This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json) Hash identifier: H1PQ5Nt+Uez34gxnmVTnRb0KyTAlWe28gd7W3aunPLg= Subject key identifier: 10:5D:02:BF:55:D9:9C:82:30:5B:FC:8B:E7:89:94:56:24:66:85:11 Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4 Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4 Certificate serial: 019B53AA8FC7E13A822B46F70D1B4AF97E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft Manifest number: 08AA Signing time: Thu 25 Dec 2025 04:00:45 +0000 Manifest this update: Thu 25 Dec 2025 04:00:45 +0000 Manifest next update: Fri 26 Dec 2025 04:00:45 +0000 Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: Lpazmx86EeZ3HcPecz2IlN2AnKB2tuDjJeWxunl7QMA=) 2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:8f:c7:e1:3a:82:2b:46:f7:0d:1b:4a:f9:7e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4 Validity Not Before: Dec 25 04:00:45 2025 GMT Not After : Dec 26 04:00:45 2025 GMT Subject: CN=105d02bf55d99c82305bfc8be789945624668511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:62:7d:71:04:d0:53:f7:7d:b2:b9:00:1d: 95:ba:99:e8:2d:1c:f9:d0:26:db:b2:bb:40:db:aa: 65:a5:81:ae:dc:52:00:79:dd:bf:68:35:59:d8:56: 1d:f9:f4:72:9e:8f:fc:45:d3:35:71:77:cf:02:d5: 78:7a:9e:20:da:da:55:72:00:14:f8:ea:40:29:0e: 3e:24:f9:78:9b:8f:8c:67:5b:15:45:0c:70:70:c4: f0:62:d3:73:c9:b8:7e:0c:6a:c9:d3:6a:8a:d5:1e: 9c:b7:95:b4:5b:8c:ba:b2:5d:f1:ba:88:75:ec:35: 8b:a5:f6:f1:00:b2:2f:32:56:4f:2d:0a:38:92:7d: 34:a4:0b:88:18:15:e6:5f:db:87:7f:7f:76:c0:34: 7b:60:0d:cf:5c:cc:64:26:9c:71:01:be:78:bd:28: c2:26:15:df:75:3b:7b:4a:54:34:36:e2:00:05:9a: 79:4d:e3:16:0a:8b:d5:41:a5:07:8e:60:ef:3a:e5: ab:54:4c:6b:1d:c1:5d:ed:db:7b:d9:06:97:01:99: 1f:d3:0d:fd:7c:9f:1a:91:a1:1d:78:80:a8:71:04: d8:85:ed:e4:25:91:10:8f:15:9d:b6:de:9b:0e:b4: 37:b9:af:4f:26:a5:6b:ba:8a:40:76:39:85:a0:17: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5D:02:BF:55:D9:9C:82:30:5B:FC:8B:E7:89:94:56:24:66:85:11 X509v3 Authority Key Identifier: keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:38:69:98:8b:50:13:05:01:d3:2b:f3:c7:60:0c:e0:93:04: ac:ef:1a:ed:93:bd:a9:64:8b:3b:2c:0e:92:ab:f4:d5:13:7c: 1a:ab:5e:9c:90:a5:05:43:45:7d:9d:b2:34:51:30:98:42:50: 68:4b:5b:f0:72:7f:e0:39:72:9b:6c:9b:09:66:5c:4b:ca:38: 47:a5:3d:8e:20:f7:e2:ef:9d:36:b1:d8:e8:ba:d3:86:d4:d8: cd:bc:81:99:fb:7f:28:a6:51:19:ba:59:7b:51:5d:4d:6f:48: 23:27:f2:9c:1a:76:26:70:7a:f6:5f:f2:22:9c:8d:f9:4d:4f: 60:24:23:7f:2c:39:74:05:2a:fe:e6:22:b7:42:21:01:9b:a1: db:e3:bb:f7:48:6c:b8:b5:5b:db:b4:ff:c5:cf:c6:d7:f2:f9: 18:ce:db:c8:db:0f:f9:07:99:73:b4:91:68:1e:a6:f4:33:06: 72:8c:07:18:f3:43:c5:a2:cd:dd:1d:8e:67:1f:48:8c:97:3c: e5:39:87:82:a5:e2:8d:10:33:79:18:25:c2:ec:9d:db:09:bd: cc:b6:28:e4:b3:c4:e7:da:a0:6b:ca:2b:77:19:74:21:a0:98: 95:3b:a0:f7:73:98:b4:51:e9:8b:1f:45:af:0c:59:3b:91:82: 74:71:cc:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtTqo/H4TqCK0b3DRtK+X49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh YTY1YTQwHhcNMjUxMjI1MDQwMDQ1WhcNMjUxMjI2MDQwMDQ1WjAzMTEwLwYDVQQD EygxMDVkMDJiZjU1ZDk5YzgyMzA1YmZjOGJlNzg5OTQ1NjI0NjY4NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmFifXEE0FP3fbK5AB2VupnoLRz5 0CbbsrtA26plpYGu3FIAed2/aDVZ2FYd+fRyno/8RdM1cXfPAtV4ep4g2tpVcgAU +OpAKQ4+JPl4m4+MZ1sVRQxwcMTwYtNzybh+DGrJ02qK1R6ct5W0W4y6sl3xuoh1 7DWLpfbxALIvMlZPLQo4kn00pAuIGBXmX9uHf392wDR7YA3PXMxkJpxxAb54vSjC JhXfdTt7SlQ0NuIABZp5TeMWCovVQaUHjmDvOuWrVExrHcFd7dt72QaXAZkf0w39 fJ8akaEdeICocQTYhe3kJZEQjxWdtt6bDrQ3ua9PJqVruopAdjmFoBf1BwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBBdAr9V2ZyCMFv8i+eJlFYkZoURMB8GA1UdIwQY MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjhp mItQEwUB0yvzx2AM4JMErO8a7ZO9qWSLOywOkqv01RN8GqtenJClBUNFfZ2yNFEw mEJQaEtb8HJ/4Dlym2ybCWZcS8o4R6U9jiD34u+dNrHY6LrThtTYzbyBmft/KKZR GbpZe1FdTW9IIyfynBp2JnB69l/yIpyN+U1PYCQjfyw5dAUq/uYit0IhAZuh2+O7 90hsuLVb27T/xc/G1/L5GM7byNsP+QeZc7SRaB6m9DMGcowHGPNDxaLN3R2OZx9I jJc85TmHgqXijRAzeRglwuyd2wm9zLYo5LPE59qga8ordxl0IaCYlTug93OYtFHp ix9FrwxZO5GCdHHMkw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:10:55 2025 by rpki-client