This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json) Hash identifier: fUHycEKTMR76W+X1fa4zCPxdLl9G5K3ijDZGSqDGQkI= Subject key identifier: 5F:6C:78:75:13:80:F2:52:2C:E9:64:98:FA:E8:B6:80:13:B0:31:67 Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Certificate serial: 019B3DC774E37C0B8D7907684F46D714253F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft Manifest number: 14A1 Signing time: Sat 20 Dec 2025 22:00:40 +0000 Manifest this update: Sat 20 Dec 2025 22:00:40 +0000 Manifest next update: Sun 21 Dec 2025 22:00:40 +0000 Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=) 2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: ou81xxZ7TaTef2pMy96okjnf04Xjww/zQYSzzNQOJm8=) 3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:74:e3:7c:0b:8d:79:07:68:4f:46:d7:14:25:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Validity Not Before: Dec 20 22:00:40 2025 GMT Not After : Dec 21 22:00:40 2025 GMT Subject: CN=5f6c78751380f2522ce96498fae8b68013b03167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ab:ff:c1:91:62:97:78:8f:d0:ba:30:88:2c: 2b:35:a5:ad:a7:22:68:1c:26:09:00:b3:47:6f:af: f3:90:b7:e6:94:48:d0:15:df:1d:37:f3:a1:81:db: e0:98:57:62:fb:e5:d4:23:bc:f0:26:65:6a:75:87: 10:d4:d1:db:9f:d0:32:4d:4b:9a:83:22:5e:d8:00: 12:99:6b:41:ce:c1:41:19:5e:50:66:91:07:9d:79: df:a3:5f:bc:fb:e2:77:e6:92:e9:4b:5e:64:a0:eb: d3:24:1a:5c:f5:9c:eb:b0:fe:19:ae:0c:f6:3a:14: 8d:36:d0:71:42:d9:62:ae:57:8c:9d:fe:55:bb:13: 7f:2b:1b:a1:5d:5d:e9:2a:7c:94:53:38:a4:89:45: 4b:54:3e:b8:9f:d1:00:e7:e7:53:f6:2e:c9:55:44: ca:ae:91:13:4f:2b:95:63:c8:b8:19:d2:3f:45:98: 0b:e9:76:58:f7:c9:c1:cb:b3:24:9b:b5:58:9f:44: 8c:22:1b:ac:e7:0b:e2:1b:1f:54:b8:2c:bb:1a:30: 8b:7d:e4:7f:b2:b3:3f:91:9c:b4:59:9b:6a:ad:ed: d3:1d:e5:fa:a7:7e:64:02:6d:d6:35:d7:e9:6b:14: 4c:32:7a:a4:be:65:92:84:08:3b:1d:14:82:b1:9c: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6C:78:75:13:80:F2:52:2C:E9:64:98:FA:E8:B6:80:13:B0:31:67 X509v3 Authority Key Identifier: keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2a:ef:e4:20:0c:aa:4e:35:9f:bb:b7:76:75:99:de:79:4f: f4:c3:40:56:fb:dc:3f:05:ef:af:83:a0:b1:47:81:28:fb:8f: 66:12:c6:a1:95:29:3c:a0:3c:71:f2:15:95:4b:29:bc:9d:00: 6c:8c:9e:93:cf:31:33:78:6a:e1:c6:77:7c:ca:bf:67:83:63: d2:20:a7:da:b9:81:30:c3:39:8b:2e:b6:7f:61:9f:31:6d:bb: ed:70:30:9e:b1:e0:29:de:42:90:96:4b:37:bb:b3:cd:7e:53: 91:95:e2:5b:95:32:32:b5:a9:9c:7e:a0:26:16:ee:9c:21:28: dd:5d:9f:50:a3:12:c2:3b:87:0e:45:f3:90:68:b2:51:21:a9: bb:cf:86:2f:c5:51:a0:dc:f5:12:0a:51:02:cd:1b:86:4b:08: 8d:47:8f:9f:9b:99:63:39:90:81:3f:1a:fb:bd:e0:11:23:16: 23:bf:87:0c:ab:76:5d:4d:9c:8e:87:ee:0d:91:b8:3b:de:b7: 63:7c:8f:1d:48:09:54:95:3a:ef:57:26:97:cc:d2:c4:bf:0e: fa:cc:7e:ff:e4:e8:ae:8d:f2:0d:29:5a:21:50:06:e5:af:7e: cf:21:aa:f9:56:0e:43:0f:bf:7d:5e:d7:a9:07:ac:51:47:57: 4a:94:f7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3TjfAuNeQdoT0bXFCU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk MTgzMjIwHhcNMjUxMjIwMjIwMDQwWhcNMjUxMjIxMjIwMDQwWjAzMTEwLwYDVQQD Eyg1ZjZjNzg3NTEzODBmMjUyMmNlOTY0OThmYWU4YjY4MDEzYjAzMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qv/wZFil3iP0LowiCwrNaWtpyJo HCYJALNHb6/zkLfmlEjQFd8dN/OhgdvgmFdi++XUI7zwJmVqdYcQ1NHbn9AyTUua gyJe2AASmWtBzsFBGV5QZpEHnXnfo1+8++J35pLpS15koOvTJBpc9ZzrsP4Zrgz2 OhSNNtBxQtlirleMnf5VuxN/KxuhXV3pKnyUUzikiUVLVD64n9EA5+dT9i7JVUTK rpETTyuVY8i4GdI/RZgL6XZY98nBy7Mkm7VYn0SMIhus5wviGx9UuCy7GjCLfeR/ srM/kZy0WZtqre3THeX6p35kAm3WNdfpaxRMMnqkvmWShAg7HRSCsZxqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9seHUTgPJSLOlkmProtoATsDFnMB8GA1UdIwQY MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0 LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCrv5CAM qk41n7u3dnWZ3nlP9MNAVvvcPwXvr4OgsUeBKPuPZhLGoZUpPKA8cfIVlUspvJ0A bIyek88xM3hq4cZ3fMq/Z4Nj0iCn2rmBMMM5iy62f2GfMW277XAwnrHgKd5CkJZL N7uzzX5TkZXiW5UyMrWpnH6gJhbunCEo3V2fUKMSwjuHDkXzkGiyUSGpu8+GL8VR oNz1EgpRAs0bhksIjUePn5uZYzmQgT8a+73gESMWI7+HDKt2XU2cjofuDZG4O963 Y3yPHUgJVJU671cml8zSxL8O+sx+/+Toro3yDSlaIVAG5a9+zyGq+VYOQw+/fV7X qQesUUdXSpT31g== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:30 2025 by rpki-client