This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json) Hash identifier: sxPqGCXKB3yC+7/ZxsIHz+sTz7DoI814VuYv5bUGMgs= Subject key identifier: 38:85:48:06:39:A1:20:96:BD:40:08:43:58:DA:0E:36:8F:2E:BD:7C Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Certificate serial: 019B3BD93FBA62E57810AA6BFE1EB4124A32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:00:51 +0000 Manifest this update: Sat 20 Dec 2025 13:00:51 +0000 Manifest next update: Sun 21 Dec 2025 13:00:51 +0000 Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: 2yN9w2NYfa301g81SP0oevncq5Lyk5gTCgDLdxqtkDk=) 2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=) 3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=) 4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:3f:ba:62:e5:78:10:aa:6b:fe:1e:b4:12:4a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Validity Not Before: Dec 20 13:00:51 2025 GMT Not After : Dec 21 13:00:51 2025 GMT Subject: CN=3885480639a12096bd40084358da0e368f2ebd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:aa:cd:45:21:77:db:f7:de:b1:c6:7d:7b: 39:2b:13:90:36:87:db:a7:53:ee:16:aa:10:a6:20: 6a:51:50:42:54:55:11:c8:69:11:75:ed:de:ee:e5: 79:d7:55:d1:aa:b4:f4:a3:fd:0c:78:31:09:a8:2f: e5:6d:22:bd:73:c0:bc:de:ef:4b:65:24:c0:84:c3: 2b:c2:72:d9:ac:71:d4:ce:96:ca:69:58:9f:2f:c5: ef:c0:12:e9:84:ca:08:dd:2c:ca:02:02:49:a2:7a: 8c:78:6a:05:89:7c:a0:65:d2:74:e3:f0:ba:0d:44: 11:0e:69:b4:ae:7f:1a:f5:a7:3e:7f:d7:f3:ef:31: dc:92:51:62:19:95:8a:f0:d4:11:e2:ba:9e:e9:ec: c1:73:52:c0:7b:db:67:8f:d0:7e:32:17:7f:78:8b: 29:6d:79:70:3b:9f:43:c7:af:27:f0:a6:f9:d0:37: 14:b0:a6:a2:1d:c3:75:d0:c6:cc:29:83:bb:61:b7: f0:68:71:12:15:c9:0c:00:15:0c:71:81:e6:0f:66: 2a:b6:5b:b8:9c:4f:ed:8c:b1:57:a6:37:d7:3f:10: 81:31:ec:9f:ab:e6:a0:2b:7e:5f:e9:c2:2f:f5:bb: 56:37:16:ac:fc:6b:65:05:91:0e:6e:41:0c:d3:87: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:85:48:06:39:A1:20:96:BD:40:08:43:58:DA:0E:36:8F:2E:BD:7C X509v3 Authority Key Identifier: keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:10:6f:65:99:40:b7:37:96:04:58:14:ac:a6:05:99:59:50: 50:ce:2b:c9:fd:76:d9:3f:b8:44:e2:d2:84:be:e1:0a:9e:c4: d2:53:c2:24:08:2c:15:b1:11:ab:f2:8a:85:98:3d:82:34:b2: 5b:8a:1a:27:88:8a:38:92:46:a2:5b:b9:43:2f:6e:fd:4d:42: 2b:57:c0:f6:10:5b:ae:cc:e2:d1:12:d9:1c:ff:02:76:75:97: 2b:a6:d4:0a:38:d6:38:bd:bc:90:19:c3:fc:15:ab:18:98:f3: 71:d7:11:29:3f:64:6a:b5:66:41:ac:46:7e:3e:b2:7e:0b:c5: a7:40:09:a8:40:85:1f:8c:c8:6b:23:8d:ca:82:90:55:35:3e: 00:45:1e:e4:18:12:3f:76:e1:e5:d4:4f:fa:ad:09:a2:9c:71: fb:b1:a1:1b:6f:6b:a4:89:da:8a:69:6b:4f:e9:df:5e:ec:56: 76:35:58:43:80:4c:91:a8:77:bf:15:60:79:53:46:95:41:db: db:65:88:73:90:e8:cb:4f:bb:0c:8d:bb:14:21:43:b3:0d:99: 7e:99:f4:16:ac:b4:48:eb:df:78:11:7a:ed:1a:67:1f:40:83: 50:8d:4d:a4:fb:49:7f:86:13:28:75:81:c9:54:81:d1:e9:bd: 29:ca:f7:57 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs72T+6YuV4EKpr/h60EkoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4 YmM4NmQwHhcNMjUxMjIwMTMwMDUxWhcNMjUxMjIxMTMwMDUxWjAzMTEwLwYDVQQD EygzODg1NDgwNjM5YTEyMDk2YmQ0MDA4NDM1OGRhMGUzNjhmMmViZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX2qzUUhd9v33rHGfXs5KxOQNofb p1PuFqoQpiBqUVBCVFURyGkRde3e7uV511XRqrT0o/0MeDEJqC/lbSK9c8C83u9L ZSTAhMMrwnLZrHHUzpbKaVifL8XvwBLphMoI3SzKAgJJonqMeGoFiXygZdJ04/C6 DUQRDmm0rn8a9ac+f9fz7zHcklFiGZWK8NQR4rqe6ezBc1LAe9tnj9B+Mhd/eIsp bXlwO59Dx68n8Kb50DcUsKaiHcN10MbMKYO7YbfwaHESFckMABUMcYHmD2Yqtlu4 nE/tjLFXpjfXPxCBMeyfq+agK35f6cIv9btWNxas/GtlBZEObkEM04faCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDiFSAY5oSCWvUAIQ1jaDjaPLr18MB8GA1UdIwQY MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1 LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxBv ZZlAtzeWBFgUrKYFmVlQUM4ryf122T+4ROLShL7hCp7E0lPCJAgsFbERq/KKhZg9 gjSyW4oaJ4iKOJJGolu5Qy9u/U1CK1fA9hBbrszi0RLZHP8CdnWXK6bUCjjWOL28 kBnD/BWrGJjzcdcRKT9karVmQaxGfj6yfgvFp0AJqECFH4zIayONyoKQVTU+AEUe 5BgSP3bh5dRP+q0Jopxx+7GhG29rpInaimlrT+nfXuxWdjVYQ4BMkah3vxVgeVNG lUHb22WIc5Doy0+7DI27FCFDsw2Zfpn0Fqy0SOvfeBF67RpnH0CDUI1NpPtJf4YT KHWByVSB0em9Kcr3Vw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:52:40 2025 by rpki-client