This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json) Hash identifier: Cr0a/YbPA7HLpuslwBanq0SrhtKS5YfGY7em9qPoXSY= Subject key identifier: DB:D6:9C:65:9A:3B:7D:39:9A:3F:51:EB:C4:AF:BB:30:62:F0:F0:C3 Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019B661EC25B42D0AF75A43073DC3FE06167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft Manifest number: 17A9 Signing time: Sun 28 Dec 2025 18:00:50 +0000 Manifest this update: Sun 28 Dec 2025 18:00:50 +0000 Manifest next update: Mon 29 Dec 2025 18:00:50 +0000 Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: hwn8tbtuIbk1JpFgOs/IhrrWen0cDxkuRK2Wt0j3Fs0=) 2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=) 3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=) 4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=) 5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=) 6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:c2:5b:42:d0:af:75:a4:30:73:dc:3f:e0:61:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Dec 28 18:00:50 2025 GMT Not After : Dec 29 18:00:50 2025 GMT Subject: CN=dbd69c659a3b7d399a3f51ebc4afbb3062f0f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:57:c2:8d:73:7f:ab:b5:77:5b:cf:99:4a: 98:40:59:5c:ec:9c:a0:ac:81:57:06:a6:3e:28:7d: 8f:4d:60:21:0d:f8:ed:3a:63:36:36:9b:d5:65:3d: 9f:66:67:11:e5:c0:c2:4f:9b:c5:a9:2a:bc:89:ef: f8:1d:3a:0a:d1:5b:d5:84:d4:89:d9:ec:de:8c:d8: 51:48:ca:8b:d8:c0:77:60:19:3c:0a:01:99:dc:a9: 72:02:2c:7b:e1:a9:d7:e4:95:0c:ea:d8:88:76:54: a2:e4:19:96:f8:91:e8:58:fb:12:fe:7d:81:95:99: b7:4c:99:86:b7:1f:bf:95:92:88:3c:56:bb:40:96: 7b:6c:43:17:98:9e:fa:bb:58:7a:e4:14:a4:6a:fa: 78:38:61:66:df:ca:a9:dd:d7:c6:88:ac:62:42:a4: 9f:7c:67:a2:06:b4:2d:b4:af:52:d2:4a:30:37:78: f3:2f:9e:55:23:e0:c9:f5:f9:2c:65:04:b3:3f:c0: 74:5f:82:ef:fb:5b:6e:9b:32:da:7b:59:d1:fc:1c: 06:97:4c:c1:f5:a9:ca:85:d9:38:22:c6:eb:ed:56: ba:5c:b5:cc:7c:9f:8e:54:bc:5f:cd:4d:82:2c:90: 5e:24:8a:ae:54:4b:a8:b1:b6:ee:b2:70:dc:f0:83: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D6:9C:65:9A:3B:7D:39:9A:3F:51:EB:C4:AF:BB:30:62:F0:F0:C3 X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:25:ff:ff:70:dc:25:ec:36:ea:f9:26:b1:56:9d:0e:88:78: 7a:69:79:4e:6c:49:6c:50:14:12:b5:9a:1f:9e:4f:e7:96:30: e5:d0:2d:59:11:21:3e:c4:0b:b4:5b:99:28:40:64:db:c6:1c: b7:0a:64:df:76:9b:94:25:bf:4d:b7:3f:1b:42:fb:f1:cd:48: 1f:bd:77:1f:1c:1f:5e:41:c5:e4:42:20:3f:5c:da:e4:b7:92: a8:44:7e:18:40:df:23:cb:2e:7a:aa:63:9f:67:e5:3c:47:6c: de:fe:39:19:26:62:4c:cd:c0:0b:da:c1:57:ca:31:6d:ed:e0: fe:60:b9:7c:49:7c:e2:06:86:0b:a9:66:6d:53:0f:71:a8:16: 10:7a:64:55:80:d5:80:ef:09:1f:12:60:e4:d9:f5:f7:87:f9: e4:58:94:94:42:31:2a:20:80:cf:7c:06:4e:46:aa:77:80:05: 5b:a3:4b:af:79:5a:a2:74:6a:60:c5:a5:0a:05:e5:8c:50:59: 71:a0:e5:11:6c:99:5e:4a:77:d5:47:55:6f:3f:dd:1f:ba:67: 59:9b:be:80:53:55:f0:63:61:9a:0c:4f:eb:6d:63:3a:1d:3f: b7:a8:f7:67:4a:87:21:69:2a:9b:8f:eb:a2:83:2e:d6:ef:c7: c5:b3:0c:32 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtmHsJbQtCvdaQwc9w/4GFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjUxMjI4MTgwMDUwWhcNMjUxMjI5MTgwMDUwWjAzMTEwLwYDVQQD EyhkYmQ2OWM2NTlhM2I3ZDM5OWEzZjUxZWJjNGFmYmIzMDYyZjBmMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip5Xwo1zf6u1d1vPmUqYQFlc7Jyg rIFXBqY+KH2PTWAhDfjtOmM2NpvVZT2fZmcR5cDCT5vFqSq8ie/4HToK0VvVhNSJ 2ezejNhRSMqL2MB3YBk8CgGZ3KlyAix74anX5JUM6tiIdlSi5BmW+JHoWPsS/n2B lZm3TJmGtx+/lZKIPFa7QJZ7bEMXmJ76u1h65BSkavp4OGFm38qp3dfGiKxiQqSf fGeiBrQttK9S0kowN3jzL55VI+DJ9fksZQSzP8B0X4Lv+1tumzLae1nR/BwGl0zB 9anKhdk4Isbr7Va6XLXMfJ+OVLxfzU2CLJBeJIquVEuosbbusnDc8IMxqQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNvWnGWaO305mj9R68SvuzBi8PDDMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0 MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSX/ /3DcJew26vkmsVadDoh4eml5TmxJbFAUErWaH55P55Yw5dAtWREhPsQLtFuZKEBk 28Yctwpk33ablCW/Tbc/G0L78c1IH713HxwfXkHF5EIgP1za5LeSqER+GEDfI8su eqpjn2flPEds3v45GSZiTM3AC9rBV8oxbe3g/mC5fEl84gaGC6lmbVMPcagWEHpk VYDVgO8JHxJg5Nn194f55FiUlEIxKiCAz3wGTkaqd4AFW6NLr3laonRqYMWlCgXl jFBZcaDlEWyZXkp31UdVbz/dH7pnWZu+gFNV8GNhmgxP621jOh0/t6j3Z0qHIWkq m4/rooMu1u/HxbMMMg== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:27 2025 by rpki-client