This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json) Hash identifier: BYau3tswj3Rr5+fz5em15ILRgoA1c3xdP6Lrm74wFvY= Subject key identifier: DF:4B:BC:77:33:FF:82:8F:3C:AD:22:A9:71:1A:04:FA:CE:2C:EA:A9 Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Certificate serial: 019B3C10435A606DFAA941F1D14CD038A46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:57 +0000 Manifest this update: Sat 20 Dec 2025 14:00:57 +0000 Manifest next update: Sun 21 Dec 2025 14:00:57 +0000 Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: bx6r50sEz2Dv8GPxaHibXrRCtLrj0pg5DqZ/8AJAE7Y=) 2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:43:5a:60:6d:fa:a9:41:f1:d1:4c:d0:38:a4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Validity Not Before: Dec 20 14:00:57 2025 GMT Not After : Dec 21 14:00:57 2025 GMT Subject: CN=df4bbc7733ff828f3cad22a9711a04face2ceaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:91:6a:b4:7a:ea:e0:1c:76:7d:cd:3c:0a: ff:2e:b3:6f:6d:1d:82:13:05:c7:38:8c:43:76:50: 36:c3:46:70:84:28:ed:51:9a:81:c7:ec:5c:25:1c: a9:69:c0:34:39:8f:8d:5a:7e:34:77:31:10:c6:84: f3:ec:ab:56:46:01:ca:e6:a3:e1:5c:eb:3c:d7:26: 64:e5:02:04:8d:30:bb:a5:06:11:8b:35:7a:bd:2f: c4:a5:b0:7b:81:df:11:21:d4:6a:6b:3b:aa:37:19: e5:62:62:0c:02:4a:3c:49:0e:eb:a2:7b:ce:52:bb: ea:d1:db:e3:06:d6:92:da:0f:7e:37:5c:e3:a9:70: 3c:44:71:9d:e6:dc:cb:07:cd:26:11:01:79:7c:31: 88:5f:ab:99:ed:56:56:5c:85:f6:13:95:2f:20:fb: 37:f0:3a:6a:bf:a8:62:a4:cc:e7:f9:b5:74:2a:d7: 8a:83:43:64:9c:5c:56:a2:3e:0a:96:6c:fe:c4:f3: 44:64:57:17:07:f3:da:ef:93:a1:fa:ee:23:a2:a4: f4:f7:77:68:eb:8b:b4:53:88:24:ac:a3:41:fd:58: 0b:98:8d:5a:32:1d:7a:14:2e:40:a9:56:c3:8b:71: 58:3b:af:65:2a:f1:3f:f8:fa:44:d9:79:46:85:b1: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:BC:77:33:FF:82:8F:3C:AD:22:A9:71:1A:04:FA:CE:2C:EA:A9 X509v3 Authority Key Identifier: keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4f:b7:96:0c:24:99:f4:5a:ff:65:88:19:7a:5e:5f:9d:af: c3:5b:55:9a:c3:f3:e8:43:29:45:25:e9:be:c7:cd:6a:c2:51: c3:46:75:ed:5d:1d:f7:37:00:e2:26:35:5a:ad:41:1c:3e:63: 91:7e:a1:7a:0e:71:69:93:1f:c3:df:74:fd:50:27:c3:ca:22: 79:99:2a:a5:76:18:3e:24:c8:47:36:cf:41:96:4e:22:21:13: d4:d7:7c:93:fa:cc:a0:ae:e5:d6:55:3f:29:73:e7:49:ba:48: 32:44:ab:23:a1:db:85:08:a8:b2:ef:85:33:5a:62:d6:01:50: c3:ac:31:76:e1:19:f5:4e:f0:49:34:5d:41:f0:1d:14:b0:71: aa:48:48:b0:0c:ec:6f:f7:c9:15:6e:10:f3:e3:46:1b:87:74: e1:04:7f:49:a1:ed:27:02:32:f6:93:79:24:12:f4:d3:37:90: db:46:cb:47:98:45:c5:fc:c8:34:7c:8b:99:24:c4:aa:18:b7: b2:d9:9f:3b:7c:3e:67:e4:dc:6b:f5:ba:ac:c9:57:92:eb:76: 5a:0b:9a:57:0c:c2:f0:e8:2b:91:1c:32:39:44:17:8f:56:ac: d5:c8:8e:33:eb:60:bd:17:bf:e4:b7:8b:2a:bf:d5:80:af:04: a9:8c:05:86 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8EENaYG36qUHx0UzQOKRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzVkZjEzYmY4YzFiYThiMTBlMmRhNDgwYWU2MWE1MzQ4 YWI4ZTkwHhcNMjUxMjIwMTQwMDU3WhcNMjUxMjIxMTQwMDU3WjAzMTEwLwYDVQQD EyhkZjRiYmM3NzMzZmY4MjhmM2NhZDIyYTk3MTFhMDRmYWNlMmNlYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM+RarR66uAcdn3NPAr/LrNvbR2C EwXHOIxDdlA2w0ZwhCjtUZqBx+xcJRypacA0OY+NWn40dzEQxoTz7KtWRgHK5qPh XOs81yZk5QIEjTC7pQYRizV6vS/EpbB7gd8RIdRqazuqNxnlYmIMAko8SQ7ronvO Urvq0dvjBtaS2g9+N1zjqXA8RHGd5tzLB80mEQF5fDGIX6uZ7VZWXIX2E5UvIPs3 8Dpqv6hipMzn+bV0KteKg0NknFxWoj4Klmz+xPNEZFcXB/Pa75Oh+u4joqT093do 64u0U4gkrKNB/VgLmI1aMh16FC5AqVbDi3FYO69lKvE/+PpE2XlGhbGG6QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN9LvHcz/4KPPK0iqXEaBPrOLOqpMB8GA1UdIwQY MBaAFPh13xO/jBuosQ4tpICuYaU0irjpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IWGZFNy1NRzZpeERpMmtnSzVocFRTS3VPay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5 LWZjODNkYjEzZjNhMS8xLzEtSFhmRTctTUc2aXhEaTJrZ0s1aHBUU0t1T2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNiL2FiYWNmMS1mNGM2LTQ3MTAtOTNlOS1mYzgzZGIxM2Yz YTEvMS8xLUhYZkU3LU1HNml4RGkya2dLNWhwVFNLdU9rLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE+3 lgwkmfRa/2WIGXpeX52vw1tVmsPz6EMpRSXpvsfNasJRw0Z17V0d9zcA4iY1Wq1B HD5jkX6heg5xaZMfw990/VAnw8oieZkqpXYYPiTIRzbPQZZOIiET1Nd8k/rMoK7l 1lU/KXPnSbpIMkSrI6HbhQiosu+FM1pi1gFQw6wxduEZ9U7wSTRdQfAdFLBxqkhI sAzsb/fJFW4Q8+NGG4d04QR/SaHtJwIy9pN5JBL00zeQ20bLR5hFxfzINHyLmSTE qhi3stmfO3w+Z+Tca/W6rMlXkut2WguaVwzC8OgrkRwyOUQXj1as1ciOM+tgvRe/ 5LeLKr/VgK8EqYwFhg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:08 2025 by rpki-client