This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json) Hash identifier: i8CH+PK8MY2UZC1iYS0bURsf4YNbpE+dmzdy6HA+ouQ= Subject key identifier: 48:BF:C7:60:F4:21:25:A6:C9:46:C5:E9:A0:51:A9:23:E6:38:E9:4D Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Certificate serial: 019B424A69D21C6B152F0F1B833C2DAC408A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft Manifest number: 070E Signing time: Sun 21 Dec 2025 19:02:11 +0000 Manifest this update: Sun 21 Dec 2025 19:02:11 +0000 Manifest next update: Mon 22 Dec 2025 19:02:11 +0000 Files and hashes: 1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: rwZE1EfFOIu9PRlGso9F9OV15oKAo/vShiIVLiYnZMg=) 2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:69:d2:1c:6b:15:2f:0f:1b:83:3c:2d:ac:40:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Validity Not Before: Dec 21 19:02:11 2025 GMT Not After : Dec 22 19:02:11 2025 GMT Subject: CN=48bfc760f42125a6c946c5e9a051a923e638e94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:fc:b4:73:e6:a1:0b:d4:9e:3c:4d:01:8d: ca:f0:ac:91:d0:7c:7e:b1:2d:64:df:7e:f8:b8:9b: e2:94:af:94:15:dd:e5:2d:0e:2b:19:89:ca:6f:89: 5a:79:1e:b6:15:eb:e9:1d:8f:8e:cc:9e:4e:3c:be: fc:16:24:15:64:92:eb:8a:25:5a:d4:0a:66:a0:47: f3:a7:b3:8c:36:89:51:8f:1b:88:d8:13:87:ac:be: ae:41:16:4a:38:5a:6e:c3:25:c6:15:3f:70:df:61: 85:3a:27:ac:82:1e:24:ea:96:89:d7:1e:7b:6c:5a: 8e:4b:b0:1f:0a:49:e9:a6:81:d7:d7:0f:1c:9a:49: dc:c3:90:c1:96:de:f7:31:2e:8d:2a:fe:2b:5d:0e: 8a:79:73:31:15:34:43:90:3d:47:82:1b:63:ea:f5: 0b:eb:f4:7f:65:b4:a8:5d:f4:d9:5e:08:6e:e9:76: 44:f2:6b:57:3b:d8:24:34:c7:c4:ba:e5:c0:52:27: 03:8d:92:a4:66:27:06:56:18:bf:37:3c:ff:10:d8: be:1a:78:a0:0e:2e:f8:b2:e4:31:81:cd:e6:6b:b7: 00:e6:87:ca:3a:e4:3d:8a:2c:2d:ab:c9:24:3e:0d: 86:2e:51:f8:62:8d:ae:31:f5:01:c6:df:bd:54:b1: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BF:C7:60:F4:21:25:A6:C9:46:C5:E9:A0:51:A9:23:E6:38:E9:4D X509v3 Authority Key Identifier: keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:83:05:a7:f8:b0:0b:eb:fa:cb:14:02:5b:04:dd:e2:66:5b: 2a:16:49:be:b3:16:98:d6:7c:e1:af:9b:1b:64:c3:00:b7:b9: 20:f0:5c:3e:cc:f3:ea:a1:53:06:8c:fe:3f:8d:c1:98:6f:73: 49:9a:bf:d8:4a:de:38:1b:02:6d:fe:eb:43:82:91:56:69:3d: 42:4b:b2:5b:d0:44:bf:eb:11:92:c5:d4:60:e6:c7:90:30:e8: 72:4f:cb:2f:38:e4:12:49:09:4d:bf:26:ec:2a:bd:df:1b:e9: 80:c5:28:00:b6:99:c4:cc:09:7b:a9:66:de:30:8a:16:4d:d2: eb:b1:72:05:2a:c2:67:66:5c:78:04:50:c0:15:30:4d:b9:2b: 7a:f2:ef:ee:a3:c0:d4:fb:e2:42:11:26:73:58:47:ea:ee:23: 5a:ca:d9:33:f9:fe:f6:a6:da:c2:36:9b:a1:47:3f:c4:d2:05: fc:f4:f2:17:9e:00:d3:b5:ae:3e:9e:b3:cc:1e:28:bc:c0:3d: cb:e5:8e:3d:78:7c:e8:e9:f9:a3:60:08:5f:ad:dc:ff:10:63: a9:12:3e:96:59:55:b0:18:ca:37:39:33:82:ec:0a:68:90:57: 6f:ee:72:5d:c9:f8:88:d6:73:0d:37:c0:34:5f:e5:3c:15:27: bb:89:4f:80 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCSmnSHGsVLw8bgzwtrECKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzE4Y2IxYTUwMjdmYTE3MjZmMTE0YjNlZmU2MmEzYTk3 OWNlMWIwHhcNMjUxMjIxMTkwMjExWhcNMjUxMjIyMTkwMjExWjAzMTEwLwYDVQQD Eyg0OGJmYzc2MGY0MjEyNWE2Yzk0NmM1ZTlhMDUxYTkyM2U2MzhlOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw38tHPmoQvUnjxNAY3K8KyR0Hx+ sS1k3374uJvilK+UFd3lLQ4rGYnKb4laeR62FevpHY+OzJ5OPL78FiQVZJLriiVa 1ApmoEfzp7OMNolRjxuI2BOHrL6uQRZKOFpuwyXGFT9w32GFOiesgh4k6paJ1x57 bFqOS7AfCknppoHX1w8cmkncw5DBlt73MS6NKv4rXQ6KeXMxFTRDkD1Hghtj6vUL 6/R/ZbSoXfTZXghu6XZE8mtXO9gkNMfEuuXAUicDjZKkZicGVhi/Nzz/ENi+Gnig Di74suQxgc3ma7cA5ofKOuQ9iiwtq8kkPg2GLlH4Yo2uMfUBxt+9VLFJ7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEi/x2D0ISWmyUbF6aBRqSPmOOlNMB8GA1UdIwQY MBaAFPnBjLGlAn+hcm8RSz7+YqOpec4bMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jR01zYVVDZjZGeWJ4RkxQdjVpbzZsNXpocy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMjZjYTkyLTZmYjgtNGRkMi05Nzk1 LTliYzVjMjZkNGJlOC8xLzEtY0dNc2FVQ2Y2RnlieEZMUHY1aW82bDV6aHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM1LzI2Y2E5Mi02ZmI4LTRkZDItOTc5NS05YmM1YzI2ZDRi ZTgvMS8xLWNHTXNhVUNmNkZ5YnhGTFB2NWlvNmw1emhzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIMF p/iwC+v6yxQCWwTd4mZbKhZJvrMWmNZ84a+bG2TDALe5IPBcPszz6qFTBoz+P43B mG9zSZq/2EreOBsCbf7rQ4KRVmk9QkuyW9BEv+sRksXUYObHkDDock/LLzjkEkkJ Tb8m7Cq93xvpgMUoALaZxMwJe6lm3jCKFk3S67FyBSrCZ2ZceARQwBUwTbkrevLv 7qPA1PviQhEmc1hH6u4jWsrZM/n+9qbawjaboUc/xNIF/PTyF54A07WuPp6zzB4o vMA9y+WOPXh86On5o2AIX63c/xBjqRI+lllVsBjKNzkzguwKaJBXb+5yXcn4iNZz DTfANF/lPBUnu4lPgA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:49:55 2025 by rpki-client