This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json) Hash identifier: YOD3d8LsrOdsLbYoKngKY/uPoAda2HoYNW47AcX+2OU= Subject key identifier: 87:23:7C:E3:7D:81:50:CF:D6:92:E4:E9:51:45:FA:C7:FD:BC:A4:1B Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Certificate serial: 019B3D23166D5F531B0A33A7BD122D9E81A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft Manifest number: 04E0 Signing time: Sat 20 Dec 2025 19:01:08 +0000 Manifest this update: Sat 20 Dec 2025 19:01:08 +0000 Manifest next update: Sun 21 Dec 2025 19:01:08 +0000 Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: xi8DVc14mcAWkFluazk/kU/CZbneWtxN+ZSeEJzfErg=) 2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=) 3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:16:6d:5f:53:1b:0a:33:a7:bd:12:2d:9e:81:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Validity Not Before: Dec 20 19:01:08 2025 GMT Not After : Dec 21 19:01:08 2025 GMT Subject: CN=87237ce37d8150cfd692e4e95145fac7fdbca41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ff:cd:f4:c5:21:de:7d:e8:fb:48:13:7f:87: 88:d5:61:b3:7b:64:d9:d4:cc:2c:8f:b2:b1:f7:97: 59:1e:fc:5d:1c:ae:c4:ff:de:54:9e:ec:f5:5c:96: 11:a1:06:1e:93:c2:8d:54:93:2a:cb:44:5d:00:07: aa:16:15:f1:e2:a6:3f:56:1c:8a:9e:93:20:8a:94: 06:39:cb:53:c5:aa:fc:39:58:b9:67:6d:e5:07:cc: 57:9d:08:f6:e4:54:6a:59:39:c5:ae:cb:0a:30:3c: 53:c2:ce:5b:9e:99:14:ed:0f:e3:e7:89:9f:c2:60: 23:cf:3b:71:ec:43:cb:ec:ec:25:31:14:ba:bc:42: 36:0a:bf:87:56:1e:41:fd:38:4b:3f:59:5a:a6:74: 11:d8:30:8b:e7:39:5f:e9:0b:37:1d:62:d9:40:c9: ba:e2:71:37:ee:b2:9e:34:95:f2:9d:df:04:de:60: 09:dc:98:5a:00:5b:ba:75:63:04:f6:94:86:96:b2: 6e:ff:0a:cb:1f:ce:e1:c2:6d:9f:4d:49:b2:40:b3: 74:8b:d0:65:8f:c0:6a:24:20:2f:2b:6c:76:61:92: 8b:30:c5:86:49:45:9e:80:eb:2f:35:82:d5:96:0a: 13:85:ea:bd:6e:c7:a8:03:65:52:f2:98:b8:9c:34: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:7C:E3:7D:81:50:CF:D6:92:E4:E9:51:45:FA:C7:FD:BC:A4:1B X509v3 Authority Key Identifier: keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f8:5f:df:6b:22:08:1f:6d:40:02:81:df:3f:de:29:66:8f: 86:30:a2:7c:05:51:3b:e0:43:f3:3d:46:d2:9a:29:05:00:f2: 85:60:38:7b:30:79:8f:f5:28:64:90:1f:cc:67:fc:5a:de:8c: 70:8c:98:af:a1:91:7e:90:bb:85:32:a5:24:d7:e4:d3:27:af: a8:af:71:69:f7:20:71:f5:37:85:12:51:ab:54:d1:b7:27:7a: a9:37:9c:83:27:e9:2e:21:c2:b6:36:6e:2f:73:63:24:02:ca: 26:09:e8:6c:9e:19:93:14:93:9c:93:cf:1b:46:78:8f:60:d9: 77:d8:62:c0:c3:d6:16:a5:9b:fd:4b:db:7a:6b:91:54:ee:4f: 14:51:ae:52:8d:4f:02:c9:a9:20:33:b2:fa:fc:89:b2:08:6b: b1:1b:b6:a2:ac:85:99:45:e7:ef:09:20:30:e2:64:5d:ff:3d: 60:69:a8:34:a9:fa:84:07:d4:21:3c:e4:a7:c2:95:fc:a2:80: 0d:d4:2d:7b:17:a6:aa:1f:8e:9d:06:82:94:45:e8:74:29:e7: 93:ea:5a:0e:6a:30:ed:b2:b3:bf:d9:a2:06:8b:5b:fc:71:53: 73:7d:18:e4:57:5c:9a:b0:bc:a7:0a:14:a9:49:61:f1:01:77: 42:e0:42:82 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9IxZtX1MbCjOnvRItnoGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4 NTVkNTQwHhcNMjUxMjIwMTkwMTA4WhcNMjUxMjIxMTkwMTA4WjAzMTEwLwYDVQQD Eyg4NzIzN2NlMzdkODE1MGNmZDY5MmU0ZTk1MTQ1ZmFjN2ZkYmNhNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7//N9MUh3n3o+0gTf4eI1WGze2TZ 1Mwsj7Kx95dZHvxdHK7E/95Unuz1XJYRoQYek8KNVJMqy0RdAAeqFhXx4qY/VhyK npMgipQGOctTxar8OVi5Z23lB8xXnQj25FRqWTnFrssKMDxTws5bnpkU7Q/j54mf wmAjzztx7EPL7OwlMRS6vEI2Cr+HVh5B/ThLP1lapnQR2DCL5zlf6Qs3HWLZQMm6 4nE37rKeNJXynd8E3mAJ3JhaAFu6dWME9pSGlrJu/wrLH87hwm2fTUmyQLN0i9Bl j8BqJCAvK2x2YZKLMMWGSUWegOsvNYLVlgoTheq9bseoA2VS8pi4nDRlcQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIcjfON9gVDP1pLk6VFF+sf9vKQbMB8GA1UdIwQY MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvhf 32siCB9tQAKB3z/eKWaPhjCifAVRO+BD8z1G0popBQDyhWA4ezB5j/UoZJAfzGf8 Wt6McIyYr6GRfpC7hTKlJNfk0yevqK9xafcgcfU3hRJRq1TRtyd6qTecgyfpLiHC tjZuL3NjJALKJgnobJ4ZkxSTnJPPG0Z4j2DZd9hiwMPWFqWb/UvbemuRVO5PFFGu Uo1PAsmpIDOy+vyJsghrsRu2oqyFmUXn7wkgMOJkXf89YGmoNKn6hAfUITzkp8KV /KKADdQtexemqh+OnQaClEXodCnnk+paDmow7bKzv9miBotb/HFTc30Y5FdcmrC8 pwoUqUlh8QF3QuBCgg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:03:36 2025 by rpki-client