This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json) Hash identifier: aQK1VzlaLMEasglp5M2V9dFmnKyWmU88Rec/STN7ZeM= Subject key identifier: F6:CA:4F:0C:37:D5:E1:FF:4D:B6:64:A5:AB:2E:90:13:58:35:9C:AE Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76 Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576 Certificate serial: 019B5FAF80A91D3FBFF96AB1725BCBEE71E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 12:01:35 +0000 Manifest this update: Sat 27 Dec 2025 12:01:35 +0000 Manifest next update: Sun 28 Dec 2025 12:01:35 +0000 Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: 1d4esZ9UIQBFSJlmA41y4ZXre9QPiLYy1T5g/HvI3Rg=) 2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=) 3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:80:a9:1d:3f:bf:f9:6a:b1:72:5b:cb:ee:71:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576 Validity Not Before: Dec 27 12:01:35 2025 GMT Not After : Dec 28 12:01:35 2025 GMT Subject: CN=f6ca4f0c37d5e1ff4db664a5ab2e901358359cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:e7:9a:01:f7:33:6b:15:fd:54:eb:f5:bc: 3f:b4:82:56:46:51:e4:30:6e:a1:9e:aa:af:bf:cf: bc:38:20:58:4c:46:92:b5:2a:fa:f9:65:fe:ff:33: a1:54:01:84:b0:7a:b6:db:da:48:87:74:77:c4:71: 5f:90:c5:a0:63:d9:28:22:fd:4d:37:cf:61:2a:6a: 73:44:bb:7c:b9:97:0a:af:60:4f:89:06:2d:bf:29: 0a:42:f6:04:22:89:67:eb:7d:b0:48:0c:3c:74:f1: df:05:72:3b:56:59:03:ce:79:80:8b:9b:4e:48:2c: fc:aa:60:ed:d7:68:a3:fd:4d:5c:e5:39:74:15:3f: 8e:e1:7c:40:fd:7e:50:7d:9d:93:71:71:bd:88:3c: d9:23:5b:16:eb:51:14:1a:5e:84:41:05:dd:2a:dc: 6b:ff:75:b7:33:51:74:d8:66:be:30:89:cf:b1:70: 55:1e:8d:18:6e:79:c2:45:e6:22:f4:47:af:eb:36: d3:28:69:3e:fd:55:b4:a7:9b:45:01:ae:54:56:17: 01:ff:90:5e:a0:e4:cb:26:85:18:37:c6:a5:2e:9a: ef:01:f3:9c:1d:f9:df:5d:06:20:02:ea:06:e1:6e: ac:0d:95:d5:3d:9a:a4:2b:6c:91:b2:dd:20:94:3a: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CA:4F:0C:37:D5:E1:FF:4D:B6:64:A5:AB:2E:90:13:58:35:9C:AE X509v3 Authority Key Identifier: keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1b:81:8f:79:4c:56:8b:25:24:55:b6:ab:07:7d:f5:14:b3: d0:4b:10:54:fa:89:d0:ed:c3:03:2d:0d:52:f1:c2:dc:0d:57: b5:24:1d:6a:53:65:44:ec:a3:44:6f:1f:ea:dd:27:f3:aa:b4: 6d:6b:23:29:16:57:26:a8:35:2b:b5:38:6f:48:86:58:d5:c0: 42:78:01:9f:61:8b:d3:40:88:19:35:93:dd:89:3e:e3:30:74: a3:ae:39:ab:cc:69:8d:a4:62:14:a8:eb:c8:42:c2:77:7b:8f: f5:23:ec:f6:7f:d4:31:04:8d:0d:1d:05:48:89:c4:af:d8:66: 11:4d:11:92:6c:86:45:54:94:cf:66:cb:97:45:93:84:aa:2e: e7:d0:62:13:78:7f:37:59:7f:15:e7:77:f5:e2:8f:6e:ca:c6: 50:e0:70:80:fd:e7:b7:6a:a2:78:ef:85:49:4e:1f:15:17:56: 3f:13:21:2f:8e:4c:1a:fb:2e:92:0b:56:74:78:cf:5e:cf:dd: 17:45:ba:2d:47:35:db:8f:5c:a6:ac:9a:25:14:ae:41:d4:8b: a0:ae:c8:31:b7:c8:47:cd:a0:84:10:53:96:35:2a:49:ca:32: 38:52:fe:29:7e:8e:9c:e4:ef:c2:9c:c3:75:d0:cb:6c:b5:18: da:b1:6a:56 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtfr4CpHT+/+WqxclvL7nHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDNlOWRhZWRiNmJhNDI2YjY4MTZkMWM5MGYzNzkyMjNi ZTc1NzYwHhcNMjUxMjI3MTIwMTM1WhcNMjUxMjI4MTIwMTM1WjAzMTEwLwYDVQQD EyhmNmNhNGYwYzM3ZDVlMWZmNGRiNjY0YTVhYjJlOTAxMzU4MzU5Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1fnmgH3M2sV/VTr9bw/tIJWRlHk MG6hnqqvv8+8OCBYTEaStSr6+WX+/zOhVAGEsHq229pIh3R3xHFfkMWgY9koIv1N N89hKmpzRLt8uZcKr2BPiQYtvykKQvYEIoln632wSAw8dPHfBXI7VlkDznmAi5tO SCz8qmDt12ij/U1c5Tl0FT+O4XxA/X5QfZ2TcXG9iDzZI1sW61EUGl6EQQXdKtxr /3W3M1F02Ga+MInPsXBVHo0YbnnCReYi9Eev6zbTKGk+/VW0p5tFAa5UVhcB/5Be oOTLJoUYN8alLprvAfOcHfnfXQYgAuoG4W6sDZXVPZqkK2yRst0glDpHkwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPbKTww31eH/TbZkpasukBNYNZyuMB8GA1UdIwQY MBaAFPjT6drttrpCa2gW0ckPN5IjvnV2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUHAydTIydWtKcmFCYlJ5UTgza2lPLWRYWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMjI4ZjM0LTM1NjMtNDRkNC04ZmZi LTZiMzI3M2YzNDRmMy8xLzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0 ZjMvMS8xLU5QcDJ1MjJ1a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhuB j3lMVoslJFW2qwd99RSz0EsQVPqJ0O3DAy0NUvHC3A1XtSQdalNlROyjRG8f6t0n 86q0bWsjKRZXJqg1K7U4b0iGWNXAQngBn2GL00CIGTWT3Yk+4zB0o645q8xpjaRi FKjryELCd3uP9SPs9n/UMQSNDR0FSInEr9hmEU0RkmyGRVSUz2bLl0WThKou59Bi E3h/N1l/Fed39eKPbsrGUOBwgP3nt2qieO+FSU4fFRdWPxMhL45MGvsukgtWdHjP Xs/dF0W6LUc1249cpqyaJRSuQdSLoK7IMbfIR82ghBBTljUqScoyOFL+KX6OnOTv wpzDddDLbLUY2rFqVg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:48:37 2025 by rpki-client