This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json) Hash identifier: qTzkOjwd0E+/vnsexw1sWtCrHvuuRq8Zq8p8tPTBNck= Subject key identifier: 34:3B:15:F0:1D:73:DF:C2:EB:50:B5:01:22:DB:00:09:F5:82:9B:9A Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3 Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3 Certificate serial: 019B5AF61691C2ED22A432E72C420A199D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft Manifest number: 0F9C Signing time: Fri 26 Dec 2025 14:00:35 +0000 Manifest this update: Fri 26 Dec 2025 14:00:35 +0000 Manifest next update: Sat 27 Dec 2025 14:00:35 +0000 Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: YN8ja+jPxoNCCYWz+S5vDYF7ZAOc0Pi+wszAKlTel7E=) 2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:16:91:c2:ed:22:a4:32:e7:2c:42:0a:19:9d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3 Validity Not Before: Dec 26 14:00:35 2025 GMT Not After : Dec 27 14:00:35 2025 GMT Subject: CN=343b15f01d73dfc2eb50b50122db0009f5829b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d6:41:27:52:30:ac:16:44:03:c6:d3:5d:60: 92:e4:bb:c4:4f:dc:68:74:c7:30:d3:ba:b7:ca:e0: d6:c9:83:6a:43:5b:ca:5f:68:e5:cf:9d:54:90:d2: e7:37:7a:65:79:20:f9:e0:70:24:8b:48:02:f4:77: 6c:1d:dc:2a:3d:e5:66:74:3c:a9:6e:c8:25:38:cf: 5a:9c:c3:cd:9b:cb:bf:66:29:90:74:77:f4:f6:f3: e2:d5:ee:22:00:3f:89:5f:0b:86:14:e6:4f:fe:31: 93:5f:73:15:26:38:87:d2:eb:7e:d6:f9:6a:81:cd: 12:3f:fe:e6:72:d6:53:be:5b:73:45:4c:94:d3:41: 33:6f:82:2e:fe:08:a1:66:b6:86:53:cb:4a:82:4a: 0a:49:63:aa:d5:38:83:b9:a6:7e:60:55:47:92:86: 38:e3:39:fa:ea:74:d6:2e:89:a6:6e:01:2e:19:17: 03:4f:66:ec:ab:24:62:c4:ee:0b:e8:ed:ac:9b:e8: 6c:c0:0c:70:3c:c0:c3:04:ee:bb:e6:f8:93:dd:57: 1d:9b:89:23:ea:f7:95:8d:87:07:42:b3:d3:0b:eb: da:41:03:59:49:ff:c5:4b:93:12:33:ca:7d:6b:e4: 09:b3:a2:d4:2e:5f:fc:19:c6:bb:d1:af:d8:95:aa: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3B:15:F0:1D:73:DF:C2:EB:50:B5:01:22:DB:00:09:F5:82:9B:9A X509v3 Authority Key Identifier: keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:e7:80:af:93:1d:1c:a2:8d:50:24:6d:15:82:5d:e4:a4: 89:d0:4f:a6:c2:3c:96:35:f0:60:f9:55:78:97:fe:7d:29:b0: 38:24:55:44:95:53:a0:ec:17:71:3e:58:96:11:bf:a5:7c:a8: e2:82:6d:ee:a1:5f:9b:e3:86:91:17:5a:59:d3:d7:0d:f3:a7: 0b:92:b4:78:f9:fa:6b:b8:f3:26:5f:c6:00:90:d7:ea:03:22: bf:f3:ef:75:d2:6d:32:bd:01:da:f8:82:c2:85:cc:8d:79:5e: b5:15:a8:f6:fb:98:d3:8a:50:a5:f5:d8:85:18:5c:7e:7b:af: b5:6a:3b:ea:fd:d2:c7:20:1d:1f:92:35:8f:a6:8e:70:a1:78: 62:62:57:a7:22:0a:eb:f7:05:96:4a:23:f4:7f:e6:bc:98:89: c0:bd:25:b0:56:5b:1e:7f:d9:90:64:30:33:db:d5:3b:ca:1c: 3d:92:8d:26:17:b8:48:6c:4b:fa:5a:3f:de:d4:a8:13:9d:ce: 72:d5:4e:64:dd:fa:3c:38:e7:91:d8:f5:39:9a:4e:67:6e:7f: f6:3f:19:b6:5f:1b:ac:61:ea:9a:88:05:3c:42:9d:b7:6b:23: a8:f1:49:33:79:23:9e:ed:6c:e7:e7:1d:0a:0b:09:93:1b:0a: 00:b9:fb:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9haRwu0ipDLnLEIKGZ02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh NWFhYTMwHhcNMjUxMjI2MTQwMDM1WhcNMjUxMjI3MTQwMDM1WjAzMTEwLwYDVQQD EygzNDNiMTVmMDFkNzNkZmMyZWI1MGI1MDEyMmRiMDAwOWY1ODI5YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dZBJ1IwrBZEA8bTXWCS5LvET9xo dMcw07q3yuDWyYNqQ1vKX2jlz51UkNLnN3pleSD54HAki0gC9HdsHdwqPeVmdDyp bsglOM9anMPNm8u/ZimQdHf09vPi1e4iAD+JXwuGFOZP/jGTX3MVJjiH0ut+1vlq gc0SP/7mctZTvltzRUyU00Ezb4Iu/gihZraGU8tKgkoKSWOq1TiDuaZ+YFVHkoY4 4zn66nTWLommbgEuGRcDT2bsqyRixO4L6O2sm+hswAxwPMDDBO675viT3Vcdm4kj 6veVjYcHQrPTC+vaQQNZSf/FS5MSM8p9a+QJs6LULl/8Gca70a/YlaqaWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ7FfAdc9/C61C1ASLbAAn1gpuaMB8GA1UdIwQY MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt OWFkYTIzNzhhOWEwLzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8/ngK+T HRyijVAkbRWCXeSkidBPpsI8ljXwYPlVeJf+fSmwOCRVRJVToOwXcT5YlhG/pXyo 4oJt7qFfm+OGkRdaWdPXDfOnC5K0ePn6a7jzJl/GAJDX6gMiv/PvddJtMr0B2viC woXMjXletRWo9vuY04pQpfXYhRhcfnuvtWo76v3SxyAdH5I1j6aOcKF4YmJXpyIK 6/cFlkoj9H/mvJiJwL0lsFZbHn/ZkGQwM9vVO8ocPZKNJhe4SGxL+lo/3tSoE53O ctVOZN36PDjnkdj1OZpOZ25/9j8Ztl8brGHqmogFPEKdt2sjqPFJM3kjnu1s5+cd CgsJkxsKALn7kw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:18 2025 by rpki-client