This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json) Hash identifier: 0VBLArlOvXW9ySZli/fyn/5jsPZI+LzWu0iiznx3GWQ= Subject key identifier: DE:5B:28:1A:AC:43:08:A7:E5:A8:BB:94:C3:E2:C6:62:CC:B9:7C:0A Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55 Certificate serial: 019B3FECFFB6CEB9222BF73B30DEC6C63059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft Manifest number: 1796 Signing time: Sun 21 Dec 2025 08:00:55 +0000 Manifest this update: Sun 21 Dec 2025 08:00:55 +0000 Manifest next update: Mon 22 Dec 2025 08:00:55 +0000 Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: h+yWezZkKNtSf8E51q3SkY+v0bX27N2KZQ0gvuIxNZc=) 2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=) 3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=) 4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ff:b6:ce:b9:22:2b:f7:3b:30:de:c6:c6:30:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55 Validity Not Before: Dec 21 08:00:55 2025 GMT Not After : Dec 22 08:00:55 2025 GMT Subject: CN=de5b281aac4308a7e5a8bb94c3e2c662ccb97c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:dc:03:e1:73:62:3a:c8:c0:8a:f5:d6:4e: 55:e7:56:1f:32:cb:20:17:c1:9d:ee:f8:b0:1b:e5: fe:bf:15:a2:d4:3e:03:9e:af:fe:38:04:cc:22:4b: 27:f2:b3:e1:3a:40:83:1b:ce:5b:52:6c:03:1b:81: e5:a2:c9:a7:1a:3b:36:63:23:e5:8d:4c:f8:9f:ab: a3:c3:48:96:5e:b3:aa:bc:8d:02:5c:4d:df:43:b3: f8:ea:10:de:2d:9e:80:69:79:02:8f:b1:13:c1:b4: ed:e3:cc:64:17:e0:54:77:1f:9d:67:7a:77:ae:0f: fa:8b:95:d2:55:68:29:a7:21:72:0c:b9:b8:5c:17: 94:83:73:56:b4:60:6b:39:8f:3e:32:1c:66:61:fa: 0e:d5:75:cc:7d:62:f7:d7:38:0a:54:e8:04:bc:f6: b1:64:b8:9f:44:af:cc:53:7c:c0:7e:30:03:64:4e: e3:0f:0a:dc:aa:03:91:18:d0:10:76:b4:a5:31:14: 95:f3:64:41:d1:7a:3b:8f:42:ca:db:2b:0a:b6:7d: cc:3b:68:55:13:e3:1c:4e:7e:71:fe:6f:b7:47:e3: b5:b9:04:5b:83:04:b7:da:f2:cc:d9:e4:f0:d8:26: 1f:b8:a5:c1:97:98:b3:b2:c0:5e:12:3e:89:a5:5a: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:28:1A:AC:43:08:A7:E5:A8:BB:94:C3:E2:C6:62:CC:B9:7C:0A X509v3 Authority Key Identifier: keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:6a:00:5c:fe:80:82:0d:86:90:4e:13:97:d6:e8:e2:9a: 99:a6:b3:3b:9d:dc:8c:71:21:34:44:dc:99:eb:1a:c3:08:e3: 17:de:33:22:98:ba:f4:3a:c4:c3:f9:0d:81:d3:a3:75:18:9b: 90:aa:20:8f:87:e9:7e:b2:69:96:83:b7:e9:59:6a:9b:c9:4d: 65:ac:cd:51:36:c1:f3:1f:97:76:b9:43:0a:4c:25:0d:79:0c: 96:06:43:0b:bb:38:15:f1:c7:0b:30:2f:83:85:4f:78:36:6c: 2c:22:28:7a:c2:95:75:a3:e9:22:b0:f0:b3:15:0b:ce:80:fd: e4:41:d5:22:39:07:12:9a:8f:73:16:5d:2d:89:c5:c9:5c:f3: 0a:fe:d0:e2:c9:b3:5d:77:ef:b3:5b:99:8f:9a:53:a5:1b:99: 32:f0:2a:28:27:03:a1:71:7c:b6:de:f0:4b:d4:04:4f:e7:da: 8a:de:1e:d9:ef:bc:08:de:6d:f5:76:1b:b6:c6:b4:7d:bd:82: 76:74:7b:a2:26:f3:2a:62:52:48:a8:90:e5:d0:c9:44:b3:c5: 1e:37:99:c4:61:7b:e0:73:64:6d:12:7c:5d:12:81:d1:1a:a9: ed:bf:6a:94:3f:af:f4:e3:7b:9c:b3:ac:fe:34:e3:81:f1:27: 99:1a:f2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7P+2zrkiK/c7MN7GxjBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3 MjFlNTUwHhcNMjUxMjIxMDgwMDU1WhcNMjUxMjIyMDgwMDU1WjAzMTEwLwYDVQQD EyhkZTViMjgxYWFjNDMwOGE3ZTVhOGJiOTRjM2UyYzY2MmNjYjk3YzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswHcA+FzYjrIwIr11k5V51YfMssg F8Gd7viwG+X+vxWi1D4Dnq/+OATMIksn8rPhOkCDG85bUmwDG4HlosmnGjs2YyPl jUz4n6ujw0iWXrOqvI0CXE3fQ7P46hDeLZ6AaXkCj7ETwbTt48xkF+BUdx+dZ3p3 rg/6i5XSVWgppyFyDLm4XBeUg3NWtGBrOY8+MhxmYfoO1XXMfWL31zgKVOgEvPax ZLifRK/MU3zAfjADZE7jDwrcqgORGNAQdrSlMRSV82RB0Xo7j0LK2ysKtn3MO2hV E+McTn5x/m+3R+O1uQRbgwS32vLM2eTw2CYfuKXBl5izssBeEj6JpVqZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5bKBqsQwin5ai7lMPixmLMuXwKMB8GA1UdIwQY MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt NmQ2NTVjZDk0NDY4LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4 LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK1qAFz+ gIINhpBOE5fW6OKamaazO53cjHEhNETcmesawwjjF94zIpi69DrEw/kNgdOjdRib kKogj4fpfrJploO36Vlqm8lNZazNUTbB8x+XdrlDCkwlDXkMlgZDC7s4FfHHCzAv g4VPeDZsLCIoesKVdaPpIrDwsxULzoD95EHVIjkHEpqPcxZdLYnFyVzzCv7Q4smz XXfvs1uZj5pTpRuZMvAqKCcDoXF8tt7wS9QET+fait4e2e+8CN5t9XYbtsa0fb2C dnR7oibzKmJSSKiQ5dDJRLPFHjeZxGF74HNkbRJ8XRKB0Rqp7b9qlD+v9ON7nLOs /jTjgfEnmRry4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:50 2025 by rpki-client