This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json) Hash identifier: PA6ZVJcXdBpXUUlEPVCb5BCsos3Re5CZ16bwvTIEyDg= Subject key identifier: CB:78:D1:3D:25:CC:74:83:02:99:AB:D2:BA:FB:C0:60:AF:6E:20:F6 Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Certificate serial: 019B4C96271898B7A73BC14A1627E588C1DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft Manifest number: 0416 Signing time: Tue 23 Dec 2025 19:01:07 +0000 Manifest this update: Tue 23 Dec 2025 19:01:07 +0000 Manifest next update: Wed 24 Dec 2025 19:01:07 +0000 Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: OXIR354fWTs2e1g1sP8rGsdrQvwoY8PQkOHLz/5q0XY=) 2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:27:18:98:b7:a7:3b:c1:4a:16:27:e5:88:c1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Validity Not Before: Dec 23 19:01:07 2025 GMT Not After : Dec 24 19:01:07 2025 GMT Subject: CN=cb78d13d25cc74830299abd2bafbc060af6e20f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:4f:e1:c0:fc:92:60:f9:f2:9e:f2:99:03: 79:fc:ff:fe:b7:da:a0:07:c6:ab:60:5f:8d:dc:4c: 93:d5:d2:a4:00:48:10:1c:98:b1:0e:6f:9f:3d:c0: bb:20:0f:0a:cd:3c:35:63:ac:7b:d7:f8:06:d4:b9: 6b:ad:88:af:53:32:15:ce:13:7f:9f:36:44:fe:43: 20:ad:d8:d4:2e:aa:81:2b:16:82:9e:fb:c8:2c:fb: 2c:5b:3c:fd:c2:b2:de:82:4a:e1:45:25:7d:0f:28: d2:95:c0:6c:65:a0:93:40:19:b0:e1:e1:89:3e:b9: a6:fe:c5:16:06:06:24:c4:0b:85:9f:80:fa:b3:2b: 55:d8:42:41:44:0c:f0:a5:82:77:db:4c:5c:31:33: 61:40:f7:53:4f:03:c5:df:28:fc:9f:5f:73:f3:18: 70:d8:d9:11:ce:81:a2:b1:00:bd:2b:ff:27:f8:96: 63:8a:e2:48:aa:25:5c:38:eb:28:9e:61:72:f3:32: fb:e8:5a:48:4e:47:b7:e4:2a:f9:8c:cd:80:ca:99: 46:53:ab:7f:76:60:21:5e:1b:f7:57:e5:d3:0d:e9: ff:51:4d:56:9f:17:0f:fc:57:46:fa:11:14:52:63: f9:0e:65:ec:3c:30:21:3a:7a:6a:ef:9b:49:44:3f: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:D1:3D:25:CC:74:83:02:99:AB:D2:BA:FB:C0:60:AF:6E:20:F6 X509v3 Authority Key Identifier: keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7a:98:20:1e:0a:b8:c6:84:0a:f8:c4:59:91:ec:db:c6:e6: c9:4f:5d:3d:96:c8:9f:a3:07:6d:dc:70:b5:d5:8e:1d:f9:5f: 26:1f:8a:d9:b0:79:2a:86:b2:0c:25:72:99:3a:7f:62:e0:24: f6:ec:50:fb:74:1a:e4:86:45:0a:11:0f:1a:a9:6d:dd:f7:51: 12:90:8b:19:90:29:30:0b:20:9c:7c:53:75:c6:42:6a:25:7c: 84:a0:e6:56:c9:34:d9:54:04:62:5a:fd:5a:8b:14:47:74:50: 6c:da:7a:ad:90:26:c0:dd:db:24:9f:25:7e:56:ca:24:a6:23: 1d:04:a9:92:17:46:af:09:c6:dd:65:6b:71:13:f6:64:63:e0: 80:84:fe:e0:78:3c:57:1a:32:ef:9c:88:26:ac:2c:ed:53:5a: 74:b6:d2:fa:52:dd:9a:ad:35:51:d8:31:47:54:8b:b7:83:5a: ae:7a:17:2a:78:18:f2:e8:eb:e3:e6:9b:5b:d0:7a:e6:d2:a1: f8:81:29:0d:7a:7f:2b:7b:24:bc:2b:1b:c0:49:3d:b5:04:33: 1f:d6:84:73:e2:a8:cb:12:ef:d7:a2:de:57:d7:2d:d5:f3:c7: 97:45:57:2a:e2:64:e9:46:57:09:c4:f8:f6:59:e6:bc:c1:4c: ba:56:aa:31 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtMlicYmLenO8FKFifliMHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjY0N2RmMjE4ZTJjNmYzZmQxY2Y1NDlkMjdkZjRlNTBj ZDZkYjAwHhcNMjUxMjIzMTkwMTA3WhcNMjUxMjI0MTkwMTA3WjAzMTEwLwYDVQQD EyhjYjc4ZDEzZDI1Y2M3NDgzMDI5OWFiZDJiYWZiYzA2MGFmNmUyMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13tP4cD8kmD58p7ymQN5/P/+t9qg B8arYF+N3EyT1dKkAEgQHJixDm+fPcC7IA8KzTw1Y6x71/gG1LlrrYivUzIVzhN/ nzZE/kMgrdjULqqBKxaCnvvILPssWzz9wrLegkrhRSV9DyjSlcBsZaCTQBmw4eGJ Prmm/sUWBgYkxAuFn4D6sytV2EJBRAzwpYJ320xcMTNhQPdTTwPF3yj8n19z8xhw 2NkRzoGisQC9K/8n+JZjiuJIqiVcOOsonmFy8zL76FpITke35Cr5jM2AyplGU6t/ dmAhXhv3V+XTDen/UU1WnxcP/FdG+hEUUmP5DmXsPDAhOnpq75tJRD9x4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMt40T0lzHSDApmr0rr7wGCvbiD2MB8GA1UdIwQY MBaAFPr2R98hjixvP9HPVJ0n305QzW2wMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12WkgzeUdPTEc4XzBjOVVuU2ZmVGxETmJiQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNDVhNTcyLWI4MDgtNDBmNS04YjI1 LWRkY2ExNTNhMjBhYi8xLzEtdlpIM3lHT0xHOF8wYzlVblNmZlRsRE5iYkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzQ1YTU3Mi1iODA4LTQwZjUtOGIyNS1kZGNhMTUzYTIw YWIvMS8xLXZaSDN5R09MRzhfMGM5VW5TZmZUbEROYmJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXqY IB4KuMaECvjEWZHs28bmyU9dPZbIn6MHbdxwtdWOHflfJh+K2bB5KoayDCVymTp/ YuAk9uxQ+3Qa5IZFChEPGqlt3fdREpCLGZApMAsgnHxTdcZCaiV8hKDmVsk02VQE Ylr9WosUR3RQbNp6rZAmwN3bJJ8lflbKJKYjHQSpkhdGrwnG3WVrcRP2ZGPggIT+ 4Hg8Vxoy75yIJqws7VNadLbS+lLdmq01UdgxR1SLt4NarnoXKngY8ujr4+abW9B6 5tKh+IEpDXp/K3skvCsbwEk9tQQzH9aEc+KoyxLv16LeV9ct1fPHl0VXKuJk6UZX CcT49lnmvMFMulaqMQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:58 2025 by rpki-client