This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json) Hash identifier: SAQhKxhOOOxXwyYc/8MJYoPYn7yaOpwbmoTQ6H86lyM= Subject key identifier: 49:64:B5:B9:BD:1A:6B:B4:96:E2:EF:CE:11:35:16:4D:80:42:59:D7 Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Certificate serial: 019B3A2220E998F152FB21C262B4190A461B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft Manifest number: 041A Signing time: Sat 20 Dec 2025 05:01:13 +0000 Manifest this update: Sat 20 Dec 2025 05:01:13 +0000 Manifest next update: Sun 21 Dec 2025 05:01:13 +0000 Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: +fyNMpabBw4u5EfREcXFN0BX5Yie2Yll0pcbgv2hnXM=) 2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:20:e9:98:f1:52:fb:21:c2:62:b4:19:0a:46:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Validity Not Before: Dec 20 05:01:13 2025 GMT Not After : Dec 21 05:01:13 2025 GMT Subject: CN=4964b5b9bd1a6bb496e2efce1135164d804259d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:52:2b:30:97:d9:e7:e6:2a:56:ea:7f:e0: 87:e8:8f:7c:6d:e7:d0:f2:04:e9:80:ac:8d:0a:d1: a8:7c:34:17:eb:33:99:b8:61:31:49:7f:fa:76:2a: 69:91:4d:4a:55:18:90:4f:66:65:21:ec:65:3a:ef: 41:28:cf:e2:d2:fd:66:68:d4:92:aa:b3:eb:8d:59: 24:97:9c:76:d1:ed:ac:40:68:a4:44:f6:fa:25:8f: ee:9f:11:65:f1:c9:b9:8e:6e:be:2a:e0:69:97:66: 9e:20:28:2c:bb:20:89:b4:e4:e3:37:f5:d1:99:db: 39:08:a8:d2:69:36:0e:f9:2a:e6:1d:a2:e9:e0:00: ba:dd:83:8c:4e:8d:0b:7d:e7:dc:77:7b:de:53:42: 4c:11:5a:f2:bf:e2:fb:41:97:9a:56:70:33:27:29: e6:39:6b:c7:4c:a2:cb:aa:c6:e4:2e:99:61:1e:b2: 78:64:ac:10:aa:e6:9a:b2:da:df:db:d1:cf:c0:16: a2:1c:95:09:67:5c:6f:dd:a2:99:11:10:30:f7:8c: 6a:bd:d2:5c:28:97:cf:90:fe:39:2b:b2:c0:90:f4: c6:ee:55:f3:e7:84:fe:84:20:07:7e:9f:e5:75:02: b7:1d:01:20:4a:31:15:1f:69:81:ab:f9:75:b2:dd: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:B5:B9:BD:1A:6B:B4:96:E2:EF:CE:11:35:16:4D:80:42:59:D7 X509v3 Authority Key Identifier: keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:27:32:38:2e:53:5b:60:ab:e6:20:9e:53:68:73:79:d2:93: 1b:31:02:5a:7a:8d:92:c2:a9:0d:30:07:3c:79:2a:ca:37:4b: 88:1c:3b:d8:d3:55:a6:b1:a2:37:93:5d:a1:4e:7d:83:b6:98: e0:27:d7:3e:ec:b4:97:e5:55:84:db:54:8c:ab:87:b7:b5:d4: d2:21:31:01:c3:8e:eb:43:d4:1e:ce:66:f3:72:f5:48:f0:cf: 64:a1:3d:52:d5:f7:69:b1:35:05:3c:c0:92:48:e4:c9:1d:70: 93:c3:9d:44:4e:14:cd:2d:e6:00:c8:4a:9e:a5:e1:ee:99:47: a9:45:9d:49:e4:00:cb:04:54:f2:d8:c2:42:e3:9b:b8:fd:8c: 02:2f:43:b8:58:fe:87:d1:f9:b0:4a:6e:e5:e7:ba:b7:45:2a: 61:80:77:fa:6c:5b:3f:2a:fc:51:36:f3:47:7d:c1:14:47:40: da:f5:2e:85:10:31:b5:c2:71:0a:27:9f:66:55:d4:36:ac:34: 26:03:11:87:1a:a5:d0:cb:9d:0d:a7:a7:cb:99:4a:2f:f7:22: cd:e4:9d:33:53:3d:94:18:d9:6f:19:f2:73:ff:a1:3d:18:f1: d4:53:be:23:99:a3:7f:0c:a6:29:53:a2:66:33:2f:28:98:8b: 77:1a:ba:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IiDpmPFS+yHCYrQZCkYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5 NTU0NmQwHhcNMjUxMjIwMDUwMTEzWhcNMjUxMjIxMDUwMTEzWjAzMTEwLwYDVQQD Eyg0OTY0YjViOWJkMWE2YmI0OTZlMmVmY2UxMTM1MTY0ZDgwNDI1OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcJSKzCX2efmKlbqf+CH6I98befQ 8gTpgKyNCtGofDQX6zOZuGExSX/6dippkU1KVRiQT2ZlIexlOu9BKM/i0v1maNSS qrPrjVkkl5x20e2sQGikRPb6JY/unxFl8cm5jm6+KuBpl2aeICgsuyCJtOTjN/XR mds5CKjSaTYO+SrmHaLp4AC63YOMTo0Lfefcd3veU0JMEVryv+L7QZeaVnAzJynm OWvHTKLLqsbkLplhHrJ4ZKwQquaastrf29HPwBaiHJUJZ1xv3aKZERAw94xqvdJc KJfPkP45K7LAkPTG7lXz54T+hCAHfp/ldQK3HQEgSjEVH2mBq/l1st0zaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElktbm9Gmu0luLvzhE1Fk2AQlnXMB8GA1UdIwQY MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABycyOC5T W2Cr5iCeU2hzedKTGzECWnqNksKpDTAHPHkqyjdLiBw72NNVprGiN5NdoU59g7aY 4CfXPuy0l+VVhNtUjKuHt7XU0iExAcOO60PUHs5m83L1SPDPZKE9UtX3abE1BTzA kkjkyR1wk8OdRE4UzS3mAMhKnqXh7plHqUWdSeQAywRU8tjCQuObuP2MAi9DuFj+ h9H5sEpu5ee6t0UqYYB3+mxbPyr8UTbzR33BFEdA2vUuhRAxtcJxCiefZlXUNqw0 JgMRhxql0MudDaeny5lKL/cizeSdM1M9lBjZbxnyc/+hPRjx1FO+I5mjfwymKVOi ZjMvKJiLdxq6sQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:16:14 2025 by rpki-client