This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json) Hash identifier: 8EoJmLQcbvfxhhojPP3ASBzWXpR1m3pcrFQ2+X7b9G8= Subject key identifier: 5B:43:35:5C:A1:A4:65:51:58:A1:65:6F:D7:9C:CE:F7:79:55:A4:48 Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Certificate serial: 019B6EEAB079C61AB8E4A0C3F1F8CEC6C176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 11:00:32 +0000 Manifest this update: Tue 30 Dec 2025 11:00:32 +0000 Manifest next update: Wed 31 Dec 2025 11:00:32 +0000 Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: ZzqaYOlY6K8y59i5VOcM167Vy76VQo36fVxbMfbnBOY=) 2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:b0:79:c6:1a:b8:e4:a0:c3:f1:f8:ce:c6:c1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Validity Not Before: Dec 30 11:00:32 2025 GMT Not After : Dec 31 11:00:32 2025 GMT Subject: CN=5b43355ca1a4655158a1656fd79ccef77955a448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:b6:af:29:89:03:37:11:48:6b:66:b4:07: 08:4c:4c:62:03:26:6a:19:21:60:d3:e6:26:c2:9c: ca:57:80:28:bf:f0:ef:26:36:2e:2c:ba:c8:5f:b8: 05:e2:20:fb:a9:9a:85:5a:f3:cb:3a:02:62:f3:0d: 30:1c:e6:da:c2:4f:8f:d3:52:30:bb:f5:a1:6e:b4: 4a:5e:4d:2f:98:c3:27:c7:dc:c4:3a:a9:c6:f0:13: 57:d9:71:a7:f1:1b:e7:43:b8:af:2a:27:fb:96:57: 68:af:57:6e:c7:03:a7:83:28:5f:24:ec:84:6d:bc: 7d:cf:36:19:09:d0:72:83:17:86:b2:c2:0d:c1:7f: 87:e7:7e:ea:ef:60:ec:7b:89:8d:82:9e:88:99:ca: 0c:77:a9:5f:f8:3b:65:22:24:7c:d6:7e:be:f9:68: 52:42:24:4b:43:51:3f:1f:d7:6a:61:78:ef:fe:7b: 18:91:59:1c:3a:6d:f6:34:f4:18:d6:ef:bf:19:14: 6a:f9:f3:da:35:20:e4:db:c8:d6:d1:29:df:74:b4: 92:1c:ec:7a:12:8a:67:b4:ec:20:77:c6:16:92:3e: 7e:49:33:c1:cd:74:a1:d1:4d:de:b9:f1:8f:22:6c: 66:d6:b2:84:96:57:55:a0:d4:78:69:50:e8:cf:64: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:43:35:5C:A1:A4:65:51:58:A1:65:6F:D7:9C:CE:F7:79:55:A4:48 X509v3 Authority Key Identifier: keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:02:56:40:19:54:4f:3e:5c:0c:28:4e:0b:32:56:1a:0d:12: 0c:ed:94:03:e9:e4:60:13:35:37:0e:60:9d:69:0d:3f:93:2f: 9c:b3:f3:92:3d:05:b2:04:a5:35:8d:d3:54:e4:67:05:5e:f9: a1:dc:3c:b9:09:73:ad:26:d7:3a:ed:73:a1:fe:a6:ee:a0:b4: 57:89:7b:2f:70:92:ac:5b:bb:67:50:90:3d:0f:cd:92:44:c7: 0a:b1:bb:ac:a7:a8:6e:d9:99:c0:7c:51:c6:da:d0:cc:89:e3: a0:d0:24:4b:f6:66:72:dc:3f:2e:8d:21:6a:bc:95:fa:ac:41: bc:32:1a:d4:4c:52:57:c8:86:72:80:76:68:ec:4e:b2:89:b2: 99:c4:b2:1a:4c:8c:48:2c:86:66:e9:b9:58:a3:d3:fb:3d:64: 25:b6:c0:86:a0:d8:42:44:12:40:eb:95:cf:2e:5d:27:1e:bf: 3a:6f:6d:67:ee:15:49:2b:ce:2a:e3:c2:dc:01:6a:3f:9b:12: b2:8a:2a:8a:b7:74:5e:c0:76:ad:22:31:44:41:d4:d1:6c:d0: db:b8:21:90:f0:7a:08:ed:d2:18:f1:1c:19:95:9f:c7:49:c5: f7:fa:ad:9f:21:7d:5e:de:d1:c7:fa:f3:88:ba:f7:c7:32:93: 25:53:70:a0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtu6rB5xhq45KDD8fjOxsF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm NWZjYjIwHhcNMjUxMjMwMTEwMDMyWhcNMjUxMjMxMTEwMDMyWjAzMTEwLwYDVQQD Eyg1YjQzMzU1Y2ExYTQ2NTUxNThhMTY1NmZkNzljY2VmNzc5NTVhNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuG2rymJAzcRSGtmtAcITExiAyZq GSFg0+YmwpzKV4Aov/DvJjYuLLrIX7gF4iD7qZqFWvPLOgJi8w0wHObawk+P01Iw u/WhbrRKXk0vmMMnx9zEOqnG8BNX2XGn8RvnQ7ivKif7lldor1duxwOngyhfJOyE bbx9zzYZCdBygxeGssINwX+H537q72Dse4mNgp6ImcoMd6lf+DtlIiR81n6++WhS QiRLQ1E/H9dqYXjv/nsYkVkcOm32NPQY1u+/GRRq+fPaNSDk28jW0SnfdLSSHOx6 EopntOwgd8YWkj5+STPBzXSh0U3eufGPImxm1rKElldVoNR4aVDoz2QEzwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFtDNVyhpGVRWKFlb9eczvd5VaRIMB8GA1UdIwQY MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2 LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAJW QBlUTz5cDChOCzJWGg0SDO2UA+nkYBM1Nw5gnWkNP5MvnLPzkj0FsgSlNY3TVORn BV75odw8uQlzrSbXOu1zof6m7qC0V4l7L3CSrFu7Z1CQPQ/NkkTHCrG7rKeobtmZ wHxRxtrQzInjoNAkS/Zmctw/Lo0haryV+qxBvDIa1ExSV8iGcoB2aOxOsomymcSy GkyMSCyGZum5WKPT+z1kJbbAhqDYQkQSQOuVzy5dJx6/Om9tZ+4VSSvOKuPC3AFq P5sSsooqird0XsB2rSIxREHU0WzQ27ghkPB6CO3SGPEcGZWfx0nF9/qtnyF9Xt7R x/rziLr3xzKTJVNwoA== -----END CERTIFICATE-----Generated at Tue Dec 30 14:56:57 2025 by rpki-client