This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json) Hash identifier: kopLgyr3Cn555Za9xFYQMkrde1fH7oKi7yfL+yUk4Tw= Subject key identifier: E0:92:DD:EA:EA:DD:DA:72:61:2A:D7:FC:6D:30:59:8F:0A:C0:E1:F7 Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2 Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2 Certificate serial: 019B3EDAAE91789EC99ED036F6BF05C6766D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: OaEYkG+lTPGoO3gbNaLMn5pniu9mDAZHQ922L4zltEQ=) 2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:ae:91:78:9e:c9:9e:d0:36:f6:bf:05:c6:76:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2 Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=e092ddeaeaddda72612ad7fc6d30598f0ac0e1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:32:a4:22:b6:f8:b6:94:33:67:26:22:b2: 5a:e7:98:25:da:7a:6f:47:2c:89:69:1c:3f:9d:fd: 2f:96:45:6f:92:e1:0d:a5:75:b0:2d:f8:09:ee:0d: 98:f0:a1:09:6b:9d:43:84:51:1b:62:77:c2:0b:82: 32:fd:06:04:d4:a2:6f:da:91:5e:c6:ff:48:c3:b7: a5:e8:b4:4d:9a:02:03:c6:1e:77:fc:d1:4c:a3:3e: 66:16:a9:d6:b9:73:e3:b9:6d:dc:02:c9:e1:b8:eb: 34:02:bf:2a:b4:a3:7c:3b:f3:3c:a2:94:4c:f9:ed: 05:18:9e:86:1b:c6:3b:a6:07:39:ab:6c:a5:d0:e6: 07:95:06:36:4d:9f:9a:ee:de:d4:ae:e6:c7:b5:50: f7:6e:a4:08:31:81:d5:8a:e9:4d:50:8b:ee:8a:bb: eb:12:59:9b:93:4f:ae:ef:b1:7b:ac:6f:49:34:1a: 96:0a:56:44:2a:91:da:81:06:1e:dd:af:8f:fa:94: f0:ac:e2:22:cc:82:a6:31:03:b4:5a:11:37:df:49: 37:d9:a1:a5:71:ea:5b:e9:19:8c:eb:1b:b4:a6:22: 72:80:0f:3a:64:58:d1:6f:8a:7e:ef:1b:2a:5e:3d: e8:b5:0e:a1:61:37:7c:9b:02:67:04:8f:3f:81:e0: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:92:DD:EA:EA:DD:DA:72:61:2A:D7:FC:6D:30:59:8F:0A:C0:E1:F7 X509v3 Authority Key Identifier: keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7f:cc:78:54:eb:3b:de:9c:c8:af:03:5c:ff:ce:bf:34:b8: 27:96:aa:22:2d:29:4c:87:2c:0e:50:50:ed:7c:22:91:e2:10: 1b:8d:71:ba:d0:9e:1e:b0:f6:b7:99:e0:1d:32:71:23:f7:02: a4:23:5e:80:65:b8:6c:ba:82:9e:51:7f:bb:0a:99:84:b7:75: 06:98:d4:ef:c0:ce:b1:e3:e4:33:fb:41:96:11:1f:9c:bb:ae: dc:9a:bf:c1:6d:66:7e:17:97:e6:04:4f:1f:3d:a5:77:90:1b: 2e:dc:f1:25:f6:f4:ba:cd:df:57:a5:4f:24:c5:61:97:8d:3e: a4:11:62:5e:45:f3:00:3b:34:bc:d4:56:77:9f:7d:35:84:31: 5e:3c:cc:58:1a:fd:60:19:ac:93:80:34:1d:c2:b9:a9:51:24: 6d:7d:7b:b9:7d:ec:02:7d:ad:c0:d8:84:4f:f9:d6:b5:b6:79: 49:c8:f1:f5:b8:ad:cb:41:8c:25:b3:ad:b8:e5:52:13:63:ab: e4:86:bd:44:6c:b1:98:0c:7a:10:84:db:9b:be:bf:47:60:68: f1:f6:55:f1:74:31:47:9d:e2:05:30:e8:61:ae:ec:dc:92:12: b3:1f:ae:fd:41:df:8a:14:3e:1c:7e:b4:13:c5:40:2e:89:4b: ff:da:47:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2q6ReJ7JntA29r8FxnZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmJjNzRjZDFmODdhMGJmMTZjNDgyZjYyMDFjOWI5ZWIy NDRlYTIwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD EyhlMDkyZGRlYWVhZGRkYTcyNjEyYWQ3ZmM2ZDMwNTk4ZjBhYzBlMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQypCK2+LaUM2cmIrJa55gl2npv RyyJaRw/nf0vlkVvkuENpXWwLfgJ7g2Y8KEJa51DhFEbYnfCC4Iy/QYE1KJv2pFe xv9Iw7el6LRNmgIDxh53/NFMoz5mFqnWuXPjuW3cAsnhuOs0Ar8qtKN8O/M8opRM +e0FGJ6GG8Y7pgc5q2yl0OYHlQY2TZ+a7t7UrubHtVD3bqQIMYHViulNUIvuirvr Elmbk0+u77F7rG9JNBqWClZEKpHagQYe3a+P+pTwrOIizIKmMQO0WhE330k32aGl cepb6RmM6xu0piJygA86ZFjRb4p+7xsqXj3otQ6hYTd8mwJnBI8/geB+bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCS3erq3dpyYSrX/G0wWY8KwOH3MB8GA1UdIwQY MBaAFNT7x0zR+HoL8WxIL2IBybnrJE6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVB2SFROSDRlZ3Z4YkVndllnSEp1ZXNrVHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84NzMxMmMtNjljNC00ODEzLWI3NDAt MWM5NjY3NzMwNTM0LzEvMVB2SFROSDRlZ3Z4YkVndllnSEp1ZXNrVHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84NzMxMmMtNjljNC00ODEzLWI3NDAtMWM5NjY3NzMwNTM0 LzEvMVB2SFROSDRlZ3Z4YkVndllnSEp1ZXNrVHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3/MeFTr O96cyK8DXP/OvzS4J5aqIi0pTIcsDlBQ7XwikeIQG41xutCeHrD2t5ngHTJxI/cC pCNegGW4bLqCnlF/uwqZhLd1BpjU78DOsePkM/tBlhEfnLuu3Jq/wW1mfheX5gRP Hz2ld5AbLtzxJfb0us3fV6VPJMVhl40+pBFiXkXzADs0vNRWd599NYQxXjzMWBr9 YBmsk4A0HcK5qVEkbX17uX3sAn2twNiET/nWtbZ5Scjx9bity0GMJbOtuOVSE2Or 5Ia9RGyxmAx6EITbm76/R2Bo8fZV8XQxR53iBTDoYa7s3JISsx+u/UHfihQ+HH60 E8VALolL/9pHcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:59 2025 by rpki-client