This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json) Hash identifier: BLQfqq+4QVHeZRSROmK1K93gTCMj9wxUCPuCXtifEmI= Subject key identifier: F5:6F:F4:31:32:8B:80:FC:CC:1E:31:7C:76:26:46:D4:AF:0D:A1:66 Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Certificate serial: 019B44A553BEEA61450F0348BF8512BB30D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft Manifest number: 113E Signing time: Mon 22 Dec 2025 06:00:44 +0000 Manifest this update: Mon 22 Dec 2025 06:00:44 +0000 Manifest next update: Tue 23 Dec 2025 06:00:44 +0000 Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: I28xbwEo8ZCeMEuNXMpK1JlIRDHssW3dA7x2JkS12m0=) 2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=) 3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=) 4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=) 5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=) 6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=) 7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=) 8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:53:be:ea:61:45:0f:03:48:bf:85:12:bb:30:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Validity Not Before: Dec 22 06:00:44 2025 GMT Not After : Dec 23 06:00:44 2025 GMT Subject: CN=f56ff431328b80fccc1e317c762646d4af0da166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:a8:e6:9f:f1:b6:f8:5a:ec:10:86:4a:76: 6f:42:05:b5:30:92:c9:ef:42:60:d2:21:3b:d2:e7: 91:29:5e:f7:f9:62:e7:fb:78:45:0b:41:89:62:e0: 32:4b:0a:65:7b:b0:09:22:58:79:69:e9:52:52:c5: 23:fa:c8:51:36:e4:bc:7b:a7:e4:46:2d:ff:32:e0: 6f:65:4d:99:70:27:79:13:34:33:8f:b2:f8:22:ae: a5:80:55:4c:19:03:4e:71:51:d3:a9:a1:09:08:56: 40:27:72:16:2f:8d:67:12:23:7f:82:4f:41:70:f8: 98:1e:46:a5:82:b6:2a:07:1b:79:5b:28:96:5f:e8: 69:c2:47:8b:b0:b8:e7:f4:45:98:aa:e2:3a:c9:b2: 14:3a:16:97:8e:22:ad:2c:bd:5e:45:79:38:c7:ae: 14:18:c2:8d:77:08:36:5d:00:f5:01:c5:34:df:a2: 8b:46:24:d6:c2:52:4f:7a:9a:c3:f3:e2:cc:ce:96: 3f:0d:2f:92:26:16:80:8b:3c:8e:2c:46:58:9e:fa: 92:e5:cd:d7:80:35:af:95:3d:b5:e3:77:21:e5:88: 80:ba:b9:69:80:b4:48:31:af:9f:9c:6e:7e:53:4d: b7:fc:cb:ef:ff:2b:c2:5e:3b:90:da:b6:ee:d6:53: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6F:F4:31:32:8B:80:FC:CC:1E:31:7C:76:26:46:D4:AF:0D:A1:66 X509v3 Authority Key Identifier: keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ae:83:a6:2a:5a:cc:82:c7:e4:b5:be:fc:dd:0b:48:5c:ee: 3e:33:3f:9d:64:88:2f:5e:41:8e:0f:f4:e0:c6:8c:08:7e:dc: 02:a1:0c:dd:af:ab:2a:0a:f6:50:74:63:df:c4:3d:1e:81:ec: 14:3f:57:75:95:da:cb:5e:8e:7a:bf:19:4d:81:75:74:c2:12: 64:af:3e:74:1b:d2:dd:96:6f:62:f9:85:36:a0:07:5a:68:d8: 98:59:4f:db:2d:51:2c:99:ad:1f:bb:68:6d:64:fd:24:f4:08: 0d:30:5e:e9:c1:69:ae:43:0e:42:58:bf:25:7a:0a:5b:8f:cb: cd:dc:f8:25:c1:e6:de:76:d4:1a:a3:df:b7:0c:6b:8e:e2:c0: 3b:5e:aa:d6:29:60:4b:cd:38:95:2a:3c:52:35:36:de:31:11: 21:21:14:25:4f:16:a1:1b:75:1d:bf:19:f5:07:16:fa:d8:70: a0:16:bc:22:a2:bf:3b:d6:9f:f9:22:ca:d9:65:59:f0:46:e3: 6a:3a:68:bf:5e:0b:ff:92:1c:a0:53:cf:a8:d9:e1:fb:73:f5: b2:d9:26:5e:4d:e4:44:e2:c4:5c:52:7e:75:dc:a7:07:2d:99: b0:9c:b9:e4:69:cd:75:4e:b1:37:fd:44:21:af:70:37:a5:8b: 13:1a:a9:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpVO+6mFFDwNIv4USuzDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj YWE2ZDQwHhcNMjUxMjIyMDYwMDQ0WhcNMjUxMjIzMDYwMDQ0WjAzMTEwLwYDVQQD EyhmNTZmZjQzMTMyOGI4MGZjY2MxZTMxN2M3NjI2NDZkNGFmMGRhMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTWo5p/xtvha7BCGSnZvQgW1MJLJ 70Jg0iE70ueRKV73+WLn+3hFC0GJYuAySwple7AJIlh5aelSUsUj+shRNuS8e6fk Ri3/MuBvZU2ZcCd5EzQzj7L4Iq6lgFVMGQNOcVHTqaEJCFZAJ3IWL41nEiN/gk9B cPiYHkalgrYqBxt5WyiWX+hpwkeLsLjn9EWYquI6ybIUOhaXjiKtLL1eRXk4x64U GMKNdwg2XQD1AcU036KLRiTWwlJPeprD8+LMzpY/DS+SJhaAizyOLEZYnvqS5c3X gDWvlT2143ch5YiAurlpgLRIMa+fnG5+U023/Mvv/yvCXjuQ2rbu1lMVCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVv9DEyi4D8zB4xfHYmRtSvDaFmMB8GA1UdIwQY MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt NmJmZmNiN2MwZjBhLzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUa6Dpipa zILH5LW+/N0LSFzuPjM/nWSIL15Bjg/04MaMCH7cAqEM3a+rKgr2UHRj38Q9HoHs FD9XdZXay16Oer8ZTYF1dMISZK8+dBvS3ZZvYvmFNqAHWmjYmFlP2y1RLJmtH7to bWT9JPQIDTBe6cFprkMOQli/JXoKW4/Lzdz4JcHm3nbUGqPftwxrjuLAO16q1ilg S804lSo8UjU23jERISEUJU8WoRt1Hb8Z9QcW+thwoBa8IqK/O9af+SLK2WVZ8Ebj ajpov14L/5IcoFPPqNnh+3P1stkmXk3kROLEXFJ+ddynBy2ZsJy55GnNdU6xN/1E Ia9wN6WLExqp3w== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:40 2025 by rpki-client