This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft File: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json) Hash identifier: M8pdyfNk0BvBzMW4XcIpiWWj/7L0kzr1jOBuae3bEZQ= Subject key identifier: 20:28:79:86:73:F3:45:8A:5D:86:CD:E8:77:CF:C9:1F:AF:92:5D:35 Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3 Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3 Certificate serial: 019B0710689134A840E4FF5B5E25796F4FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft Manifest number: 1798 Signing time: Wed 10 Dec 2025 07:01:14 +0000 Manifest this update: Wed 10 Dec 2025 07:01:14 +0000 Manifest next update: Thu 11 Dec 2025 07:01:14 +0000 Files and hashes: 1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: z9avPK1kuhPfN0Xm+yLPDE3SUo+TL6Ga0LfROC+SHL0=) 2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=) 3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=) 4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=) 5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=) 6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:10:68:91:34:a8:40:e4:ff:5b:5e:25:79:6f:4f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3 Validity Not Before: Dec 10 07:01:14 2025 GMT Not After : Dec 11 07:01:14 2025 GMT Subject: CN=2028798673f3458a5d86cde877cfc91faf925d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:16:d8:75:84:70:54:37:3a:e0:31:f1:98: 71:16:47:1c:e3:7f:c9:55:7a:49:f7:f3:c9:1f:a5: 21:e3:02:bf:19:73:04:73:03:56:2f:74:1b:af:c8: 49:1f:cb:ea:ed:09:8f:01:4e:67:34:f2:27:91:b2: a4:58:69:5e:de:ea:f8:5b:7e:5d:e2:b9:83:cf:35: 7a:5c:1d:de:15:28:1d:a0:f9:a8:41:6b:ac:3d:81: fd:f1:3f:6e:7d:e3:d6:c7:88:0b:37:2d:f5:82:e8: 63:24:7e:0c:78:94:1c:2e:22:ac:c8:0d:00:ee:53: 3d:14:fa:c6:50:0c:54:a6:c8:ed:87:e8:23:88:84: d3:0f:d8:99:2b:c0:f6:83:78:93:dd:c5:0e:d3:0c: 21:40:13:a1:8d:0e:ce:56:74:a7:2d:85:11:1d:7b: 68:cc:b7:bb:fc:0e:f9:c6:17:df:57:7f:34:2e:74: e3:ac:93:d6:b9:78:f5:f8:be:36:bf:c4:7c:88:f1: d3:0b:71:e9:0d:9b:f7:7b:14:63:28:12:9b:c3:19: 0a:3d:20:01:42:a0:46:50:e1:16:f3:04:7d:50:83: 0e:38:69:8b:08:6b:94:03:65:50:dc:5f:33:43:f6: fa:14:d7:ef:96:8f:24:e7:d5:d8:bd:cb:39:d2:16: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:79:86:73:F3:45:8A:5D:86:CD:E8:77:CF:C9:1F:AF:92:5D:35 X509v3 Authority Key Identifier: keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:79:bd:f6:5a:12:2b:3c:2f:84:5f:24:06:d5:59:d3:32:c9: 19:fd:5c:ac:9a:76:21:25:7b:34:55:60:65:5e:1c:5f:bf:14: f7:ba:d2:82:55:1c:f7:1a:80:bf:39:d3:97:a6:fe:39:b8:7f: 44:50:7c:0d:ff:a2:43:8b:fe:e0:b4:56:62:bf:a1:7c:ff:44: dd:96:8e:af:eb:3a:fe:b8:21:a5:2a:3f:e4:b8:bd:da:9a:02: c2:3f:44:6e:4a:2f:57:35:65:3e:00:cf:46:6c:b0:7d:3c:32: e3:5b:ed:8a:1a:82:9a:3a:d4:9c:b9:ff:15:c3:8e:37:85:1c: a2:58:a8:b5:40:fa:f1:1a:ae:18:34:c0:ca:63:99:19:30:33: 83:26:6a:49:70:3e:77:e7:11:ef:fa:e1:30:1e:ac:77:98:ab: 99:31:8a:44:04:ef:30:c6:86:3d:46:9f:40:c7:fb:3a:83:46: 9f:4a:81:b4:5e:08:5c:f1:d4:3b:06:74:a9:d8:52:e0:8b:36: a2:40:b3:46:e2:00:83:13:db:62:98:80:1b:9f:20:36:79:74: 18:b0:9d:3a:a9:ae:cd:f2:00:09:a5:0d:19:a9:fe:81:38:24: 77:f0:cd:bb:37:aa:fe:94:b4:e7:6e:b8:42:f4:20:92:2f:26: 4b:ad:52:d0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsHEGiRNKhA5P9bXiV5b0/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMzJlOWY0YWEzMmFiYTczMTJmYWIwNTRiMTc0ZGNlOGM1 MTVjYTMwHhcNMjUxMjEwMDcwMTE0WhcNMjUxMjExMDcwMTE0WjAzMTEwLwYDVQQD EygyMDI4Nzk4NjczZjM0NThhNWQ4NmNkZTg3N2NmYzkxZmFmOTI1ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA720W2HWEcFQ3OuAx8ZhxFkcc43/J VXpJ9/PJH6Uh4wK/GXMEcwNWL3Qbr8hJH8vq7QmPAU5nNPInkbKkWGle3ur4W35d 4rmDzzV6XB3eFSgdoPmoQWusPYH98T9ufePWx4gLNy31guhjJH4MeJQcLiKsyA0A 7lM9FPrGUAxUpsjth+gjiITTD9iZK8D2g3iT3cUO0wwhQBOhjQ7OVnSnLYURHXto zLe7/A75xhffV380LnTjrJPWuXj1+L42v8R8iPHTC3HpDZv3exRjKBKbwxkKPSAB QqBGUOEW8wR9UIMOOGmLCGuUA2VQ3F8zQ/b6FNfvlo8k59XYvcs50hZwuQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCAoeYZz80WKXYbN6HfPyR+vkl01MB8GA1UdIwQY MBaAFPsy6fSqMqunMS+rBUsXTc6MUVyjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16THA5S295cTZjeEw2c0ZTeGROem94UlhLTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMjc4NjYzLWIxMzUtNGRiMS1hMDQ0 LTIwNjI0YjNjMTU3Zi8xLzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UyLzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1 N2YvMS8xLXpMcDlLb3lxNmN4TDZzRlN4ZE56b3hSWEtNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHm9 9loSKzwvhF8kBtVZ0zLJGf1crJp2ISV7NFVgZV4cX78U97rSglUc9xqAvznTl6b+ Obh/RFB8Df+iQ4v+4LRWYr+hfP9E3ZaOr+s6/rghpSo/5Li92poCwj9EbkovVzVl PgDPRmywfTwy41vtihqCmjrUnLn/FcOON4UcoliotUD68RquGDTAymOZGTAzgyZq SXA+d+cR7/rhMB6sd5irmTGKRATvMMaGPUafQMf7OoNGn0qBtF4IXPHUOwZ0qdhS 4Is2okCzRuIAgxPbYpiAG58gNnl0GLCdOqmuzfIACaUNGan+gTgkd/DNuzeq/pS0 5264QvQgki8mS61S0A== -----END CERTIFICATE-----Generated at Wed Dec 10 11:27:52 2025 by rpki-client