This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: 6LLSIE1yYsx6yAf+kvI18BW2uO7tc+F5EcAD/QodAEg= Subject key identifier: 96:88:AE:FB:CB:CC:36:D6:91:94:2C:1C:03:29:86:3B:BA:4A:C2:1C Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B3B34EBF523E086D941A8EAB22DD9D72C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 10:01:22 +0000 Manifest this update: Sat 20 Dec 2025 10:01:22 +0000 Manifest next update: Sun 21 Dec 2025 10:01:22 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: u8Fg4ILu8TAoIN+ANdYttorMkCYGo+0JXdIgQlCC2WQ=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 7: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 8: lv4HmOqEkoJhmZ694ZcdnLwYlAM.roa (hash: jNXlLdUizmlPS7y4NkIFg6Z2F2lK4SSREn91C27cUCo=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:eb:f5:23:e0:86:d9:41:a8:ea:b2:2d:d9:d7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Dec 20 10:01:22 2025 GMT Not After : Dec 21 10:01:22 2025 GMT Subject: CN=9688aefbcbcc36d691942c1c0329863bba4ac21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:81:8e:27:66:14:65:8b:38:5f:c2:56:12: 4e:c3:b8:a5:16:55:3f:64:8f:27:e2:f3:fa:9c:d2: f4:ca:55:db:47:1d:70:ab:74:46:02:84:f2:c5:8d: 34:8e:9f:be:72:6a:18:f0:54:ce:bc:37:93:b2:fb: dd:16:2a:5f:50:19:b0:f0:00:05:1f:b7:82:47:9f: 8d:a0:ce:ac:01:37:63:eb:5c:29:99:f2:f8:cb:b1: 41:95:7f:f1:f7:84:38:05:4c:df:cb:43:12:15:6a: 3f:17:73:f5:ff:84:5a:fc:1b:f3:06:57:80:11:83: e0:0b:ea:70:a1:90:c3:3d:23:f8:2a:37:1d:f0:3c: 19:c1:a5:4f:ba:94:6f:37:dc:44:8d:7c:d7:a2:b1: a4:0a:d5:d5:f9:fd:75:10:e8:1e:14:af:39:7a:7f: 95:bb:3d:0e:f8:f9:3a:ff:48:ab:d7:c6:cc:9b:74: f1:ae:88:74:f8:a6:1e:04:1f:c4:9c:69:27:83:ea: f6:1b:73:63:c8:31:de:de:d4:b4:74:77:8b:ba:1b: 00:7b:03:62:85:5f:d9:06:ec:b2:51:9f:04:db:ae: 44:80:67:05:3d:a3:96:f3:51:5e:77:cd:2a:72:81: f1:83:55:0e:b2:e9:e3:24:5b:40:7c:f8:e3:ac:e1: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:88:AE:FB:CB:CC:36:D6:91:94:2C:1C:03:29:86:3B:BA:4A:C2:1C X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e7:e3:de:fa:da:d4:bf:50:1a:3a:da:60:6f:34:06:f1:5d: b9:3b:7f:4f:fe:4a:78:f6:d5:74:49:1a:5e:a4:28:26:42:f5: 91:5c:d8:a5:57:cf:21:ec:00:ee:87:70:7b:05:cd:53:d5:cf: 7e:cb:30:05:04:79:d3:7a:ee:76:30:1f:3d:a6:a7:2c:ea:ba: 87:2f:97:ad:b9:e6:a0:ee:6b:74:bd:29:45:7e:6e:53:37:ba: 61:d1:92:90:16:f6:68:a7:bc:82:2e:74:27:aa:45:96:ed:7c: 99:2c:6a:c9:f0:5a:7d:1e:c5:94:99:59:30:ab:60:3b:4a:07: ea:af:51:c9:2c:95:ba:39:72:8c:0d:97:1f:8c:20:53:72:08: ec:07:62:75:93:d4:eb:8c:64:58:a6:75:ae:fc:cf:61:87:e0: 42:84:af:38:2e:54:a6:b1:e4:08:2c:5c:1f:04:d3:e2:2b:4f: 35:eb:49:0d:2b:40:05:8d:d3:c0:2d:1b:5a:77:c6:f0:d9:f0: a1:a1:7e:37:8a:46:37:1a:31:a5:73:5c:b5:04:aa:fe:1a:5d: e3:10:4a:dd:1e:e6:88:29:6f:31:f5:f0:ea:8f:61:4c:2f:02: d1:8c:2b:ba:44:45:74:7b:98:e2:73:0f:16:81:83:a7:19:af: df:29:12:ed -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7NOv1I+CG2UGo6rIt2dcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUxMjIwMTAwMTIyWhcNMjUxMjIxMTAwMTIyWjAzMTEwLwYDVQQD Eyg5Njg4YWVmYmNiY2MzNmQ2OTE5NDJjMWMwMzI5ODYzYmJhNGFjMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5eBjidmFGWLOF/CVhJOw7ilFlU/ ZI8n4vP6nNL0ylXbRx1wq3RGAoTyxY00jp++cmoY8FTOvDeTsvvdFipfUBmw8AAF H7eCR5+NoM6sATdj61wpmfL4y7FBlX/x94Q4BUzfy0MSFWo/F3P1/4Ra/BvzBleA EYPgC+pwoZDDPSP4Kjcd8DwZwaVPupRvN9xEjXzXorGkCtXV+f11EOgeFK85en+V uz0O+Pk6/0ir18bMm3Txroh0+KYeBB/EnGkng+r2G3NjyDHe3tS0dHeLuhsAewNi hV/ZBuyyUZ8E265EgGcFPaOW81Fed80qcoHxg1UOsunjJFtAfPjjrOFRPwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJaIrvvLzDbWkZQsHAMphju6SsIcMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABefj 3vra1L9QGjraYG80BvFduTt/T/5KePbVdEkaXqQoJkL1kVzYpVfPIewA7odwewXN U9XPfsswBQR503rudjAfPaanLOq6hy+XrbnmoO5rdL0pRX5uUze6YdGSkBb2aKe8 gi50J6pFlu18mSxqyfBafR7FlJlZMKtgO0oH6q9RySyVujlyjA2XH4wgU3II7Adi dZPU64xkWKZ1rvzPYYfgQoSvOC5UprHkCCxcHwTT4itPNetJDStABY3TwC0bWnfG 8NnwoaF+N4pGNxoxpXNctQSq/hpd4xBK3R7miClvMfXw6o9hTC8C0YwrukRFdHuY 4nMPFoGDpxmv3ykS7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 17:12:27 2025 by rpki-client