This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft File: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json) Hash identifier: 8/D4BogIA5eNagWwmljVpfq0CwUFE5O/XFIaquPpWeE= Subject key identifier: C4:B3:D2:97:B0:85:3F:B3:38:98:F2:A5:FE:E2:1F:A3:15:7F:E5:54 Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Certificate serial: 019B522A8CD5EB820D2F4241C4FA2A684697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft Manifest number: 0AD3 Signing time: Wed 24 Dec 2025 21:01:18 +0000 Manifest this update: Wed 24 Dec 2025 21:01:18 +0000 Manifest next update: Thu 25 Dec 2025 21:01:18 +0000 Files and hashes: 1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: whoJIH9iW+bLDBjqkzb3zRDJowMcSMoH/vZu36PZCM0=) 2: REskoa14BgJkhUCvWjHx9eaTd20.roa (hash: xil3JLcrx1++eWENxWi8v9S+saZS2Aj8jUHaFwQUcf4=) 3: UMf4KbahVEx8sqhbE5i5BsC3FsA.roa (hash: tXmMZLhWuik4iB1zgaI4TBIGH/BwZuH+iewbZQIYmmk=) 4: YxylaQOafZhI24pv2ROMkb6L8uQ.roa (hash: zhgD7wCyXnWilojWXPMdeWuf8dVD/porAHOT4NA/gWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:8c:d5:eb:82:0d:2f:42:41:c4:fa:2a:68:46:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Validity Not Before: Dec 24 21:01:18 2025 GMT Not After : Dec 25 21:01:18 2025 GMT Subject: CN=c4b3d297b0853fb33898f2a5fee21fa3157fe554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:46:22:1f:12:c2:2f:7b:07:41:71:36:20: 7c:ac:ea:21:7d:a3:f0:58:46:68:91:e0:25:4a:8f: a2:4f:86:95:83:73:e7:02:9e:b8:1c:04:a6:63:73: 36:ee:a8:02:90:9a:2d:de:ed:10:71:ff:e3:23:10: cf:6e:cb:a1:d4:25:80:12:31:af:2f:fd:8d:71:df: ec:74:43:e0:63:2b:76:fb:ed:05:f1:8c:09:2d:1b: 4c:33:e7:33:c6:e3:64:18:9c:b1:de:0d:9a:97:76: 48:8d:d6:7e:dd:ba:82:4d:e2:d4:f5:f7:cc:e4:14: 11:0c:16:e9:07:a1:ab:ff:b2:4f:b6:3e:66:14:6e: 91:4a:cf:ed:3a:db:0c:b5:fa:82:95:05:aa:19:91: 18:e3:dc:0d:fa:aa:e3:a1:14:9a:a7:75:c8:f1:26: dc:44:2e:1c:5a:34:76:05:de:29:bb:89:ef:0e:1d: b1:21:e5:dd:f3:2d:0f:ae:44:f8:87:f1:28:bb:12: 11:99:f4:e7:f4:65:1d:1b:44:4a:cd:4a:3c:ea:02: 6b:17:d0:e3:3a:88:b6:f2:47:2f:d8:00:ca:51:86: 73:2d:7c:13:e0:65:e1:f6:51:6e:d9:02:58:f9:c4: 46:81:90:0b:1b:91:61:4f:6f:81:bc:57:ce:5b:cc: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B3:D2:97:B0:85:3F:B3:38:98:F2:A5:FE:E2:1F:A3:15:7F:E5:54 X509v3 Authority Key Identifier: keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7a:db:52:54:34:f0:b4:e0:71:a3:c8:ca:1d:67:3a:04:f4: 2c:37:cc:6b:cf:84:1e:c5:49:00:e7:db:9d:5d:57:4d:42:20: 57:84:0d:de:ae:08:4e:6f:8b:a8:2b:2d:c9:0f:32:13:88:21: 96:6b:f4:9d:3a:ea:be:16:f6:88:2f:af:4e:25:22:2e:c1:4e: e7:fb:57:63:65:04:7f:fa:8b:f0:7a:91:19:f2:1c:c0:5d:65: ec:1d:00:b5:de:45:c1:eb:92:98:42:28:6f:11:4f:3b:13:a1: 8c:5c:ad:64:91:10:9a:3f:bd:2e:38:86:7b:b0:03:5c:6d:0b: ff:95:9a:5b:cf:93:7b:a7:6e:76:19:61:da:59:12:aa:48:68: 99:df:ed:2a:f4:55:45:a0:6c:d6:74:12:e0:b0:1c:f1:35:4b: 93:d2:e3:3a:bf:5c:9f:c7:f4:f2:ea:d0:d3:62:8a:4b:14:82: 9a:4a:09:11:42:2f:a6:a1:4d:2f:09:c4:7b:1e:62:73:9f:72: c8:b6:97:6f:c5:d1:46:fc:20:66:80:e6:97:f7:4b:09:55:9c: 7d:0a:c5:51:61:36:35:63:94:5a:18:5e:39:2c:8c:24:3c:55: f9:11:da:31:07:d6:ff:53:94:5e:0b:bb:3f:e8:b3:9d:4c:30: 8a:b8:f5:92 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtSKozV64INL0JBxPoqaEaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MDM1ZWM5ZGUyNTcwYzFlN2E3ZGI0MGUyNzJlNDU1NDhj OTIwMmIwHhcNMjUxMjI0MjEwMTE4WhcNMjUxMjI1MjEwMTE4WjAzMTEwLwYDVQQD EyhjNGIzZDI5N2IwODUzZmIzMzg5OGYyYTVmZWUyMWZhMzE1N2ZlNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKRGIh8Swi97B0FxNiB8rOohfaPw WEZokeAlSo+iT4aVg3PnAp64HASmY3M27qgCkJot3u0Qcf/jIxDPbsuh1CWAEjGv L/2Ncd/sdEPgYyt2++0F8YwJLRtMM+czxuNkGJyx3g2al3ZIjdZ+3bqCTeLU9ffM 5BQRDBbpB6Gr/7JPtj5mFG6RSs/tOtsMtfqClQWqGZEY49wN+qrjoRSap3XI8Sbc RC4cWjR2Bd4pu4nvDh2xIeXd8y0PrkT4h/EouxIRmfTn9GUdG0RKzUo86gJrF9Dj Ooi28kcv2ADKUYZzLXwT4GXh9lFu2QJY+cRGgZALG5FhT2+BvFfOW8wrTQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMSz0pewhT+zOJjypf7iH6MVf+VUMB8GA1UdIwQY MBaAFPgDXsneJXDB56fbQOJy5FVIySArMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BTmV5ZDRsY01IbnA5dEE0bkxrVlVqSklDcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2Zl LTkyMjM4NDZmZjMwYi8xLzEtQU5leWQ0bGNNSG5wOXRBNG5Ma1ZVakpJQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzAwLzEwMTEyNi0xZDMyLTQyYTYtODdmZS05MjIzODQ2ZmYz MGIvMS8xLUFOZXlkNGxjTUhucDl0QTRuTGtWVWpKSUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHrb UlQ08LTgcaPIyh1nOgT0LDfMa8+EHsVJAOfbnV1XTUIgV4QN3q4ITm+LqCstyQ8y E4ghlmv0nTrqvhb2iC+vTiUiLsFO5/tXY2UEf/qL8HqRGfIcwF1l7B0Atd5FweuS mEIobxFPOxOhjFytZJEQmj+9LjiGe7ADXG0L/5WaW8+Te6dudhlh2lkSqkhomd/t KvRVRaBs1nQS4LAc8TVLk9LjOr9cn8f08urQ02KKSxSCmkoJEUIvpqFNLwnEex5i c59yyLaXb8XRRvwgZoDml/dLCVWcfQrFUWE2NWOUWhheOSyMJDxV+RHaMQfW/1OU Xgu7P+iznUwwirj1kg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:33:51 2025 by rpki-client