This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json) Hash identifier: AdNa589XYu4ZFQX1oZsBOSKih+ANnbL6MF1zVetzKAU= Subject key identifier: 80:66:09:2F:DB:23:B0:61:0B:18:4C:1F:0C:71:C1:43:B7:B2:67:8E Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65 Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165 Certificate serial: 019B3CEBDCB3DCF4132811030B2127764149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 18:00:48 +0000 Manifest this update: Sat 20 Dec 2025 18:00:48 +0000 Manifest next update: Sun 21 Dec 2025 18:00:48 +0000 Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: 2PuZnGHF9kutjzNBPR+YJuUAJSzMDDF3cyYFSrCv6yw=) 2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:dc:b3:dc:f4:13:28:11:03:0b:21:27:76:41:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165 Validity Not Before: Dec 20 18:00:48 2025 GMT Not After : Dec 21 18:00:48 2025 GMT Subject: CN=8066092fdb23b0610b184c1f0c71c143b7b2678e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:f1:6f:0c:24:37:b6:45:f3:bc:fc:9b:db: fb:8a:e7:ef:a1:e9:ab:1f:32:40:86:f7:33:12:ef: c9:ca:54:1a:2c:76:e2:ac:b2:ba:44:17:f5:8d:32: a7:e6:03:69:39:14:a6:8e:60:b6:87:c2:a6:d3:b6: 64:e2:91:1d:09:75:91:52:ca:73:ba:34:bb:24:50: f0:38:fd:03:6e:b7:37:9d:4e:5a:7b:c1:92:63:9c: d7:9b:2e:28:4d:95:af:4d:5c:cc:e2:83:b4:d9:69: e4:45:ce:26:12:df:b4:bf:96:71:84:39:54:d3:6e: a0:b3:0d:96:66:ec:51:9e:40:1d:cb:fb:ed:59:0b: 0a:be:cb:16:fb:8a:be:55:7f:26:6b:a4:0a:57:97: d7:42:d4:4f:f9:de:e1:ff:6f:16:6c:ae:e8:77:a5: 3e:64:0b:fa:92:79:e9:39:87:28:8f:cb:74:9b:8f: 96:cd:61:92:50:4c:92:d3:5c:cc:ba:86:c8:8c:e5: f1:10:98:ce:9e:b4:2a:62:1f:b6:25:19:ab:6a:c3: e4:2d:2c:78:9a:d0:2e:dc:3b:e5:eb:d2:45:71:69: 22:e3:2a:e7:bd:94:97:b7:73:22:18:2b:73:9e:e4: 51:97:32:39:12:6a:8a:fc:be:9b:4c:44:23:f4:03: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:66:09:2F:DB:23:B0:61:0B:18:4C:1F:0C:71:C1:43:B7:B2:67:8E X509v3 Authority Key Identifier: keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:89:d4:57:d2:ba:6b:c8:2b:bf:27:8f:50:f6:fe:44:e4:46: 07:7a:a2:c9:b0:c8:d4:d1:f7:1b:ad:98:bd:78:95:7c:9e:35: 5d:f7:38:ec:cf:04:51:98:c0:2b:e6:e0:9e:43:37:8c:7b:40: cd:6f:37:44:bf:b8:28:fc:cb:12:72:b9:d4:bf:0b:b6:48:f4: 0d:50:38:5a:0e:df:8a:05:1b:ba:f9:c8:6f:4a:94:bd:8c:d9: 49:06:5d:8d:6a:88:99:cc:ac:0f:e8:6f:b8:03:49:38:c3:a4: a2:48:12:49:31:07:ad:f7:4a:f2:df:6b:62:f8:41:24:29:68: a3:07:7c:70:e8:f6:83:ba:44:64:5a:c6:b0:fc:7c:97:17:cb: a8:02:7f:32:f2:3d:ec:1b:fb:fc:37:b5:a2:e8:17:ef:37:da: 2c:d8:6e:0c:27:61:73:71:2d:f0:d9:2a:38:33:94:e6:d0:96: 85:28:a2:23:2b:81:8b:67:fb:bb:66:c5:0e:4c:13:cd:82:1a: 63:28:82:e2:2c:95:2a:ad:69:79:94:2b:6c:4c:cf:9a:0e:18: d2:7f:b3:44:36:90:38:ab:6c:79:90:19:d0:8b:b5:48:26:8f: c9:df:76:ad:ec:cc:d6:de:7f:83:97:e8:c4:ee:09:fa:28:53: a6:af:0e:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs869yz3PQTKBEDCyEndkFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYjc5NmQ5ODBmYTYwZmUyNTE0ZmNlNjI2NDZmNDVkMTJj OTUxNjUwHhcNMjUxMjIwMTgwMDQ4WhcNMjUxMjIxMTgwMDQ4WjAzMTEwLwYDVQQD Eyg4MDY2MDkyZmRiMjNiMDYxMGIxODRjMWYwYzcxYzE0M2I3YjI2NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurHxbwwkN7ZF87z8m9v7iufvoemr HzJAhvczEu/JylQaLHbirLK6RBf1jTKn5gNpORSmjmC2h8Km07Zk4pEdCXWRUspz ujS7JFDwOP0Dbrc3nU5ae8GSY5zXmy4oTZWvTVzM4oO02WnkRc4mEt+0v5ZxhDlU 026gsw2WZuxRnkAdy/vtWQsKvssW+4q+VX8ma6QKV5fXQtRP+d7h/28WbK7od6U+ ZAv6knnpOYcoj8t0m4+WzWGSUEyS01zMuobIjOXxEJjOnrQqYh+2JRmrasPkLSx4 mtAu3Dvl69JFcWki4yrnvZSXt3MiGCtznuRRlzI5EmqK/L6bTEQj9AN0owIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIBmCS/bI7BhCxhMHwxxwUO3smeOMB8GA1UdIwQY MBaAFPq3ltmA+mD+JRT85iZG9F0SyVFlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1yZVcyWUQ2WVA0bEZQem1Ka2IwWFJMSlVXVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTdmODllLTgyYjUtNDQyYi1iNjcy LTVkMTkyZmJmY2IwYi8xLzEtcmVXMllENllQNGxGUHptSmtiMFhSTEpVV1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE4Lzk3Zjg5ZS04MmI1LTQ0MmItYjY3Mi01ZDE5MmZiZmNi MGIvMS8xLXJlVzJZRDZZUDRsRlB6bUprYjBYUkxKVVdVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoonU V9K6a8grvyePUPb+RORGB3qiybDI1NH3G62YvXiVfJ41Xfc47M8EUZjAK+bgnkM3 jHtAzW83RL+4KPzLEnK51L8Ltkj0DVA4Wg7figUbuvnIb0qUvYzZSQZdjWqImcys D+hvuANJOMOkokgSSTEHrfdK8t9rYvhBJCloowd8cOj2g7pEZFrGsPx8lxfLqAJ/ MvI97Bv7/De1ougX7zfaLNhuDCdhc3Et8NkqODOU5tCWhSiiIyuBi2f7u2bFDkwT zYIaYyiC4iyVKq1peZQrbEzPmg4Y0n+zRDaQOKtseZAZ0Iu1SCaPyd92rezM1t5/ g5foxO4J+ihTpq8O4g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:17 2025 by rpki-client