This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json) Hash identifier: QPDCjCvdb09JGCmsXvb/PRtp3vBU/DhY/B2EFi0B0js= Subject key identifier: A4:3B:74:AC:77:0F:9A:27:24:EF:D6:83:0F:9F:43:DE:35:C5:2B:F3 Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Certificate serial: 019B243F114FD19D9E1036BC130965AAFB53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 23:01:11 +0000 Manifest this update: Mon 15 Dec 2025 23:01:11 +0000 Manifest next update: Tue 16 Dec 2025 23:01:11 +0000 Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: uH++OqRn+IxTsUXrxKzxP7s7k/AluvNpyd/713/eecY=) 2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:11:4f:d1:9d:9e:10:36:bc:13:09:65:aa:fb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Validity Not Before: Dec 15 23:01:11 2025 GMT Not After : Dec 16 23:01:11 2025 GMT Subject: CN=a43b74ac770f9a2724efd6830f9f43de35c52bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:b5:7a:ef:86:d4:ec:10:ca:a8:2e:ef:d9: 4c:41:ce:0a:79:09:b4:20:c4:68:f1:d8:13:b7:45: ea:4c:42:69:5f:cb:c9:c0:14:62:8b:73:94:dc:f1: ae:e8:3c:18:4f:95:a6:1b:26:2b:7c:0f:d9:e6:5a: 93:d7:a6:43:df:3e:a4:39:fd:70:b2:fa:9d:bf:ec: d9:57:16:22:4e:4b:45:d5:3e:ef:90:73:1b:e1:aa: 66:33:42:d5:95:bd:8a:07:2e:13:3f:18:95:26:84: d5:4c:85:a6:81:83:e5:8c:63:6f:c3:41:58:da:ad: 52:3b:eb:fe:57:8a:01:71:e0:87:00:b4:39:98:c9: 5b:bb:c3:f4:ba:8d:26:57:c7:11:9d:0e:11:02:aa: 12:45:db:cb:65:0b:45:64:26:48:de:24:b0:d0:d7: 5b:46:c8:24:af:ee:9c:23:ce:8c:12:d5:ce:fc:91: 29:09:c2:9a:a9:42:56:5e:f3:c4:b7:92:4c:43:cf: 7e:a1:dc:17:70:0e:b7:80:91:83:03:1a:5e:b0:ea: 04:f2:e6:0e:3b:21:a8:51:cd:2c:88:79:e5:20:3e: 02:2c:29:6b:cc:a1:a7:e4:da:21:38:52:41:28:de: 32:b9:e1:96:d0:7e:8d:d6:df:5a:21:27:26:d5:45: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3B:74:AC:77:0F:9A:27:24:EF:D6:83:0F:9F:43:DE:35:C5:2B:F3 X509v3 Authority Key Identifier: keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:33:8b:d2:b2:2f:2e:82:24:4f:3f:e7:31:5f:99:7b:d4:07: 63:1f:03:54:1a:4f:eb:3d:c6:21:76:6c:f3:55:fa:ad:63:3f: 0b:44:a5:fb:70:fd:2b:35:90:cb:5f:80:5f:34:b3:cb:31:60: 07:2d:81:2c:53:e3:c9:5b:0e:20:19:13:48:8e:86:0f:dd:04: cc:ff:52:64:03:32:44:8f:02:bb:84:51:36:d0:42:d5:4e:4e: e8:2c:81:46:c2:3b:df:27:5e:03:a2:e1:02:a2:05:8a:b5:f0: f0:8b:33:86:5e:2b:e7:0c:26:0e:a1:32:fc:ac:6e:85:6d:8c: e9:01:5d:44:1e:c1:da:f4:3e:0d:51:45:d0:ad:ce:56:10:73: 5b:af:9e:44:c1:fb:d1:19:1b:79:f7:c4:58:b0:8c:21:e0:68: c9:b6:79:a4:7b:4f:0b:66:6a:61:61:e6:7d:22:09:7a:f7:ff: 06:a4:71:ca:55:24:0b:2d:01:50:b2:15:1a:31:d7:da:7f:23: ea:83:40:b3:cc:9c:fc:26:02:ee:3d:6c:dc:fa:2a:f7:dd:c6: 60:32:e1:27:36:ee:7c:fc:61:fa:65:ce:3d:17:b0:c4:e7:b9: 47:ef:35:46:50:96:ef:5f:99:a4:89:f6:50:03:ef:99:f0:78: 22:7a:fa:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZskPxFP0Z2eEDa8EwllqvtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5 MDMwNDEwHhcNMjUxMjE1MjMwMTExWhcNMjUxMjE2MjMwMTExWjAzMTEwLwYDVQQD EyhhNDNiNzRhYzc3MGY5YTI3MjRlZmQ2ODMwZjlmNDNkZTM1YzUyYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLa1eu+G1OwQyqgu79lMQc4KeQm0 IMRo8dgTt0XqTEJpX8vJwBRii3OU3PGu6DwYT5WmGyYrfA/Z5lqT16ZD3z6kOf1w svqdv+zZVxYiTktF1T7vkHMb4apmM0LVlb2KBy4TPxiVJoTVTIWmgYPljGNvw0FY 2q1SO+v+V4oBceCHALQ5mMlbu8P0uo0mV8cRnQ4RAqoSRdvLZQtFZCZI3iSw0Ndb Rsgkr+6cI86MEtXO/JEpCcKaqUJWXvPEt5JMQ89+odwXcA63gJGDAxpesOoE8uYO OyGoUc0siHnlID4CLClrzKGn5NohOFJBKN4yueGW0H6N1t9aIScm1UXH5QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKQ7dKx3D5onJO/Wgw+fQ941xSvzMB8GA1UdIwQY MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3 LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDOL 0rIvLoIkTz/nMV+Ze9QHYx8DVBpP6z3GIXZs81X6rWM/C0Sl+3D9KzWQy1+AXzSz yzFgBy2BLFPjyVsOIBkTSI6GD90EzP9SZAMyRI8Cu4RRNtBC1U5O6CyBRsI73yde A6LhAqIFirXw8Iszhl4r5wwmDqEy/KxuhW2M6QFdRB7B2vQ+DVFF0K3OVhBzW6+e RMH70RkbeffEWLCMIeBoybZ5pHtPC2ZqYWHmfSIJevf/BqRxylUkCy0BULIVGjHX 2n8j6oNAs8yc/CYC7j1s3Poq993GYDLhJzbufPxh+mXOPRewxOe5R+81RlCW71+Z pIn2UAPvmfB4Inr6zQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:28:06 2025 by rpki-client