This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json) Hash identifier: CwALwYZb+lKCLkmwmwjUGEFbMMLtl+qHAKtTgL9KNlo= Subject key identifier: EA:79:C1:2B:1F:0F:A0:F4:38:A3:39:C1:A4:56:84:BC:1A:B5:E5:71 Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Certificate serial: 019B4E16D18468CDA25B830FAFCA3A7DC74B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 02:01:16 +0000 Manifest this update: Wed 24 Dec 2025 02:01:16 +0000 Manifest next update: Thu 25 Dec 2025 02:01:16 +0000 Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: vQpeBTB+RTyGOFfd/TR2OMvYsZp571ImDEkCNnnXxA8=) 2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:d1:84:68:cd:a2:5b:83:0f:af:ca:3a:7d:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Validity Not Before: Dec 24 02:01:16 2025 GMT Not After : Dec 25 02:01:16 2025 GMT Subject: CN=ea79c12b1f0fa0f438a339c1a45684bc1ab5e571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:50:37:1e:2a:ca:2e:59:58:be:f3:eb:e0: 50:40:7b:93:20:65:c2:0d:a5:0b:f5:61:52:9b:5a: 53:90:42:0f:fc:83:86:d1:f0:14:f3:a0:63:df:4a: 26:5b:58:38:cc:c0:eb:f0:0d:e6:9b:6f:34:67:bf: 47:18:eb:99:f6:a6:5f:71:2f:93:ba:e9:ad:30:75: 4e:9d:ad:0a:19:fc:b9:b0:38:86:6c:c2:55:f0:ba: 51:56:7e:15:de:5c:db:de:68:f6:4c:a9:8c:79:bd: 74:e1:40:37:be:34:67:5c:0f:72:49:cf:f3:bd:1e: 99:2c:84:bc:26:22:a7:dc:d3:46:cf:86:0f:97:26: c7:fb:f5:80:f3:ba:30:b7:57:10:aa:ec:ac:af:0c: 0d:a1:65:44:bf:46:3d:26:f0:d2:c4:50:ac:6e:fa: 7a:98:47:1a:d0:52:da:ed:8b:f6:d6:f0:df:5a:d1: f7:57:f3:8f:56:d9:cb:b3:ad:bf:b7:47:fd:9e:86: a0:ad:72:2f:26:20:a4:f9:13:a5:70:76:e2:8f:58: c6:51:35:ed:e7:7e:31:74:93:24:b9:bf:63:6a:f9: 5b:61:84:14:59:be:1a:8b:87:e7:65:30:84:ab:33: b7:cf:5a:14:f9:46:cc:74:a9:5e:ce:86:6e:99:8f: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:79:C1:2B:1F:0F:A0:F4:38:A3:39:C1:A4:56:84:BC:1A:B5:E5:71 X509v3 Authority Key Identifier: keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:66:ab:fd:2e:2a:99:99:38:01:7f:56:5c:31:9f:65:38:20: f8:bc:dd:5d:c1:0e:9c:2f:6c:07:b4:de:3a:76:4d:f9:cd:32: 6c:33:fc:95:cb:c7:19:17:8e:55:ab:0a:a6:00:9f:6c:a3:6e: 15:8e:29:d7:9c:23:ea:dc:cd:ab:cc:d1:4f:4c:5f:68:af:1d: 64:cd:d2:ee:bd:7f:d2:d5:0a:38:54:43:13:9d:81:d4:12:d5: 55:1c:25:4c:80:f7:eb:4c:3d:eb:5f:9d:91:6c:78:c3:1c:f4: 37:2c:1d:82:41:50:a9:27:44:73:c4:25:0f:82:36:cd:75:2c: 6b:c2:76:9f:4b:c9:f4:b9:0e:c7:fd:3e:c5:f0:b3:2c:a5:09: 4c:23:4b:df:53:05:5b:dc:a9:ef:c4:47:cf:23:73:c5:12:08: 29:00:9e:18:ed:45:89:c7:b9:da:ae:fb:2c:82:aa:c7:32:1d: 70:49:50:f7:b2:59:88:22:fe:20:2f:fd:4b:af:c5:46:dc:bc: 5a:23:7e:86:56:8c:1c:39:86:e5:dd:ed:2d:8f:3d:d4:fd:57: 51:0d:96:a0:e6:a9:b7:ed:69:89:9c:21:6c:0c:47:45:45:16: 41:24:08:54:60:f8:c3:77:b2:06:62:27:be:8b:72:b4:bb:41: 10:60:79:e8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtOFtGEaM2iW4MPr8o6fcdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1 YmJkNzcwHhcNMjUxMjI0MDIwMTE2WhcNMjUxMjI1MDIwMTE2WjAzMTEwLwYDVQQD EyhlYTc5YzEyYjFmMGZhMGY0MzhhMzM5YzFhNDU2ODRiYzFhYjVlNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod9QNx4qyi5ZWL7z6+BQQHuTIGXC DaUL9WFSm1pTkEIP/IOG0fAU86Bj30omW1g4zMDr8A3mm280Z79HGOuZ9qZfcS+T uumtMHVOna0KGfy5sDiGbMJV8LpRVn4V3lzb3mj2TKmMeb104UA3vjRnXA9ySc/z vR6ZLIS8JiKn3NNGz4YPlybH+/WA87owt1cQquysrwwNoWVEv0Y9JvDSxFCsbvp6 mEca0FLa7Yv21vDfWtH3V/OPVtnLs62/t0f9noagrXIvJiCk+ROlcHbij1jGUTXt 534xdJMkub9javlbYYQUWb4ai4fnZTCEqzO3z1oU+UbMdKlezoZumY8A6QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOp5wSsfD6D0OKM5waRWhLwateVxMB8GA1UdIwQY MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3 LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0 MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWar /S4qmZk4AX9WXDGfZTgg+LzdXcEOnC9sB7TeOnZN+c0ybDP8lcvHGReOVasKpgCf bKNuFY4p15wj6tzNq8zRT0xfaK8dZM3S7r1/0tUKOFRDE52B1BLVVRwlTID360w9 61+dkWx4wxz0NywdgkFQqSdEc8QlD4I2zXUsa8J2n0vJ9LkOx/0+xfCzLKUJTCNL 31MFW9yp78RHzyNzxRIIKQCeGO1Fice52q77LIKqxzIdcElQ97JZiCL+IC/9S6/F Rty8WiN+hlaMHDmG5d3tLY891P1XUQ2WoOapt+1piZwhbAxHRUUWQSQIVGD4w3ey BmInvotytLtBEGB56A== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:09 2025 by rpki-client