This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json) Hash identifier: 2anLBoZd9lAlhogaCrzJrFphzsvRpIHObvBtT/+HGyc= Subject key identifier: 43:8B:E9:B6:94:86:5E:A3:C9:C6:6C:C0:A7:A8:24:BE:DF:ED:42:A3 Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B3268A3DA62E54A15C2752FA7BADC50F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft Manifest number: 15B1 Signing time: Thu 18 Dec 2025 17:01:16 +0000 Manifest this update: Thu 18 Dec 2025 17:01:16 +0000 Manifest next update: Fri 19 Dec 2025 17:01:16 +0000 Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: oULoDmp/AO3gLJw2dca18K5ycbiwyISRwTFj+abeq6U=) 2: CNq9H2OXEp4278EAIur7EjhdgiM.roa (hash: ezaoiiM4UlLTR0sbj1Fr7oZom9N7jm9fEV33MK67n/k=) 3: avwTDwXgj-XueUI8wn-hyOkB-tU.roa (hash: IktCfn+eBAhnVRfOZR4afgek+KYNeXmLk7tpJfljPc4=) 4: ei-lhbSyA6LHM30pnoTc676sVOk.roa (hash: BJvZcqOLIL3sVAhna5EPTZoiTPtvfxYPfeKNrqGIDHA=) 5: leLbvZk-ZLOHTx35H1teEVZvq_w.roa (hash: CF/SxDg4bOjmx2R5usAUeBgqRx+iarFbP3We+RdFgrY=) 6: uF3Ipp-IOmC2QxpujNdolHkmlLw.roa (hash: hlYEypQIjtWjQMSDZuN9bDWHcqbDbwOnFZm/mrxdTfU=) 7: vTpbvCLw317pUWZPp8_hDkh88VE.roa (hash: Xc88zcdf1KorCO6RA2gqcBm66DJNRYMneNP18O1Fg04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:a3:da:62:e5:4a:15:c2:75:2f:a7:ba:dc:50:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Dec 18 17:01:16 2025 GMT Not After : Dec 19 17:01:16 2025 GMT Subject: CN=438be9b694865ea3c9c66cc0a7a824bedfed42a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:05:dc:7f:16:e7:f4:a4:98:eb:2e:22:2c: 11:71:37:61:c4:5c:f7:1a:85:ec:6e:f0:95:e6:d1: f8:63:37:d7:c7:0b:c6:c8:00:d1:7b:0d:da:8d:e8: ab:33:b7:44:86:87:c9:88:4b:56:ea:6c:18:45:ba: f9:b1:39:27:ea:48:0d:6d:ef:41:22:e9:5c:e7:8c: 13:9f:60:cb:2e:8a:9f:d7:56:d1:19:41:dc:8b:e0: d3:e0:f1:47:67:6d:dd:24:0d:e0:99:a2:31:16:48: f6:1e:b1:40:20:06:a1:a9:d9:1b:4d:5d:b1:42:97: fc:2d:44:e0:b8:9c:20:5e:15:17:f0:1e:db:87:cc: 6f:5e:fe:87:9d:59:b4:e6:fb:bf:a2:91:81:da:38: 24:d7:69:4f:2d:14:38:10:e0:08:e0:5e:4d:ae:6d: f0:51:ec:f0:8d:3c:92:38:8b:17:6d:3e:0a:cf:84: dc:4d:47:d4:5a:b6:3e:d8:ea:2a:7b:02:a9:9a:31: 81:4e:d3:8a:e7:b5:ee:f4:21:12:37:9d:26:8b:46: 82:9d:4f:0d:b0:10:92:00:ac:38:e9:7f:a3:1e:78: 3c:82:1a:80:70:c5:47:ba:e9:f6:10:69:28:08:21: f4:e0:1d:9d:f5:92:ca:57:d3:fb:0e:c8:8f:9f:db: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:E9:B6:94:86:5E:A3:C9:C6:6C:C0:A7:A8:24:BE:DF:ED:42:A3 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:80:94:65:ed:f7:f2:4d:11:e6:d4:a6:60:fb:fe:cd:ed:a4: 0f:48:14:e6:2d:1a:b4:4e:7a:90:6d:2a:75:28:94:6f:40:ee: e1:91:2b:05:3c:af:9b:af:17:d3:4f:1d:e4:7a:70:51:9b:90: ef:c9:10:87:80:16:69:34:4c:df:1b:3a:bc:0d:c8:21:fa:eb: 52:9e:3e:65:61:83:00:69:9b:2c:77:c6:3f:2a:e6:7b:00:88: ee:c8:55:3b:ca:95:84:a4:42:80:54:42:21:0e:45:dc:13:b0: 4f:d7:a4:ae:e0:65:6d:32:56:81:55:54:95:f2:6e:33:fe:17: 73:3c:08:f8:29:c6:c1:a9:02:c4:2c:cd:34:cf:91:a2:54:31: c6:06:1d:48:82:ad:67:ba:fe:e4:4c:f5:67:60:73:11:f3:47: b8:ea:67:2a:b3:89:e9:6a:ad:3a:f9:90:3b:2a:5d:1b:86:c4: 45:77:27:92:53:88:06:a3:fd:fc:fd:bb:9e:04:a4:96:2c:cb: cb:a0:06:92:24:be:6c:e4:6a:f8:c3:67:0d:90:99:dd:b9:1d: 8c:4d:12:5d:17:6d:f3:51:5f:54:9d:de:a4:8a:21:38:1a:63: 38:df:c5:1f:9d:c1:18:61:5f:0b:14:92:a9:9f:72:c6:6e:e3: da:51:77:f6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsyaKPaYuVKFcJ1L6e63FD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjUxMjE4MTcwMTE2WhcNMjUxMjE5MTcwMTE2WjAzMTEwLwYDVQQD Eyg0MzhiZTliNjk0ODY1ZWEzYzljNjZjYzBhN2E4MjRiZWRmZWQ0MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEwF3H8W5/SkmOsuIiwRcTdhxFz3 GoXsbvCV5tH4YzfXxwvGyADRew3ajeirM7dEhofJiEtW6mwYRbr5sTkn6kgNbe9B Iulc54wTn2DLLoqf11bRGUHci+DT4PFHZ23dJA3gmaIxFkj2HrFAIAahqdkbTV2x Qpf8LUTguJwgXhUX8B7bh8xvXv6HnVm05vu/opGB2jgk12lPLRQ4EOAI4F5Nrm3w UezwjTySOIsXbT4Kz4TcTUfUWrY+2OoqewKpmjGBTtOK57Xu9CESN50mi0aCnU8N sBCSAKw46X+jHng8ghqAcMVHuun2EGkoCCH04B2d9ZLKV9P7DsiPn9uqJwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEOL6baUhl6jycZswKeoJL7f7UKjMB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzEzZjVmMS00NWI2LTRiYzEtYjVhNS01MjFmYTQxZGZj OTYvMS8xLVhBRW5McF9PYTd0TWRaVEU4ZTVVX1A5b1RVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYCU Ze338k0R5tSmYPv+ze2kD0gU5i0atE56kG0qdSiUb0Du4ZErBTyvm68X008d5Hpw UZuQ78kQh4AWaTRM3xs6vA3IIfrrUp4+ZWGDAGmbLHfGPyrmewCI7shVO8qVhKRC gFRCIQ5F3BOwT9ekruBlbTJWgVVUlfJuM/4XczwI+CnGwakCxCzNNM+RolQxxgYd SIKtZ7r+5Ez1Z2BzEfNHuOpnKrOJ6WqtOvmQOypdG4bERXcnklOIBqP9/P27ngSk lizLy6AGkiS+bORq+MNnDZCZ3bkdjE0SXRdt81FfVJ3epIohOBpjON/FH53BGGFf CxSSqZ9yxm7j2lF39g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:59:52 2025 by rpki-client