This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json) Hash identifier: VGcPI5FfTOWIkb1WaM4TBWhUCbwOYzMDl+sGdelfkMI= Subject key identifier: A4:9D:59:F2:89:D6:7F:A7:38:D7:C4:D8:49:FB:ED:93:43:DF:B4:2F Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36 Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36 Certificate serial: 019B3BA26A4B320F1F9DD3241C045B7DCB0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 12:00:58 +0000 Manifest this update: Sat 20 Dec 2025 12:00:58 +0000 Manifest next update: Sun 21 Dec 2025 12:00:58 +0000 Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: YxcyyqJghHvXr0uc71Lt8JUK46sspTM2zy7YKRz/YMk=) 2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:6a:4b:32:0f:1f:9d:d3:24:1c:04:5b:7d:cb:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36 Validity Not Before: Dec 20 12:00:58 2025 GMT Not After : Dec 21 12:00:58 2025 GMT Subject: CN=a49d59f289d67fa738d7c4d849fbed9343dfb42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:22:a6:65:b7:e8:28:31:d7:53:d9:57:f5: e5:91:9f:ab:5d:18:3f:10:dd:61:ef:df:93:25:a0: 9f:49:71:59:af:d3:e9:97:1d:cc:2c:31:0e:1b:af: 9f:f9:f7:cb:d4:3b:e1:ed:77:a1:3b:a7:05:a7:88: 39:26:24:5f:ee:74:f4:a7:8c:f3:cf:25:99:d1:8a: 62:56:42:aa:9a:7f:a3:a4:41:d6:5b:6c:76:6f:ea: 30:ca:fa:a0:b2:d9:83:72:ce:99:50:24:d9:87:3b: a5:7c:48:c5:fc:10:cb:e0:22:7f:85:70:ac:e7:f9: 59:ac:d2:ef:ef:fe:22:53:c6:5b:86:73:0a:77:35: a1:1d:e2:e3:8a:fd:5b:54:a1:5c:b7:ba:e0:74:b1: 87:df:eb:d8:12:8c:3d:66:c2:d8:e8:a5:ab:41:8c: f0:0d:8f:0d:c0:53:58:4e:3e:97:17:91:bd:b0:30: 70:6f:d6:5d:20:d5:66:98:9f:c2:a6:20:c3:29:f2: 40:8a:25:03:cb:6f:78:05:94:cb:31:36:99:75:ad: 28:87:26:d0:34:ed:7b:b3:68:e2:25:99:2f:7e:e5: 73:04:f8:17:b4:ec:03:ae:3b:7a:ec:84:76:af:ef: fc:b9:5b:23:d7:1c:7c:df:05:03:ba:bd:c4:ff:63: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:59:F2:89:D6:7F:A7:38:D7:C4:D8:49:FB:ED:93:43:DF:B4:2F X509v3 Authority Key Identifier: keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:17:27:70:b2:03:b7:a5:0c:9e:8d:d7:69:78:6e:67:98:d6: cc:1f:49:c6:d2:fc:66:a0:32:05:16:ab:96:02:63:a1:04:60: fa:1f:23:3c:04:16:af:f1:d6:3f:9b:b8:f8:85:e0:6c:9e:a5: c7:71:8e:6c:4f:8a:b5:d0:11:f2:56:45:fa:22:18:d0:de:a9: 86:82:94:78:43:a8:93:3d:ad:9a:77:42:b6:ad:d4:f3:2b:67: d6:f5:1e:67:07:ef:df:20:70:f6:42:6d:03:bb:c8:ef:b3:ee: 82:7a:b5:41:22:4c:5a:d6:62:5d:13:60:1b:c9:65:a3:56:fe: 06:54:c1:a8:7d:51:fe:62:fb:f2:67:cd:d1:e2:23:b8:b2:34: 16:43:f8:5e:ea:c2:22:dc:bf:fd:73:27:e5:cd:8e:4e:38:00: b7:88:3b:24:33:ce:7f:c5:9e:4f:77:18:56:e3:40:57:ff:53: 1e:7d:f6:87:ae:a2:47:2b:6e:25:77:74:76:04:30:dc:21:ff: 64:39:3a:63:45:25:83:10:95:1d:f6:a9:86:c6:e6:6c:a1:6e: 7d:61:3d:e3:df:55:57:7a:c0:cd:80:2a:ef:01:90:fd:22:91: ed:7b:da:36:f9:0c:c6:91:50:30:8c:a5:e4:19:0d:a3:a8:4f: 9f:c8:20:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ompLMg8fndMkHARbfcsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw ZGRiMzYwHhcNMjUxMjIwMTIwMDU4WhcNMjUxMjIxMTIwMDU4WjAzMTEwLwYDVQQD EyhhNDlkNTlmMjg5ZDY3ZmE3MzhkN2M0ZDg0OWZiZWQ5MzQzZGZiNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/gipmW36Cgx11PZV/XlkZ+rXRg/ EN1h79+TJaCfSXFZr9Pplx3MLDEOG6+f+ffL1Dvh7XehO6cFp4g5JiRf7nT0p4zz zyWZ0YpiVkKqmn+jpEHWW2x2b+owyvqgstmDcs6ZUCTZhzulfEjF/BDL4CJ/hXCs 5/lZrNLv7/4iU8ZbhnMKdzWhHeLjiv1bVKFct7rgdLGH3+vYEow9ZsLY6KWrQYzw DY8NwFNYTj6XF5G9sDBwb9ZdINVmmJ/CpiDDKfJAiiUDy294BZTLMTaZda0ohybQ NO17s2jiJZkvfuVzBPgXtOwDrjt67IR2r+/8uVsj1xx83wUDur3E/2Oi+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSdWfKJ1n+nONfE2En77ZND37QvMB8GA1UdIwQY MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxcncLID t6UMno3XaXhuZ5jWzB9JxtL8ZqAyBRarlgJjoQRg+h8jPAQWr/HWP5u4+IXgbJ6l x3GObE+KtdAR8lZF+iIY0N6phoKUeEOokz2tmndCtq3U8ytn1vUeZwfv3yBw9kJt A7vI77Pugnq1QSJMWtZiXRNgG8llo1b+BlTBqH1R/mL78mfN0eIjuLI0FkP4XurC Ity//XMn5c2OTjgAt4g7JDPOf8WeT3cYVuNAV/9THn32h66iRytuJXd0dgQw3CH/ ZDk6Y0UlgxCVHfaphsbmbKFufWE9499VV3rAzYAq7wGQ/SKR7XvaNvkMxpFQMIyl 5BkNo6hPn8ggBg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:15 2025 by rpki-client