This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json) Hash identifier: AAzmLnq9UlfBjUx4Qdjmjwm14RfBKMQttssNuhV5mGg= Subject key identifier: B6:EC:D2:DE:A6:24:3A:40:6D:24:C3:EC:66:73:8E:6D:00:BA:3B:E5 Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Certificate serial: 019B70D966A05DA1F2398C37791C4A03CD82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft Manifest number: 088C Signing time: Tue 30 Dec 2025 20:00:54 +0000 Manifest this update: Tue 30 Dec 2025 20:00:54 +0000 Manifest next update: Wed 31 Dec 2025 20:00:54 +0000 Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: zEcytr9dKb2mNPzZCq6rwhuoJimrJzWzJZ2ku8j9gHc=) 2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:66:a0:5d:a1:f2:39:8c:37:79:1c:4a:03:cd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Validity Not Before: Dec 30 20:00:54 2025 GMT Not After : Dec 31 20:00:54 2025 GMT Subject: CN=b6ecd2dea6243a406d24c3ec66738e6d00ba3be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:b3:dd:66:6c:e2:4e:e3:cb:49:bd:5b:3b: 80:a2:4c:cf:4a:a1:f7:81:82:d0:4e:76:8e:a6:7e: 61:8c:3d:a4:0e:5e:a5:4f:15:7f:d2:12:15:99:59: fd:3d:47:8f:8a:9b:aa:f4:37:e0:c2:14:35:7b:f6: a1:0e:71:11:65:2b:28:41:63:3f:d4:6c:59:48:2c: f1:7d:82:2d:5c:5a:47:8a:09:08:21:5d:a5:49:bb: ae:22:2a:6a:9a:c3:ed:cf:f3:67:7b:26:d7:2b:9e: 70:74:36:3a:16:73:89:72:3a:27:f1:95:d9:8e:b1: 95:ae:c1:28:25:ce:3d:7d:24:8f:ae:d9:c6:4a:60: c4:d7:1c:ef:c8:29:4b:6f:0d:20:07:07:4d:e0:f5: 05:58:02:38:b5:81:b0:2c:e6:5f:d2:77:18:1d:93: 0c:bd:f1:cb:08:49:29:44:1a:ce:62:56:90:24:56: d0:bf:d5:e6:ad:1e:71:0d:ed:37:2a:ab:5f:57:a6: 7f:47:4e:67:6a:8a:86:59:bd:7b:8e:e6:72:38:8d: 2b:2f:fb:5c:1d:a2:a4:1e:3d:0a:01:e1:da:8e:46: 97:3d:7f:18:06:9c:dc:41:36:71:dc:f3:90:bb:d7: d7:59:48:7c:23:1a:b6:2f:b6:ed:e6:7b:07:0e:b6: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:D2:DE:A6:24:3A:40:6D:24:C3:EC:66:73:8E:6D:00:BA:3B:E5 X509v3 Authority Key Identifier: keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:23:c7:f0:99:60:35:a4:1e:11:ec:ad:47:3c:db:72:94: f2:96:e5:4c:4c:b4:18:5f:b6:02:04:0f:5a:7a:b2:b8:ef:b6: d0:3b:09:f7:84:e5:ff:33:b0:21:90:c7:46:5c:12:b8:39:3c: 05:ac:5a:08:32:68:0b:70:91:c4:b8:32:a8:62:ae:85:f1:86: ae:36:80:36:d3:69:55:0b:07:1c:e3:cf:e7:38:d7:bf:d7:26: 61:21:9c:ee:df:86:f3:0d:0a:a3:c3:39:44:cb:61:e3:35:d8: 2e:6c:ec:16:c5:e2:66:ee:b6:da:00:36:d3:02:24:3a:cd:cb: 78:5c:0c:8c:8a:44:74:4d:a1:73:ef:f8:9d:65:f5:01:93:0a: 7c:3a:e8:0b:fc:98:9b:65:0d:38:14:dd:b6:ad:51:4f:e7:4c: 00:ea:2f:12:a2:31:4e:93:77:de:14:fe:db:88:cf:90:c6:92: 6f:ee:dd:e2:57:54:d3:f7:9d:00:80:31:a5:84:b6:5b:b9:ee: 50:50:53:56:a8:e8:af:05:63:2e:5d:40:86:dc:2b:24:0f:0c: e9:c5:9b:55:bf:cc:17:51:54:0c:5e:32:68:ef:da:8c:52:db: 8d:c0:6f:13:40:9f:c0:d2:c6:51:b3:ad:e2:1e:77:cd:e4:f5: 94:1c:1b:c9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtw2WagXaHyOYw3eRxKA82CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4 NDgzZmMwHhcNMjUxMjMwMjAwMDU0WhcNMjUxMjMxMjAwMDU0WjAzMTEwLwYDVQQD EyhiNmVjZDJkZWE2MjQzYTQwNmQyNGMzZWM2NjczOGU2ZDAwYmEzYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX6z3WZs4k7jy0m9WzuAokzPSqH3 gYLQTnaOpn5hjD2kDl6lTxV/0hIVmVn9PUePipuq9DfgwhQ1e/ahDnERZSsoQWM/ 1GxZSCzxfYItXFpHigkIIV2lSbuuIipqmsPtz/NneybXK55wdDY6FnOJcjon8ZXZ jrGVrsEoJc49fSSPrtnGSmDE1xzvyClLbw0gBwdN4PUFWAI4tYGwLOZf0ncYHZMM vfHLCEkpRBrOYlaQJFbQv9XmrR5xDe03KqtfV6Z/R05naoqGWb17juZyOI0rL/tc HaKkHj0KAeHajkaXPX8YBpzcQTZx3POQu9fXWUh8Ixq2L7bt5nsHDrbOZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLbs0t6mJDpAbSTD7GZzjm0AujvlMB8GA1UdIwQY MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3 LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeIj x/CZYDWkHhHsrUc823KU8pblTEy0GF+2AgQPWnqyuO+20DsJ94Tl/zOwIZDHRlwS uDk8BaxaCDJoC3CRxLgyqGKuhfGGrjaANtNpVQsHHOPP5zjXv9cmYSGc7t+G8w0K o8M5RMth4zXYLmzsFsXiZu622gA20wIkOs3LeFwMjIpEdE2hc+/4nWX1AZMKfDro C/yYm2UNOBTdtq1RT+dMAOovEqIxTpN33hT+24jPkMaSb+7d4ldU0/edAIAxpYS2 W7nuUFBTVqjorwVjLl1AhtwrJA8M6cWbVb/MF1FUDF4yaO/ajFLbjcBvE0CfwNLG UbOt4h53zeT1lBwbyQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:46 2025 by rpki-client