This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json) Hash identifier: srJehllMkbmkpx2/xLO+rM4zcB3VgM3QDeZSlrMxG0g= Subject key identifier: F3:77:D2:26:E1:C0:13:F2:F3:07:80:D4:6A:BB:CD:1C:DE:3A:E5:88 Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Certificate serial: 019B54BD0D725BD828323C49909541EAABB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft Manifest number: 051B Signing time: Thu 25 Dec 2025 09:00:34 +0000 Manifest this update: Thu 25 Dec 2025 09:00:34 +0000 Manifest next update: Fri 26 Dec 2025 09:00:34 +0000 Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: 0MPZxgLyBPJ65F9/YsznZ7Zpb/00t1X45d5jrB33oLA=) 2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:0d:72:5b:d8:28:32:3c:49:90:95:41:ea:ab:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Validity Not Before: Dec 25 09:00:34 2025 GMT Not After : Dec 26 09:00:34 2025 GMT Subject: CN=f377d226e1c013f2f30780d46abbcd1cde3ae588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:cd:28:c2:58:69:90:06:a6:8b:b1:36:46: 33:d2:97:3f:85:72:b0:d9:25:68:ec:c4:6e:fd:fa: e4:15:d9:84:8c:5f:98:f8:b4:cb:9c:f0:b5:ab:39: 2f:bc:61:a5:bc:7a:93:8a:f3:bd:80:e3:37:49:c7: e6:5c:f9:59:45:3c:7c:18:a4:13:60:a3:df:76:2b: bc:e6:05:c8:d4:36:40:e6:93:d4:93:52:2f:19:e8: f7:1c:50:75:81:da:4a:bc:48:e1:77:c1:41:94:a1: 20:df:1e:db:cc:87:2b:2f:57:89:ff:49:c5:eb:25: 76:15:ad:c0:0a:4a:54:31:b6:de:3f:1f:74:22:d3: dc:f2:d3:6c:90:0f:94:da:cb:19:5d:a5:90:5e:0e: a2:a5:60:b0:99:29:e1:0e:51:97:cc:0f:9c:00:25: 2e:1c:2e:29:f1:4c:06:34:73:ed:44:b8:b1:d2:4d: b7:40:86:00:b7:6a:c5:62:f1:40:8a:0a:56:b3:80: c9:f8:85:eb:b6:62:65:91:2d:1f:ef:6c:35:41:18: 3c:6e:23:d7:13:6f:ef:58:4d:a9:de:95:b3:8d:a6: 1f:eb:d9:c4:54:72:f3:55:cc:8b:1b:4b:d9:62:ce: 0e:e5:9e:f1:0f:5d:71:57:b1:7a:7d:66:38:1d:24: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:77:D2:26:E1:C0:13:F2:F3:07:80:D4:6A:BB:CD:1C:DE:3A:E5:88 X509v3 Authority Key Identifier: keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c3:2a:49:80:94:23:16:ac:85:c6:fd:01:d7:64:a1:6d:ba: 08:ba:f8:cf:65:e7:2e:7b:21:50:f6:fb:f3:84:53:28:2a:76: 1b:3e:af:05:6e:c2:ce:78:e9:73:f7:52:90:84:26:c5:59:63: 7d:9c:9f:bc:5d:32:94:d7:71:a5:77:44:0f:04:8d:1e:67:ff: 9b:c3:3c:fe:a8:d1:17:2c:4e:c8:8c:11:02:30:5f:d6:ec:33: 83:66:a4:3e:4a:8f:9b:9a:67:0a:9e:82:05:6c:aa:a6:4c:d1: ae:5b:c4:65:17:ed:29:4c:5f:df:5a:ca:f7:39:4a:6a:b5:42: 78:8a:d8:c9:50:b7:56:fe:c9:88:d4:17:4e:14:41:a1:66:29: 94:89:9c:75:e9:f2:36:00:ba:ac:12:e1:ac:cb:87:61:f0:88: b4:6a:2d:60:77:9f:01:40:ec:b1:fc:03:c4:6e:55:2c:7b:f9: 4b:a6:c2:01:1a:59:0f:17:e5:a6:90:e7:4e:23:d4:0a:ab:3c: bf:ec:f1:1f:36:4b:0e:22:f3:f5:78:d1:6a:6d:ed:89:71:a3: 9d:cb:71:fe:b2:c2:8e:37:a8:dc:fd:a2:a3:90:ae:83:87:f3: 2f:e9:32:b3:ef:6d:b3:f1:98:72:55:fe:85:4b:1a:e5:99:bf: 00:d0:16:f6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtUvQ1yW9goMjxJkJVB6quyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTFjOTU2MGZhOTEwNWU2YmRjNGI0OTJlZmFiNjQxYWI1 MDgwMWQwHhcNMjUxMjI1MDkwMDM0WhcNMjUxMjI2MDkwMDM0WjAzMTEwLwYDVQQD EyhmMzc3ZDIyNmUxYzAxM2YyZjMwNzgwZDQ2YWJiY2QxY2RlM2FlNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxLNKMJYaZAGpouxNkYz0pc/hXKw 2SVo7MRu/frkFdmEjF+Y+LTLnPC1qzkvvGGlvHqTivO9gOM3ScfmXPlZRTx8GKQT YKPfdiu85gXI1DZA5pPUk1IvGej3HFB1gdpKvEjhd8FBlKEg3x7bzIcrL1eJ/0nF 6yV2Fa3ACkpUMbbePx90ItPc8tNskA+U2ssZXaWQXg6ipWCwmSnhDlGXzA+cACUu HC4p8UwGNHPtRLix0k23QIYAt2rFYvFAigpWs4DJ+IXrtmJlkS0f72w1QRg8biPX E2/vWE2p3pWzjaYf69nEVHLzVcyLG0vZYs4O5Z7xD11xV7F6fWY4HSS06wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPN30ibhwBPy8weA1Gq7zRzeOuWIMB8GA1UdIwQY MBaAFPoRyVYPqRBea9xLSS76tkGrUIAdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oSEpWZy1wRUY1cjNFdEpMdnEyUWF0UWdCMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMDBlZTZhLTVlOTUtNGUxMC04ZWU2 LTdlMjIyYmZlY2M5MC8xLzEtaEhKVmctcEVGNXIzRXRKTHZxMlFhdFFnQjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4LzAwZWU2YS01ZTk1LTRlMTAtOGVlNi03ZTIyMmJmZWNj OTAvMS8xLWhISlZnLXBFRjVyM0V0Skx2cTJRYXRRZ0IwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8Mq SYCUIxashcb9AddkoW26CLr4z2XnLnshUPb784RTKCp2Gz6vBW7Cznjpc/dSkIQm xVljfZyfvF0ylNdxpXdEDwSNHmf/m8M8/qjRFyxOyIwRAjBf1uwzg2akPkqPm5pn Cp6CBWyqpkzRrlvEZRftKUxf31rK9zlKarVCeIrYyVC3Vv7JiNQXThRBoWYplImc denyNgC6rBLhrMuHYfCItGotYHefAUDssfwDxG5VLHv5S6bCARpZDxflppDnTiPU Cqs8v+zxHzZLDiLz9XjRam3tiXGjnctx/rLCjjeo3P2io5Cug4fzL+kys+9ts/GY clX+hUsa5Zm/ANAW9g== -----END CERTIFICATE-----Generated at Thu Dec 25 13:59:08 2025 by rpki-client