This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: kYQQ+Fo3t92BoM/+HTsKmkBbquxLWYfa+FnfU2MKFV4= Subject key identifier: 2B:FE:A9:9B:DE:43:BF:2A:72:46:F3:EE:89:64:9F:99:BB:09:00:9F Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019B39EAB328417BEB1A226C8EF3C0E154FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0421 Signing time: Sat 20 Dec 2025 04:00:41 +0000 Manifest this update: Sat 20 Dec 2025 04:00:41 +0000 Manifest next update: Sun 21 Dec 2025 04:00:41 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: GUE77l/wHz7pP3ZNjBuB9iK6Lnmc//f13VtKjHWA5P4=) 2: 3GUm_HsThPUJjf5Xl65FHt13AV8.roa (hash: Lhftb+taQ8v4bYwk3pVYGnzP3vZQbnGHWFTFTRUD1PM=) 3: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=) 4: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 5: Ft-8xYXFXF_pxWdqchjDObURQAQ.roa (hash: Bbe7isVG2thClqzLz0laVwUWwhKyZ8mXmscJ7ADBYEc=) 6: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 7: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 8: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 9: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 10: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=) 11: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 12: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:b3:28:41:7b:eb:1a:22:6c:8e:f3:c0:e1:54:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Dec 20 04:00:41 2025 GMT Not After : Dec 21 04:00:41 2025 GMT Subject: CN=2bfea99bde43bf2a7246f3ee89649f99bb09009f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:07:2e:f7:06:15:fc:ad:f7:a7:c7:c6:d7: ba:ee:c0:f3:53:74:88:f7:63:bb:d0:95:c4:9d:c9: b2:25:53:1f:7b:d9:ac:54:e8:91:70:48:36:76:c7: 0a:4c:93:b5:b1:e8:e7:bd:77:31:27:2a:d2:1a:cd: 74:c9:34:15:20:8a:53:90:5c:ba:93:37:60:c1:62: 80:7e:4d:7f:a5:91:f0:8a:c5:f5:59:a8:c2:09:fa: 68:ac:97:86:dd:ec:9e:0f:9f:b5:30:e2:8d:ec:8f: c3:f7:9c:b0:56:5a:da:50:23:a3:67:1a:02:06:2a: e6:dc:45:25:07:44:9d:66:c0:5e:e8:33:5b:b8:db: ad:0b:05:55:08:c7:8e:c3:0b:4a:b4:ce:9d:63:d9: 89:9c:eb:da:b6:36:71:0f:fe:a0:4e:df:25:27:d9: 7d:68:42:c2:94:c5:05:be:e5:13:b9:df:e9:c9:a1: 8a:e8:50:9b:88:24:bc:84:bc:ea:e3:4e:49:9b:cb: 28:30:08:bf:dc:3e:36:64:4f:67:d9:31:a1:59:ab: 1d:ac:03:a4:06:e1:1a:be:2e:4b:26:c4:9c:f2:23: 04:ac:a5:38:44:14:2f:cb:91:b9:b0:61:13:ec:5e: 45:73:0c:81:33:5c:b4:56:a1:23:e0:8f:8d:ae:6b: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:A9:9B:DE:43:BF:2A:72:46:F3:EE:89:64:9F:99:BB:09:00:9F X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:92:21:0a:4c:cc:e4:8f:c7:5b:27:34:06:8d:1f:19:75:f8: e2:f3:b3:c0:bf:96:e2:17:42:b0:54:cb:c7:aa:c8:2c:ab:b5: 10:77:25:2b:0a:cb:91:9f:da:14:fe:b2:8e:19:cf:ec:37:67: 39:98:01:77:c9:46:bb:4a:02:f8:76:66:d7:10:72:c2:c4:72: 09:0e:81:5b:4d:5e:58:57:c3:69:a3:d9:90:68:b4:15:72:a2: c4:48:89:99:bf:14:31:25:18:71:42:d1:a0:1f:ac:71:6f:fb: 11:39:9b:d8:f7:4f:60:06:90:2b:b5:67:d8:9c:69:39:bf:a0: ff:c1:bf:9f:85:4c:0d:e9:04:81:ae:64:e2:1b:10:a5:d9:36: 03:fe:99:a8:61:ba:84:9f:cb:e7:d2:22:8e:f3:0e:4a:45:63: d6:ba:25:fa:34:b9:22:6e:a1:57:d4:94:43:8c:c8:4e:45:c8: fd:51:1c:9d:7f:51:8a:34:55:73:a3:12:21:de:68:b5:c7:eb: 00:23:7d:2a:ef:30:61:b6:a0:85:f2:9c:33:09:9b:d5:0a:d5: b8:6e:41:5e:29:4a:cb:fa:79:a8:77:0e:fc:22:10:09:27:2d: b3:fb:1b:a8:f3:ed:6f:fb:14:2f:b4:4a:aa:b8:e2:35:91:fd: 67:db:6f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56rMoQXvrGiJsjvPA4VT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUxMjIwMDQwMDQxWhcNMjUxMjIxMDQwMDQxWjAzMTEwLwYDVQQD EygyYmZlYTk5YmRlNDNiZjJhNzI0NmYzZWU4OTY0OWY5OWJiMDkwMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTwHLvcGFfyt96fHxte67sDzU3SI 92O70JXEncmyJVMfe9msVOiRcEg2dscKTJO1sejnvXcxJyrSGs10yTQVIIpTkFy6 kzdgwWKAfk1/pZHwisX1WajCCfporJeG3eyeD5+1MOKN7I/D95ywVlraUCOjZxoC Birm3EUlB0SdZsBe6DNbuNutCwVVCMeOwwtKtM6dY9mJnOvatjZxD/6gTt8lJ9l9 aELClMUFvuUTud/pyaGK6FCbiCS8hLzq405Jm8soMAi/3D42ZE9n2TGhWasdrAOk BuEavi5LJsSc8iMErKU4RBQvy5G5sGET7F5FcwyBM1y0VqEj4I+Nrms1pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv+qZveQ78qckbz7olkn5m7CQCfMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZIhCkzM 5I/HWyc0Bo0fGXX44vOzwL+W4hdCsFTLx6rILKu1EHclKwrLkZ/aFP6yjhnP7Ddn OZgBd8lGu0oC+HZm1xBywsRyCQ6BW01eWFfDaaPZkGi0FXKixEiJmb8UMSUYcULR oB+scW/7ETmb2PdPYAaQK7Vn2JxpOb+g/8G/n4VMDekEga5k4hsQpdk2A/6ZqGG6 hJ/L59IijvMOSkVj1rol+jS5Im6hV9SUQ4zITkXI/VEcnX9RijRVc6MSId5otcfr ACN9Ku8wYbaghfKcMwmb1QrVuG5BXilKy/p5qHcO/CIQCScts/sbqPPtb/sUL7RK qrjiNZH9Z9tvqg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:41:38 2025 by rpki-client