This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json) Hash identifier: kXB58TxwUURfrB9sasDC3kRB3PrZWrCeAXKq5ZqjEvQ= Subject key identifier: A4:7E:94:43:65:5B:E5:26:11:05:39:4C:FA:3E:1D:DD:61:B3:A5:17 Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Certificate serial: 019B62B037A0B96A9DFBC90C324D1CB6E870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft Manifest number: 042F Signing time: Sun 28 Dec 2025 02:01:14 +0000 Manifest this update: Sun 28 Dec 2025 02:01:14 +0000 Manifest next update: Mon 29 Dec 2025 02:01:14 +0000 Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: Ry7D6kwLYAWG+qlkVwKUbQH8dzesCy4XoaXJ/y5BTds=) 2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:37:a0:b9:6a:9d:fb:c9:0c:32:4d:1c:b6:e8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Validity Not Before: Dec 28 02:01:14 2025 GMT Not After : Dec 29 02:01:14 2025 GMT Subject: CN=a47e9443655be5261105394cfa3e1ddd61b3a517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:ba:03:35:96:49:f8:61:a7:c4:16:ad:36: c3:99:15:ba:72:78:38:eb:f5:a8:94:ee:c5:3b:00: 28:30:57:dd:87:dd:18:82:a0:22:93:02:cb:e2:e9: fb:65:74:46:70:a9:a4:9e:2d:46:d6:58:25:70:86: 3d:38:cd:00:b4:71:6c:6b:1d:8f:fa:82:db:98:89: 77:93:09:95:ac:5c:0a:7c:6e:9c:c2:e7:18:e0:02: 04:2a:c2:5d:4f:48:08:09:e8:5e:30:ee:56:e6:10: 9c:af:9a:e3:6d:57:aa:25:3d:4f:2d:70:dc:e6:aa: f8:47:54:61:a0:af:4d:d1:5a:d6:7c:6a:e8:56:ed: 0d:82:2f:f3:d6:11:8d:dd:bf:db:d3:66:d5:3c:0a: a8:ee:34:d0:9f:80:7e:6f:45:a0:11:62:f6:10:5a: 92:d5:e4:4f:7e:41:fc:ef:ae:75:6c:ac:e3:c1:5a: 05:2b:0b:24:a4:d1:30:fd:8d:4d:3c:3e:c2:f1:48: ee:3c:02:83:e1:40:df:0b:76:c7:e4:f0:0a:c8:4e: 87:7f:c3:85:3b:19:13:a3:5b:b5:16:6c:56:46:37: 9b:bc:48:cc:db:f8:8c:94:c0:9a:ba:29:2b:53:17: ad:d9:e9:87:a2:de:78:9d:f8:b7:a5:02:f4:ee:50: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7E:94:43:65:5B:E5:26:11:05:39:4C:FA:3E:1D:DD:61:B3:A5:17 X509v3 Authority Key Identifier: keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d4:0d:f4:be:28:1f:52:13:f8:f4:c9:01:52:ee:1a:3e:7d: 0c:89:bf:98:6a:d5:c5:16:0f:2f:12:e6:94:34:6b:4f:4b:69: ab:39:ee:8a:bb:b1:01:a3:18:ff:65:7b:84:e7:24:fd:ec:5a: 4e:8f:05:82:fe:f0:a1:d3:f0:13:bb:7e:84:f8:80:0a:44:db: 67:6f:65:49:0a:05:ad:b3:6f:57:de:88:7f:88:dd:e8:27:45: ca:5b:00:e2:0f:a6:d6:dc:82:c8:63:6a:49:24:f1:26:d1:af: aa:55:e4:02:8f:47:04:4a:8e:50:b1:48:4e:5e:e8:92:7f:1b: 15:8b:87:04:6d:51:c2:04:f9:9b:23:ed:1a:d1:8b:ec:0e:a3: c9:3c:c5:7f:06:e5:bf:77:3d:a0:26:06:61:db:94:c6:04:bb: 07:86:dd:cf:a3:b8:5d:06:65:43:3b:02:ed:93:00:3a:ce:5d: 06:8a:0a:9b:54:53:af:77:7e:a4:34:68:80:3e:6e:41:ec:c8: 53:35:60:5d:8e:bf:fb:c9:07:af:c5:a3:7d:fc:2a:ee:d7:d4: 25:8c:84:1d:01:1a:6d:e5:20:ae:ce:0e:d7:fe:fc:ac:3a:c4: ab:94:47:d2:b5:6e:b0:c0:86:86:f4:df:47:fd:95:e9:33:78: e6:8f:66:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisDeguWqd+8kMMk0ctuhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5 NTU0NmQwHhcNMjUxMjI4MDIwMTE0WhcNMjUxMjI5MDIwMTE0WjAzMTEwLwYDVQQD EyhhNDdlOTQ0MzY1NWJlNTI2MTEwNTM5NGNmYTNlMWRkZDYxYjNhNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz66AzWWSfhhp8QWrTbDmRW6cng4 6/WolO7FOwAoMFfdh90YgqAikwLL4un7ZXRGcKmkni1G1lglcIY9OM0AtHFsax2P +oLbmIl3kwmVrFwKfG6cwucY4AIEKsJdT0gICeheMO5W5hCcr5rjbVeqJT1PLXDc 5qr4R1RhoK9N0VrWfGroVu0Ngi/z1hGN3b/b02bVPAqo7jTQn4B+b0WgEWL2EFqS 1eRPfkH87651bKzjwVoFKwskpNEw/Y1NPD7C8UjuPAKD4UDfC3bH5PAKyE6Hf8OF OxkTo1u1FmxWRjebvEjM2/iMlMCauikrUxet2emHot54nfi3pQL07lAb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR+lENlW+UmEQU5TPo+Hd1hs6UXMB8GA1UdIwQY MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNQN9L4o H1IT+PTJAVLuGj59DIm/mGrVxRYPLxLmlDRrT0tpqznuiruxAaMY/2V7hOck/exa To8Fgv7wodPwE7t+hPiACkTbZ29lSQoFrbNvV96If4jd6CdFylsA4g+m1tyCyGNq SSTxJtGvqlXkAo9HBEqOULFITl7okn8bFYuHBG1RwgT5myPtGtGL7A6jyTzFfwbl v3c9oCYGYduUxgS7B4bdz6O4XQZlQzsC7ZMAOs5dBooKm1RTr3d+pDRogD5uQezI UzVgXY6/+8kHr8Wjffwq7tfUJYyEHQEabeUgrs4O1/78rDrEq5RH0rVusMCGhvTf R/2V6TN45o9mhA== -----END CERTIFICATE-----Generated at Sun Dec 28 07:30:01 2025 by rpki-client