This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json) Hash identifier: Pqh3T8KOJJ1zV9neJXnDqF2WsJ9vPO5b8p2lvi98JJE= Subject key identifier: E0:74:1F:B0:AA:ED:77:F2:A6:0B:04:D2:5B:9F:DF:7F:88:AB:98:86 Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd Certificate serial: 019B53AC62BA71D76D7272AF319D4FF4A1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft Manifest number: 1245 Signing time: Thu 25 Dec 2025 04:02:44 +0000 Manifest this update: Thu 25 Dec 2025 04:02:44 +0000 Manifest next update: Fri 26 Dec 2025 04:02:44 +0000 Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=) 2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: BYcWEgwajcY7ONaWA0DvsbQL6QncwbMiHIe2eYYbhlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:62:ba:71:d7:6d:72:72:af:31:9d:4f:f4:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd Validity Not Before: Dec 25 04:02:44 2025 GMT Not After : Dec 26 04:02:44 2025 GMT Subject: CN=e0741fb0aaed77f2a60b04d25b9fdf7f88ab9886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:f8:60:ca:16:fb:2b:0e:40:bc:5f:b3:2c: 9a:c8:bb:55:a6:69:0a:3b:1f:3e:99:62:c5:bb:b3: bf:c8:3a:cd:f0:3e:6d:a5:3a:db:b8:2a:7b:9a:93: 8d:a2:75:87:ae:30:9c:18:04:6c:a0:48:cd:55:f2: 7a:e8:06:26:80:31:9f:44:4f:5f:cf:53:43:79:99: 26:1f:85:7e:f9:68:d8:e0:db:97:a5:bf:f1:15:be: ed:1b:37:7f:ff:de:32:6a:33:43:33:e3:d0:4c:6e: b5:7c:d1:7f:f4:e6:d5:b4:32:ce:5a:40:a4:2e:78: fa:6c:33:0c:b4:95:80:1e:7f:e7:96:ad:00:46:83: 79:7b:5c:5f:5f:02:44:51:7c:fe:3d:3a:ba:aa:c2: c4:94:97:ec:3c:3f:0b:f3:0e:8a:a6:43:32:e6:54: 9c:7c:d8:c4:a5:be:25:dd:7a:8d:71:0c:b7:37:1f: c4:ca:77:07:4d:f0:07:eb:84:4e:e0:77:7b:9f:cf: 91:d4:b7:fe:39:3b:01:b1:e3:6d:75:f6:7d:0a:55: 43:1e:9b:7a:8c:5e:1b:e2:69:0e:aa:41:3d:35:84: a1:88:6e:77:cd:25:ad:71:ae:03:e4:10:5f:3b:f7: 33:87:c8:5c:71:2f:dd:7b:b1:ef:e3:50:8d:61:6e: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:1F:B0:AA:ED:77:F2:A6:0B:04:D2:5B:9F:DF:7F:88:AB:98:86 X509v3 Authority Key Identifier: keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:29:60:37:13:3b:0c:f1:85:a0:98:83:10:e1:2e:33:3e:71: 62:97:88:8f:7a:6d:2d:a9:4a:08:a6:52:7b:84:46:99:f2:3b: fd:8e:38:7a:a5:96:d1:00:b8:99:7d:a0:67:36:a3:17:72:71: 2e:3a:f7:91:61:40:7b:60:4c:52:61:c6:be:73:f2:ff:47:cd: 79:08:d1:a3:c7:6a:88:03:2d:69:b8:86:6d:ef:21:da:43:e9: ed:8e:5b:0a:58:9f:d5:a4:ff:83:94:b6:47:9e:3f:36:82:fe: e9:a6:aa:10:e7:5b:bb:cc:a2:77:ed:0a:e8:0b:b1:2c:60:06: d1:55:cc:7d:41:e9:e4:60:ae:b6:06:de:20:97:06:ba:44:fe: ce:f7:b0:3b:8a:a2:89:de:d9:c8:d3:7a:d1:f7:2b:ee:55:e3: 31:68:8c:17:33:35:38:a9:81:8c:15:51:02:f0:43:9d:9d:f6: b6:3a:93:b5:ee:6b:2c:ee:bd:5d:41:40:68:4b:96:fe:f3:f0: cc:f3:55:08:24:27:ab:4c:b3:13:12:39:d2:1f:4e:70:ca:1d: 16:09:d2:9a:d0:da:89:a0:a9:88:bf:7c:a8:34:63:cb:8c:51: 95:e0:11:22:fa:ec:f2:00:cd:4e:db:70:e3:ac:2d:b6:c8:96: 04:ed:7e:7e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtTrGK6cddtcnKvMZ1P9KHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MWE4MjIzMDAyZTMxMjRlNWJiMDZlODJkNGY2MGEzNzli OTNkY2QwHhcNMjUxMjI1MDQwMjQ0WhcNMjUxMjI2MDQwMjQ0WjAzMTEwLwYDVQQD EyhlMDc0MWZiMGFhZWQ3N2YyYTYwYjA0ZDI1YjlmZGY3Zjg4YWI5ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AD4YMoW+ysOQLxfsyyayLtVpmkK Ox8+mWLFu7O/yDrN8D5tpTrbuCp7mpONonWHrjCcGARsoEjNVfJ66AYmgDGfRE9f z1NDeZkmH4V++WjY4NuXpb/xFb7tGzd//94yajNDM+PQTG61fNF/9ObVtDLOWkCk Lnj6bDMMtJWAHn/nlq0ARoN5e1xfXwJEUXz+PTq6qsLElJfsPD8L8w6KpkMy5lSc fNjEpb4l3XqNcQy3Nx/EyncHTfAH64RO4Hd7n8+R1Lf+OTsBseNtdfZ9ClVDHpt6 jF4b4mkOqkE9NYShiG53zSWtca4D5BBfO/czh8hccS/de7Hv41CNYW6H7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOB0H7Cq7XfypgsE0luf33+Iq5iGMB8GA1UdIwQY MBaAFPkagiMALjEk5bsG6C1PYKN5uT3NMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ScUNJd0F1TVNUbHV3Ym9MVTlnbzNtNVBjMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTQzNzMyLTk2MjEtNGE0Mi04N2Rh LWIyZGUzZWJmM2U3ZS8xLzEtUnFDSXdBdU1TVGx1d2JvTFU5Z28zbTVQYzAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE4Lzk0MzczMi05NjIxLTRhNDItODdkYS1iMmRlM2ViZjNl N2UvMS8xLVJxQ0l3QXVNU1RsdXdib0xVOWdvM201UGMwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQilg NxM7DPGFoJiDEOEuMz5xYpeIj3ptLalKCKZSe4RGmfI7/Y44eqWW0QC4mX2gZzaj F3JxLjr3kWFAe2BMUmHGvnPy/0fNeQjRo8dqiAMtabiGbe8h2kPp7Y5bClif1aT/ g5S2R54/NoL+6aaqEOdbu8yid+0K6AuxLGAG0VXMfUHp5GCutgbeIJcGukT+zvew O4qiid7ZyNN60fcr7lXjMWiMFzM1OKmBjBVRAvBDnZ32tjqTte5rLO69XUFAaEuW /vPwzPNVCCQnq0yzExI50h9OcModFgnSmtDaiaCpiL98qDRjy4xRleARIvrs8gDN Tttw46wttsiWBO1+fg== -----END CERTIFICATE-----Generated at Thu Dec 25 12:34:48 2025 by rpki-client