This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json) Hash identifier: uJ8niNPh4fpLEUwShBGGDEiLQor+bIlhcyphGGgg6aE= Subject key identifier: D3:F2:70:CE:85:A3:5A:95:2E:65:82:B2:E6:98:41:DA:C9:2E:3D:B1 Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Certificate serial: 019B424AFE57E819CB022F372EF35A984B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft Manifest number: 1024 Signing time: Sun 21 Dec 2025 19:02:49 +0000 Manifest this update: Sun 21 Dec 2025 19:02:49 +0000 Manifest next update: Mon 22 Dec 2025 19:02:49 +0000 Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: 6dn/otyUKWRYNnXrPvkxc6bJjStaCGQA/JDe378LBn4=) 2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:fe:57:e8:19:cb:02:2f:37:2e:f3:5a:98:4b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Validity Not Before: Dec 21 19:02:49 2025 GMT Not After : Dec 22 19:02:49 2025 GMT Subject: CN=d3f270ce85a35a952e6582b2e69841dac92e3db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:f8:c3:df:6b:2c:ed:4f:6f:f9:60:33:bb: 03:16:fd:71:5f:38:a4:48:d3:6a:ea:62:15:03:12: dd:99:a3:d2:26:da:18:cc:ab:12:0a:60:98:32:6e: cd:1f:15:d2:29:f8:57:7b:50:ca:8c:59:66:42:4a: 2f:1f:e8:c4:62:11:3f:3e:b5:6a:a4:60:38:07:8e: b8:ee:71:e8:ae:af:8d:44:4b:ff:fa:32:b6:66:f3: 6b:f4:0f:d6:a1:d0:b7:d2:d3:45:3e:83:04:9e:b9: 3d:7e:91:25:f7:6c:f8:3a:2e:c4:a1:96:b4:b7:8e: 3a:ac:f3:d0:d0:58:c2:cf:63:14:73:32:d7:14:37: aa:6e:41:6d:30:44:ec:f9:b9:4f:25:60:43:97:c9: 64:0a:49:23:62:17:94:6d:27:d1:84:c3:9e:73:58: c3:d1:99:08:2b:38:d1:45:ea:7f:07:8c:f2:a2:4d: 00:20:50:21:11:41:03:38:2a:08:6f:db:73:7d:9f: 01:29:8f:be:c7:2c:7e:ed:79:81:80:bf:60:86:a9: a1:d0:0e:b5:af:f4:73:d0:44:12:b2:4c:f4:6c:b4: 6b:2d:88:07:73:1b:d3:d6:3e:ea:bc:e7:a8:76:b4: c1:f3:d6:b3:ec:16:83:d0:4d:d1:4d:e1:70:89:46: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F2:70:CE:85:A3:5A:95:2E:65:82:B2:E6:98:41:DA:C9:2E:3D:B1 X509v3 Authority Key Identifier: keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:5d:7c:2f:9d:b9:56:69:91:3b:5d:f1:4a:39:1b:f9:12: d2:43:e9:f5:ee:c8:e4:31:75:6d:aa:a6:ac:00:bc:50:52:80: ad:58:14:c3:55:ba:45:61:8e:6e:96:4d:cb:c3:d1:74:32:4d: bb:40:a7:98:b8:da:43:46:0c:4b:73:62:c3:9d:6b:9a:ce:3a: 9b:c5:db:53:38:c1:3a:14:24:0a:ad:b5:da:5d:45:17:50:6b: 45:d1:9e:22:e4:32:57:63:55:c8:42:97:ce:a0:a3:46:fc:e3: ef:e8:10:b4:ff:7a:89:6b:e6:87:72:4b:d2:48:2b:17:59:7f: 38:46:5d:76:78:74:26:14:5b:80:7b:1c:b0:d1:20:d8:2c:c3: 2c:28:c5:ee:20:62:da:cc:ef:55:1b:e1:c0:c5:84:63:da:94: a3:00:f2:35:54:8d:f4:5a:e4:d7:0f:59:c4:e3:71:1a:24:22: 47:12:8d:89:ed:40:8d:8a:78:c0:8a:49:58:a7:45:89:56:ed: 28:b3:e3:56:31:3c:55:05:75:b6:8e:84:e1:58:9c:41:39:8a: 05:db:f3:ba:f9:6d:5d:a6:cb:ec:bd:ec:5d:e9:c8:d4:f3:50: 54:53:ae:ea:35:64:dc:1e:60:78:ab:7c:9c:a0:f0:9f:f4:07: 38:31:48:86 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCSv5X6BnLAi83LvNamEuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1 ZjZjZTAwHhcNMjUxMjIxMTkwMjQ5WhcNMjUxMjIyMTkwMjQ5WjAzMTEwLwYDVQQD EyhkM2YyNzBjZTg1YTM1YTk1MmU2NTgyYjJlNjk4NDFkYWM5MmUzZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW34w99rLO1Pb/lgM7sDFv1xXzik SNNq6mIVAxLdmaPSJtoYzKsSCmCYMm7NHxXSKfhXe1DKjFlmQkovH+jEYhE/PrVq pGA4B4647nHorq+NREv/+jK2ZvNr9A/WodC30tNFPoMEnrk9fpEl92z4Oi7EoZa0 t446rPPQ0FjCz2MUczLXFDeqbkFtMETs+blPJWBDl8lkCkkjYheUbSfRhMOec1jD 0ZkIKzjRRep/B4zyok0AIFAhEUEDOCoIb9tzfZ8BKY++xyx+7XmBgL9ghqmh0A61 r/Rz0EQSskz0bLRrLYgHcxvT1j7qvOeodrTB89az7BaD0E3RTeFwiUYL1QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNPycM6Fo1qVLmWCsuaYQdrJLj2xMB8GA1UdIwQY MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3 LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1 YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb5d fC+duVZpkTtd8Uo5G/kS0kPp9e7I5DF1baqmrAC8UFKArVgUw1W6RWGObpZNy8PR dDJNu0CnmLjaQ0YMS3Niw51rms46m8XbUzjBOhQkCq212l1FF1BrRdGeIuQyV2NV yEKXzqCjRvzj7+gQtP96iWvmh3JL0kgrF1l/OEZddnh0JhRbgHscsNEg2CzDLCjF 7iBi2szvVRvhwMWEY9qUowDyNVSN9Frk1w9ZxONxGiQiRxKNie1AjYp4wIpJWKdF iVbtKLPjVjE8VQV1to6E4VicQTmKBdvzuvltXabL7L3sXenI1PNQVFOu6jVk3B5g eKt8nKDwn/QHODFIhg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:04 2025 by rpki-client