This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json) Hash identifier: Zqb9IOA9qGivG6a8UZdWBk/VGcxYJe3NjaN2NUs9xmE= Subject key identifier: 2F:11:7B:DB:10:9E:B3:AA:1E:1E:37:B6:52:29:19:4D:67:03:D7:8E Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82 Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82 Certificate serial: 019B48EFD396CE3F235ADE5B8C9BE0C524EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft Manifest number: 171D Signing time: Tue 23 Dec 2025 02:00:35 +0000 Manifest this update: Tue 23 Dec 2025 02:00:35 +0000 Manifest next update: Wed 24 Dec 2025 02:00:35 +0000 Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: gnovYtWRjUTkIQi3w0MkX+/pUw2ljFSQjkfHmXtWVTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:d3:96:ce:3f:23:5a:de:5b:8c:9b:e0:c5:24:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82 Validity Not Before: Dec 23 02:00:35 2025 GMT Not After : Dec 24 02:00:35 2025 GMT Subject: CN=2f117bdb109eb3aa1e1e37b65229194d6703d78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:6f:56:9d:da:da:15:bf:69:35:f1:bb:7b: 8c:f5:91:58:a0:39:8b:58:4c:e6:a2:1f:57:c9:30: a1:ae:ac:09:68:a5:e8:aa:8d:a7:b1:8d:3d:ac:ea: 68:33:4d:67:fe:79:a1:49:94:d3:61:11:99:b9:fd: 0a:54:d2:67:27:22:02:9d:6b:66:1b:7d:8a:0a:75: 94:98:cd:5d:cf:07:27:33:e4:2f:76:11:6f:0d:b9: 93:bf:75:e9:90:9b:64:10:82:30:b4:02:64:98:02: 46:99:78:be:fb:7d:79:8a:4c:5a:b6:40:c6:c4:66: b9:9e:89:06:b0:c9:09:e6:3e:72:4b:e5:21:24:b9: 92:f9:c5:d3:27:1f:6c:99:be:82:8e:bc:4a:96:1b: 9a:9f:90:79:6d:7b:34:ed:5b:e7:17:7a:ef:20:46: 23:0e:18:9f:e0:98:d2:a9:ba:98:da:04:51:15:5e: 32:6c:d0:0e:5c:0d:fe:bb:27:71:0a:1d:86:ed:71: e3:5c:4c:f3:4b:cd:4b:f9:85:26:89:86:cb:55:46: dd:32:71:44:f9:7e:54:69:2b:b5:57:54:1a:df:3d: 67:3d:b3:f5:c4:4b:87:e8:0f:f9:5f:05:a8:c6:37: ed:9b:ed:be:f3:1b:46:bc:8c:0d:80:a9:2b:0b:84: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:11:7B:DB:10:9E:B3:AA:1E:1E:37:B6:52:29:19:4D:67:03:D7:8E X509v3 Authority Key Identifier: keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a9:00:26:54:98:88:7a:a5:c6:7e:5e:49:99:43:46:fd:82: 4b:84:d6:bb:d8:20:52:f1:a1:e7:69:e1:ec:c4:5c:d0:3f:bb: 64:84:6d:99:d8:37:da:40:83:23:8e:8d:35:26:ae:f2:b8:98: e2:fd:ed:db:73:21:4a:d2:4e:60:eb:1b:24:77:2f:57:4a:13: f5:90:01:1b:ab:77:e4:90:8c:1f:d4:a2:d4:ce:9e:45:0e:a5: 76:ea:13:5a:95:28:dc:61:71:ee:b5:ea:2d:83:32:ca:d7:82: e1:55:ad:2e:48:da:07:d2:f9:24:7e:0d:14:8f:6b:d1:2f:55: 2f:1c:17:6f:c8:cd:a1:f5:fc:73:14:0e:f2:c7:ac:e7:e2:70: 7b:9d:a8:2a:48:16:c6:45:02:c7:fb:55:19:f2:5c:af:d2:a6: f3:45:13:7b:b8:96:2b:e2:df:ed:68:8b:a1:19:71:18:ec:d3: c9:14:7d:aa:6c:8f:31:7b:6b:72:0d:0f:1c:d8:ab:ac:91:7b: b3:30:ac:b6:4b:eb:68:ce:4a:3d:1b:90:88:3b:6c:bf:29:e1: 39:89:c2:50:13:e1:6e:84:cd:01:8b:0c:87:f5:d0:52:24:a3: 14:39:a2:cb:15:f9:08:ed:d4:40:bc:8d:08:b6:a1:5a:d8:31: f2:4f:5e:61 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtI79OWzj8jWt5bjJvgxSTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMGY3ZWJkMjVmNmFmNDYzNzgyMmVmZjQ4YjI3OGIxOGM3 MDZmODIwHhcNMjUxMjIzMDIwMDM1WhcNMjUxMjI0MDIwMDM1WjAzMTEwLwYDVQQD EygyZjExN2JkYjEwOWViM2FhMWUxZTM3YjY1MjI5MTk0ZDY3MDNkNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy11vVp3a2hW/aTXxu3uM9ZFYoDmL WEzmoh9XyTChrqwJaKXoqo2nsY09rOpoM01n/nmhSZTTYRGZuf0KVNJnJyICnWtm G32KCnWUmM1dzwcnM+QvdhFvDbmTv3XpkJtkEIIwtAJkmAJGmXi++315ikxatkDG xGa5nokGsMkJ5j5yS+UhJLmS+cXTJx9smb6CjrxKlhuan5B5bXs07VvnF3rvIEYj Dhif4JjSqbqY2gRRFV4ybNAOXA3+uydxCh2G7XHjXEzzS81L+YUmiYbLVUbdMnFE +X5UaSu1V1Qa3z1nPbP1xEuH6A/5XwWoxjftm+2+8xtGvIwNgKkrC4Qh/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC8Re9sQnrOqHh43tlIpGU1nA9eOMB8GA1UdIwQY MBaAFPsPfr0l9q9GN4Iu/0iyeLGMcG+CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13OS12U1gycjBZM2dpN19TTEo0c1l4d2I0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTIwOTk3LWExZWUtNDFkZS04Nzhj LTIxODA1NDA3YjkwYy8xLzEtdzktdlNYMnIwWTNnaTdfU0xKNHNZeHdiNEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA1L2UyMDk5Ny1hMWVlLTQxZGUtODc4Yy0yMTgwNTQwN2I5 MGMvMS8xLXc5LXZTWDJyMFkzZ2k3X1NMSjRzWXh3YjRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqkA JlSYiHqlxn5eSZlDRv2CS4TWu9ggUvGh52nh7MRc0D+7ZIRtmdg32kCDI46NNSau 8riY4v3t23MhStJOYOsbJHcvV0oT9ZABG6t35JCMH9Si1M6eRQ6lduoTWpUo3GFx 7rXqLYMyyteC4VWtLkjaB9L5JH4NFI9r0S9VLxwXb8jNofX8cxQO8ses5+Jwe52o KkgWxkUCx/tVGfJcr9Km80UTe7iWK+Lf7WiLoRlxGOzTyRR9qmyPMXtrcg0PHNir rJF7szCstkvraM5KPRuQiDtsvynhOYnCUBPhboTNAYsMh/XQUiSjFDmiyxX5CO3U QLyNCLahWtgx8k9eYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:44:44 2025 by rpki-client