This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json) Hash identifier: O/RC+80P7G3483bLQfgGZUXN1cZTIoCkp46ExMUcxPA= Subject key identifier: 74:62:94:A2:9D:E6:AF:EB:35:0C:C5:1B:E9:A2:47:7F:59:48:EC:10 Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Certificate serial: 019B4DA87E118E083F960643B3FB28D119CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft Manifest number: 128C Signing time: Wed 24 Dec 2025 00:00:46 +0000 Manifest this update: Wed 24 Dec 2025 00:00:46 +0000 Manifest next update: Thu 25 Dec 2025 00:00:46 +0000 Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: 4qIoM77aCp13yyemvtujY5BxQ4QSzda6rB44FSjB5Pk=) 2: 52omqQEuqym82ipU0hYmrHOmv0Q.roa (hash: XCFx/COmHu6CZIYbc3sid+Zpv5Ax1Cs1bDV/hO9qIaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:a8:7e:11:8e:08:3f:96:06:43:b3:fb:28:d1:19:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Validity Not Before: Dec 24 00:00:46 2025 GMT Not After : Dec 25 00:00:46 2025 GMT Subject: CN=746294a29de6afeb350cc51be9a2477f5948ec10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:28:09:55:b4:ff:27:c1:5f:97:7a:d5:10: 34:83:80:04:6a:4c:ae:01:36:e5:2b:70:99:5b:e3: d2:26:a3:e0:58:0b:46:fd:bf:89:fd:d0:c1:b9:a5: cf:d7:95:a6:a9:f9:47:1a:b1:0c:77:64:ff:47:72: 4c:fb:c0:9c:51:6e:d5:0f:1d:b3:a1:68:e7:04:c3: 4a:b1:44:a3:ac:78:bd:86:67:36:ce:55:45:92:30: 31:da:36:11:38:e7:bf:0d:b0:8a:f0:fe:ce:b5:e7: 14:e2:4d:a4:24:3f:35:c8:5b:5c:84:a3:00:34:4c: 7a:58:7c:a3:87:a0:49:06:6a:31:ad:bc:ef:37:06: 63:3b:51:95:c9:f2:66:b5:c4:34:75:48:16:b1:86: 27:ce:04:27:c5:86:94:a8:c7:ce:af:72:29:4e:48: 81:96:52:3e:10:35:7a:b0:1b:81:c6:50:c5:c9:87: 19:78:c2:95:e3:dd:42:cb:40:31:d9:2a:24:0f:d1: 28:56:2a:0b:03:a9:6b:8f:a5:c8:bc:96:80:a6:db: 49:e4:ad:7b:87:a7:3a:55:08:47:96:0e:7e:94:c0: f4:8b:01:ce:c7:b4:54:03:82:03:83:b0:ac:46:43: 90:72:60:0b:1a:54:75:b4:b0:aa:e2:d2:bf:1c:99: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:94:A2:9D:E6:AF:EB:35:0C:C5:1B:E9:A2:47:7F:59:48:EC:10 X509v3 Authority Key Identifier: keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0d:d6:1b:20:18:6e:95:1d:fd:7b:87:94:0f:3b:c3:16:fe: 3f:c3:71:aa:68:45:20:34:69:1e:5b:ca:ae:da:a4:f8:c4:cb: 57:f1:77:9f:c1:cb:64:38:9b:63:c3:63:f8:28:48:29:72:48: 75:c4:8e:f1:8a:84:40:f2:d9:83:5f:0e:45:94:12:b9:27:b0: a6:4f:38:bd:fd:c9:03:f6:b0:0e:05:84:fa:e8:89:1c:33:b9: 04:96:e0:bb:4e:a9:e4:02:ea:b8:d9:a6:ab:9b:6d:e6:f7:01: 4f:93:aa:b1:8a:1a:75:6c:53:ab:fb:97:93:1f:01:60:bd:ee: d2:0a:4a:1c:44:f2:6c:89:e9:fa:bc:09:17:a9:4e:fc:0f:0f: 9e:ab:b3:3e:97:35:b2:36:ca:9c:0b:2c:dd:b6:79:f3:5d:ba: 89:bd:c5:f0:b0:a0:75:65:25:d2:fd:1b:a3:b2:c2:ef:fb:70: 7f:0c:82:d3:a9:16:23:45:39:d9:ff:03:64:db:23:04:c6:b2: 6c:f8:01:83:91:82:76:f9:01:bb:d9:67:53:9d:3a:19:00:1a: ad:99:51:c9:9b:c4:e9:24:8e:35:32:5e:9c:61:f2:7c:ab:ea: e3:05:3e:ed:58:a7:3e:bf:fc:cb:e3:33:e5:4a:13:91:7f:ce: be:91:31:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNqH4Rjgg/lgZDs/so0RnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi NmMxODQwHhcNMjUxMjI0MDAwMDQ2WhcNMjUxMjI1MDAwMDQ2WjAzMTEwLwYDVQQD Eyg3NDYyOTRhMjlkZTZhZmViMzUwY2M1MWJlOWEyNDc3ZjU5NDhlYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJUoCVW0/yfBX5d61RA0g4AEakyu ATblK3CZW+PSJqPgWAtG/b+J/dDBuaXP15WmqflHGrEMd2T/R3JM+8CcUW7VDx2z oWjnBMNKsUSjrHi9hmc2zlVFkjAx2jYROOe/DbCK8P7OtecU4k2kJD81yFtchKMA NEx6WHyjh6BJBmoxrbzvNwZjO1GVyfJmtcQ0dUgWsYYnzgQnxYaUqMfOr3IpTkiB llI+EDV6sBuBxlDFyYcZeMKV491Cy0Ax2SokD9EoVioLA6lrj6XIvJaApttJ5K17 h6c6VQhHlg5+lMD0iwHOx7RUA4IDg7CsRkOQcmALGlR1tLCq4tK/HJmEZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRilKKd5q/rNQzFG+miR39ZSOwQMB8GA1UdIwQY MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt MzVhNWRjMmM3OTJjLzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA3WGyAY bpUd/XuHlA87wxb+P8NxqmhFIDRpHlvKrtqk+MTLV/F3n8HLZDibY8Nj+ChIKXJI dcSO8YqEQPLZg18ORZQSuSewpk84vf3JA/awDgWE+uiJHDO5BJbgu06p5ALquNmm q5tt5vcBT5OqsYoadWxTq/uXkx8BYL3u0gpKHETybInp+rwJF6lO/A8PnquzPpc1 sjbKnAss3bZ58126ib3F8LCgdWUl0v0bo7LC7/twfwyC06kWI0U52f8DZNsjBMay bPgBg5GCdvkBu9lnU506GQAarZlRyZvE6SSONTJenGHyfKvq4wU+7VinPr/8y+Mz 5UoTkX/OvpExKQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:14 2025 by rpki-client