This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json) Hash identifier: LjuAv1PKIxbaXxBPyFaLW/Ga+WxJyPlcQHdX5b5qUBg= Subject key identifier: CD:F0:AD:E0:65:D0:1B:41:70:B9:AA:A0:0C:BD:09:AB:FB:40:9D:47 Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70 Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470 Certificate serial: 019B52CEEF207C967A9DD46C5DED68D60B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft Manifest number: 0BBF Signing time: Thu 25 Dec 2025 00:00:51 +0000 Manifest this update: Thu 25 Dec 2025 00:00:51 +0000 Manifest next update: Fri 26 Dec 2025 00:00:51 +0000 Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: DrgZ2rFstU/ZcffUIUwB6P4TgrUZWwVINtMEAlZHwrI=) 2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=) 3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:ef:20:7c:96:7a:9d:d4:6c:5d:ed:68:d6:0b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470 Validity Not Before: Dec 25 00:00:51 2025 GMT Not After : Dec 26 00:00:51 2025 GMT Subject: CN=cdf0ade065d01b4170b9aaa00cbd09abfb409d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:f3:ff:0f:8a:f6:b0:73:74:9b:e7:d7:57: 0c:db:30:a2:87:bc:3e:30:0c:d6:f0:db:3e:51:29: 05:18:e2:96:12:b1:f5:6b:0b:4b:a6:75:9e:f2:6f: df:cb:e3:68:8c:25:c2:ee:c6:5a:da:3b:78:21:ca: ea:f5:bc:3c:0f:37:62:33:54:a7:4c:7c:7e:66:28: ba:10:4d:c6:51:27:d2:31:c3:68:04:8a:6b:45:53: d9:6e:2a:59:53:11:f2:d9:1e:1f:59:b8:cd:cc:5b: ca:89:e0:31:1b:cf:10:60:17:b7:38:57:b7:dd:bf: c7:76:72:a7:19:e4:da:14:09:8a:84:fe:4a:74:bb: ef:17:cd:cd:3f:65:23:6f:83:3a:61:a3:27:53:a5: 99:e3:77:72:86:7e:a9:1d:db:db:64:a1:1b:17:60: 54:fa:ff:06:cd:d8:8f:59:88:a3:73:aa:1d:ac:9e: 02:e2:8d:89:a7:7f:73:b2:75:06:8c:b9:c8:be:06: 33:81:fc:32:4b:c6:20:9a:be:01:45:57:40:a1:0c: e3:68:fa:1e:69:6b:2c:e4:53:49:f6:b7:f2:0d:fd: 68:13:c5:6d:e3:05:62:8e:06:89:1e:29:96:35:bb: 56:cd:b0:72:b9:2c:bd:fd:78:b1:30:92:5e:50:b5: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:AD:E0:65:D0:1B:41:70:B9:AA:A0:0C:BD:09:AB:FB:40:9D:47 X509v3 Authority Key Identifier: keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:54:7d:f6:04:ff:99:8c:6e:f5:e6:c0:83:9c:13:b5:e6:d5: 63:db:86:33:16:18:af:ff:a3:31:0d:a6:a2:75:24:20:8d:3f: 87:3b:34:3d:85:58:ea:87:f1:9d:47:c5:bc:c0:1f:cd:55:97: f2:7e:25:44:0a:14:47:a1:b4:42:53:83:46:71:49:dd:5d:e8: 3b:de:ce:c6:af:e0:13:50:55:8d:84:25:25:c2:48:78:4e:82: 96:8f:b8:0f:5e:d9:33:bf:80:5d:7a:aa:38:88:a3:15:bc:8d: 0c:c0:0d:a0:91:8f:3d:99:0c:96:61:cc:4c:43:96:55:d7:a8: 3e:64:0e:5b:d9:4b:07:40:5d:7f:8f:84:b8:c8:85:f9:f1:e1: a3:9e:25:aa:ad:73:c8:ee:a0:12:19:02:fd:60:c5:9a:2e:ec: 4a:f8:39:b5:f7:05:89:39:32:43:ab:51:d2:4c:b0:9b:73:de: 1c:cd:a3:e2:b9:62:2f:de:bd:40:b9:e3:6b:3a:3b:64:07:f9: 5a:bf:f5:d4:98:78:7b:93:ff:ff:4e:f2:37:a0:f3:ed:28:f1: 55:a1:d9:d1:71:12:53:f9:5a:41:aa:fa:0a:5e:dc:01:51:44: 1c:e2:a4:ce:56:e1:b0:82:e6:6d:2f:66:ca:23:6b:ac:7b:74: 57:aa:ef:97 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtSzu8gfJZ6ndRsXe1o1gtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj MDM0NzAwHhcNMjUxMjI1MDAwMDUxWhcNMjUxMjI2MDAwMDUxWjAzMTEwLwYDVQQD EyhjZGYwYWRlMDY1ZDAxYjQxNzBiOWFhYTAwY2JkMDlhYmZiNDA5ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIjz/w+K9rBzdJvn11cM2zCih7w+ MAzW8Ns+USkFGOKWErH1awtLpnWe8m/fy+NojCXC7sZa2jt4Icrq9bw8DzdiM1Sn THx+Zii6EE3GUSfSMcNoBIprRVPZbipZUxHy2R4fWbjNzFvKieAxG88QYBe3OFe3 3b/HdnKnGeTaFAmKhP5KdLvvF83NP2Ujb4M6YaMnU6WZ43dyhn6pHdvbZKEbF2BU +v8GzdiPWYijc6odrJ4C4o2Jp39zsnUGjLnIvgYzgfwyS8Ygmr4BRVdAoQzjaPoe aWss5FNJ9rfyDf1oE8Vt4wVijgaJHimWNbtWzbByuSy9/XixMJJeULXM8QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM3wreBl0BtBcLmqoAy9Cav7QJ1HMB8GA1UdIwQY MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0 LWI4MThmYWVjYjcxNy8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA3LzZhM2YzNS0zNWI4LTQ5ZTAtOWY0NC1iODE4ZmFlY2I3 MTcvMS8xLWs1QVUxbWlFeGNJX0FKRGpVY2xhT0xBTkhBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1R9 9gT/mYxu9ebAg5wTtebVY9uGMxYYr/+jMQ2monUkII0/hzs0PYVY6ofxnUfFvMAf zVWX8n4lRAoUR6G0QlODRnFJ3V3oO97Oxq/gE1BVjYQlJcJIeE6Clo+4D17ZM7+A XXqqOIijFbyNDMANoJGPPZkMlmHMTEOWVdeoPmQOW9lLB0Bdf4+EuMiF+fHho54l qq1zyO6gEhkC/WDFmi7sSvg5tfcFiTkyQ6tR0kywm3PeHM2j4rliL969QLnjazo7 ZAf5Wr/11Jh4e5P//07yN6Dz7SjxVaHZ0XESU/laQar6Cl7cAVFEHOKkzlbhsILm bS9myiNrrHt0V6rvlw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:24:49 2025 by rpki-client