This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json) Hash identifier: cyJwdG3Fs2/gtrrh3lJTIPYKdtvhldqIsWhw0hzU7yE= Subject key identifier: 05:22:8F:7E:82:EF:75:C1:8D:31:1A:6C:E6:EC:83:A2:D0:9B:8A:52 Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Certificate serial: 019B405B3F4E31647C40778211F8C08F753B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft Manifest number: 0735 Signing time: Sun 21 Dec 2025 10:01:20 +0000 Manifest this update: Sun 21 Dec 2025 10:01:20 +0000 Manifest next update: Mon 22 Dec 2025 10:01:20 +0000 Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: NoimSlPDQjnstN6j2gxauqtIZF/NbRC4hYgSh6POeR8=) 2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:3f:4e:31:64:7c:40:77:82:11:f8:c0:8f:75:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Validity Not Before: Dec 21 10:01:20 2025 GMT Not After : Dec 22 10:01:20 2025 GMT Subject: CN=05228f7e82ef75c18d311a6ce6ec83a2d09b8a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:29:2e:e4:17:42:7a:5b:8b:25:97:0c:2f: 92:f7:93:2d:ee:fc:cb:40:5d:3a:20:93:83:5c:23: 6b:a3:3b:a2:5a:f6:81:58:f5:44:2e:c5:73:76:5c: 33:cd:ce:6b:20:c4:ff:78:92:4a:bc:d7:3c:02:39: 68:8b:d7:f1:3a:87:45:78:6c:ea:a1:39:37:94:4b: f5:af:0f:29:de:78:8b:69:78:32:fe:a5:09:c5:09: b6:ac:98:98:80:35:0e:dc:49:06:7c:5c:b0:8d:3b: 08:84:4a:a2:b0:bc:69:9b:c7:c2:7e:0a:96:d9:60: 24:22:48:f6:f0:92:b7:ee:14:99:25:7d:61:3a:d4: 14:e0:ea:15:a1:78:8a:30:bf:7c:63:93:79:de:88: 16:4b:13:0b:d2:68:4f:3e:93:92:a5:59:ab:43:f7: ab:f2:0e:c6:dc:3f:12:eb:99:4e:7f:d0:31:30:4e: 4f:28:a9:c1:f8:28:86:87:a7:e1:95:c2:fa:ea:16: 77:4a:d1:d7:c4:fd:f9:b6:87:70:82:24:e7:09:05: a3:f7:e4:04:17:80:df:38:3d:2c:4f:6a:ee:69:2b: 36:15:a7:2c:64:df:6a:b3:90:51:91:05:0f:87:41: d5:6c:c9:42:45:df:af:59:4b:97:bf:b6:33:64:dd: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:22:8F:7E:82:EF:75:C1:8D:31:1A:6C:E6:EC:83:A2:D0:9B:8A:52 X509v3 Authority Key Identifier: keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f9:cf:9c:5d:65:91:38:03:3a:6c:0e:22:dd:5a:f4:85:b9: 09:13:64:74:ea:2e:0d:fa:11:1c:95:20:19:13:31:90:eb:be: e6:42:f7:33:f3:ce:1e:c6:53:8a:f4:9a:1f:39:69:76:4c:22: 05:15:a4:1b:b5:51:ed:a8:7e:91:76:20:9b:92:38:2e:3d:7c: 2f:1b:00:ea:0b:ac:02:75:48:dc:06:c7:03:b6:58:a2:e3:cd: f4:92:d0:bf:cf:30:68:ec:27:ab:5f:70:2a:7c:b2:16:67:c4: 3d:9a:47:19:6f:fd:cc:1b:ee:b6:f8:4d:bc:d3:01:0d:96:d1: b6:49:c1:f1:04:c9:6f:72:f1:08:60:09:6e:07:6c:dd:4e:99: 44:70:74:37:15:b9:c7:f5:3d:e8:19:59:c7:6c:a0:13:33:c5: bf:2f:53:c4:c5:15:f8:c7:6d:13:23:58:98:86:8e:e6:33:c7: 3e:f8:25:0f:11:c7:7d:7a:4c:53:2e:1d:95:d2:e2:4f:88:53: 1d:cc:7c:d6:10:89:ed:1d:be:6d:0a:67:28:35:04:dd:d0:ff: 30:8e:f8:6e:e6:36:2f:b5:00:b0:ae:44:9e:76:28:a2:d1:b3: ed:7c:a0:56:dc:bb:e9:f9:6b:68:94:d4:2d:d5:9d:44:31:6d: 28:c1:de:94 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAWz9OMWR8QHeCEfjAj3U7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm YTBjZWIwHhcNMjUxMjIxMTAwMTIwWhcNMjUxMjIyMTAwMTIwWjAzMTEwLwYDVQQD EygwNTIyOGY3ZTgyZWY3NWMxOGQzMTFhNmNlNmVjODNhMmQwOWI4YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UopLuQXQnpbiyWXDC+S95Mt7vzL QF06IJODXCNrozuiWvaBWPVELsVzdlwzzc5rIMT/eJJKvNc8Ajloi9fxOodFeGzq oTk3lEv1rw8p3niLaXgy/qUJxQm2rJiYgDUO3EkGfFywjTsIhEqisLxpm8fCfgqW 2WAkIkj28JK37hSZJX1hOtQU4OoVoXiKML98Y5N53ogWSxML0mhPPpOSpVmrQ/er 8g7G3D8S65lOf9AxME5PKKnB+CiGh6fhlcL66hZ3StHXxP35todwgiTnCQWj9+QE F4DfOD0sT2ruaSs2FacsZN9qs5BRkQUPh0HVbMlCRd+vWUuXv7YzZN1y/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAUij36C73XBjTEabObsg6LQm4pSMB8GA1UdIwQY MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPnP nF1lkTgDOmwOIt1a9IW5CRNkdOouDfoRHJUgGRMxkOu+5kL3M/POHsZTivSaHzlp dkwiBRWkG7VR7ah+kXYgm5I4Lj18LxsA6gusAnVI3AbHA7ZYouPN9JLQv88waOwn q19wKnyyFmfEPZpHGW/9zBvutvhNvNMBDZbRtknB8QTJb3LxCGAJbgds3U6ZRHB0 NxW5x/U96BlZx2ygEzPFvy9TxMUV+MdtEyNYmIaO5jPHPvglDxHHfXpMUy4dldLi T4hTHcx81hCJ7R2+bQpnKDUE3dD/MI74buY2L7UAsK5EnnYootGz7XygVty76flr aJTULdWdRDFtKMHelA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:39 2025 by rpki-client