This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json) Hash identifier: STXTrFhwq14o6orZJ3A/Bs0VtyuWy4T61m9mXU6LzAQ= Subject key identifier: 4C:3E:2A:43:E3:F4:66:5B:9A:36:30:DC:FD:BE:C1:78:E7:29:A4:FF Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055 Certificate serial: 019B6AD7D5D8A787370BF6F87AD12434E2D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft Manifest number: 140B Signing time: Mon 29 Dec 2025 16:01:28 +0000 Manifest this update: Mon 29 Dec 2025 16:01:28 +0000 Manifest next update: Tue 30 Dec 2025 16:01:28 +0000 Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 43ghvafv06WR9ZofojY3dw118r+GgTDPpSOhPWJHVs0=) 2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=) 3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:d5:d8:a7:87:37:0b:f6:f8:7a:d1:24:34:e2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45bab208653d4261ebf202f6036334119846055 Validity Not Before: Dec 29 16:01:28 2025 GMT Not After : Dec 30 16:01:28 2025 GMT Subject: CN=4c3e2a43e3f4665b9a3630dcfdbec178e729a4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:75:cf:4e:f7:00:f7:a5:7f:63:88:03:f3: f4:db:f7:c3:a5:07:7a:9c:20:b0:1f:2a:e9:a5:44: 35:3a:e4:38:93:27:d6:b6:7a:3c:46:e5:63:fc:fc: 48:66:b6:aa:59:45:95:09:21:b4:70:c5:fa:e3:7d: c9:cf:01:74:d5:6a:ae:44:cd:05:b3:48:98:12:91: 8f:72:4d:c6:76:76:d9:5b:84:6e:ff:b0:6d:e5:ca: 05:49:9d:ae:ac:ad:50:c9:9c:71:27:7b:8a:65:d2: b3:42:36:22:3a:5c:3f:a8:6c:13:f2:56:c0:ee:40: 58:11:b3:b9:e1:b9:8a:9f:e4:68:86:2e:ee:4c:0d: be:54:03:77:e0:c4:76:e6:5f:4f:a9:2c:62:a7:8a: 28:fd:a6:82:0e:de:09:60:c7:42:3e:47:8a:b6:c4: 5c:18:2e:45:b8:d6:33:1a:5b:4a:b1:26:9c:65:63: d7:b3:84:94:85:b2:e6:13:6b:ce:c9:66:dc:ec:6b: af:0f:65:ad:86:08:52:77:db:f1:5a:0b:d4:8f:91: c2:0b:54:33:82:ca:d5:12:f6:ca:f3:7d:50:47:b7: 8d:91:56:71:22:e3:d7:e3:81:d5:9d:32:be:9e:bf: b3:04:df:7f:77:fd:0f:fe:ed:22:c8:0f:f9:cb:b4: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3E:2A:43:E3:F4:66:5B:9A:36:30:DC:FD:BE:C1:78:E7:29:A4:FF X509v3 Authority Key Identifier: keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e6:b9:52:61:52:9e:9d:85:0b:10:34:03:b3:37:7d:7e:78: 8b:8b:85:22:5d:12:93:a0:46:b7:50:86:72:8d:51:eb:12:a2: c6:0e:e8:1f:df:81:fb:2f:20:f8:13:0e:fa:e1:06:d1:b2:89: a7:51:e6:20:31:6a:fe:c9:d5:2d:c0:71:dd:6e:27:22:59:bc: 87:66:e6:fe:91:91:dd:1a:f6:52:30:45:04:7d:81:fc:52:32: 77:db:80:56:33:c3:cf:3f:84:52:06:3d:05:7a:d7:61:f5:f5: ea:bd:0a:31:36:3d:7f:ca:b5:ef:82:a4:47:99:a8:76:27:ec: 1d:4a:e9:f2:ef:3a:29:69:04:01:2d:75:af:f3:b2:05:53:47: ac:83:e7:2d:07:ea:7b:bf:2f:95:c3:3c:f1:92:9f:db:81:4d: af:11:be:a2:61:60:f0:02:5b:ec:b5:ad:77:2b:ae:c6:a0:be: 12:1f:2e:be:48:a1:a4:5e:ef:bd:87:27:6a:79:72:58:f7:05: 3f:85:8d:ff:bd:63:30:1b:78:aa:2f:e7:86:3d:33:65:94:aa: 6a:6f:ac:cc:2b:b3:de:c4:c0:59:b3:d7:a1:c1:8e:eb:dc:98: 3c:24:e9:20:c5:e2:ce:92:38:d1:a1:37:cc:ef:e2:57:86:2a: 09:f2:96:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq19XYp4c3C/b4etEkNOLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4 NDYwNTUwHhcNMjUxMjI5MTYwMTI4WhcNMjUxMjMwMTYwMTI4WjAzMTEwLwYDVQQD Eyg0YzNlMmE0M2UzZjQ2NjViOWEzNjMwZGNmZGJlYzE3OGU3MjlhNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssR1z073APelf2OIA/P02/fDpQd6 nCCwHyrppUQ1OuQ4kyfWtno8RuVj/PxIZraqWUWVCSG0cMX6433JzwF01WquRM0F s0iYEpGPck3GdnbZW4Ru/7Bt5coFSZ2urK1QyZxxJ3uKZdKzQjYiOlw/qGwT8lbA 7kBYEbO54bmKn+Rohi7uTA2+VAN34MR25l9PqSxip4oo/aaCDt4JYMdCPkeKtsRc GC5FuNYzGltKsSacZWPXs4SUhbLmE2vOyWbc7GuvD2WthghSd9vxWgvUj5HCC1Qz gsrVEvbK831QR7eNkVZxIuPX44HVnTK+nr+zBN9/d/0P/u0iyA/5y7T1TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw+KkPj9GZbmjYw3P2+wXjnKaT/MB8GA1UdIwQY MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqua5UmFS np2FCxA0A7M3fX54i4uFIl0Sk6BGt1CGco1R6xKixg7oH9+B+y8g+BMO+uEG0bKJ p1HmIDFq/snVLcBx3W4nIlm8h2bm/pGR3Rr2UjBFBH2B/FIyd9uAVjPDzz+EUgY9 BXrXYfX16r0KMTY9f8q174KkR5modifsHUrp8u86KWkEAS11r/OyBVNHrIPnLQfq e78vlcM88ZKf24FNrxG+omFg8AJb7LWtdyuuxqC+Eh8uvkihpF7vvYcnanlyWPcF P4WN/71jMBt4qi/nhj0zZZSqam+szCuz3sTAWbPXocGO69yYPCTpIMXizpI40aE3 zO/iV4YqCfKWrw== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:20 2025 by rpki-client