This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft File: 1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json) Hash identifier: gODpR/DaYi7kaX35qCQzJbbeSIClwFvqpub9xswJanE= Subject key identifier: 08:9D:76:91:8A:C9:2E:92:F3:7A:87:F0:8F:EE:E4:2C:2A:C1:CB:F2 Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019B39B43643B0D2526A77DF891362C1E91D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 03:01:10 +0000 Manifest this update: Sat 20 Dec 2025 03:01:10 +0000 Manifest next update: Sun 21 Dec 2025 03:01:10 +0000 Files and hashes: 1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: yTt4CTYi1PCGQ0ekC+aaAOnw/bfdcQiAiEnRTZnj/qQ=) 2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=) 3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=) 4: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (hash: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=) 5: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=) 6: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=) 7: XDE5yWHym2A5ak6WQEhkh6UG6-E.roa (hash: ZtYfbKKZBHtlgDqAoKqJ/Mw8EPVT2w6fQRb3QDPCDXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:36:43:b0:d2:52:6a:77:df:89:13:62:c1:e9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Dec 20 03:01:10 2025 GMT Not After : Dec 21 03:01:10 2025 GMT Subject: CN=089d76918ac92e92f37a87f08feee42c2ac1cbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:ba:71:d3:af:e4:b2:6f:13:83:fb:42:64: 5d:82:64:2d:ec:69:0a:ab:4e:e7:ce:2c:7d:1a:cb: 5a:9f:0a:a2:37:c2:b1:bb:42:0d:b6:0e:6c:43:5f: 3d:1f:a7:d5:fb:1f:bd:af:78:98:64:6d:d0:00:28: e3:dc:ec:2f:8e:68:4c:52:12:4e:4c:6e:fd:78:19: e0:c1:6a:a0:e2:4e:64:68:49:c7:0d:37:1b:1f:de: e0:0b:eb:ef:db:a2:2a:fa:8e:18:ec:8d:b9:71:ba: ac:8f:80:27:a1:56:36:8d:fe:03:0e:bd:5f:07:56: 28:20:2b:7f:17:d8:44:47:89:3a:05:d8:c9:5e:0b: 00:5e:98:7f:9e:54:fb:a9:7f:3b:4b:49:06:55:32: 8b:26:8c:5c:1e:c3:14:c4:01:0e:16:80:05:49:10: 65:1d:76:28:5c:19:ca:ae:3e:83:ba:aa:24:aa:72: f1:d4:99:55:63:5a:af:e5:22:0f:31:41:6b:e1:b5: 47:a0:3d:df:d1:d5:36:91:4b:32:fd:61:fc:8b:de: 13:66:0b:86:dd:93:d3:79:17:c4:36:aa:81:74:1f: 80:92:6e:5f:34:7f:c1:cb:b1:6f:f4:08:1f:86:be: 58:d4:01:b1:7f:77:f6:95:33:5d:bd:78:11:3a:b3: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9D:76:91:8A:C9:2E:92:F3:7A:87:F0:8F:EE:E4:2C:2A:C1:CB:F2 X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d3:9f:67:6a:2a:65:3c:40:a1:0d:a9:09:45:81:ec:70:71: 19:6b:d1:1f:2c:b6:d5:15:e1:5f:41:de:61:ef:7b:15:5c:9f: 52:ff:f5:f4:48:e4:b3:ec:81:92:60:b8:d9:12:da:c9:90:0d: 3a:70:f3:5c:ed:18:e3:96:35:14:e0:86:9f:50:16:c8:f9:c5: 63:fc:bb:78:e0:40:13:59:47:75:08:b3:49:ee:55:74:8e:fa: 20:86:5e:cc:3c:6f:03:59:f6:7c:21:cb:2e:31:07:41:28:ba: 4f:c7:8e:6f:31:88:90:23:04:94:cb:c6:f7:32:34:11:43:51: 13:b0:0e:cd:3a:0a:84:63:57:18:8b:83:7a:b2:2f:83:8a:77: 73:71:65:c6:24:4d:d4:10:9b:70:14:07:b5:1c:8e:5b:65:f7: cd:3e:d0:dc:db:37:a7:8b:ce:15:52:a3:6f:05:bd:50:fd:90: fd:84:20:7c:48:13:8d:2e:68:4e:d5:d3:df:cf:a1:bc:74:7e: b9:04:0b:df:ae:5a:5d:55:47:28:41:b9:67:9d:ea:23:dd:6b: e0:4f:82:07:a4:ed:4a:26:80:c8:47:35:15:0b:2c:1c:b1:c9: 6c:f4:43:f0:17:6f:21:db:d3:a4:73:29:a2:f3:4e:85:3d:39: 33:03:e7:5f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5tDZDsNJSanffiRNiwekdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjUxMjIwMDMwMTEwWhcNMjUxMjIxMDMwMTEwWjAzMTEwLwYDVQQD EygwODlkNzY5MThhYzkyZTkyZjM3YTg3ZjA4ZmVlZTQyYzJhYzFjYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXa6cdOv5LJvE4P7QmRdgmQt7GkK q07nzix9GstanwqiN8Kxu0INtg5sQ189H6fV+x+9r3iYZG3QACjj3OwvjmhMUhJO TG79eBngwWqg4k5kaEnHDTcbH97gC+vv26Iq+o4Y7I25cbqsj4AnoVY2jf4DDr1f B1YoICt/F9hER4k6BdjJXgsAXph/nlT7qX87S0kGVTKLJoxcHsMUxAEOFoAFSRBl HXYoXBnKrj6DuqokqnLx1JlVY1qv5SIPMUFr4bVHoD3f0dU2kUsy/WH8i94TZguG 3ZPTeRfENqqBdB+Akm5fNH/By7Fv9Agfhr5Y1AGxf3f2lTNdvXgROrOVTwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAiddpGKyS6S83qH8I/u5CwqwcvyMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI2LzAzY2NlMy1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5 YWEvMS8xLVBjOFhBODZFR3FMcDlfejQxeUJiUkI0M0hFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdOf Z2oqZTxAoQ2pCUWB7HBxGWvRHyy21RXhX0HeYe97FVyfUv/19Ejks+yBkmC42RLa yZANOnDzXO0Y45Y1FOCGn1AWyPnFY/y7eOBAE1lHdQizSe5VdI76IIZezDxvA1n2 fCHLLjEHQSi6T8eObzGIkCMElMvG9zI0EUNRE7AOzToKhGNXGIuDerIvg4p3c3Fl xiRN1BCbcBQHtRyOW2X3zT7Q3Ns3p4vOFVKjbwW9UP2Q/YQgfEgTjS5oTtXT38+h vHR+uQQL365aXVVHKEG5Z53qI91r4E+CB6TtSiaAyEc1FQssHLHJbPRD8BdvIdvT pHMpovNOhT05MwPnXw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:49 2025 by rpki-client