This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: WDlRJ8rr2WI1Xd2yXYVh+3zo8wuEt2AuZ8HySjGJXVQ= Subject key identifier: FE:28:B7:7D:CA:09:7A:ED:28:B0:68:65:39:1E:F0:31:1C:E7:8A:46 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B3BA208BB42195489CEDC3BB7246ED10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 12:00:33 +0000 Manifest this update: Sat 20 Dec 2025 12:00:33 +0000 Manifest next update: Sun 21 Dec 2025 12:00:33 +0000 Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=) 2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: H2ankK00uYEHBHcYQaoGi1HgULEsWsjEGtGdIMjSu8o=) 3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=) 4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=) 5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=) 6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=) 7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=) 8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=) 9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:08:bb:42:19:54:89:ce:dc:3b:b7:24:6e:d1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Dec 20 12:00:33 2025 GMT Not After : Dec 21 12:00:33 2025 GMT Subject: CN=fe28b77dca097aed28b06865391ef0311ce78a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:8e:92:69:c4:7a:14:61:e3:59:46:15:27: e1:d0:78:6f:87:e6:2b:e8:24:d1:2a:54:3f:5d:4f: 41:df:dd:46:12:5a:30:20:3b:15:07:6b:0d:a5:a2: 75:c7:fc:ac:97:8e:ed:53:0b:96:cb:77:20:11:d7: 9e:bf:63:f0:90:c7:d2:da:38:15:3d:f3:fa:ac:9a: 3e:b2:c4:e3:2f:b5:42:28:f4:dc:79:ec:5b:f9:50: b2:5e:f8:ed:de:9b:7d:10:f4:e7:a7:35:cd:0d:ce: 3e:7e:3b:2c:9d:98:32:52:fa:2d:5b:0f:e9:d4:61: af:05:58:7b:95:b0:b9:9d:b3:62:e3:9a:76:5e:a4: ba:5d:d7:0c:91:21:bb:67:4f:4b:8f:9f:2b:5d:0e: c5:10:da:7a:3f:87:6e:23:9e:f4:45:68:02:3d:75: 4a:c5:a6:b2:80:80:55:ec:07:cb:9b:f4:ba:45:ea: 73:d1:20:58:ec:15:1f:03:5b:68:62:16:85:0f:bc: a9:81:f7:d7:a1:60:e7:53:cb:19:5b:d5:84:e6:cf: 8c:bb:4b:4e:ce:3d:bb:79:c2:be:b9:eb:66:79:cb: 91:02:76:f0:dd:65:8e:07:ae:ee:77:4f:58:08:07: 58:8a:6e:f4:6c:14:6a:f5:9d:0e:4d:6e:8f:56:97: 05:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:28:B7:7D:CA:09:7A:ED:28:B0:68:65:39:1E:F0:31:1C:E7:8A:46 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:69:b3:ab:32:bf:9f:bd:e6:99:f0:df:7e:d5:f1:8b:f1:d7: 6d:76:4e:cf:0a:0c:2c:0e:86:7f:f4:71:59:dd:1f:35:57:19: c8:aa:b4:1a:56:0c:06:fb:9e:ac:ab:61:99:04:76:c6:f4:7b: 61:de:c3:af:ad:44:28:b5:b0:d6:4e:d2:45:d9:38:66:d6:f4: be:d2:9a:8e:38:8e:d5:b3:8b:cf:c0:ce:8e:8a:71:60:52:89: 3f:3d:43:48:24:f1:39:30:6d:ba:39:fd:f0:17:bf:3c:9e:fa: 17:e6:ca:67:05:7d:62:7f:8e:f3:8f:f1:07:f8:3f:bb:33:f7: bc:2f:f6:13:9b:e2:77:16:cc:30:7e:d2:aa:d4:46:88:9c:3f: d6:df:d4:12:25:6e:5b:b0:bd:c3:51:ca:d1:fc:25:c1:2d:8c: ec:64:69:42:c7:bf:5a:c7:8a:a9:1c:2a:90:03:7f:7b:11:34: 8d:1c:9a:bb:52:6d:3b:6e:94:33:51:21:63:b6:61:20:c9:95: 71:fa:b8:1d:f7:74:c3:b8:2a:d3:18:90:5d:17:79:50:af:ab: 4d:91:e9:84:b7:47:76:a0:0b:b9:11:19:69:5a:9b:bf:65:e0: f3:8b:53:71:78:79:92:5f:ec:57:47:fc:a6:ac:31:2a:f3:3d: fd:30:ee:e4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7ogi7QhlUic7cO7ckbtELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjUxMjIwMTIwMDMzWhcNMjUxMjIxMTIwMDMzWjAzMTEwLwYDVQQD EyhmZTI4Yjc3ZGNhMDk3YWVkMjhiMDY4NjUzOTFlZjAzMTFjZTc4YTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9qOkmnEehRh41lGFSfh0Hhvh+Yr 6CTRKlQ/XU9B391GElowIDsVB2sNpaJ1x/ysl47tUwuWy3cgEdeev2PwkMfS2jgV PfP6rJo+ssTjL7VCKPTceexb+VCyXvjt3pt9EPTnpzXNDc4+fjssnZgyUvotWw/p 1GGvBVh7lbC5nbNi45p2XqS6XdcMkSG7Z09Lj58rXQ7FENp6P4duI570RWgCPXVK xaaygIBV7AfLm/S6Repz0SBY7BUfA1toYhaFD7ypgffXoWDnU8sZW9WE5s+Mu0tO zj27ecK+uetmecuRAnbw3WWOB67ud09YCAdYim70bBRq9Z0OTW6PVpcFbQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP4ot33KCXrtKLBoZTke8DEc54pGMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmmz qzK/n73mmfDfftXxi/HXbXZOzwoMLA6Gf/RxWd0fNVcZyKq0GlYMBvuerKthmQR2 xvR7Yd7Dr61EKLWw1k7SRdk4Ztb0vtKajjiO1bOLz8DOjopxYFKJPz1DSCTxOTBt ujn98Be/PJ76F+bKZwV9Yn+O84/xB/g/uzP3vC/2E5vidxbMMH7SqtRGiJw/1t/U EiVuW7C9w1HK0fwlwS2M7GRpQse/WseKqRwqkAN/exE0jRyau1JtO26UM1EhY7Zh IMmVcfq4Hfd0w7gq0xiQXRd5UK+rTZHphLdHdqALuREZaVqbv2Xg84tTcXh5kl/s V0f8pqwxKvM9/TDu5A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:18:20 2025 by rpki-client