This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json) Hash identifier: pj1+FLJO/3uPzwTCFrM7aqs+f90QX69kaByrJZP4qaA= Subject key identifier: A5:BD:99:EC:87:93:E1:36:90:A0:53:68:CE:17:DE:B9:CB:79:ED:9F Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7 Certificate serial: 019B1CBC93DA53080BA2566337ED3CB49761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 12:01:19 +0000 Manifest this update: Sun 14 Dec 2025 12:01:19 +0000 Manifest next update: Mon 15 Dec 2025 12:01:19 +0000 Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: GFvOjvg/YKnFC13VKlUAfLTDTbxj2imtA6+dJqjMX5k=) 2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=) 3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:93:da:53:08:0b:a2:56:63:37:ed:3c:b4:97:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7 Validity Not Before: Dec 14 12:01:19 2025 GMT Not After : Dec 15 12:01:19 2025 GMT Subject: CN=a5bd99ec8793e13690a05368ce17deb9cb79ed9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:8e:4c:43:cf:5c:b1:a4:b4:64:87:68:c5: c9:2c:d7:16:47:a3:b1:6f:d9:97:87:92:fe:0e:92: ab:6d:34:ef:63:53:20:d6:36:ed:50:ab:a9:44:5e: 67:67:5b:ed:c4:c4:bf:ad:c3:b4:f7:18:84:d7:06: 5f:e3:17:34:38:74:f9:be:5e:5b:21:01:49:32:08: ca:8a:62:f5:df:cb:88:57:10:28:e3:23:16:19:d0: 56:38:61:e2:98:99:8f:17:b9:69:57:6d:96:cd:34: f1:37:11:2c:0d:35:47:42:82:00:86:e4:3f:b5:57: 34:b6:31:5d:0d:d4:fe:a5:6e:86:54:16:e1:fb:21: 19:f3:61:f8:13:5c:ce:de:f7:5b:d9:df:a4:b5:4e: dd:dd:be:c0:49:db:60:9b:13:20:b7:9c:9b:bf:07: cf:ec:c8:a1:87:93:8e:a4:a0:86:b5:2f:35:29:12: 8c:92:24:3e:0f:b5:17:90:8b:87:b7:ff:46:37:36: e6:00:e2:e1:87:fa:2c:4f:20:0d:26:29:a7:cc:7a: 7b:f9:de:e0:da:10:1f:a8:a1:7b:99:c2:c4:73:af: c2:1a:39:63:92:3d:3d:75:c1:be:79:14:2e:82:c3: 67:43:45:e8:5a:38:9e:a7:f1:68:9a:44:3f:20:2e: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BD:99:EC:87:93:E1:36:90:A0:53:68:CE:17:DE:B9:CB:79:ED:9F X509v3 Authority Key Identifier: keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9a:a6:78:03:27:04:2f:c0:1a:85:56:18:2d:f3:58:db:9a: 71:51:15:5d:b6:ee:05:6c:3d:32:73:36:77:07:c8:1c:af:98: 86:f5:ca:86:66:43:b3:9a:35:9c:b4:8f:1f:d1:fe:f1:ec:d9: 55:2f:f1:04:a9:c8:d5:be:f1:36:45:8b:df:19:9b:d4:bc:74: 45:17:ef:ab:97:65:4b:7c:bb:d9:be:90:d4:a9:1d:a5:97:1c: ff:8d:79:97:aa:27:d2:6d:98:9f:99:6b:37:07:2d:19:56:2a: 2a:44:46:8f:43:a5:0a:63:0c:6b:a5:55:16:f3:a8:62:72:98: 74:5e:e9:ef:58:8e:40:31:84:24:5d:48:93:d4:08:14:c2:d7: e5:12:91:e7:6d:df:65:2a:27:9d:df:fd:3d:48:50:94:55:a6: b4:8b:8e:fc:b3:e0:61:d4:e4:70:86:03:ec:cf:d8:bc:40:db: ea:89:7f:91:10:9a:94:5d:ab:93:ff:3c:0d:af:51:96:e8:8e: b7:01:ce:82:83:ab:65:63:1c:d2:7c:67:8d:de:b2:08:d8:85: 62:c3:80:e8:23:03:28:7b:3b:50:74:50:b8:9e:40:44:1c:b9: 7b:d6:07:c1:b5:fd:49:bb:d5:3f:4e:5e:a4:ea:13:ce:de:b8: 04:36:0b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvJPaUwgLolZjN+08tJdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4 YzE4YzcwHhcNMjUxMjE0MTIwMTE5WhcNMjUxMjE1MTIwMTE5WjAzMTEwLwYDVQQD EyhhNWJkOTllYzg3OTNlMTM2OTBhMDUzNjhjZTE3ZGViOWNiNzllZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mOOTEPPXLGktGSHaMXJLNcWR6Ox b9mXh5L+DpKrbTTvY1Mg1jbtUKupRF5nZ1vtxMS/rcO09xiE1wZf4xc0OHT5vl5b IQFJMgjKimL138uIVxAo4yMWGdBWOGHimJmPF7lpV22WzTTxNxEsDTVHQoIAhuQ/ tVc0tjFdDdT+pW6GVBbh+yEZ82H4E1zO3vdb2d+ktU7d3b7ASdtgmxMgt5ybvwfP 7Mihh5OOpKCGtS81KRKMkiQ+D7UXkIuHt/9GNzbmAOLhh/osTyANJimnzHp7+d7g 2hAfqKF7mcLEc6/CGjljkj09dcG+eRQugsNnQ0XoWjiep/FomkQ/IC4ZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKW9meyHk+E2kKBTaM4X3rnLee2fMB8GA1UdIwQY MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4 LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZqmeAMn BC/AGoVWGC3zWNuacVEVXbbuBWw9MnM2dwfIHK+YhvXKhmZDs5o1nLSPH9H+8ezZ VS/xBKnI1b7xNkWL3xmb1Lx0RRfvq5dlS3y72b6Q1KkdpZcc/415l6on0m2Yn5lr NwctGVYqKkRGj0OlCmMMa6VVFvOoYnKYdF7p71iOQDGEJF1Ik9QIFMLX5RKR523f ZSonnd/9PUhQlFWmtIuO/LPgYdTkcIYD7M/YvEDb6ol/kRCalF2rk/88Da9RluiO twHOgoOrZWMc0nxnjd6yCNiFYsOA6CMDKHs7UHRQuJ5ARBy5e9YHwbX9SbvVP05e pOoTzt64BDYLdQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:14 2025 by rpki-client