This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft File: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json) Hash identifier: WSJ8cVMbLKTpSV3zWXhO5wQmcadczTbnajW0muDxKgg= Subject key identifier: 75:9E:EE:87:AF:DB:F9:52:25:D7:FA:4C:C6:B7:4B:A5:75:5B:2B:2F Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5 Certificate issuer: /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5 Certificate serial: 019B3DFE428A5850723CBCCF99EA807A9162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft Manifest number: 0283 Signing time: Sat 20 Dec 2025 23:00:31 +0000 Manifest this update: Sat 20 Dec 2025 23:00:31 +0000 Manifest next update: Sun 21 Dec 2025 23:00:31 +0000 Files and hashes: 1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: qSXqVdeGQTtY0/8scMVcHzq6vEb1mPvzNKbjl49NOdM=) 2: BcelUhdXxacAQU97XkdcwjtJzVg.roa (hash: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:42:8a:58:50:72:3c:bc:cf:99:ea:80:7a:91:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5 Validity Not Before: Dec 20 23:00:31 2025 GMT Not After : Dec 21 23:00:31 2025 GMT Subject: CN=759eee87afdbf95225d7fa4cc6b74ba5755b2b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:c5:3d:42:b7:0a:fb:d4:2a:f9:e7:f4:8e: 28:15:c2:1d:46:58:90:4e:b7:9f:77:7b:32:6e:bc: 18:7b:65:ae:cd:1b:64:0f:15:e4:04:89:9c:b0:58: f6:d7:2b:c3:eb:ec:7b:7d:d5:d5:f5:04:f3:33:f1: 3c:2e:dd:ba:34:47:6e:00:42:03:df:c8:2f:b1:1a: 55:9e:fa:06:e3:35:36:88:1b:22:bd:da:41:8e:dd: e8:37:d7:61:37:2d:6a:00:b9:f5:e7:45:c4:0c:62: e2:f8:17:68:71:73:53:98:cc:6f:2b:6e:be:71:c9: 35:b1:30:0a:97:37:9f:3d:b1:ae:8d:48:a4:b0:79: 4e:54:7c:ab:b7:8b:89:a3:d8:fc:a4:96:a3:d8:7a: fa:84:d2:8c:a1:7d:7a:c3:16:80:5e:25:3e:46:4e: 6a:9c:3d:9a:19:15:84:93:b7:2c:01:f0:f4:ce:9e: e8:e8:c5:b8:16:81:63:f6:b7:22:66:e1:00:f3:7f: ca:fa:98:e4:87:80:1f:14:87:c3:94:28:29:63:7b: 36:9e:64:29:c1:f0:93:53:d9:2e:46:c4:c5:02:8b: e6:2f:dc:ed:56:c1:17:88:d6:1d:df:0f:8f:89:a7: 79:ab:cd:50:04:8d:20:72:b2:44:39:7a:e7:7b:21: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9E:EE:87:AF:DB:F9:52:25:D7:FA:4C:C6:B7:4B:A5:75:5B:2B:2F X509v3 Authority Key Identifier: keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:dd:4c:38:74:2a:48:d3:f9:d5:7c:b4:5a:1d:bc:00:1b:74: 10:75:8a:ed:e6:66:a1:73:0f:08:ab:a0:61:e0:3b:dd:31:1c: dd:bc:64:1e:b4:ab:74:a4:2b:a7:7a:3d:a6:1b:1e:44:6e:11: 4c:de:42:1d:37:af:a4:d4:30:6b:de:13:df:21:ee:5b:a9:58: 59:78:b8:c4:d4:39:86:7c:df:7d:f3:d0:89:f5:51:b2:68:36: 37:a8:28:b0:50:bd:ed:41:f2:e2:54:13:f9:45:ec:a4:5f:6c: e1:8b:76:9f:32:4d:22:87:e9:61:2a:f9:8e:cd:10:d0:53:16: ba:1f:f9:d8:d4:a7:bb:00:0e:df:62:24:ac:68:1a:8e:91:e3: fd:ec:03:7c:06:09:df:f1:a3:ff:99:65:2c:db:ae:15:30:61: d4:da:e2:c3:4f:7f:98:f0:38:a6:3d:ef:eb:8a:f5:e9:69:31: fa:c3:99:d1:62:ad:2f:cf:b1:a8:3a:9e:99:94:bc:f4:e7:b3: df:6d:21:0c:f6:38:d5:41:17:8a:b8:3b:1f:09:27:ed:27:a0: 72:46:f7:74:89:90:47:d0:34:ac:15:74:82:49:e1:37:d3:52: 55:4b:0d:e4:3c:4e:3c:5d:f3:ef:70:85:4b:0a:60:cc:cb:52: 7f:d1:1e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/kKKWFByPLzPmeqAepFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NTg1YTJlMDhmZTQ0M2NlN2ZkMGNiZjQwNmY3YjlhZGEy YTdjYzUwHhcNMjUxMjIwMjMwMDMxWhcNMjUxMjIxMjMwMDMxWjAzMTEwLwYDVQQD Eyg3NTllZWU4N2FmZGJmOTUyMjVkN2ZhNGNjNmI3NGJhNTc1NWIyYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVjFPUK3CvvUKvnn9I4oFcIdRliQ Trefd3sybrwYe2WuzRtkDxXkBImcsFj21yvD6+x7fdXV9QTzM/E8Lt26NEduAEID 38gvsRpVnvoG4zU2iBsivdpBjt3oN9dhNy1qALn150XEDGLi+BdocXNTmMxvK26+ cck1sTAKlzefPbGujUiksHlOVHyrt4uJo9j8pJaj2Hr6hNKMoX16wxaAXiU+Rk5q nD2aGRWEk7csAfD0zp7o6MW4FoFj9rciZuEA83/K+pjkh4AfFIfDlCgpY3s2nmQp wfCTU9kuRsTFAovmL9ztVsEXiNYd3w+Piad5q81QBI0gcrJEOXrneyFwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWe7oev2/lSJdf6TMa3S6V1WysvMB8GA1UdIwQY MBaAFNVYWi4I/kQ85/0Mv0Bve5raKnzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUt NjI4NDAwNjcxZDBlLzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUtNjI4NDAwNjcxZDBl LzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHN1MOHQq SNP51Xy0Wh28ABt0EHWK7eZmoXMPCKugYeA73TEc3bxkHrSrdKQrp3o9phseRG4R TN5CHTevpNQwa94T3yHuW6lYWXi4xNQ5hnzfffPQifVRsmg2N6gosFC97UHy4lQT +UXspF9s4Yt2nzJNIofpYSr5js0Q0FMWuh/52NSnuwAO32IkrGgajpHj/ewDfAYJ 3/Gj/5llLNuuFTBh1Nriw09/mPA4pj3v64r16Wkx+sOZ0WKtL8+xqDqemZS89Oez 320hDPY41UEXirg7Hwkn7Segckb3dImQR9A0rBV0gknhN9NSVUsN5DxOPF3z73CF SwpgzMtSf9EefQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:42:08 2025 by rpki-client