This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json) Hash identifier: tpD5OoepEi/lHGCNf7KJ/AuqrMYcw7dE0DxS+ndFnGc= Subject key identifier: AF:63:5A:2B:93:2C:8F:2D:EA:01:F0:B1:5D:43:2B:E9:2E:06:37:71 Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B3CEC0EFDB627B072F704FFB0A6307BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 18:01:01 +0000 Manifest this update: Sat 20 Dec 2025 18:01:01 +0000 Manifest next update: Sun 21 Dec 2025 18:01:01 +0000 Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: 4ZSpSiYkxYt9NSqP20RtOtb3gLOYX8wrnCsiLC3qFPw=) 2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=) 3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=) 4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=) 5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=) 6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=) 7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:0e:fd:b6:27:b0:72:f7:04:ff:b0:a6:30:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Dec 20 18:01:01 2025 GMT Not After : Dec 21 18:01:01 2025 GMT Subject: CN=af635a2b932c8f2dea01f0b15d432be92e063771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:8f:ae:1d:b8:e0:f2:ce:18:85:fc:3c:93: 59:8c:dc:60:58:64:bd:5e:32:f6:2a:3d:14:54:cc: 56:e1:47:11:15:a4:0c:33:48:2a:9e:68:53:6c:ca: 7b:87:f9:e5:b3:f6:e4:88:48:ef:fc:24:96:c3:55: 9e:1b:73:a8:18:11:d7:31:cc:05:42:ee:cc:b6:dc: 37:33:e5:ae:e7:f8:9d:be:f3:e6:47:8c:b7:d4:f8: 14:5b:00:03:67:42:b0:08:3c:65:14:36:8f:29:f5: f7:db:a3:0b:9b:f6:40:67:31:52:cf:d8:2c:0d:bc: b1:f0:d5:51:fc:65:a4:8a:93:ee:f5:f6:27:dc:05: f2:a6:24:1d:14:53:a2:48:59:aa:73:b5:76:6b:b8: 40:63:e8:6f:8e:1c:ac:19:14:ec:ec:9c:2f:0a:6b: 23:df:90:97:4c:9e:75:25:aa:3f:01:f4:e6:a3:f0: d3:b6:66:02:ff:17:97:65:72:5a:80:14:48:f4:9e: 5a:19:c2:fb:9c:5e:94:df:99:db:74:8f:73:0c:a1: 7d:d2:87:99:14:0d:29:96:32:51:5d:02:15:49:06: 16:73:ca:f5:6f:86:f9:3d:e3:13:48:92:7a:61:ba: 49:74:a2:65:29:f0:fb:37:0f:5f:43:d9:a9:0f:b6: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:5A:2B:93:2C:8F:2D:EA:01:F0:B1:5D:43:2B:E9:2E:06:37:71 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ee:bb:a9:12:e9:a4:64:98:28:00:82:99:64:95:96:3a:7d: 84:8d:14:c7:97:89:a1:eb:39:6f:de:e5:9b:1d:41:14:1c:c3: c0:9d:dc:1b:c0:ea:1c:2d:03:89:7b:a9:d8:de:c2:40:3e:e7: 97:1f:7d:80:84:41:cf:02:ee:63:8d:ac:fe:e3:74:15:56:a2: 03:5d:66:35:32:05:06:1c:bf:79:1d:01:2f:54:a9:90:9d:da: d0:f4:c2:70:c8:d7:d3:89:96:75:6d:18:21:8a:93:1e:80:4e: c6:83:0d:87:c8:88:ff:5b:81:33:02:68:1a:86:56:a3:47:fc: fc:71:da:9a:6e:e0:3f:76:c7:c5:1b:4b:ed:d6:e1:14:2f:d4: 3c:59:6d:6e:c8:74:91:cc:23:5f:0f:93:fc:22:f1:5b:70:18: 5b:62:d8:ea:6c:cc:f9:30:61:7b:05:d6:ab:f4:bf:37:60:b0: c1:00:d7:96:83:55:1b:f2:38:8d:91:17:06:9a:a2:fa:6c:72: 61:bc:77:8c:09:79:2d:59:2c:d1:31:c4:e5:86:cc:2c:cb:64: e9:c8:25:f2:c9:e7:69:a7:97:3a:68:59:16:aa:ed:3c:c3:60: fa:fc:db:cf:9f:6c:80:9d:00:6f:d7:53:d5:f8:c5:89:a4:ca: 38:0c:be:5f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs87A79tiewcvcE/7CmMHvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjUxMjIwMTgwMTAxWhcNMjUxMjIxMTgwMTAxWjAzMTEwLwYDVQQD EyhhZjYzNWEyYjkzMmM4ZjJkZWEwMWYwYjE1ZDQzMmJlOTJlMDYzNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos6Prh244PLOGIX8PJNZjNxgWGS9 XjL2Kj0UVMxW4UcRFaQMM0gqnmhTbMp7h/nls/bkiEjv/CSWw1WeG3OoGBHXMcwF Qu7Mttw3M+Wu5/idvvPmR4y31PgUWwADZ0KwCDxlFDaPKfX326MLm/ZAZzFSz9gs Dbyx8NVR/GWkipPu9fYn3AXypiQdFFOiSFmqc7V2a7hAY+hvjhysGRTs7JwvCmsj 35CXTJ51Jao/AfTmo/DTtmYC/xeXZXJagBRI9J5aGcL7nF6U35nbdI9zDKF90oeZ FA0pljJRXQIVSQYWc8r1b4b5PeMTSJJ6YbpJdKJlKfD7Nw9fQ9mpD7aTSQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK9jWiuTLI8t6gHwsV1DK+kuBjdxMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGO67 qRLppGSYKACCmWSVljp9hI0Ux5eJoes5b97lmx1BFBzDwJ3cG8DqHC0DiXup2N7C QD7nlx99gIRBzwLuY42s/uN0FVaiA11mNTIFBhy/eR0BL1SpkJ3a0PTCcMjX04mW dW0YIYqTHoBOxoMNh8iI/1uBMwJoGoZWo0f8/HHamm7gP3bHxRtL7dbhFC/UPFlt bsh0kcwjXw+T/CLxW3AYW2LY6mzM+TBhewXWq/S/N2CwwQDXloNVG/I4jZEXBpqi +mxyYbx3jAl5LVks0THE5YbMLMtk6cgl8snnaaeXOmhZFqrtPMNg+vzbz59sgJ0A b9dT1fjFiaTKOAy+Xw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:24 2025 by rpki-client