This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft File: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json) Hash identifier: wOzRFM/jjSJSeLVzZZi8wKrlzAV0VkVmEO3CCIrL/EA= Subject key identifier: A9:F7:31:F7:49:3C:8A:9A:20:21:14:A2:39:4D:84:4A:5C:9C:6B:41 Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Certificate serial: 019B42B7C7213AB6E026A20F9FB6371CEF5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft Manifest number: 0ACB Signing time: Sun 21 Dec 2025 21:01:38 +0000 Manifest this update: Sun 21 Dec 2025 21:01:38 +0000 Manifest next update: Mon 22 Dec 2025 21:01:38 +0000 Files and hashes: 1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: 3jWPQ6rrJl7XG7Oks7wO9JGPDraDIGgVA0sW91495Rs=) 2: REskoa14BgJkhUCvWjHx9eaTd20.roa (hash: xil3JLcrx1++eWENxWi8v9S+saZS2Aj8jUHaFwQUcf4=) 3: UMf4KbahVEx8sqhbE5i5BsC3FsA.roa (hash: tXmMZLhWuik4iB1zgaI4TBIGH/BwZuH+iewbZQIYmmk=) 4: YxylaQOafZhI24pv2ROMkb6L8uQ.roa (hash: zhgD7wCyXnWilojWXPMdeWuf8dVD/porAHOT4NA/gWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:c7:21:3a:b6:e0:26:a2:0f:9f:b6:37:1c:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Validity Not Before: Dec 21 21:01:38 2025 GMT Not After : Dec 22 21:01:38 2025 GMT Subject: CN=a9f731f7493c8a9a202114a2394d844a5c9c6b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:5a:f2:c9:d4:ba:30:0f:40:2b:dd:6a:85: bd:38:45:35:d3:d7:74:da:8a:6b:1b:6f:b5:11:2d: 1e:63:eb:9d:a9:3c:38:a2:43:bd:2e:31:60:bf:95: 3c:06:a5:33:71:e0:93:36:a0:81:ee:a7:7a:fa:e9: dd:5d:62:99:20:20:d8:cb:d5:07:c3:41:61:d3:60: a5:a4:86:73:5b:6d:cd:02:7d:ab:15:d5:0a:ba:ce: 49:50:e6:de:61:c9:c7:71:66:5d:13:9f:7e:36:95: 81:cd:fd:81:43:89:de:78:41:1e:47:5a:a9:fe:30: 33:13:24:dc:7f:e7:94:1c:90:27:33:f2:0c:9a:07: c1:37:d3:e0:3c:41:b8:56:01:d1:45:9f:31:8e:ef: 9b:65:bb:8f:43:c2:f3:2a:1e:67:04:41:60:7b:f2: 50:92:69:f6:03:c1:59:bf:77:d6:3c:24:75:74:44: 30:92:35:5e:42:67:a8:18:8f:06:12:15:97:ff:55: 06:13:07:97:54:54:e5:f4:87:15:6f:20:17:e1:af: b9:c5:30:5d:20:07:c7:4b:fb:3d:40:78:29:e3:25: 4d:dd:65:d9:e5:7a:e8:33:fd:58:09:e9:e3:cf:a8: b8:df:15:c8:39:4f:df:17:f5:3e:57:ad:4b:d9:b5: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:31:F7:49:3C:8A:9A:20:21:14:A2:39:4D:84:4A:5C:9C:6B:41 X509v3 Authority Key Identifier: keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:26:a8:4e:5c:82:20:3b:5e:ed:bb:d6:a2:5d:00:9b:86:ed: c2:78:b7:70:ad:fc:57:21:e4:8d:85:39:fe:4b:54:8a:67:f0: 15:0d:12:cf:d4:f0:26:a8:7c:1a:b6:fc:9c:da:3a:79:be:c3: 38:ff:f4:08:97:78:85:f1:92:16:64:28:26:68:78:7a:bc:a2: aa:ba:d4:6e:ab:07:e3:ad:7b:3c:76:f2:5c:bf:e2:47:c5:b1: 25:25:11:f9:89:5a:23:65:ff:c7:ff:82:fd:fa:04:0f:8e:7f: 00:e1:2e:72:26:58:34:b4:26:00:de:46:c5:99:a4:11:be:0e: e5:99:b3:21:92:3d:dd:95:1c:ed:77:9d:55:e7:a3:80:d7:ee: a9:6a:e0:10:5e:aa:c2:52:95:01:10:50:3b:27:c0:f7:e0:9f: 43:c2:5a:31:4d:e8:38:97:12:44:0a:9d:f4:34:38:ec:d0:1d: f7:e1:95:71:46:ca:63:ad:72:08:be:8a:61:94:23:3c:a8:53: 3d:de:4f:42:ba:4f:18:f7:8e:69:da:ea:84:79:75:bb:14:c7: ec:e6:7f:7d:2d:46:86:b7:dc:75:f1:f2:e6:92:8f:d5:97:ed: 22:f9:89:3f:c2:e6:6a:3e:0e:f8:a0:51:b8:84:d4:86:09:70: 98:d0:bf:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCt8chOrbgJqIPn7Y3HO9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MDM1ZWM5ZGUyNTcwYzFlN2E3ZGI0MGUyNzJlNDU1NDhj OTIwMmIwHhcNMjUxMjIxMjEwMTM4WhcNMjUxMjIyMjEwMTM4WjAzMTEwLwYDVQQD EyhhOWY3MzFmNzQ5M2M4YTlhMjAyMTE0YTIzOTRkODQ0YTVjOWM2YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwVa8snUujAPQCvdaoW9OEU109d0 2oprG2+1ES0eY+udqTw4okO9LjFgv5U8BqUzceCTNqCB7qd6+undXWKZICDYy9UH w0Fh02ClpIZzW23NAn2rFdUKus5JUObeYcnHcWZdE59+NpWBzf2BQ4neeEEeR1qp /jAzEyTcf+eUHJAnM/IMmgfBN9PgPEG4VgHRRZ8xju+bZbuPQ8LzKh5nBEFge/JQ kmn2A8FZv3fWPCR1dEQwkjVeQmeoGI8GEhWX/1UGEweXVFTl9IcVbyAX4a+5xTBd IAfHS/s9QHgp4yVN3WXZ5XroM/1YCenjz6i43xXIOU/fF/U+V61L2bW0TwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKn3MfdJPIqaICEUojlNhEpcnGtBMB8GA1UdIwQY MBaAFPgDXsneJXDB56fbQOJy5FVIySArMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BTmV5ZDRsY01IbnA5dEE0bkxrVlVqSklDcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2Zl LTkyMjM4NDZmZjMwYi8xLzEtQU5leWQ0bGNNSG5wOXRBNG5Ma1ZVakpJQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzAwLzEwMTEyNi0xZDMyLTQyYTYtODdmZS05MjIzODQ2ZmYz MGIvMS8xLUFOZXlkNGxjTUhucDl0QTRuTGtWVWpKSUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCao TlyCIDte7bvWol0Am4btwni3cK38VyHkjYU5/ktUimfwFQ0Sz9TwJqh8Grb8nNo6 eb7DOP/0CJd4hfGSFmQoJmh4eryiqrrUbqsH4617PHbyXL/iR8WxJSUR+YlaI2X/ x/+C/foED45/AOEuciZYNLQmAN5GxZmkEb4O5ZmzIZI93ZUc7XedVeejgNfuqWrg EF6qwlKVARBQOyfA9+CfQ8JaMU3oOJcSRAqd9DQ47NAd9+GVcUbKY61yCL6KYZQj PKhTPd5PQrpPGPeOadrqhHl1uxTH7OZ/fS1GhrfcdfHy5pKP1ZftIvmJP8Lmaj4O +KBRuITUhglwmNC/+A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:29:46 2025 by rpki-client