This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json) Hash identifier: TL9kS4h4w9ritsIO2eLVYv4CGOKt81L32edoEkzQxI0= Subject key identifier: BB:6A:8F:07:28:6B:5D:0A:BB:1C:86:8A:07:D6:2A:FC:2A:CC:D6:A6 Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097 Certificate serial: 019B3A90FBA90179C3F4EC10228DB72BC3DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft Manifest number: 0412 Signing time: Sat 20 Dec 2025 07:02:18 +0000 Manifest this update: Sat 20 Dec 2025 07:02:18 +0000 Manifest next update: Sun 21 Dec 2025 07:02:18 +0000 Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: PX5iXfgWSsGPkAGgFclrH4M9vcVkg9eZZYZXZsDxD3A=) 2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:fb:a9:01:79:c3:f4:ec:10:22:8d:b7:2b:c3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097 Validity Not Before: Dec 20 07:02:18 2025 GMT Not After : Dec 21 07:02:18 2025 GMT Subject: CN=bb6a8f07286b5d0abb1c868a07d62afc2accd6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:53:fb:7e:ce:0e:ba:ae:a6:7d:6a:1d:d6:17: ee:b8:f9:fb:c3:51:17:58:87:89:5f:be:d7:07:53: 37:b8:7f:fd:51:e1:c2:a9:52:7a:a4:ca:b5:71:70: 0a:13:80:fa:cd:d3:b2:db:f2:34:bb:87:3a:aa:39: 02:19:85:15:73:eb:0c:db:6d:2e:98:c5:9c:f3:ce: 47:fa:dd:d9:b7:a4:c2:73:7f:a6:6a:29:9f:c6:89: 12:f2:47:fc:16:f4:09:d2:c3:58:2f:78:d5:a3:ec: 9a:ef:f9:f6:85:91:2e:d8:35:7f:41:5b:f0:51:7b: 71:51:ee:8a:b6:52:7a:61:f4:18:4c:45:0d:47:43: 01:2f:ed:f6:b3:c6:37:cb:b2:68:a5:aa:3e:14:ec: 97:9b:7b:cb:6a:e2:0b:99:09:8b:8c:23:3f:98:f3: f6:f4:87:15:26:8e:f0:ea:72:82:a9:67:cb:73:67: ff:41:f3:79:3d:e3:e9:c9:d3:61:21:88:c5:da:57: 3f:f0:e0:30:71:26:88:12:5a:0f:a9:cb:58:42:bc: f3:68:59:56:92:1c:4c:fa:8f:78:de:b7:3e:63:21: 76:ee:85:f4:c5:f1:67:9a:a1:5f:9c:55:a9:16:31: 96:89:d5:c2:2f:4e:12:14:7e:3b:51:3c:88:40:af: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:8F:07:28:6B:5D:0A:BB:1C:86:8A:07:D6:2A:FC:2A:CC:D6:A6 X509v3 Authority Key Identifier: keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1d:ba:3c:53:b0:da:c6:30:2c:46:bf:1a:87:f3:4e:05:d6: 1f:26:a5:3a:3b:a4:e5:fe:0e:b0:63:4b:82:e6:50:07:96:45: d8:e9:0d:72:79:63:8f:ac:99:ed:db:e4:98:c7:12:c3:8a:b4: b9:77:a5:12:7c:09:29:44:9e:f5:48:2a:ce:ad:3b:e1:e9:76: d3:9d:0a:42:24:48:11:a4:47:32:4f:7e:f9:f4:fd:29:60:11: dc:50:9a:7b:d7:d4:af:2a:ca:be:2e:53:e7:69:f9:63:b1:39: 82:9c:df:39:2f:4c:86:0e:7e:f1:a4:3c:80:a2:1d:e1:ed:aa: 01:5c:28:d0:c8:80:32:c0:21:f6:0c:e4:6f:79:19:4e:5c:4a: e2:1c:71:ef:0b:3f:fb:3b:87:bc:b1:2e:bb:fb:50:a4:87:cd: 6c:85:2c:32:f1:03:51:07:12:b7:4e:12:f8:65:c1:59:f3:66: 75:39:0d:80:52:1c:8f:ce:bb:b9:41:46:12:00:9d:f9:30:1b: b9:af:71:ff:4f:06:91:99:a3:65:29:43:66:f1:0f:47:b5:01: eb:df:fc:ff:47:65:76:ec:ac:bc:20:2d:ca:2c:54:05:87:ef: c0:eb:f2:52:96:b4:27:f3:1a:7b:63:c9:a8:1d:4c:b3:1a:e9: 57:95:ed:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kPupAXnD9OwQIo23K8PdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4 MzkwOTcwHhcNMjUxMjIwMDcwMjE4WhcNMjUxMjIxMDcwMjE4WjAzMTEwLwYDVQQD EyhiYjZhOGYwNzI4NmI1ZDBhYmIxYzg2OGEwN2Q2MmFmYzJhY2NkNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61P7fs4Ouq6mfWod1hfuuPn7w1EX WIeJX77XB1M3uH/9UeHCqVJ6pMq1cXAKE4D6zdOy2/I0u4c6qjkCGYUVc+sM220u mMWc885H+t3Zt6TCc3+maimfxokS8kf8FvQJ0sNYL3jVo+ya7/n2hZEu2DV/QVvw UXtxUe6KtlJ6YfQYTEUNR0MBL+32s8Y3y7Jopao+FOyXm3vLauILmQmLjCM/mPP2 9IcVJo7w6nKCqWfLc2f/QfN5PePpydNhIYjF2lc/8OAwcSaIEloPqctYQrzzaFlW khxM+o943rc+YyF27oX0xfFnmqFfnFWpFjGWidXCL04SFH47UTyIQK9kRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtqjwcoa10KuxyGigfWKvwqzNamMB8GA1UdIwQY MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjR26PFOw 2sYwLEa/GofzTgXWHyalOjuk5f4OsGNLguZQB5ZF2OkNcnljj6yZ7dvkmMcSw4q0 uXelEnwJKUSe9Ugqzq074el2050KQiRIEaRHMk9++fT9KWAR3FCae9fUryrKvi5T 52n5Y7E5gpzfOS9Mhg5+8aQ8gKId4e2qAVwo0MiAMsAh9gzkb3kZTlxK4hxx7ws/ +zuHvLEuu/tQpIfNbIUsMvEDUQcSt04S+GXBWfNmdTkNgFIcj867uUFGEgCd+TAb ua9x/08GkZmjZSlDZvEPR7UB69/8/0dlduysvCAtyixUBYfvwOvyUpa0J/Mae2PJ qB1MsxrpV5Xt5A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:26:54 2025 by rpki-client