This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json) Hash identifier: tfaeSkcZJNro9K4UJurG1oXsSY5ix7BmfZj099+vk14= Subject key identifier: 0D:44:DA:20:86:10:42:06:62:1A:89:12:11:79:F3:B7:B8:E8:74:16 Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46 Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546 Certificate serial: 019B35323447C62A0C61A1BC56865A85801F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft Manifest number: 0410 Signing time: Fri 19 Dec 2025 06:00:41 +0000 Manifest this update: Fri 19 Dec 2025 06:00:41 +0000 Manifest next update: Sat 20 Dec 2025 06:00:41 +0000 Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: ByqKEiFtfqK4blYzOMwMo9rUxup+rG3xRD3Ew3npZmw=) 2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:34:47:c6:2a:0c:61:a1:bc:56:86:5a:85:80:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546 Validity Not Before: Dec 19 06:00:41 2025 GMT Not After : Dec 20 06:00:41 2025 GMT Subject: CN=0d44da2086104206621a89121179f3b7b8e87416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:14:6a:45:f6:84:d1:cd:8c:aa:ad:55:20: 80:a4:db:0d:6a:4c:b1:21:2d:4e:53:ec:77:5c:58: 35:02:83:be:cd:a1:48:9b:c4:5c:81:80:27:ce:61: d7:9c:b8:44:94:db:82:9e:04:6f:e8:36:fd:15:99: 49:af:3a:70:b9:57:75:74:8e:52:f1:8b:70:76:83: 74:49:23:75:ab:54:61:20:a7:22:54:c5:11:1c:d9: a0:06:64:9a:df:69:4e:70:02:c8:19:7a:4f:52:db: 38:3f:57:7f:75:27:ea:6f:ec:c6:d1:d9:ec:95:40: 32:5d:3e:7f:69:eb:c8:21:93:97:ae:49:66:96:fb: fa:b9:75:e8:91:22:25:a1:25:e9:90:7f:ab:c9:70: ac:3e:5f:0b:87:ee:5c:40:2e:1c:2e:13:95:b8:c8: b6:3d:18:42:ff:3a:f9:91:2e:d4:ec:dc:db:17:9e: 59:45:6a:b0:79:61:03:45:8f:07:2f:55:07:d8:9c: 2b:f9:05:10:42:cb:e8:ed:af:51:4a:c6:c8:8b:dc: fa:05:5c:db:37:a2:0c:2e:24:85:28:ec:a0:70:c0: 62:b0:3c:94:79:20:ed:1e:ff:2e:ba:53:d9:a7:a5: 2d:31:56:ba:ff:37:e1:78:7d:1f:81:f1:69:75:57: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:44:DA:20:86:10:42:06:62:1A:89:12:11:79:F3:B7:B8:E8:74:16 X509v3 Authority Key Identifier: keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1a:71:b6:4a:02:fc:0d:d4:06:d6:81:d0:06:f5:41:e8:6e: c5:f1:37:39:95:7b:80:f8:f2:93:99:4f:13:a6:b6:ab:e4:8b: cd:ba:c9:bc:de:94:2c:b5:b7:94:be:fa:29:33:56:81:37:6b: 8b:f1:d8:16:f0:4c:3a:29:82:ed:72:2b:0d:f6:2e:79:bc:ab: 3b:5d:a4:65:63:a5:8e:69:77:c3:de:d8:b8:3d:ac:fb:f0:6e: c1:a5:c1:8a:09:2c:dd:9c:27:dc:33:79:ea:68:b7:87:8e:5d: 6f:ba:27:37:8b:96:b1:c2:c1:5a:61:00:27:25:36:59:3e:8a: 1d:f1:14:9c:c1:de:b2:34:99:f0:d6:e1:13:48:a8:14:3a:f5: d3:f6:f6:2a:1d:8f:54:d9:54:0b:b6:ce:a9:87:74:67:46:50: 9c:34:64:6e:7f:ff:91:0c:95:37:22:5b:bb:d3:f5:86:a8:67: 07:65:ae:dd:42:eb:16:d0:93:88:e4:60:ba:fd:b4:92:07:f4: 11:68:bc:79:61:b5:29:e0:23:09:0d:61:e1:f9:4b:d1:d1:f9: e6:27:c4:58:86:fe:d3:4a:0c:35:d8:c6:57:61:46:f6:d2:3a: fd:b1:13:4a:c5:56:ad:00:c2:f8:4c:3a:54:9c:a0:c7:0b:55: 1a:a8:f3:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MjRHxioMYaG8VoZahYAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl NzU1NDYwHhcNMjUxMjE5MDYwMDQxWhcNMjUxMjIwMDYwMDQxWjAzMTEwLwYDVQQD EygwZDQ0ZGEyMDg2MTA0MjA2NjIxYTg5MTIxMTc5ZjNiN2I4ZTg3NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjoUakX2hNHNjKqtVSCApNsNakyx IS1OU+x3XFg1AoO+zaFIm8RcgYAnzmHXnLhElNuCngRv6Db9FZlJrzpwuVd1dI5S 8YtwdoN0SSN1q1RhIKciVMURHNmgBmSa32lOcALIGXpPUts4P1d/dSfqb+zG0dns lUAyXT5/aevIIZOXrklmlvv6uXXokSIloSXpkH+ryXCsPl8Lh+5cQC4cLhOVuMi2 PRhC/zr5kS7U7NzbF55ZRWqweWEDRY8HL1UH2Jwr+QUQQsvo7a9RSsbIi9z6BVzb N6IMLiSFKOygcMBisDyUeSDtHv8uulPZp6UtMVa6/zfheH0fgfFpdVfk6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1E2iCGEEIGYhqJEhF587e46HQWMB8GA1UdIwQY MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt ODgwYTgxYjk5Y2M1LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1 LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchpxtkoC /A3UBtaB0Ab1QehuxfE3OZV7gPjyk5lPE6a2q+SLzbrJvN6ULLW3lL76KTNWgTdr i/HYFvBMOimC7XIrDfYuebyrO12kZWOljml3w97YuD2s+/BuwaXBigks3Zwn3DN5 6mi3h45db7onN4uWscLBWmEAJyU2WT6KHfEUnMHesjSZ8NbhE0ioFDr10/b2Kh2P VNlUC7bOqYd0Z0ZQnDRkbn//kQyVNyJbu9P1hqhnB2Wu3ULrFtCTiORguv20kgf0 EWi8eWG1KeAjCQ1h4flL0dH55ifEWIb+00oMNdjGV2FG9tI6/bETSsVWrQDC+Ew6 VJygxwtVGqjzPA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:03 2025 by rpki-client