This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json) Hash identifier: Cn9Zv+rWVIHP4H+xiE5Berx7Wo645FtWDVuh7CO8wO4= Subject key identifier: F2:C9:F2:D8:15:11:56:19:83:33:69:7B:B1:22:BE:72:21:7A:58:2A Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b Certificate serial: 019B680D84FBCC7141CE5CB5823ACD361EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft Manifest number: 179E Signing time: Mon 29 Dec 2025 03:01:14 +0000 Manifest this update: Mon 29 Dec 2025 03:01:14 +0000 Manifest next update: Tue 30 Dec 2025 03:01:14 +0000 Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: EFNsqInp7B9ydQE8jVnoPiJmLrmccxuN67MnFsxW9+Y=) 2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:84:fb:cc:71:41:ce:5c:b5:82:3a:cd:36:1e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b Validity Not Before: Dec 29 03:01:14 2025 GMT Not After : Dec 30 03:01:14 2025 GMT Subject: CN=f2c9f2d8151156198333697bb122be72217a582a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:2b:99:bb:59:f6:14:fa:3f:c4:c2:0e:ed: 66:e6:89:f7:c8:03:d5:54:9a:08:37:e0:f3:4b:3a: fa:13:ae:7a:84:aa:a3:73:70:4c:46:d7:69:94:ee: 4d:b0:ac:ac:13:04:31:1c:7c:79:79:c3:38:95:7c: 48:44:f0:51:af:cf:e0:f8:ce:18:02:ce:51:28:f2: 9c:d8:d6:0f:15:70:b6:76:1b:1e:ea:e1:e8:ab:41: 20:c2:05:2e:8c:9b:9b:26:46:47:12:90:c9:c1:ab: 5b:7f:5b:f2:42:37:30:e5:80:fe:45:b5:2f:ab:71: 19:af:85:0e:45:aa:83:04:08:c1:f6:07:95:2b:9c: 09:da:75:4c:b6:9b:00:96:f6:07:5b:5d:ab:85:19: 50:23:63:9c:ae:f1:e0:63:e4:75:84:34:85:11:7f: 21:b8:2c:69:31:38:fb:06:43:05:b2:c1:3f:6a:f3: ae:f4:2d:1d:5c:c7:59:60:46:6b:f2:d1:e9:28:86: 07:ff:00:06:f1:52:b8:4c:3c:89:63:8c:65:87:9e: ab:44:38:98:ac:45:3a:6b:a2:1f:f2:0c:ad:53:d0: e4:53:4c:e4:ad:bd:0d:43:42:ba:8b:5b:2c:28:96: 73:c5:ed:63:48:9d:29:57:8a:95:ee:95:a1:91:2c: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:F2:D8:15:11:56:19:83:33:69:7B:B1:22:BE:72:21:7A:58:2A X509v3 Authority Key Identifier: keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:04:d8:46:f0:90:e5:6f:9c:31:b7:6c:62:7d:34:34:91:fe: 5f:61:cd:2a:46:4c:9f:55:2a:93:a2:27:aa:2a:db:4d:36:dd: 59:76:a0:61:1d:32:de:b0:e9:00:49:79:07:9b:de:40:3f:16: e0:2b:3d:a8:8f:f0:1a:4f:b1:47:aa:8d:ea:02:d9:23:fa:0e: 38:39:5b:5a:21:f1:b6:fc:e1:51:d0:62:3e:92:29:0c:a4:f1: 4b:b4:cc:f4:67:a0:5e:b0:f6:33:b6:8e:19:62:29:78:74:e4: df:02:29:bc:f7:79:e1:9f:7e:4a:20:60:7f:0d:ab:03:67:70: bb:d6:4d:a3:b2:00:1c:8b:f7:a2:f5:5a:19:c2:20:44:66:e7: 10:ab:30:c9:07:b2:43:fb:74:af:c9:c3:56:18:c2:31:a7:ad: bf:e9:bd:7b:43:e9:d9:cf:89:00:a4:88:08:08:56:67:8e:82: d0:07:24:a8:d5:90:f9:0a:49:5e:8a:67:95:c3:78:14:d5:d4: 77:4d:93:fc:7e:9a:7b:98:b1:90:69:1a:c3:26:34:8e:7a:7d: a5:e1:b7:46:fe:1f:97:59:37:a1:92:02:af:38:97:02:8f:1c: b0:f0:bc:b2:42:3d:dc:30:4d:20:07:27:64:25:09:53:81:93: 83:43:cd:ae -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtoDYT7zHFBzly1gjrNNh75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YTM1MjBmZDljMjk5YTI4NzRkZjVlNDdiNjMwMmE0MjUy YTcyNmIwHhcNMjUxMjI5MDMwMTE0WhcNMjUxMjMwMDMwMTE0WjAzMTEwLwYDVQQD EyhmMmM5ZjJkODE1MTE1NjE5ODMzMzY5N2JiMTIyYmU3MjIxN2E1ODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibgrmbtZ9hT6P8TCDu1m5on3yAPV VJoIN+DzSzr6E656hKqjc3BMRtdplO5NsKysEwQxHHx5ecM4lXxIRPBRr8/g+M4Y As5RKPKc2NYPFXC2dhse6uHoq0EgwgUujJubJkZHEpDJwatbf1vyQjcw5YD+RbUv q3EZr4UORaqDBAjB9geVK5wJ2nVMtpsAlvYHW12rhRlQI2OcrvHgY+R1hDSFEX8h uCxpMTj7BkMFssE/avOu9C0dXMdZYEZr8tHpKIYH/wAG8VK4TDyJY4xlh56rRDiY rEU6a6If8gytU9DkU0zkrb0NQ0K6i1ssKJZzxe1jSJ0pV4qV7pWhkSwWQwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPLJ8tgVEVYZgzNpe7EivnIhelgqMB8GA1UdIwQY MBaAFPmjUg/Zwpmih0315HtjAqQlKnJrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1hTlNEOW5DbWFLSFRmWGtlMk1DcENVcWNtcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvODQwNzU3LTgxNDktNDBmZS1hNDli LWFlNWU3NGVkNWJhMC8xLzEtYU5TRDluQ21hS0hUZlhrZTJNQ3BDVXFjbXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI1Lzg0MDc1Ny04MTQ5LTQwZmUtYTQ5Yi1hZTVlNzRlZDVi YTAvMS8xLWFOU0Q5bkNtYUtIVGZYa2UyTUNwQ1VxY21zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJATY RvCQ5W+cMbdsYn00NJH+X2HNKkZMn1Uqk6InqirbTTbdWXagYR0y3rDpAEl5B5ve QD8W4Cs9qI/wGk+xR6qN6gLZI/oOODlbWiHxtvzhUdBiPpIpDKTxS7TM9GegXrD2 M7aOGWIpeHTk3wIpvPd54Z9+SiBgfw2rA2dwu9ZNo7IAHIv3ovVaGcIgRGbnEKsw yQeyQ/t0r8nDVhjCMaetv+m9e0Pp2c+JAKSICAhWZ46C0AckqNWQ+QpJXopnlcN4 FNXUd02T/H6ae5ixkGkawyY0jnp9peG3Rv4fl1k3oZICrziXAo8csPC8skI93DBN IAcnZCUJU4GTg0PNrg== -----END CERTIFICATE-----Generated at Mon Dec 29 12:04:59 2025 by rpki-client