This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json) Hash identifier: QyRD1tERlZ/dOa68p6Ehy6RzLZFdh/uJyMofqFr01C8= Subject key identifier: DD:44:B8:BE:BD:29:48:9C:EA:C3:2E:C1:49:0A:51:5D:81:37:69:2B Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Certificate serial: 019B6AD73E89BB8B9DE14844FE2B422EE093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft Manifest number: 1687 Signing time: Mon 29 Dec 2025 16:00:49 +0000 Manifest this update: Mon 29 Dec 2025 16:00:49 +0000 Manifest next update: Tue 30 Dec 2025 16:00:49 +0000 Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: 5/WIdY/0zhf11cn9DJJcLvR9I5i5CB6TfSu/SLaz+XQ=) 2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:3e:89:bb:8b:9d:e1:48:44:fe:2b:42:2e:e0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Validity Not Before: Dec 29 16:00:49 2025 GMT Not After : Dec 30 16:00:49 2025 GMT Subject: CN=dd44b8bebd29489ceac32ec1490a515d8137692b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:e9:b2:6f:88:bb:73:80:80:a1:0a:ae:16: e3:52:05:31:46:1f:50:1e:46:fe:ba:6d:ac:1b:27: e6:05:2f:fa:37:ec:b2:b1:39:b9:bb:fe:ad:f2:af: 51:90:3c:5a:44:60:27:2d:9f:2c:cf:7f:02:88:51: df:3c:c8:ec:2f:54:9e:17:18:37:6a:ef:28:af:18: ab:4f:b3:99:89:d9:e4:00:8c:44:16:39:e4:1f:6e: 74:e1:d2:e9:71:21:e7:c9:55:9d:7d:b6:0c:ea:e9: 2c:60:a4:cd:1e:ca:5b:e1:3f:5f:dd:b7:b6:fc:f8: 2c:aa:34:3f:fe:b9:91:07:60:5b:96:63:bf:35:11: 63:c4:a3:00:f5:29:d8:ee:b1:0f:c2:18:50:3d:68: d2:e2:90:52:bb:b0:d8:6a:59:96:e9:88:bd:1c:39: 87:93:7f:40:90:c5:92:83:39:cd:3c:5f:de:12:80: 53:04:9a:07:72:67:2a:2d:7a:d0:25:aa:10:b9:0a: 08:04:81:15:47:1c:e0:30:53:67:01:64:64:a6:12: b2:b2:99:f7:6c:ab:b8:1a:63:f5:ce:43:bd:17:28: 5f:0f:f7:f3:27:8e:3d:45:c9:24:6b:5b:d7:0b:9b: 83:e4:57:f4:3c:7a:fa:ad:f5:6d:c4:2b:27:d4:f1: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:44:B8:BE:BD:29:48:9C:EA:C3:2E:C1:49:0A:51:5D:81:37:69:2B X509v3 Authority Key Identifier: keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:d9:11:53:33:5f:57:66:f5:14:ec:3e:76:d0:ca:e4:e3: 3f:01:0e:06:09:76:e0:f8:42:6e:b7:a5:51:c6:c2:7a:a3:70: db:20:b5:50:2e:f8:3a:d8:07:15:9f:72:80:9a:00:87:0e:09: 01:db:5c:86:35:49:31:89:db:8c:cc:1b:fa:3f:88:09:cd:c4: ff:d3:0c:1a:d7:68:50:67:14:76:26:84:53:85:b9:b9:ac:05: 8c:a8:a0:8d:c5:dc:28:76:12:72:1f:a4:90:07:f4:57:28:b8: 2c:4b:be:d3:97:68:b8:2c:e5:15:76:36:56:68:52:cb:e5:20: 1e:13:d0:40:59:07:e5:14:1e:55:e0:e5:b1:a3:6c:80:fe:4d: 8b:64:c1:e4:7a:8e:e8:40:68:2a:7c:18:67:c4:78:d2:50:2a: 4b:68:90:f5:50:f4:9d:99:fb:03:8a:47:1a:57:c8:0b:8e:63: 64:93:2c:dc:1b:b9:76:2c:d8:50:de:b9:8a:4e:b7:56:b7:72: eb:35:8a:fd:4a:20:72:3a:98:22:1a:e6:5f:e5:6a:40:55:15: 3b:97:72:ac:7b:9a:8b:67:ee:8d:9f:cd:63:01:f3:ab:7c:ae: 64:60:db:0a:b5:75:0e:a2:20:53:0c:f6:3a:92:84:c7:5c:ee: 85:f0:de:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1z6Ju4ud4UhE/itCLuCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx MTY2NDQwHhcNMjUxMjI5MTYwMDQ5WhcNMjUxMjMwMTYwMDQ5WjAzMTEwLwYDVQQD EyhkZDQ0YjhiZWJkMjk0ODljZWFjMzJlYzE0OTBhNTE1ZDgxMzc2OTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhXpsm+Iu3OAgKEKrhbjUgUxRh9Q Hkb+um2sGyfmBS/6N+yysTm5u/6t8q9RkDxaRGAnLZ8sz38CiFHfPMjsL1SeFxg3 au8orxirT7OZidnkAIxEFjnkH2504dLpcSHnyVWdfbYM6uksYKTNHspb4T9f3be2 /PgsqjQ//rmRB2BblmO/NRFjxKMA9SnY7rEPwhhQPWjS4pBSu7DYalmW6Yi9HDmH k39AkMWSgznNPF/eEoBTBJoHcmcqLXrQJaoQuQoIBIEVRxzgMFNnAWRkphKyspn3 bKu4GmP1zkO9FyhfD/fzJ449Rckka1vXC5uD5Ff0PHr6rfVtxCsn1PFmowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1EuL69KUic6sMuwUkKUV2BN2krMB8GA1UdIwQY MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxnZEVMz X1dm9RTsPnbQyuTjPwEOBgl24PhCbrelUcbCeqNw2yC1UC74OtgHFZ9ygJoAhw4J AdtchjVJMYnbjMwb+j+ICc3E/9MMGtdoUGcUdiaEU4W5uawFjKigjcXcKHYSch+k kAf0Vyi4LEu+05douCzlFXY2VmhSy+UgHhPQQFkH5RQeVeDlsaNsgP5Ni2TB5HqO 6EBoKnwYZ8R40lAqS2iQ9VD0nZn7A4pHGlfIC45jZJMs3Bu5dizYUN65ik63Vrdy 6zWK/UogcjqYIhrmX+VqQFUVO5dyrHuai2fujZ/NYwHzq3yuZGDbCrV1DqIgUwz2 OpKEx1zuhfDeqA== -----END CERTIFICATE-----Generated at Mon Dec 29 17:44:41 2025 by rpki-client