This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json) Hash identifier: eKAAVoJ/VzF8FBrzinccvcH77uFAQiRO/GF3v+SZ9qM= Subject key identifier: 97:04:76:D0:92:5F:64:3D:D3:63:81:93:62:8D:66:7A:EC:64:DE:34 Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B0E5C01845FAA2940E8D34048F5C9C9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft Manifest number: 179F Signing time: Thu 11 Dec 2025 17:01:09 +0000 Manifest this update: Thu 11 Dec 2025 17:01:09 +0000 Manifest next update: Fri 12 Dec 2025 17:01:09 +0000 Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: 0Htcs28UzhbR7uFffZmP++TDcgIclzbRBHob+UP+9oM=) 2: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=) 3: KOSFefQ82yRsHMP6xQC1amzxZ5A.roa (hash: PbOvMYy+aS17nQQCkPtiW0Swv+8ZrIMSdL3ZQAHYmIQ=) 4: U4B8gIRkl6vMFpf6uf4FiRg-PGU.roa (hash: xjlWzszBjbkzgZlr1n6anraY55j54PVbdFl2R0E6OSc=) 5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:01:84:5f:aa:29:40:e8:d3:40:48:f5:c9:c9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Dec 11 17:01:09 2025 GMT Not After : Dec 12 17:01:09 2025 GMT Subject: CN=970476d0925f643dd3638193628d667aec64de34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:19:ed:a7:d8:5f:88:47:95:d8:b7:8a:a1: 8d:a0:37:69:e0:a3:cf:f7:6c:6d:52:21:e5:51:e9: d6:6b:a9:28:8f:0e:8b:df:0a:68:be:b7:04:68:2d: 19:f5:4f:01:de:0f:8c:d4:52:d4:9f:74:e4:16:9c: 61:a4:de:81:fa:d0:7c:6d:0d:e2:a0:14:c2:e2:ac: a1:71:c1:8b:d2:59:91:96:30:5a:22:d7:ff:dd:1b: 75:5a:9f:f5:dc:2f:67:32:49:a0:18:94:8a:7f:68: e7:3d:87:4b:5b:7f:7e:06:b7:a6:c0:86:57:ea:6b: 9b:d8:06:d2:47:c0:c4:1b:06:17:2a:bf:40:6a:9a: db:84:08:12:26:b5:53:32:03:d5:ca:cf:bc:dc:99: 2c:a8:b2:46:da:71:2b:fa:eb:2f:0d:08:bd:8f:ad: f9:0c:13:94:76:4a:df:e8:79:74:4d:dc:7a:48:27: 73:4c:d0:45:9b:71:2c:f3:c1:50:71:b1:77:9a:6e: ad:fa:0c:0b:1a:80:ce:6e:f0:e5:27:5c:ea:2a:cd: 19:69:2c:b6:a9:63:bc:e1:9f:73:94:72:40:21:74: ab:96:51:35:94:a0:14:bd:cf:54:dd:6a:55:86:52: fe:52:29:66:ff:0d:4c:71:b4:03:78:f2:a5:aa:12: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:04:76:D0:92:5F:64:3D:D3:63:81:93:62:8D:66:7A:EC:64:DE:34 X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1e:51:79:9f:2b:46:27:cd:98:d8:02:76:80:c9:e1:67:68: 93:f6:91:1b:6b:17:2f:d3:80:bc:fe:79:6b:b9:c3:60:54:b7: da:61:0e:2b:f0:72:d9:59:91:09:34:e5:f7:32:98:8a:38:7d: 82:10:06:a4:76:a6:99:d8:3a:b4:96:44:ef:61:0d:3f:ec:dd: 5b:97:28:cd:c8:0b:65:ef:8b:44:ab:5d:3d:50:c9:1a:4b:7e: ed:4f:f6:b1:77:9a:af:78:ba:e0:6a:ba:5d:4d:be:57:94:61: e2:ee:8e:d2:32:6e:4b:b4:13:fc:8a:43:0b:ef:fd:7e:2e:af: 3e:ef:50:04:1c:83:c0:b8:4c:fe:77:3f:40:1c:0f:8d:88:52: f1:b4:a3:8d:e0:2b:05:a8:d0:9e:f6:7c:dd:25:2f:95:76:fc: 16:21:1a:92:e8:47:b7:86:9e:4a:3b:e8:d8:b0:e6:a1:63:2d: 4c:39:9a:d3:0a:ce:6d:a3:37:fa:a9:24:21:40:ae:c5:cf:66: ac:54:8e:ff:e3:e1:a5:1f:8b:8c:6a:d4:1c:f9:29:2b:96:44: d9:f3:a1:4e:f0:40:eb:1f:2b:f8:d1:fe:dc:90:77:49:78:57: 2b:db:cd:ee:eb:84:bc:37:e2:c1:f4:99:22:14:aa:67:da:50: 55:8d:01:b4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOXAGEX6opQOjTQEj1ycmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjUxMjExMTcwMTA5WhcNMjUxMjEyMTcwMTA5WjAzMTEwLwYDVQQD Eyg5NzA0NzZkMDkyNWY2NDNkZDM2MzgxOTM2MjhkNjY3YWVjNjRkZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB8Z7afYX4hHldi3iqGNoDdp4KPP 92xtUiHlUenWa6kojw6L3wpovrcEaC0Z9U8B3g+M1FLUn3TkFpxhpN6B+tB8bQ3i oBTC4qyhccGL0lmRljBaItf/3Rt1Wp/13C9nMkmgGJSKf2jnPYdLW39+BremwIZX 6mub2AbSR8DEGwYXKr9AaprbhAgSJrVTMgPVys+83JksqLJG2nEr+usvDQi9j635 DBOUdkrf6Hl0Tdx6SCdzTNBFm3Es88FQcbF3mm6t+gwLGoDObvDlJ1zqKs0ZaSy2 qWO84Z9zlHJAIXSrllE1lKAUvc9U3WpVhlL+Uilm/w1McbQDePKlqhIqCQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJcEdtCSX2Q902OBk2KNZnrsZN40MB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR5R eZ8rRifNmNgCdoDJ4Wdok/aRG2sXL9OAvP55a7nDYFS32mEOK/By2VmRCTTl9zKY ijh9ghAGpHammdg6tJZE72ENP+zdW5cozcgLZe+LRKtdPVDJGkt+7U/2sXear3i6 4Gq6XU2+V5Rh4u6O0jJuS7QT/IpDC+/9fi6vPu9QBByDwLhM/nc/QBwPjYhS8bSj jeArBajQnvZ83SUvlXb8FiEakuhHt4aeSjvo2LDmoWMtTDma0wrObaM3+qkkIUCu xc9mrFSO/+PhpR+LjGrUHPkpK5ZE2fOhTvBA6x8r+NH+3JB3SXhXK9vN7uuEvDfi wfSZIhSqZ9pQVY0BtA== -----END CERTIFICATE-----Generated at Thu Dec 11 19:21:40 2025 by rpki-client