This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json) Hash identifier: 8jKm48lsEpE3Gj4hB5swCR8cA2FxjynlWtHfOJ1gqLA= Subject key identifier: 3D:7F:97:81:9C:C9:32:78:3A:A3:0D:EB:E4:C4:39:F8:2C:C5:A8:AE Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8 Certificate serial: 019B2C662DE1E9B180C73D18F68EA22AFEA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft Manifest number: 1785 Signing time: Wed 17 Dec 2025 13:00:52 +0000 Manifest this update: Wed 17 Dec 2025 13:00:52 +0000 Manifest next update: Thu 18 Dec 2025 13:00:52 +0000 Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: 3tWy+f5hFrPpB459JMBkiNE0i23BnkOekeAU8G4RnPs=) 2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=) 3: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (hash: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=) 4: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:2d:e1:e9:b1:80:c7:3d:18:f6:8e:a2:2a:fe:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8 Validity Not Before: Dec 17 13:00:52 2025 GMT Not After : Dec 18 13:00:52 2025 GMT Subject: CN=3d7f97819cc932783aa30debe4c439f82cc5a8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:e9:0a:d4:ad:c6:c0:bf:b7:53:e6:0f:f9: 32:e4:aa:89:0b:77:09:5c:75:46:0d:a9:6e:d7:c1: d7:af:60:3f:d9:07:bb:1a:dc:34:bb:51:10:4f:0c: 91:24:30:d2:f1:2f:f9:82:c5:d4:dc:77:c6:d3:ef: 48:92:23:67:67:f4:f5:33:4b:98:81:a7:a6:e0:d1: c9:7c:84:39:f9:4a:65:79:34:ec:09:b9:87:90:8e: f5:c6:03:fa:98:e8:4e:39:a6:2b:15:21:aa:4b:9b: 8e:ef:bd:25:2c:b0:a5:1a:ac:b5:b8:99:8a:2b:aa: a3:bf:d2:20:2b:ed:68:7a:5a:4b:1c:0d:72:0d:68: a4:f0:3f:6d:c7:94:68:96:fc:88:02:f8:4e:09:17: 8a:ff:23:4e:ae:f0:7b:79:12:da:31:85:8b:08:00: 0d:8b:c8:e7:ca:08:24:a7:5b:48:97:9d:94:8b:d7: a3:96:27:2d:63:20:48:f7:b5:a6:dc:2b:1c:6b:e8: 39:ba:5f:48:47:26:a7:a4:06:a5:cd:78:90:93:2a: 55:8e:76:38:91:a2:d9:43:61:6b:13:94:c0:e5:95: 0b:33:54:de:88:24:5d:da:36:43:9d:9a:c1:f0:ea: ee:e8:f0:f2:ad:2a:bd:7f:5b:79:03:72:3e:68:49: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7F:97:81:9C:C9:32:78:3A:A3:0D:EB:E4:C4:39:F8:2C:C5:A8:AE X509v3 Authority Key Identifier: keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ca:a9:2e:c0:d2:64:6a:85:bc:78:bd:db:49:0e:87:67:53: da:1d:21:55:fa:f3:b2:5e:dc:5a:e6:d3:6b:7d:51:7f:40:b8: 8a:81:b9:d0:71:e8:74:b3:a2:4d:b0:66:6d:0b:49:23:61:9c: 35:54:8e:1b:2e:7a:ab:97:ea:de:5a:7b:25:12:90:c6:03:3f: 27:c9:cf:f6:59:6b:ec:3d:6b:d8:67:34:c8:1f:fd:aa:a8:90: dc:bf:cc:a5:c6:36:72:88:50:79:0b:39:ec:b2:d0:c0:17:68: 7f:e3:30:70:b7:ff:ce:21:44:72:9b:43:63:05:a7:e5:95:36: de:33:3e:0e:ed:e9:57:94:b1:49:08:69:9e:ae:a0:ab:9e:da: 80:c7:e0:1a:7b:44:87:29:b8:0b:21:a2:36:7f:21:47:e9:82: 47:f1:c3:96:42:73:91:95:d7:0a:7a:e9:0a:1e:0a:0b:5a:53: 17:0f:50:9d:5f:cb:41:9d:69:0a:26:2e:52:0f:a9:20:32:25: c1:f8:99:3e:9d:04:38:20:88:77:b9:73:eb:5b:36:46:a3:2e: 1b:24:b1:d7:05:16:17:ca:0c:04:83:f0:b4:a9:98:04:ef:4c: 8a:97:16:7b:cd:53:11:d7:ea:13:ce:69:7a:ef:9e:14:94:8f: b8:54:f5:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZi3h6bGAxz0Y9o6iKv6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy ODMwYTgwHhcNMjUxMjE3MTMwMDUyWhcNMjUxMjE4MTMwMDUyWjAzMTEwLwYDVQQD EygzZDdmOTc4MTljYzkzMjc4M2FhMzBkZWJlNGM0MzlmODJjYzVhOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzpCtStxsC/t1PmD/ky5KqJC3cJ XHVGDalu18HXr2A/2Qe7Gtw0u1EQTwyRJDDS8S/5gsXU3HfG0+9IkiNnZ/T1M0uY gaem4NHJfIQ5+UpleTTsCbmHkI71xgP6mOhOOaYrFSGqS5uO770lLLClGqy1uJmK K6qjv9IgK+1oelpLHA1yDWik8D9tx5RolvyIAvhOCReK/yNOrvB7eRLaMYWLCAAN i8jnyggkp1tIl52Ui9ejlictYyBI97Wm3Csca+g5ul9IRyanpAalzXiQkypVjnY4 kaLZQ2FrE5TA5ZULM1TeiCRd2jZDnZrB8Oru6PDyrSq9f1t5A3I+aElYDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1/l4GcyTJ4OqMN6+TEOfgsxaiuMB8GA1UdIwQY MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt YTVjZDgxYjVlMDBiLzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisqpLsDS ZGqFvHi920kOh2dT2h0hVfrzsl7cWubTa31Rf0C4ioG50HHodLOiTbBmbQtJI2Gc NVSOGy56q5fq3lp7JRKQxgM/J8nP9llr7D1r2Gc0yB/9qqiQ3L/MpcY2cohQeQs5 7LLQwBdof+MwcLf/ziFEcptDYwWn5ZU23jM+Du3pV5SxSQhpnq6gq57agMfgGntE hym4CyGiNn8hR+mCR/HDlkJzkZXXCnrpCh4KC1pTFw9QnV/LQZ1pCiYuUg+pIDIl wfiZPp0EOCCId7lz61s2RqMuGySx1wUWF8oMBIPwtKmYBO9MipcWe81TEdfqE85p eu+eFJSPuFT1Jw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:16:46 2025 by rpki-client