This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: F2etH4seL08H2AJS3/9Gl4mLUT6NYsqn1PpZfpppQpM= Subject key identifier: 54:31:7F:35:E3:04:E4:E0:F7:E5:29:58:03:1D:F7:7E:0D:45:96:50 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019B3BD9643B24E32B71B7BA32CCE06AB375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 17BA Signing time: Sat 20 Dec 2025 13:01:01 +0000 Manifest this update: Sat 20 Dec 2025 13:01:01 +0000 Manifest next update: Sun 21 Dec 2025 13:01:01 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: I88rJpx6DUGTpfnuUyh3v+TWQDuK4l4+tnaZSFh9oOo=) 2: 2Q7Citj0p3OdcVl7uqhsISED7cM.roa (hash: E8M0IO3Gnci/Jg+ekOq1tdi+rV0u7bvfLxQV6E+5KVA=) 3: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 4: 4LD3RBJhF1EFVJ9oGeuCVHP_8UE.roa (hash: +FGSXfetsw90djLhX8M4w7oZH7rHAR6iFD1Yl6CL8z8=) 5: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 7: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 8: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 9: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 10: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 11: rY3YaEfNR8aK_Auk0z3q4MtQKGY.roa (hash: n8nvB0B+rc4j1I8LugdLmK4QQWr+nH8/CQl43jdxd20=) 12: y5m_rHh94hm7s_roT6tgjV0bYFM.roa (hash: 4v/VMYzi1Xi6KW+Q8k5KPuzBpu8zE8jLazu2ptlLL50=) 13: yNC8pxpiaSZoyM4LKG1XiYUN5bU.roa (hash: R6sSwar2+yL3t8+JjWS9YzWsgxd6mJctsAx8UQoEU1U=) 14: ysUfI3GWZpaKyJEKnCEamSfyZE0.roa (hash: xIeKQUYqxB/N59SOlkm9vtcrQRRy7G3fg//ycDeAy7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:64:3b:24:e3:2b:71:b7:ba:32:cc:e0:6a:b3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Dec 20 13:01:01 2025 GMT Not After : Dec 21 13:01:01 2025 GMT Subject: CN=54317f35e304e4e0f7e52958031df77e0d459650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:f7:a0:47:54:69:12:17:f0:07:a5:9b:37: 6f:9c:0f:c0:4f:36:f8:ff:a0:8b:63:c1:b2:e1:52: 6c:c1:9c:ed:e7:1b:c7:85:31:8f:66:9e:04:28:4c: 90:c2:0d:d2:27:6e:d0:a1:3f:e3:91:5e:09:bb:74: 1c:f5:90:33:d7:15:ac:13:e5:89:7d:c9:c3:b3:b6: f2:48:3c:8e:0f:79:50:82:23:e5:c0:5a:22:03:00: 7d:af:96:e1:ac:4a:03:31:c1:5a:b2:9a:fc:37:1e: 0e:5d:0e:28:27:06:b4:89:91:ef:53:3d:af:9f:5d: 96:c7:67:8c:c8:b9:e2:54:92:2b:96:89:6a:e9:4b: d3:0b:dd:30:06:4e:2f:fa:5f:ed:c6:19:24:10:32: ea:e9:2c:18:c4:bc:46:f1:fc:1b:55:75:d9:37:a7: de:47:d5:4c:51:3d:76:0f:03:07:44:81:15:2a:97: ed:b8:98:5d:37:e7:56:bb:b6:ee:b7:04:3f:f3:f5: ae:57:6a:16:5b:db:55:77:d2:be:35:80:2b:09:f0: bc:9f:a9:f9:76:5c:f1:4c:ab:81:b0:55:a1:5d:90: 9b:2b:02:cc:cf:bd:ac:26:8c:75:6b:c4:fc:c1:93: 84:62:c5:17:2a:9d:4b:4c:be:b1:7d:a6:65:ba:75: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:31:7F:35:E3:04:E4:E0:F7:E5:29:58:03:1D:F7:7E:0D:45:96:50 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:50:46:e8:0e:6c:cf:4d:de:4d:35:df:a0:27:cb:78:25:43: 30:64:ce:82:cb:62:77:6e:b8:a4:dd:3d:88:c5:1f:57:4e:6b: 7f:c3:e5:a8:f3:2f:29:7c:55:50:6d:36:6a:22:a1:14:b8:15: 3b:99:7a:14:79:84:81:a1:a3:52:c9:ba:e2:58:64:93:a8:48: c0:a7:41:44:5e:5f:0e:e8:6b:ec:d5:cd:b0:40:21:5b:10:ca: f9:1f:99:ea:bc:b8:d3:42:04:2b:0a:13:7c:c0:ef:dd:e6:18: 9f:72:b7:30:b5:56:38:62:1b:b9:1a:59:d6:2c:c0:8f:1f:17: 0d:70:b2:86:d7:c9:62:65:a8:90:de:d7:c7:fc:64:51:2e:bf: 86:5c:3c:2b:85:99:35:f3:b5:a1:d6:9c:e4:97:7f:c4:d6:86: 68:ec:26:84:83:9a:21:ca:ea:97:65:ec:5e:ab:7e:a8:39:1c: 69:68:4e:c6:0d:e1:15:74:8b:4a:3d:67:02:a0:0a:f3:64:62: 44:61:e8:b6:7f:28:74:88:60:06:03:b4:a4:b6:5e:c4:d0:d4: 3f:c1:28:5f:93:23:2a:42:96:7d:e3:1b:9b:0e:55:34:80:b6: 4b:6d:04:7d:73:5a:49:6b:4e:ec:ff:99:e8:ff:e9:4d:2d:e3: 05:a8:46:ba -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs72WQ7JOMrcbe6MszgarN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUxMjIwMTMwMTAxWhcNMjUxMjIxMTMwMTAxWjAzMTEwLwYDVQQD Eyg1NDMxN2YzNWUzMDRlNGUwZjdlNTI5NTgwMzFkZjc3ZTBkNDU5NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbX3oEdUaRIX8AelmzdvnA/ATzb4 /6CLY8Gy4VJswZzt5xvHhTGPZp4EKEyQwg3SJ27QoT/jkV4Ju3Qc9ZAz1xWsE+WJ fcnDs7bySDyOD3lQgiPlwFoiAwB9r5bhrEoDMcFaspr8Nx4OXQ4oJwa0iZHvUz2v n12Wx2eMyLniVJIrlolq6UvTC90wBk4v+l/txhkkEDLq6SwYxLxG8fwbVXXZN6fe R9VMUT12DwMHRIEVKpftuJhdN+dWu7butwQ/8/WuV2oWW9tVd9K+NYArCfC8n6n5 dlzxTKuBsFWhXZCbKwLMz72sJox1a8T8wZOEYsUXKp1LTL6xfaZlunXKcwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFQxfzXjBOTg9+UpWAMd934NRZZQMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1BG 6A5sz03eTTXfoCfLeCVDMGTOgstid264pN09iMUfV05rf8PlqPMvKXxVUG02aiKh FLgVO5l6FHmEgaGjUsm64lhkk6hIwKdBRF5fDuhr7NXNsEAhWxDK+R+Z6ry400IE KwoTfMDv3eYYn3K3MLVWOGIbuRpZ1izAjx8XDXCyhtfJYmWokN7Xx/xkUS6/hlw8 K4WZNfO1odac5Jd/xNaGaOwmhIOaIcrql2XsXqt+qDkcaWhOxg3hFXSLSj1nAqAK 82RiRGHotn8odIhgBgO0pLZexNDUP8EoX5MjKkKWfeMbmw5VNIC2S20EfXNaSWtO 7P+Z6P/pTS3jBahGug== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:43 2025 by rpki-client