This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json) Hash identifier: /Ema6NyHDipI+e3xMCl5dbN8nt/RoXyxpxIAN2lIWpk= Subject key identifier: 79:ED:9B:A5:C2:59:EB:5F:2E:64:FE:70:D2:C1:86:A5:D8:6F:31:DB Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Certificate serial: 019B2EF97F435425ED52A6EC52433ED5F476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft Manifest number: 0E9F Signing time: Thu 18 Dec 2025 01:01:01 +0000 Manifest this update: Thu 18 Dec 2025 01:01:01 +0000 Manifest next update: Fri 19 Dec 2025 01:01:01 +0000 Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: wPMig39Bq7TnSDPCjQWd7bZlmVTHLqf5cgPbAcMeH5M=) 2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:7f:43:54:25:ed:52:a6:ec:52:43:3e:d5:f4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Validity Not Before: Dec 18 01:01:01 2025 GMT Not After : Dec 19 01:01:01 2025 GMT Subject: CN=79ed9ba5c259eb5f2e64fe70d2c186a5d86f31db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:0c:76:31:72:6e:e8:cb:f8:6d:2e:dd:fa: 8f:1a:eb:b4:6a:d7:86:ab:7b:01:0b:d9:31:0f:6a: e3:f6:62:17:58:92:ee:f7:18:71:d6:4c:5c:70:b0: 69:2d:af:86:0d:1e:74:69:03:bd:bb:2c:6e:b8:c6: 4e:d4:ee:eb:15:19:22:8d:84:6a:9d:dc:6b:e0:2e: c2:92:e7:11:d3:9e:2e:5a:7f:82:ec:2b:e1:05:a6: 62:79:34:74:15:05:a4:e5:4f:a9:7a:7d:11:d3:a8: e2:85:89:8b:0e:32:67:be:5c:e9:df:5b:85:a3:df: c6:5c:60:6e:18:08:2c:3d:a0:10:3d:97:be:bb:e2: b9:f6:16:0d:e6:4e:db:c4:e7:68:48:8a:8b:43:5e: 20:fa:2c:64:74:a1:9f:91:f4:76:b6:0a:a1:3e:3a: 49:93:33:07:5b:ef:bf:99:c7:1a:f3:2b:c0:ef:0b: 2f:b6:10:99:2e:f6:12:91:ab:75:39:28:21:d4:cf: b4:09:9a:56:f2:94:02:f3:64:fe:66:d0:7a:67:8a: bf:92:98:40:6a:8d:a6:eb:ef:57:e2:3d:c9:3c:27: 02:f1:ba:71:58:4c:a6:07:52:05:ef:2e:9d:ac:9f: dc:02:f3:21:d7:64:c5:2f:c1:f7:38:60:ba:5e:bf: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:ED:9B:A5:C2:59:EB:5F:2E:64:FE:70:D2:C1:86:A5:D8:6F:31:DB X509v3 Authority Key Identifier: keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:f3:07:d0:bc:9c:40:26:57:48:79:94:f2:68:77:c1:e2: df:fb:96:41:ee:6e:09:7b:53:bf:08:8b:ff:9e:2f:c6:73:8e: e4:b1:f3:f5:be:53:ea:b6:89:fc:d7:b4:41:93:34:98:7c:7c: b3:18:0f:2a:8f:23:2b:26:f9:94:50:4d:71:82:d4:cf:f2:4e: 08:90:ea:1c:3a:90:81:b0:b2:1d:61:11:1d:02:5a:06:da:bf: c0:77:43:d3:c6:94:fe:36:29:14:55:d7:b3:83:ee:f9:f8:28: 6d:d7:95:62:f9:6a:db:99:e8:98:8a:a3:78:04:93:cc:f0:59: 3d:72:eb:0b:62:29:f9:07:f8:fe:90:7b:f0:37:16:b4:19:99: 4f:86:db:27:70:d5:6e:e1:3c:93:f7:d1:f2:82:91:82:91:1c: 8c:43:93:ca:75:40:11:20:41:4c:bc:62:80:b8:83:ae:60:ce: 65:ef:b9:0f:c7:62:b8:07:76:3e:18:87:6c:2a:14:5e:82:35: 78:17:f9:ca:2c:7c:9c:ea:29:82:b9:e2:91:29:cf:bd:e4:9e: ff:a8:3e:04:d4:ac:66:e6:4e:79:f4:30:a6:ca:59:4f:3c:93: 99:2f:18:39:ba:8e:62:bc:e2:1f:4d:fc:40:be:e8:de:f8:02: bc:66:1a:25 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsu+X9DVCXtUqbsUkM+1fR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWY2NWUxYmU0MmE2NWI0OTRjZjI2NDJhNGRkOGUzMjhk MGY5Y2UwHhcNMjUxMjE4MDEwMTAxWhcNMjUxMjE5MDEwMTAxWjAzMTEwLwYDVQQD Eyg3OWVkOWJhNWMyNTllYjVmMmU2NGZlNzBkMmMxODZhNWQ4NmYzMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjwMdjFybujL+G0u3fqPGuu0ateG q3sBC9kxD2rj9mIXWJLu9xhx1kxccLBpLa+GDR50aQO9uyxuuMZO1O7rFRkijYRq ndxr4C7CkucR054uWn+C7CvhBaZieTR0FQWk5U+pen0R06jihYmLDjJnvlzp31uF o9/GXGBuGAgsPaAQPZe+u+K59hYN5k7bxOdoSIqLQ14g+ixkdKGfkfR2tgqhPjpJ kzMHW++/mcca8yvA7wsvthCZLvYSkat1OSgh1M+0CZpW8pQC82T+ZtB6Z4q/kphA ao2m6+9X4j3JPCcC8bpxWEymB1IF7y6drJ/cAvMh12TFL8H3OGC6Xr8xeQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHntm6XCWetfLmT+cNLBhqXYbzHbMB8GA1UdIwQY MBaAFPmfZeG+QqZbSUzyZCpN2OMo0PnOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aOWw0YjVDcGx0SlRQSmtLazNZNHlqUS1jNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1 LTU0ZDE2MjI5OGZmZC8xLzEtWjlsNGI1Q3BsdEpUUEprS2szWTR5alEtYzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I2LzZkZjhiYS1kNGNiLTQ3MDUtYmY1NS01NGQxNjIyOThm ZmQvMS8xLVo5bDRiNUNwbHRKVFBKa0trM1k0eWpRLWM0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfzz B9C8nEAmV0h5lPJod8Hi3/uWQe5uCXtTvwiL/54vxnOO5LHz9b5T6raJ/Ne0QZM0 mHx8sxgPKo8jKyb5lFBNcYLUz/JOCJDqHDqQgbCyHWERHQJaBtq/wHdD08aU/jYp FFXXs4Pu+fgobdeVYvlq25nomIqjeASTzPBZPXLrC2Ip+Qf4/pB78DcWtBmZT4bb J3DVbuE8k/fR8oKRgpEcjEOTynVAESBBTLxigLiDrmDOZe+5D8diuAd2PhiHbCoU XoI1eBf5yix8nOopgrnikSnPveSe/6g+BNSsZuZOefQwpspZTzyTmS8YObqOYrzi H038QL7o3vgCvGYaJQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:53:49 2025 by rpki-client