This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json) Hash identifier: axxKsOhUnleAZBcI8GGi81TNa10PaCtPchJ4WLd4y14= Subject key identifier: 1A:A6:56:60:29:89:E0:7A:11:10:E1:7B:73:ED:D7:4A:79:7C:ED:C0 Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Certificate serial: 019B3AC6F05AED977575CFC36FEDB9C286BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: Zlh7hLuMCNyA61Ano5K5x3Kt+CFfqmpu7bf7iKzVPO8=) 2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f0:5a:ed:97:75:75:cf:c3:6f:ed:b9:c2:86:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=1aa656602989e07a1110e17b73edd74a797cedc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:06:8b:67:38:0c:dc:54:31:8c:36:33:18: 83:f7:31:12:87:05:5d:e4:6e:ff:82:bd:12:c6:dc: 71:03:04:c3:fc:ea:dd:ca:ed:38:ad:8c:2e:4c:b4: 1b:26:b4:ed:cc:19:d6:b3:0d:4c:31:c3:6b:4f:ec: 43:e3:7a:07:0a:60:20:1d:71:0f:6e:8e:30:f1:dd: ed:37:17:75:56:29:ef:68:80:ba:6e:68:d8:16:b5: 67:5b:a6:ae:68:66:ca:c0:81:82:de:15:8d:46:2b: a3:89:84:e3:0e:7e:ad:f1:af:98:e4:15:f1:a1:53: 33:dd:9b:fb:e1:2a:ba:84:53:11:a7:e8:c8:af:47: a6:3b:1c:30:40:4d:d3:41:6f:b0:ba:6f:63:67:d3: 34:e3:b6:06:7e:47:b8:8b:9d:1a:39:95:02:08:38: 39:95:53:21:eb:a3:1f:2b:53:9c:0a:36:91:e5:89: c6:46:68:ce:fb:9b:f5:3f:38:1d:c2:d3:2e:1d:d5: c9:1a:0b:64:81:38:81:31:a7:8b:01:d3:7d:40:4a: 3d:67:56:8b:09:03:be:1c:f1:46:93:0a:b6:a5:37: 82:01:70:56:8c:c5:8d:4a:30:d0:80:ca:e8:76:68: 86:7e:d6:06:e0:bf:01:b1:4c:d0:af:df:51:4b:1b: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A6:56:60:29:89:E0:7A:11:10:E1:7B:73:ED:D7:4A:79:7C:ED:C0 X509v3 Authority Key Identifier: keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:6d:67:1b:05:3f:99:22:3f:e1:74:27:42:14:ef:a7:c3: f8:8e:6c:65:66:ac:ba:a3:af:a5:a5:3a:cf:8b:80:cd:09:50: 51:2f:8a:a9:eb:9c:19:36:05:a4:70:1f:ba:62:62:24:45:7d: ec:b8:11:e6:a1:32:3e:61:83:e6:f8:cb:d8:3c:38:38:30:af: 87:9a:18:56:66:36:48:cc:41:be:e6:3a:6f:a1:1b:14:a2:e2: 4c:72:0f:a1:e6:86:48:94:e1:d1:cc:24:90:ff:0a:60:41:3f: 62:d7:6c:27:e3:bb:7f:e5:88:33:ae:f5:df:3f:91:0b:89:6c: b2:e7:a8:fa:8b:db:32:4d:b5:52:98:06:8c:87:21:42:19:ed: 7f:fd:f4:f9:af:3c:0c:a2:8d:67:15:10:30:75:8b:fc:80:21: 3e:93:46:9a:cf:3f:a6:0b:6e:96:ea:d8:87:f5:b8:c8:c2:b3: f1:84:b9:00:c7:e3:e3:7b:7b:7b:a0:d5:ff:6c:72:f8:b5:c3: 0f:aa:e2:6e:ee:7d:f3:60:ab:51:6e:40:fc:28:83:33:e1:2c: 83:a6:d3:15:0f:f6:e2:b2:66:5e:a5:be:82:3c:b4:ae:5e:f3: 21:fc:e2:27:82:fb:62:fe:38:a6:c5:8c:c8:15:b1:ac:11:56: 0e:05:73:7b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6xvBa7Zd1dc/Db+25woa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAyNTdkMDY3ZWY4Yjg1ZjYyMGM2NzIyMGNmOTc3ZGRk ZTM5OTQwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EygxYWE2NTY2MDI5ODllMDdhMTExMGUxN2I3M2VkZDc0YTc5N2NlZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFkGi2c4DNxUMYw2MxiD9zEShwVd 5G7/gr0SxtxxAwTD/Ordyu04rYwuTLQbJrTtzBnWsw1MMcNrT+xD43oHCmAgHXEP bo4w8d3tNxd1VinvaIC6bmjYFrVnW6auaGbKwIGC3hWNRiujiYTjDn6t8a+Y5BXx oVMz3Zv74Sq6hFMRp+jIr0emOxwwQE3TQW+wum9jZ9M047YGfke4i50aOZUCCDg5 lVMh66MfK1OcCjaR5YnGRmjO+5v1PzgdwtMuHdXJGgtkgTiBMaeLAdN9QEo9Z1aL CQO+HPFGkwq2pTeCAXBWjMWNSjDQgMrodmiGftYG4L8BsUzQr99RSxv5ywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBqmVmApieB6ERDhe3Pt10p5fO3AMB8GA1UdIwQY MBaAFPngJX0Gfvi4X2IMZyIM+Xfd3jmUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQWxmUVotLUxoZllneG5JZ3o1ZDkzZU9aUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNjkxOTRhLTQ1YTAtNDhlZi05OWJm LThlMDQ4ODdjMGFiZi8xLzEtZUFsZlFaLS1MaGZZZ3huSWd6NWQ5M2VPWlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ViLzY5MTk0YS00NWEwLTQ4ZWYtOTliZi04ZTA0ODg3YzBh YmYvMS8xLWVBbGZRWi0tTGhmWWd4bklnejVkOTNlT1pRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDlt ZxsFP5kiP+F0J0IU76fD+I5sZWasuqOvpaU6z4uAzQlQUS+KqeucGTYFpHAfumJi JEV97LgR5qEyPmGD5vjL2Dw4ODCvh5oYVmY2SMxBvuY6b6EbFKLiTHIPoeaGSJTh 0cwkkP8KYEE/YtdsJ+O7f+WIM6713z+RC4lssueo+ovbMk21UpgGjIchQhntf/30 +a88DKKNZxUQMHWL/IAhPpNGms8/pgtulurYh/W4yMKz8YS5AMfj43t7e6DV/2xy +LXDD6ribu5982CrUW5A/CiDM+Esg6bTFQ/24rJmXqW+gjy0rl7zIfziJ4L7Yv44 psWMyBWxrBFWDgVzew== -----END CERTIFICATE-----Generated at Sat Dec 20 13:16:10 2025 by rpki-client