This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft File: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json) Hash identifier: dTFqC4A4amarJcYRc0ZAKQJkXyHjXXmomcrOmZCVoPM= Subject key identifier: 3A:80:5B:00:C9:C4:3C:45:3F:29:32:59:E8:96:C5:04:82:B8:6D:E4 Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B4091D4037056BF7BB3723FBF16462B67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft Manifest number: 14D2 Signing time: Sun 21 Dec 2025 11:00:57 +0000 Manifest this update: Sun 21 Dec 2025 11:00:57 +0000 Manifest next update: Mon 22 Dec 2025 11:00:57 +0000 Files and hashes: 1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: 5GeO7bTtODqRkJSdYjaIHH0gIyBLFmsTYCsdfgXzFuc=) 2: 1f2tT71vV1MiLQenFigoQuxRwqM.roa (hash: wpjdNTt4b7V2ll6KY5o5hcvRIp5mFl1TvHli6R2tBq8=) 3: Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa (hash: zKd/skTxKlvTPvFh0ifMkaguOQnO05Ys88KWivYuLNY=) 4: CmmKhdciV_F_mra-YOcbKmrYhbY.roa (hash: VT8xbl1Jji+4wsCUPpHnl/UFnhMgpu5zo/k26EaRMFM=) 5: Nc9h3qvLuJI4WP6YkQa2jYc6rJI.roa (hash: 5Bmg9YYyOOpJwhqaN3H4Zio8XFaxyte8HHt0oAAzH5g=) 6: RSsMaCl57szGFCkhCpSEu-SYKeY.roa (hash: oRvnshX7DCElI5ZaHCvWWYGxI4E7w9fzHzlAFCyFjaQ=) 7: g21ix9lsPN1aDIX0bqCC1gdAPmM.roa (hash: W8EV6Gvgx+m/11ynvueehGaUvQkCO2v1KpATl4K+wEo=) 8: geP9toPWAOd-61VI__Y1Av416ac.roa (hash: 1O2o1nFJwlxv6rt2UEY74JBc/AG0NZbX/IF9C2wOTds=) 9: tyq7k6T4xEqQgbGkJ2fusYhPOJQ.roa (hash: IGWJpPuzQqbP565czDocwJaMa5FKL3JQeJDF/Y2DnIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:d4:03:70:56:bf:7b:b3:72:3f:bf:16:46:2b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Dec 21 11:00:57 2025 GMT Not After : Dec 22 11:00:57 2025 GMT Subject: CN=3a805b00c9c43c453f293259e896c50482b86de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:54:b1:4b:14:a8:55:58:5b:e6:15:23:63:97: 9b:75:b3:5f:f1:ef:7e:7f:33:8c:48:91:4b:d2:dd: 6c:b1:15:78:dd:07:49:37:7a:0f:6e:23:da:c4:70: 9b:79:b6:eb:4e:69:61:a2:83:49:17:1d:08:70:9d: d4:74:91:39:30:e3:32:29:b2:10:96:ce:de:bb:29: bd:f6:ae:d4:95:5c:d3:6a:52:21:f5:ee:92:ad:76: a8:55:18:04:eb:00:06:c7:e2:dd:a6:cf:6c:91:72: 70:35:62:d2:e3:f8:3c:eb:2f:d5:9b:64:67:51:0f: cf:00:b0:d1:fe:d6:7e:5e:7f:38:b2:e0:7a:95:92: 19:49:e3:5d:12:31:a4:6c:a3:be:bb:34:d3:16:58: e4:95:2f:30:26:ba:2d:31:ee:97:97:cf:ec:9c:4d: a8:f2:22:2e:20:75:b2:2c:b5:e2:95:0e:2d:d9:1c: d4:23:18:e2:da:74:62:26:9c:13:47:35:c2:25:03: fb:2a:74:4f:b8:31:65:10:c9:fa:c9:05:9d:a7:f3: e4:fc:59:d5:16:d9:0b:50:bc:48:52:23:94:61:88: fd:58:6e:99:43:9c:9e:8f:57:69:87:01:b4:fd:a7: 5c:54:90:e8:b5:02:93:a0:06:d2:6a:c1:67:af:5e: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:80:5B:00:C9:C4:3C:45:3F:29:32:59:E8:96:C5:04:82:B8:6D:E4 X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bc:9f:08:bc:b8:fa:73:05:31:a2:80:58:57:5d:a5:79:56: bd:16:13:a9:f6:4c:28:8a:1c:0c:90:fd:05:55:ca:29:ca:99: ab:4c:dd:e4:82:19:8b:8c:e2:88:82:e2:ad:c8:09:b8:de:6b: bf:61:75:3a:f3:8e:e1:e1:d6:e3:57:73:19:ec:25:8c:e6:26: 86:91:f5:e0:99:cf:2e:4c:ae:88:24:32:60:b6:34:3a:ec:22: 44:6d:6f:9a:76:47:cb:27:be:06:26:3d:38:71:57:01:ce:21: 14:bf:f4:ab:2a:cd:3c:f1:9f:35:46:14:67:3f:c2:1a:ae:40: 0c:31:7b:67:db:78:a5:94:24:94:e3:bb:f2:96:42:a2:ba:c3: 78:2a:e8:8b:d6:ef:38:7d:57:5a:d3:db:c0:a6:4f:17:58:0b: 77:3c:f5:1f:5a:09:0f:f5:47:63:f8:ae:6e:94:f0:38:2c:39: 63:b9:f9:dc:4e:d3:89:e9:12:16:00:b8:cc:b8:eb:64:c0:4e: cc:69:f4:2d:de:2c:a0:ec:a5:2c:b0:69:3b:70:3d:7e:fd:c8: 93:16:71:fa:f2:76:d0:6b:4c:17:66:7e:9d:2d:07:42:e0:ba: 63:e0:34:62:20:f1:15:23:44:ba:08:60:ce:b3:d1:ae:12:08: 0a:a7:32:1a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAkdQDcFa/e7NyP78WRitnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjUxMjIxMTEwMDU3WhcNMjUxMjIyMTEwMDU3WjAzMTEwLwYDVQQD EygzYTgwNWIwMGM5YzQzYzQ1M2YyOTMyNTllODk2YzUwNDgyYjg2ZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFSxSxSoVVhb5hUjY5ebdbNf8e9+ fzOMSJFL0t1ssRV43QdJN3oPbiPaxHCbebbrTmlhooNJFx0IcJ3UdJE5MOMyKbIQ ls7euym99q7UlVzTalIh9e6SrXaoVRgE6wAGx+Ldps9skXJwNWLS4/g86y/Vm2Rn UQ/PALDR/tZ+Xn84suB6lZIZSeNdEjGkbKO+uzTTFljklS8wJrotMe6Xl8/snE2o 8iIuIHWyLLXilQ4t2RzUIxji2nRiJpwTRzXCJQP7KnRPuDFlEMn6yQWdp/Pk/FnV FtkLULxIUiOUYYj9WG6ZQ5yej1dphwG0/adcVJDotQKToAbSasFnr17JZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDqAWwDJxDxFPykyWeiWxQSCuG3kMB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYyL2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2 MDQvMS8xLUVFb0ZHdDc3SXZSR0Z1LUREdVRRS3IxdHhRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7yf CLy4+nMFMaKAWFddpXlWvRYTqfZMKIocDJD9BVXKKcqZq0zd5IIZi4ziiILircgJ uN5rv2F1OvOO4eHW41dzGewljOYmhpH14JnPLkyuiCQyYLY0OuwiRG1vmnZHyye+ BiY9OHFXAc4hFL/0qyrNPPGfNUYUZz/CGq5ADDF7Z9t4pZQklOO78pZCorrDeCro i9bvOH1XWtPbwKZPF1gLdzz1H1oJD/VHY/iubpTwOCw5Y7n53E7TiekSFgC4zLjr ZMBOzGn0Ld4soOylLLBpO3A9fv3IkxZx+vJ20GtMF2Z+nS0HQuC6Y+A0YiDxFSNE ughgzrPRrhIICqcyGg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:22:52 2025 by rpki-client