This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json) Hash identifier: eWHHlVlqOQI9jDci17zn4P7rYKyHsJIYQl25fRYMsig= Subject key identifier: 0E:1C:39:8F:60:12:D3:81:40:B9:58:F3:30:32:1C:1C:41:C2:F1:5C Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc Certificate serial: 019B45820A7981648986C9ABE0F7F7F196F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft Manifest number: 1524 Signing time: Mon 22 Dec 2025 10:01:48 +0000 Manifest this update: Mon 22 Dec 2025 10:01:48 +0000 Manifest next update: Tue 23 Dec 2025 10:01:48 +0000 Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: +eSWhZ3D4S/bUK8318pWgCWMlTliOg7RUWzytSu7n+8=) 2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:82:0a:79:81:64:89:86:c9:ab:e0:f7:f7:f1:96:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc Validity Not Before: Dec 22 10:01:48 2025 GMT Not After : Dec 23 10:01:48 2025 GMT Subject: CN=0e1c398f6012d38140b958f330321c1c41c2f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a1:08:9a:57:25:94:20:47:64:83:d4:77:f7: 86:c0:a2:b8:08:1c:4c:6a:ad:89:ec:f7:90:ae:e9: e7:57:f7:55:a5:8f:83:93:2b:05:67:16:90:51:9b: fd:55:a5:43:dc:e7:c2:14:b2:46:1e:d3:c0:cb:5f: 92:b0:cf:e8:3e:bf:da:33:0b:a7:c2:b6:e2:6e:c1: 69:76:64:3f:a9:98:38:8b:56:ab:d3:22:06:eb:ef: 60:f1:5e:de:47:78:77:5d:7e:fd:ac:73:17:2b:42: c6:1b:45:fc:d9:94:9c:54:45:5d:55:35:93:0f:5e: 35:44:c7:fb:93:3a:e0:e2:dd:f7:25:ad:e2:c1:73: 17:5a:d5:11:05:2a:11:ca:e6:a4:52:9d:00:82:d6: 50:fa:16:ee:f5:49:0f:97:db:c2:02:13:5f:6f:5a: 99:a1:10:c1:e4:4a:60:ab:15:40:6d:c2:87:81:cd: 9d:87:e6:ee:f4:36:d8:ed:2d:d2:9c:35:9b:c7:36: c7:f0:99:df:2f:79:b1:d3:69:7c:fc:42:31:de:ca: 50:a0:9f:8e:2e:0f:c2:cc:e9:32:75:d7:5d:2a:82: ee:9c:dc:9b:b0:5b:d0:a5:28:ce:42:3c:f4:d5:de: 41:21:b3:ed:ac:19:2a:15:49:e4:97:d7:69:e7:36: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1C:39:8F:60:12:D3:81:40:B9:58:F3:30:32:1C:1C:41:C2:F1:5C X509v3 Authority Key Identifier: keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:f6:2e:42:f4:49:02:d9:82:e0:3d:d4:18:d7:a7:fd:d6: 38:c5:df:58:2a:66:6c:20:89:86:8f:02:00:ec:87:0b:7f:b2: a2:d3:52:02:b1:2b:db:e9:1c:1a:bb:27:a7:01:c7:26:45:96: 17:18:c3:df:17:4e:f3:ec:63:74:8b:4d:51:de:36:78:be:e1: dc:e5:d0:2f:d4:6c:c6:36:1d:ca:d5:37:2e:11:53:47:1b:59: fa:d7:2c:5b:c6:8b:fb:4a:61:8a:24:76:04:c1:7a:b3:af:fe: 44:75:38:b9:55:32:05:b1:76:40:d0:28:73:5e:99:1e:93:4e: a2:4b:91:69:c2:77:33:9d:08:7b:ac:d1:ad:53:da:be:f1:b9: e5:b1:b3:cf:95:81:de:dc:1a:f7:d9:43:7b:9b:fc:96:c9:a0: 63:8c:96:be:1c:c2:9b:d0:e2:ed:1e:63:ae:63:66:0e:30:c3: 6d:49:80:70:a1:76:d3:77:91:42:12:95:22:29:ad:e1:fd:c2: 20:95:84:f7:e9:3d:d7:00:90:3f:23:68:1d:c4:f8:32:a1:ca: c6:06:e9:37:65:0d:72:38:13:ef:2b:e1:4d:a1:1f:68:4e:aa: 20:bd:21:91:66:0c:27:d7:a9:25:a5:ad:01:c4:20:bf:68:28: c3:84:58:22 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtFggp5gWSJhsmr4Pf38Zb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMzU3ZjI5MWFmNGE0YzY3NDdiM2U0ZmJlNjExODFkMzU3 YzhiY2MwHhcNMjUxMjIyMTAwMTQ4WhcNMjUxMjIzMTAwMTQ4WjAzMTEwLwYDVQQD EygwZTFjMzk4ZjYwMTJkMzgxNDBiOTU4ZjMzMDMyMWMxYzQxYzJmMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaEImlcllCBHZIPUd/eGwKK4CBxM aq2J7PeQrunnV/dVpY+DkysFZxaQUZv9VaVD3OfCFLJGHtPAy1+SsM/oPr/aMwun wrbibsFpdmQ/qZg4i1ar0yIG6+9g8V7eR3h3XX79rHMXK0LGG0X82ZScVEVdVTWT D141RMf7kzrg4t33Ja3iwXMXWtURBSoRyuakUp0AgtZQ+hbu9UkPl9vCAhNfb1qZ oRDB5EpgqxVAbcKHgc2dh+bu9DbY7S3SnDWbxzbH8JnfL3mx02l8/EIx3spQoJ+O Lg/CzOkyddddKoLunNybsFvQpSjOQjz01d5BIbPtrBkqFUnkl9dp5zYUlwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA4cOY9gEtOBQLlY8zAyHBxBwvFcMB8GA1UdIwQY MBaAFPs1fyka9KTGdHs+T75hGB01fIvMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16Vl9LUnIwcE1aMGV6NVB2bUVZSFRWOGk4dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvODEwYjBlLTEwZGUtNDNkMi05ZDI3 LTRjMjZjYTRjNzdiOC8xLzEtelZfS1JyMHBNWjBlejVQdm1FWUhUVjhpOHcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IyLzgxMGIwZS0xMGRlLTQzZDItOWQyNy00YzI2Y2E0Yzc3 YjgvMS8xLXpWX0tScjBwTVowZXo1UHZtRVlIVFY4aTh3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNX2 LkL0SQLZguA91BjXp/3WOMXfWCpmbCCJho8CAOyHC3+yotNSArEr2+kcGrsnpwHH JkWWFxjD3xdO8+xjdItNUd42eL7h3OXQL9RsxjYdytU3LhFTRxtZ+tcsW8aL+0ph iiR2BMF6s6/+RHU4uVUyBbF2QNAoc16ZHpNOokuRacJ3M50Ie6zRrVPavvG55bGz z5WB3twa99lDe5v8lsmgY4yWvhzCm9Di7R5jrmNmDjDDbUmAcKF203eRQhKVIimt 4f3CIJWE9+k91wCQPyNoHcT4MqHKxgbpN2UNcjgT7yvhTaEfaE6qIL0hkWYMJ9ep JaWtAcQgv2gow4RYIg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:47 2025 by rpki-client