This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json) Hash identifier: g3KjGatwQ5/19vqHEPMHpZO8eEtaunay1JWxWZdpDUM= Subject key identifier: 6D:97:12:55:94:D0:3E:E9:27:F1:0E:F8:F9:4F:8B:8B:65:D2:7B:D4 Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Certificate serial: 019B3EA3A9C5922383939104C4789BEB742A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft Manifest number: 0194 Signing time: Sun 21 Dec 2025 02:01:11 +0000 Manifest this update: Sun 21 Dec 2025 02:01:11 +0000 Manifest next update: Mon 22 Dec 2025 02:01:11 +0000 Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: 7l17/t7AqAUCACZXk/ulsB5zAUOYUzm91T2cdZQzX6A=) 2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=) 3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a9:c5:92:23:83:93:91:04:c4:78:9b:eb:74:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f Validity Not Before: Dec 21 02:01:11 2025 GMT Not After : Dec 22 02:01:11 2025 GMT Subject: CN=6d97125594d03ee927f10ef8f94f8b8b65d27bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:90:b6:bd:13:04:de:68:1e:81:1a:71:81: 9d:ee:83:f1:87:ff:0e:6f:80:9f:f3:23:3a:e4:d1: 22:a5:79:04:08:38:ed:bf:ad:b6:bb:5d:e8:bb:37: 3f:a0:17:51:65:40:98:4e:04:ee:88:d7:13:d1:19: 80:78:34:e6:ae:84:e4:c6:37:94:66:fb:d6:fe:15: 58:64:6c:3a:a1:bc:18:35:86:47:36:6f:9e:23:11: 92:f2:91:46:b1:16:22:72:cc:d6:95:7a:1a:ed:44: 5d:1b:3f:65:2f:04:b8:5d:5b:64:9e:8c:e4:15:3c: 83:6a:73:eb:59:49:a1:55:1d:a5:f0:21:11:eb:0c: 7c:1f:0a:99:21:27:3c:66:d7:8e:fc:80:f2:8d:98: 5b:69:0b:61:f8:bb:2b:96:3d:86:d5:2e:76:4a:84: 79:37:c7:f0:39:e9:1b:aa:9b:79:61:21:5c:14:7c: f6:5b:ba:a0:ca:9e:b0:4d:4e:ef:be:77:ee:52:c2: 3d:76:d0:d3:bd:8d:f2:52:11:87:65:8f:e6:dd:db: c6:7d:39:34:11:77:d0:de:13:b1:f4:c4:f4:ac:e0: 33:8b:19:2c:c7:83:e0:5d:22:3a:c3:1d:cb:21:5b: c9:8a:54:50:72:b9:0e:a2:61:4a:36:fe:9b:3f:05: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:97:12:55:94:D0:3E:E9:27:F1:0E:F8:F9:4F:8B:8B:65:D2:7B:D4 X509v3 Authority Key Identifier: keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b0:79:a8:2f:7b:6e:2a:d6:39:9f:d0:51:7f:dc:77:01:59: d9:d4:d1:14:c4:ee:32:39:a5:49:3f:a0:71:83:cc:98:63:15: 9c:9a:5c:1a:ac:44:90:c7:98:88:f4:b7:86:d9:36:bc:7f:a5: f0:5f:04:41:8c:92:b3:35:3f:bb:69:7f:b0:58:3e:98:08:24: d2:ee:60:db:af:12:5b:30:2d:75:14:e9:f2:ad:c3:08:a1:88: 04:a6:4f:c2:72:53:c5:44:f5:7d:15:b9:a1:0c:f7:32:33:5a: a7:d1:fc:ea:39:a5:4c:f4:d7:47:ba:be:fb:85:9e:aa:7f:14: 7d:ce:1e:18:01:39:dd:c1:38:fb:4d:89:f3:20:9c:b8:b6:d5: 83:92:7e:3c:36:60:9a:cc:aa:99:d4:75:c4:40:fe:7b:4f:f7: 20:07:12:83:50:17:3a:77:95:e1:62:bc:41:ac:42:b1:e0:67: 02:d7:2e:92:4d:01:2b:59:68:7f:38:aa:ae:cf:47:be:12:69: b6:ed:3f:4b:55:c8:b6:00:11:a1:46:5c:50:b8:ad:32:77:48: 2f:86:ae:51:41:75:e1:09:df:cc:b4:5a:dd:05:6e:62:16:e6: 46:9b:d7:9c:b5:6b:ab:43:42:57:bb:b8:61:e3:2f:98:a3:c4: 8a:58:68:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6nFkiODk5EExHib63QqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzAwMzQxMDRmMWJmNjU4MTQ0YjRhYTQ1YjQxYTNmNTc3 OWRjMGYwHhcNMjUxMjIxMDIwMTExWhcNMjUxMjIyMDIwMTExWjAzMTEwLwYDVQQD Eyg2ZDk3MTI1NTk0ZDAzZWU5MjdmMTBlZjhmOTRmOGI4YjY1ZDI3YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXWQtr0TBN5oHoEacYGd7oPxh/8O b4Cf8yM65NEipXkECDjtv622u13ouzc/oBdRZUCYTgTuiNcT0RmAeDTmroTkxjeU ZvvW/hVYZGw6obwYNYZHNm+eIxGS8pFGsRYicszWlXoa7URdGz9lLwS4XVtknozk FTyDanPrWUmhVR2l8CER6wx8HwqZISc8ZteO/IDyjZhbaQth+Lsrlj2G1S52SoR5 N8fwOekbqpt5YSFcFHz2W7qgyp6wTU7vvnfuUsI9dtDTvY3yUhGHZY/m3dvGfTk0 EXfQ3hOx9MT0rOAzixksx4PgXSI6wx3LIVvJilRQcrkOomFKNv6bPwW72wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2XElWU0D7pJ/EO+PlPi4tl0nvUMB8GA1UdIwQY MBaAFNZwA0EE8b9lgUS0qkW0Gj9XedwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQt ZjkxNzJjY2JjNWFmLzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMWNiYzMtMjhhMS00ZTUzLWEwYTQtZjkxNzJjY2JjNWFm LzEvMW5BRFFRVHh2MldCUkxTcVJiUWFQMWQ1M0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7B5qC97 birWOZ/QUX/cdwFZ2dTRFMTuMjmlST+gcYPMmGMVnJpcGqxEkMeYiPS3htk2vH+l 8F8EQYySszU/u2l/sFg+mAgk0u5g268SWzAtdRTp8q3DCKGIBKZPwnJTxUT1fRW5 oQz3MjNap9H86jmlTPTXR7q++4Weqn8Ufc4eGAE53cE4+02J8yCcuLbVg5J+PDZg msyqmdR1xED+e0/3IAcSg1AXOneV4WK8QaxCseBnAtcukk0BK1lofziqrs9HvhJp tu0/S1XItgARoUZcULitMndIL4auUUF14QnfzLRa3QVuYhbmRpvXnLVrq0NCV7u4 YeMvmKPEilhoNA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:32 2025 by rpki-client