This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json) Hash identifier: C1YzQh0ADp6bGBTbgVE9lXXD67WVjJoQs0RzxCTlyYc= Subject key identifier: 7B:01:1D:35:3C:31:9E:0D:7D:F2:B3:BE:5F:47:C5:7D:A1:20:A8:4D Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55 Certificate serial: 019B3DFEA2701A485B5915D774560206EC91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: r4LAZkI9FLsnhwkAIaBwF8Mm89Rdgll0SvOH7WwIAjs=) 2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=) 3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=) 4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a2:70:1a:48:5b:59:15:d7:74:56:02:06:ec:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55 Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=7b011d353c319e0d7df2b3be5f47c57da120a84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:d7:b5:e9:61:db:4a:b4:a7:33:73:5d:ad: c3:f1:14:cc:23:04:b1:44:3f:2e:7f:ac:7e:91:68: b2:5e:4c:a8:ca:ee:1b:d3:94:9c:be:fa:82:84:b3: 28:6d:0a:f8:48:31:74:fb:3e:1b:7b:ce:43:20:51: 6a:ad:4d:66:f2:d8:04:10:00:b1:65:25:f9:ee:80: 08:0d:e8:16:aa:20:17:50:1d:17:fa:db:4c:e1:37: 87:ac:40:fa:b5:4c:7d:36:c9:b4:9a:1f:1d:d6:eb: ae:1c:db:0f:b0:e4:22:98:a9:66:c7:62:30:51:35: f9:0c:83:03:75:4c:89:bf:23:29:c8:9a:54:60:d8: 15:0c:55:af:c2:a6:50:96:88:82:82:c4:62:0d:c8: 83:97:a9:bd:30:9e:b5:a2:30:ca:41:7c:c4:c1:de: 36:2f:04:7e:4b:66:30:07:cb:3d:04:d6:a9:54:50: 05:72:0c:db:c2:a2:a8:0f:c6:44:97:4f:3b:46:63: f7:c6:66:56:3e:c7:73:6b:22:8e:83:0b:a2:7e:23: 8d:1f:55:fb:51:d2:b9:cf:cc:8a:aa:e2:ea:7c:50: 38:52:6f:fd:50:ef:45:60:d0:52:a6:96:e5:a9:97: 60:49:84:95:7c:52:2b:f3:84:f8:00:b2:78:fc:fb: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:01:1D:35:3C:31:9E:0D:7D:F2:B3:BE:5F:47:C5:7D:A1:20:A8:4D X509v3 Authority Key Identifier: keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:94:fc:aa:75:6e:1a:45:84:12:6b:47:ef:a8:c2:d6:19:bc: 9e:2f:26:5e:6c:d5:6a:d4:0e:94:e8:81:d2:bb:49:aa:0b:c4: ae:b7:a3:ed:d1:99:d8:cf:3c:b4:f0:41:a2:25:0d:74:7e:99: 5e:50:57:42:b8:cd:fc:86:7b:b1:bf:47:72:8b:93:bf:1f:64: b7:cf:6e:32:d1:56:ec:f5:dc:40:18:33:4a:db:ba:38:0b:a8: 91:7a:a5:2d:29:68:31:1c:2d:a1:bc:c2:3d:d4:8b:31:1e:79: 30:f5:70:24:30:ca:3a:9b:96:ab:5a:5c:59:48:03:26:88:37: f0:bd:8d:36:7e:3a:a0:8e:03:c2:fe:07:a5:c4:34:a1:d9:fd: a1:0e:6c:40:e6:f0:9d:8b:da:e5:6f:0a:21:9d:48:50:93:0a: 2e:b5:cf:71:4b:7d:98:87:32:e8:02:aa:d0:14:78:6d:9a:31: 45:6f:fe:dd:a4:f4:33:f5:bb:8b:2a:7d:cc:cd:e1:72:22:92: bd:a6:a8:8d:28:b3:7a:8f:75:8e:f7:cd:bf:b0:3d:1b:63:97: 6e:db:7e:07:05:ab:37:59:d1:93:52:64:09:90:04:9e:e1:a9: 01:fa:f9:38:62:2e:0a:3d:e1:8c:66:5b:9d:de:2f:f1:44:92: 1a:30:ab:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qJwGkhbWRXXdFYCBuyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3 MjFlNTUwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD Eyg3YjAxMWQzNTNjMzE5ZTBkN2RmMmIzYmU1ZjQ3YzU3ZGExMjBhODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx7Xtelh20q0pzNzXa3D8RTMIwSx RD8uf6x+kWiyXkyoyu4b05ScvvqChLMobQr4SDF0+z4be85DIFFqrU1m8tgEEACx ZSX57oAIDegWqiAXUB0X+ttM4TeHrED6tUx9Nsm0mh8d1uuuHNsPsOQimKlmx2Iw UTX5DIMDdUyJvyMpyJpUYNgVDFWvwqZQloiCgsRiDciDl6m9MJ61ojDKQXzEwd42 LwR+S2YwB8s9BNapVFAFcgzbwqKoD8ZEl087RmP3xmZWPsdzayKOgwuifiONH1X7 UdK5z8yKquLqfFA4Um/9UO9FYNBSppblqZdgSYSVfFIr84T4ALJ4/PsVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsBHTU8MZ4NffKzvl9HxX2hIKhNMB8GA1UdIwQY MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt NmQ2NTVjZDk0NDY4LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4 LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApT8qnVu GkWEEmtH76jC1hm8ni8mXmzVatQOlOiB0rtJqgvErrej7dGZ2M88tPBBoiUNdH6Z XlBXQrjN/IZ7sb9HcouTvx9kt89uMtFW7PXcQBgzStu6OAuokXqlLSloMRwtobzC PdSLMR55MPVwJDDKOpuWq1pcWUgDJog38L2NNn46oI4Dwv4HpcQ0odn9oQ5sQObw nYva5W8KIZ1IUJMKLrXPcUt9mIcy6AKq0BR4bZoxRW/+3aT0M/W7iyp9zM3hciKS vaaojSizeo91jvfNv7A9G2OXbtt+BwWrN1nRk1JkCZAEnuGpAfr5OGIuCj3hjGZb nd4v8USSGjCr8w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:11:22 2025 by rpki-client