This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json) Hash identifier: r6wVnQNRGfCFc+1ucWWKWvgYrUcoez8MOxE1jAvHZgU= Subject key identifier: 76:B4:84:43:6C:56:98:27:44:75:80:BF:50:A8:6D:70:83:B0:02:DB Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Certificate serial: 019B3DFE8E42739648A104487693E9B95555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: OwZertwwvaIAAuHos6VoEIF0p+XGHbCZZv7ulK2YgIw=) 2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8e:42:73:96:48:a1:04:48:76:93:e9:b9:55:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=76b484436c569827447580bf50a86d7083b002db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:e6:c1:58:d3:2d:f4:c6:7f:a7:5d:2f:5b: 1e:47:5b:95:79:b4:00:78:90:84:ac:f3:93:c0:fc: 00:18:aa:be:83:55:be:eb:e6:e6:d2:e1:b2:5f:eb: 91:7c:5d:97:f9:ea:40:47:bd:c8:30:5b:54:14:43: 28:a2:72:5f:24:b9:2c:c3:b5:79:fc:f0:21:03:7e: bb:e3:6c:33:eb:dc:fb:67:b4:7c:b4:18:45:73:3a: ef:95:b2:88:5a:82:f5:a7:6a:da:d7:d3:8c:3d:56: aa:02:db:f4:14:0a:19:8c:b1:56:c3:fa:97:b3:82: 57:3d:6d:56:0c:cb:3c:3f:de:4e:07:5c:7a:d5:83: 6b:b4:7c:5b:ba:af:87:00:fb:15:27:8f:bf:a9:03: c0:ea:54:44:1d:c7:67:70:96:f9:ec:09:81:ff:40: dd:8d:c0:eb:56:4c:91:44:71:f4:40:3a:8b:62:7a: 35:e1:c2:49:53:b4:5c:66:a8:8b:b6:94:8a:e6:e1: 05:46:c7:3d:30:9d:f3:d9:6c:ff:47:9b:66:9b:b4: 21:79:85:67:b4:2e:f4:c2:ca:a0:5f:d8:8a:fb:83: 25:60:d1:23:10:5f:40:84:40:8a:45:90:22:fa:4d: 41:c8:f5:bd:0e:61:3b:61:3e:f4:d8:86:9c:d3:fb: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:84:43:6C:56:98:27:44:75:80:BF:50:A8:6D:70:83:B0:02:DB X509v3 Authority Key Identifier: keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6a:35:c9:60:08:56:53:4e:05:67:6b:d5:a2:e7:d5:8d:41: d5:8d:f5:b6:e7:97:42:a5:1b:b0:91:73:f3:47:82:72:6a:fa: d6:d5:27:18:31:97:71:13:50:6a:c7:b6:f4:46:f2:94:8b:9c: e9:cc:cf:aa:5c:f0:82:4d:82:cd:99:57:e1:55:be:d1:0f:ff: c9:9f:60:2b:ec:c2:7f:09:09:65:c0:28:96:18:bd:d3:10:dc: 69:a8:ad:3a:b3:76:fd:6c:a6:9d:66:ea:e2:81:a4:0b:cf:8a: 0c:03:af:b2:c3:e9:42:b5:c4:b3:3c:e6:6e:fc:6a:38:f0:e0: 21:2d:97:10:52:8d:35:ad:0a:5a:0b:f0:6d:ba:cd:76:27:32: 8d:f7:2e:ba:78:84:a0:ef:fe:ac:37:8a:64:a6:52:87:51:3f: 68:25:d8:7b:87:80:6c:d1:99:37:5e:46:95:98:36:4d:85:c8: be:05:bf:bb:0b:36:37:98:3e:51:2b:62:8e:fd:91:c2:28:21: b3:ad:61:48:11:e0:35:cb:5d:f5:98:bf:86:75:d1:7a:3c:85: c6:12:91:98:5a:77:0c:7d:03:d9:b4:25:8f:97:9b:65:95:fb: a2:63:fd:47:e9:60:0a:3a:fb:9a:5b:27:e3:69:7d:33:d5:f5: bc:95:bc:74 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9/o5Cc5ZIoQRIdpPpuVVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTg3YzViMGQ0MTU1MTZkNzJmNTkxNGY1ZjVmYjUyOGEz MmExMmMwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD Eyg3NmI0ODQ0MzZjNTY5ODI3NDQ3NTgwYmY1MGE4NmQ3MDgzYjAwMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q3mwVjTLfTGf6ddL1seR1uVebQA eJCErPOTwPwAGKq+g1W+6+bm0uGyX+uRfF2X+epAR73IMFtUFEMoonJfJLksw7V5 /PAhA36742wz69z7Z7R8tBhFczrvlbKIWoL1p2ra19OMPVaqAtv0FAoZjLFWw/qX s4JXPW1WDMs8P95OB1x61YNrtHxbuq+HAPsVJ4+/qQPA6lREHcdncJb57AmB/0Dd jcDrVkyRRHH0QDqLYno14cJJU7RcZqiLtpSK5uEFRsc9MJ3z2Wz/R5tmm7QheYVn tC70wsqgX9iK+4MlYNEjEF9AhECKRZAi+k1ByPW9DmE7YT702Iac0/t66QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHa0hENsVpgnRHWAv1CobXCDsALbMB8GA1UdIwQY MBaAFPlYfFsNQVUW1y9ZFPX1+1KKMqEsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WaDhXdzFCVlJiWEwxa1U5Zlg3VW9veW9Tdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZjdkMDcwLTMyODEtNDdiNy04NWM4 LThmYjYyNDM5NGU3YS8xLzEtVmg4V3cxQlZSYlhMMWtVOWZYN1Vvb3lvU3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVjL2Y3ZDA3MC0zMjgxLTQ3YjctODVjOC04ZmI2MjQzOTRl N2EvMS8xLVZoOFd3MUJWUmJYTDFrVTlmWDdVb295b1N3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWo1 yWAIVlNOBWdr1aLn1Y1B1Y31tueXQqUbsJFz80eCcmr61tUnGDGXcRNQase29Eby lIuc6czPqlzwgk2CzZlX4VW+0Q//yZ9gK+zCfwkJZcAolhi90xDcaaitOrN2/Wym nWbq4oGkC8+KDAOvssPpQrXEszzmbvxqOPDgIS2XEFKNNa0KWgvwbbrNdicyjfcu uniEoO/+rDeKZKZSh1E/aCXYe4eAbNGZN15GlZg2TYXIvgW/uws2N5g+UStijv2R wighs61hSBHgNctd9Zi/hnXRejyFxhKRmFp3DH0D2bQlj5ebZZX7omP9R+lgCjr7 mlsn42l9M9X1vJW8dA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:45 2025 by rpki-client