This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json) Hash identifier: dBKkug/t+AF3kPGlJSWigEFBWw2RJpkcM5pWpgoB63k= Subject key identifier: 43:E0:2D:C7:85:42:CA:31:CE:D6:B6:BE:D5:A4:E0:7C:18:35:FE:E7 Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Certificate serial: 019B0F00E3EADC7FEB6888A87863A7D6D8E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 20:01:15 +0000 Manifest this update: Thu 11 Dec 2025 20:01:15 +0000 Manifest next update: Fri 12 Dec 2025 20:01:15 +0000 Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: 7pBlJGsg35Fv3YbAT79K83JVNRkGtpzlL+wRsftRi7E=) 2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=) 3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=) 4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:e3:ea:dc:7f:eb:68:88:a8:78:63:a7:d6:d8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Validity Not Before: Dec 11 20:01:15 2025 GMT Not After : Dec 12 20:01:15 2025 GMT Subject: CN=43e02dc78542ca31ced6b6bed5a4e07c1835fee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:93:24:31:48:62:20:70:f8:03:67:4b:00: 71:3f:30:33:ab:61:90:d3:d2:60:97:6a:25:94:b7: e8:5d:ed:f8:f6:a8:4e:18:d1:f3:0e:5d:95:83:92: c6:89:9a:77:cb:00:c0:ec:25:1f:47:17:50:45:e2: be:64:38:34:bc:d3:a4:06:65:73:3b:f6:73:a3:81: 97:87:1e:2e:a5:e4:49:4a:3c:60:b9:27:44:12:1e: c7:13:b1:7b:43:7b:41:60:32:47:03:da:69:e5:0a: da:04:51:b9:68:e0:22:8c:dc:37:9d:e5:fe:85:43: 93:f1:49:64:20:b2:38:db:4c:2c:7b:f1:7d:4c:39: 78:db:b7:86:fd:d2:d6:3b:2c:4a:a4:53:11:41:dd: 74:11:54:f7:08:3c:28:8c:1a:20:3d:fc:69:d2:59: 9e:ac:00:40:e3:15:d1:2b:2b:05:9d:1c:fb:2b:e6: ad:9d:ce:8d:ee:53:81:55:9e:47:2b:4b:2e:86:e8: b6:75:c4:36:f9:fd:b2:2c:fa:b6:b7:58:e6:1b:71: a3:94:bd:92:d0:4b:4c:8e:91:98:74:85:47:e6:5b: b6:12:f6:b5:04:05:7b:4f:28:0c:d4:5d:a9:ef:f6: d6:20:3a:88:8c:ef:ad:88:79:c6:1f:4a:8b:b5:5a: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:2D:C7:85:42:CA:31:CE:D6:B6:BE:D5:A4:E0:7C:18:35:FE:E7 X509v3 Authority Key Identifier: keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:28:a2:32:1a:3b:10:cc:33:ea:36:08:98:01:94:44:77:f9: 25:5f:0a:c8:87:62:c0:7d:ef:cd:af:c3:de:b1:d4:eb:db:1a: 14:32:d8:92:e4:77:0d:c3:e7:6a:31:a9:ee:9c:e3:bb:e2:60: 21:1d:5e:46:f5:b7:25:47:0c:dc:77:1e:ae:5d:b2:c6:03:74: 38:b8:fc:b6:9c:21:19:a3:72:62:80:f6:65:87:9a:d0:2b:ee: c8:66:8b:aa:8a:d7:66:5e:d5:a0:7a:23:f4:cf:67:57:ef:01: fa:94:2d:f7:e3:72:5b:84:28:a8:af:c3:b2:cb:14:ba:af:73: 44:e2:2c:3f:c9:b7:31:10:32:d5:72:0f:19:79:0e:75:b1:ce: 25:e9:cd:87:70:66:38:49:3e:19:9b:85:25:07:30:16:58:07: ae:4e:4c:cb:48:89:d9:74:55:de:6f:99:5e:c9:ff:95:3b:8f: 3d:ec:97:90:89:4a:da:5b:b1:d2:54:e3:3a:2b:c1:0b:65:51: 74:fd:7c:9e:bf:fa:2d:48:63:a2:27:54:d2:1e:cf:ae:6c:6d: 02:aa:e1:a9:36:1f:82:21:43:c0:e7:57:48:74:40:0d:ca:94: b4:3c:f9:16:8b:8b:32:45:8e:9d:8f:f6:91:b6:f5:61:06:55: fd:19:ad:95 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsPAOPq3H/raIioeGOn1tjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz NjJmZmMwHhcNMjUxMjExMjAwMTE1WhcNMjUxMjEyMjAwMTE1WjAzMTEwLwYDVQQD Eyg0M2UwMmRjNzg1NDJjYTMxY2VkNmI2YmVkNWE0ZTA3YzE4MzVmZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD2TJDFIYiBw+ANnSwBxPzAzq2GQ 09Jgl2ollLfoXe349qhOGNHzDl2Vg5LGiZp3ywDA7CUfRxdQReK+ZDg0vNOkBmVz O/Zzo4GXhx4upeRJSjxguSdEEh7HE7F7Q3tBYDJHA9pp5QraBFG5aOAijNw3neX+ hUOT8UlkILI420wse/F9TDl427eG/dLWOyxKpFMRQd10EVT3CDwojBogPfxp0lme rABA4xXRKysFnRz7K+atnc6N7lOBVZ5HK0suhui2dcQ2+f2yLPq2t1jmG3GjlL2S 0EtMjpGYdIVH5lu2Eva1BAV7TygM1F2p7/bWIDqIjO+tiHnGH0qLtVpk5QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEPgLceFQsoxzta2vtWk4HwYNf7nMB8GA1UdIwQY MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3 LTQwYzFhNzI3MDJlZi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1LzQ3MDdiNC0wMDMyLTRhYzctYmNjNy00MGMxYTcyNzAy ZWYvMS8xLWg2YlRvM0VtLU9ycFpkQ1d1X1lzNlUyTF93LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCii Mho7EMwz6jYImAGURHf5JV8KyIdiwH3vza/D3rHU69saFDLYkuR3DcPnajGp7pzj u+JgIR1eRvW3JUcM3Hcerl2yxgN0OLj8tpwhGaNyYoD2ZYea0CvuyGaLqorXZl7V oHoj9M9nV+8B+pQt9+NyW4QoqK/DsssUuq9zROIsP8m3MRAy1XIPGXkOdbHOJenN h3BmOEk+GZuFJQcwFlgHrk5My0iJ2XRV3m+ZXsn/lTuPPeyXkIlK2lux0lTjOivB C2VRdP18nr/6LUhjoidU0h7PrmxtAqrhqTYfgiFDwOdXSHRADcqUtDz5FouLMkWO nY/2kbb1YQZV/RmtlQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:51:23 2025 by rpki-client