82:64:7e:75:5e:6f:f5:cb:05:59:e7: df:51:98:7b:78:df:b2:f7:12:6c:cd:2a:07:f0:c8: 55:65:61:1b:22:63:05:c1:9e:dd:77:d7:88:52:93: c4:99:5e:fa:ee:e4:50:0b:35:a4:0a:ba:53:c1:ff: 2c:5e:33:b8:06:70:6c:e1:31:55:27:02:12:34:1f: c3:29:9d:f8:42:c4:d5:79:5d:dc:7f:eb:6b:4a:33: ff:5a:b7:1f:88:d4:69:82:e0:4e:cd:1a:b4:59:2a: 70:47:85:7a:bf:8e:7e:df:a3:f8:2d:d2:8c:08:0e: e4:7c:b7:83:a9:5e:71:eb:e4:42:b5:10:92:3b:90: ce:93:c5:49:44:69:21:2c:1f:46:33:fd:11:3e:3b: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:E5:F2:B6:5B:67:8B:52:D0:03:14:A2:2B:CC:75:28:25:FD:92 X509v3 Authority Key Identifier: keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:5b:c4:6b:24:fe:e4:8c:2b:31:e3:a4:10:d3:f9:8e:0e: ba:0f:8b:cd:34:72:fd:e4:c5:28:6e:7c:36:c9:a0:c0:e2:11: 51:c1:46:3c:7b:e9:7f:db:63:6c:34:65:4e:4b:08:d2:8c:87: 7b:c3:b3:ab:bd:c6:3b:a2:a3:88:41:83:af:96:49:73:3d:94: 0e:24:0c:5c:ff:79:e5:b1:b5:61:f4:f1:b5:cc:2c:b8:00:42: 68:57:a6:2b:64:95:59:0d:17:37:c1:d4:6c:bd:ca:06:c0:d8: 9c:bd:35:61:e1:20:71:60:b2:e0:02:09:05:2f:02:fa:c8:37: a4:79:e1:65:0f:68:e9:fb:2f:09:18:4f:fa:a5:4c:2f:a0:4f: 92:ed:c6:6c:20:2a:62:8e:ba:19:43:c9:af:33:38:13:f7:5f: 5e:ae:81:d8:ed:b9:43:80:48:e5:fb:f5:33:2a:37:ca:a6:87: fd:6b:e0:51:90:a5:49:88:71:2f:70:bd:06:53:a8:c2:5d:e1: ab:2c:5c:9c:f7:92:d3:9d:ee:3f:f5:2b:f1:d3:91:c3:da:d7: a1:40:b7:97:c5:1f:fd:07:e8:c9:24:5a:89:bb:ba:18:18:0c: 60:7d:61:35:00:7c:56:ad:31:8a:c5:fd:20:72:f8:73:06:6b: 12:78:eb:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+imzpdUlpIXi+ZDJfv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1N2M3ZGIwNGU3OGMyMjFmM2RmMmEyYWYwODJiNTE4ZDk2 MmE4ZjAwHhcNMjUxMjI2MTMwMTI0WhcNMjUxMjI3MTMwMTI0WjAzMTEwLwYDVQQD EyhjZDhlZTVmMmI2NWI2NzhiNTJkMDAzMTRhMjJiY2M3NTI4MjVmZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsNiu/Bffe63WvG8Ghw6+ng+iqnN 17KieliH9YJXSOfBbzBjrBhCFVNeOHlKS6HrYQE9DlEyI6/jB7IxWDvHd8TpVtJI k1j+4XcyE+fHyRnYwU+WrR1+GnTqTVnIAb8zETUf8OfHqKbmEoI7gmR+dV5v9csF WeffUZh7eN+y9xJszSoH8MhVZWEbImMFwZ7dd9eIUpPEmV767uRQCzWkCrpTwf8s XjO4BnBs4TFVJwISNB/DKZ34QsTVeV3cf+trSjP/WrcfiNRpguBOzRq0WSpwR4V6 v45+36P4LdKMCA7kfLeDqV5x6+RCtRCSO5DOk8VJRGkhLB9GM/0RPjvtGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2O5fK2W2eLUtADFKIrzHUoJf2SMB8GA1UdIwQY MBaAFNV8fbBOeMIh898qKvCCtRjZYqjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgt ZmU5NWE5YWYzYWRjLzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgtZmU5NWE5YWYzYWRj LzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhhbxGsk /uSMKzHjpBDT+Y4Oug+LzTRy/eTFKG58NsmgwOIRUcFGPHvpf9tjbDRlTksI0oyH e8Ozq73GO6KjiEGDr5ZJcz2UDiQMXP955bG1YfTxtcwsuABCaFemK2SVWQ0XN8HU bL3KBsDYnL01YeEgcWCy4AIJBS8C+sg3pHnhZQ9o6fsvCRhP+qVML6BPku3GbCAq Yo66GUPJrzM4E/dfXq6B2O25Q4BI5fv1Myo3yqaH/WvgUZClSYhxL3C9BlOowl3h qyxcnPeS053uP/Ur8dORw9rXoUC3l8Uf/QfoySRaibu6GBgMYH1hNQB8Vq0xisX9 IHL4cwZrEnjrUQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:21 2025 by rpki-client