This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json) Hash identifier: 1CCH1AEiZdehdI31rinoQ/7scdPikQG/dtM4xs13kU4= Subject key identifier: B0:03:28:6C:A8:25:5F:60:54:BF:49:77:F9:D6:6D:AB:DD:DA:9E:42 Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65 Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65 Certificate serial: 019B4438900DE8D6748D8B65B2E6C2966C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 04:01:56 +0000 Manifest this update: Mon 22 Dec 2025 04:01:56 +0000 Manifest next update: Tue 23 Dec 2025 04:01:56 +0000 Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: /VYuKFpg3kfBKcqFpYpkTYpCDU0veshFiv5A1XH9pUA=) 2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:90:0d:e8:d6:74:8d:8b:65:b2:e6:c2:96:6c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f915588ef805468928c63dab08630085e5d08f65 Validity Not Before: Dec 22 04:01:56 2025 GMT Not After : Dec 23 04:01:56 2025 GMT Subject: CN=b003286ca8255f6054bf4977f9d66dabddda9e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:14:0d:67:b5:da:ad:21:ee:b0:8c:62:f6: 68:dc:bf:5c:62:6b:56:c6:19:97:22:89:c6:d5:73: 4a:3a:60:e1:4d:a7:50:79:73:c6:c0:29:5b:c2:0c: fa:fe:d6:14:aa:6f:7c:c5:64:2c:1b:7c:56:5e:62: 1c:66:02:66:0c:ba:4b:42:99:e0:ec:28:3f:12:d5: 32:41:c2:ed:27:58:6f:18:46:c5:85:a8:f2:ab:93: d4:4f:c1:dd:0a:a4:8e:80:c2:ba:52:72:6a:18:76: 9d:ad:f7:0d:08:a3:35:62:23:a2:95:29:85:b0:ee: 99:f5:cb:b0:15:3d:b3:5c:cc:de:07:ea:08:e8:cd: 06:48:df:1d:07:d8:9f:bc:0c:54:6e:75:b8:1c:48: 90:40:a5:59:03:40:ad:c9:34:f9:63:76:9c:44:0f: a1:f4:cc:46:4e:98:a3:62:c1:4c:6e:a9:f9:70:c9: ae:36:94:84:53:91:6e:7a:69:11:bb:97:81:14:67: ee:04:47:64:84:98:87:96:dd:96:bb:8a:3c:77:4f: 47:14:f0:a0:f9:4c:35:0f:c0:06:f1:46:3c:11:b2: 51:ce:e3:c5:be:11:b7:df:05:d8:4f:19:4c:2d:28: 1f:e5:e2:88:98:d1:36:5a:f0:e9:b9:14:e5:62:1a: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:03:28:6C:A8:25:5F:60:54:BF:49:77:F9:D6:6D:AB:DD:DA:9E:42 X509v3 Authority Key Identifier: keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:dc:0d:0e:00:f3:c4:f1:13:56:9a:4a:8e:e0:fd:8a:5c:9c: b9:18:9f:8e:3a:70:fe:d9:1b:07:e3:a1:5c:31:d9:65:36:28: 48:c5:9d:68:2c:7a:78:56:16:c1:9d:8d:1c:aa:a2:69:bd:c4: db:71:47:0c:3e:21:64:9f:07:49:1e:a2:e9:fb:b8:ce:87:9f: f4:4d:d4:07:c8:21:8f:19:51:16:c0:77:17:e2:8b:d9:b5:e9: 37:52:43:ab:c7:c6:a7:31:7d:e4:11:89:54:7c:a9:76:e4:67: 99:b9:3c:ec:93:bf:99:b0:1a:8d:9d:7d:e1:f1:b2:18:b3:06: ba:37:c6:8c:86:8c:54:12:48:88:16:cf:46:a2:e9:19:21:7d: 25:eb:d8:ae:99:14:20:0a:09:5b:2e:ad:9a:08:bd:31:1e:aa: 15:71:18:8e:40:b0:a5:40:aa:29:90:75:52:07:ae:b1:43:4b: d9:63:c9:63:88:51:aa:3c:80:e4:ac:16:0c:17:99:aa:60:fc: be:1b:7c:5e:d9:1f:be:ab:5c:5c:e0:47:95:26:32:83:ba:e2: 1a:65:3d:9c:5d:1e:a8:91:c9:2d:be:0b:50:f8:fc:4e:41:17: 41:c2:3a:87:78:2d:0c:dc:2b:b4:41:93:e0:27:c3:ef:8e:57: 4f:bf:ae:c1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEOJAN6NZ0jYtlsubClmxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk MDhmNjUwHhcNMjUxMjIyMDQwMTU2WhcNMjUxMjIzMDQwMTU2WjAzMTEwLwYDVQQD EyhiMDAzMjg2Y2E4MjU1ZjYwNTRiZjQ5NzdmOWQ2NmRhYmRkZGE5ZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lsUDWe12q0h7rCMYvZo3L9cYmtW xhmXIonG1XNKOmDhTadQeXPGwClbwgz6/tYUqm98xWQsG3xWXmIcZgJmDLpLQpng 7Cg/EtUyQcLtJ1hvGEbFhajyq5PUT8HdCqSOgMK6UnJqGHadrfcNCKM1YiOilSmF sO6Z9cuwFT2zXMzeB+oI6M0GSN8dB9ifvAxUbnW4HEiQQKVZA0CtyTT5Y3acRA+h 9MxGTpijYsFMbqn5cMmuNpSEU5FuemkRu5eBFGfuBEdkhJiHlt2Wu4o8d09HFPCg +Uw1D8AG8UY8EbJRzuPFvhG33wXYTxlMLSgf5eKImNE2WvDpuRTlYhrjwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLADKGyoJV9gVL9Jd/nWbavd2p5CMB8GA1UdIwQY MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx LWJjODI3N2U3NWUwYy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0LzdiOTIyNC1hYmYxLTRjYTMtYjAwMS1iYzgyNzdlNzVl MGMvMS8xLVJWWWp2Z0ZSb2tveGoyckNHTUFoZVhRajJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdwN DgDzxPETVppKjuD9ilycuRifjjpw/tkbB+OhXDHZZTYoSMWdaCx6eFYWwZ2NHKqi ab3E23FHDD4hZJ8HSR6i6fu4zoef9E3UB8ghjxlRFsB3F+KL2bXpN1JDq8fGpzF9 5BGJVHypduRnmbk87JO/mbAajZ194fGyGLMGujfGjIaMVBJIiBbPRqLpGSF9JevY rpkUIAoJWy6tmgi9MR6qFXEYjkCwpUCqKZB1UgeusUNL2WPJY4hRqjyA5KwWDBeZ qmD8vht8XtkfvqtcXOBHlSYyg7riGmU9nF0eqJHJLb4LUPj8TkEXQcI6h3gtDNwr tEGT4CfD745XT7+uwQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:22 2025 by rpki-client