This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json) Hash identifier: 5la2OKbGMtOU4Tt1nYnAuKj2lpsbHRhNvRIFEyVQZH4= Subject key identifier: FD:42:F9:83:3A:4E:27:22:64:DC:2F:F1:01:F8:58:FB:C9:B2:AC:F2 Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Certificate serial: 019B330D48610B52945C108329D32526A2AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 20:01:06 +0000 Manifest this update: Thu 18 Dec 2025 20:01:06 +0000 Manifest next update: Fri 19 Dec 2025 20:01:06 +0000 Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: g01evzTXaCqtOnmS7yofEb7o03SU/xVGo1CqlqMrjAE=) 2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:48:61:0b:52:94:5c:10:83:29:d3:25:26:a2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Validity Not Before: Dec 18 20:01:06 2025 GMT Not After : Dec 19 20:01:06 2025 GMT Subject: CN=fd42f9833a4e272264dc2ff101f858fbc9b2acf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:40:5b:3a:28:d3:5b:96:fb:be:8e:70:e4: f7:91:de:d8:ec:ef:94:44:b1:f7:d5:0b:98:1c:ca: 77:c4:9e:d9:9f:84:04:80:6c:8d:8d:01:a7:b1:38: 0a:0d:7a:c4:09:40:d5:c0:f8:2c:32:83:a8:a2:bd: 37:47:bc:3a:34:4c:23:72:f0:18:2f:b7:ec:e8:cd: ad:a3:0d:fe:7c:4c:dd:83:09:28:06:60:e7:be:d3: 73:93:cf:b7:95:83:ee:55:9e:e7:e6:0f:e9:0e:48: 33:64:ef:47:74:4e:31:4d:25:49:d3:1b:0f:00:64: 0f:20:57:bf:fd:29:c0:8f:b9:a2:2d:c1:20:ed:12: 71:95:42:05:01:e9:fd:27:68:24:6d:3a:53:3c:92: 42:a3:a1:f8:99:da:d2:4d:b8:3e:8c:3d:4f:09:4e: 37:19:f1:a0:ab:64:92:0b:3f:ce:86:96:e1:da:ba: 8a:57:2f:66:72:fc:91:2a:74:23:9d:64:9a:c9:df: 8c:e8:8b:48:4c:4e:82:53:cb:6e:61:57:78:8e:9d: 18:ca:ad:86:c7:89:81:7b:9d:ec:12:38:37:6a:a3: b0:a9:f4:bf:e4:69:23:6e:5d:89:41:78:e9:1f:ef: 42:59:58:f7:ff:67:be:63:85:cc:90:09:51:1b:e0: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:42:F9:83:3A:4E:27:22:64:DC:2F:F1:01:F8:58:FB:C9:B2:AC:F2 X509v3 Authority Key Identifier: keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:98:82:b9:3e:da:e5:06:b8:23:d1:86:20:21:08:a2:58:c0: 55:b0:cc:5a:41:c4:54:05:f7:59:0d:a4:4d:74:bd:f2:27:c3: 57:06:7d:82:2f:53:49:d3:48:fc:1e:bd:f6:1d:53:17:9b:ba: ce:66:ff:19:c7:5f:68:3c:23:ff:8f:8a:a9:4a:11:a6:e7:64: 45:71:36:1c:cc:d1:bb:dc:8b:5f:7a:c0:08:78:8e:9f:2e:c8: f6:e0:a4:3b:e1:19:46:ed:1a:10:7b:7d:7c:c5:3a:2a:9f:eb: 16:06:12:29:25:0a:0d:a6:1d:14:43:da:9f:5f:7c:e5:7e:2a: 2b:2a:ac:f9:ed:b3:4c:69:c5:83:c2:e4:c4:06:f1:a3:81:30: 53:1b:82:5b:93:78:83:c9:c8:17:d0:f8:e2:e7:e6:0f:c6:7f: 83:6f:15:c7:22:07:d8:32:94:bf:8a:1f:36:4b:7c:de:c6:18: c4:51:56:a5:79:a2:a4:9b:a3:eb:c2:a9:d8:40:ef:3f:f9:37: 01:5f:63:45:06:97:1d:fc:9d:fb:16:82:94:86:36:d8:72:17: 5a:37:e2:fb:42:a7:ad:68:34:d7:6a:98:47:be:d2:76:da:7f: 82:ff:88:0e:b8:cb:16:4a:e7:6f:e0:4f:1d:0b:89:8c:e7:94: c5:28:ae:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDUhhC1KUXBCDKdMlJqKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5 MWMxOTYwHhcNMjUxMjE4MjAwMTA2WhcNMjUxMjE5MjAwMTA2WjAzMTEwLwYDVQQD EyhmZDQyZjk4MzNhNGUyNzIyNjRkYzJmZjEwMWY4NThmYmM5YjJhY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DRAWzoo01uW+76OcOT3kd7Y7O+U RLH31QuYHMp3xJ7Zn4QEgGyNjQGnsTgKDXrECUDVwPgsMoOoor03R7w6NEwjcvAY L7fs6M2tow3+fEzdgwkoBmDnvtNzk8+3lYPuVZ7n5g/pDkgzZO9HdE4xTSVJ0xsP AGQPIFe//SnAj7miLcEg7RJxlUIFAen9J2gkbTpTPJJCo6H4mdrSTbg+jD1PCU43 GfGgq2SSCz/Ohpbh2rqKVy9mcvyRKnQjnWSayd+M6ItITE6CU8tuYVd4jp0Yyq2G x4mBe53sEjg3aqOwqfS/5Gkjbl2JQXjpH+9CWVj3/2e+Y4XMkAlRG+CcJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1C+YM6TiciZNwv8QH4WPvJsqzyMB8GA1UdIwQY MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJiCuT7a 5Qa4I9GGICEIoljAVbDMWkHEVAX3WQ2kTXS98ifDVwZ9gi9TSdNI/B699h1TF5u6 zmb/GcdfaDwj/4+KqUoRpudkRXE2HMzRu9yLX3rACHiOny7I9uCkO+EZRu0aEHt9 fMU6Kp/rFgYSKSUKDaYdFEPan1985X4qKyqs+e2zTGnFg8LkxAbxo4EwUxuCW5N4 g8nIF9D44ufmD8Z/g28VxyIH2DKUv4ofNkt83sYYxFFWpXmipJuj68Kp2EDvP/k3 AV9jRQaXHfyd+xaClIY22HIXWjfi+0KnrWg012qYR77Sdtp/gv+IDrjLFkrnb+BP HQuJjOeUxSiuaw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:44:32 2025 by rpki-client