This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json) Hash identifier: 0rYPa2xcqi2yJbhsB1y+fMjBo6kTDzmqiYnWWbXwnmU= Subject key identifier: F6:D3:D7:56:A4:C2:3E:E7:DF:DA:D5:88:C6:98:F7:B4:7E:38:04:D1 Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Certificate serial: 019B6E46082C2186E636EB9F906745E5F940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft Manifest number: 114D Signing time: Tue 30 Dec 2025 08:00:41 +0000 Manifest this update: Tue 30 Dec 2025 08:00:41 +0000 Manifest next update: Wed 31 Dec 2025 08:00:41 +0000 Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: 5wLDo+UYU/4ZxhCxAnLDNBV/d4xSlrFwzO+59y+7dHM=) 2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:46:08:2c:21:86:e6:36:eb:9f:90:67:45:e5:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Validity Not Before: Dec 30 08:00:41 2025 GMT Not After : Dec 31 08:00:41 2025 GMT Subject: CN=f6d3d756a4c23ee7dfdad588c698f7b47e3804d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:13:ef:4e:4e:0e:2c:68:eb:ae:3f:dc:2b:07: f5:1d:8c:2a:09:60:0e:d7:5c:cf:75:2a:c3:07:ec: cd:0c:34:f1:5f:79:d8:91:07:e1:25:2f:9d:53:aa: 30:92:45:5b:d7:3b:5f:b9:e7:56:0a:07:4f:87:3f: 6f:98:dc:f1:bc:78:2d:69:1b:40:c1:94:87:ef:93: f0:05:10:f7:21:2d:d5:59:b0:95:50:af:1f:fa:4a: 1a:00:47:df:26:aa:b4:ee:5f:29:92:44:7f:ef:98: 74:df:4f:b6:ed:84:d2:35:81:98:80:91:af:4c:e5: 46:4d:81:3e:f3:83:88:5d:4b:b4:c1:56:1a:5c:2c: 8a:88:70:9a:24:5d:b1:b8:75:28:99:80:da:b6:a5: 21:6b:7f:30:00:20:8e:b2:b4:19:94:0a:cd:ad:75: b3:7d:18:86:cf:3e:f7:0e:df:72:3f:ce:fd:a8:d4: 19:0f:05:33:4d:bf:82:39:57:8d:95:c9:f2:56:5a: 2d:a4:47:5a:66:90:2b:ea:94:99:05:76:24:d1:76: f1:17:21:ba:6f:86:19:c6:d5:25:34:5c:b1:f0:41: 2e:5e:cb:78:7f:23:b1:f9:22:39:cd:a2:e6:55:d3: 72:70:3d:ce:82:de:be:3d:10:56:3f:b0:1d:dd:a7: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D3:D7:56:A4:C2:3E:E7:DF:DA:D5:88:C6:98:F7:B4:7E:38:04:D1 X509v3 Authority Key Identifier: keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:03:84:a4:8e:f5:c2:79:71:d4:41:03:1e:9e:5c:48:2d:77: 46:d2:67:1d:d6:03:2f:37:cb:63:77:c8:7b:37:6a:c2:15:6d: 2e:ef:f6:7d:ab:77:51:af:1b:93:7b:14:00:29:d2:f7:56:85: 60:10:ed:c1:53:c9:f6:b8:8d:03:93:d2:9d:1b:7b:bf:59:5c: 28:9e:57:b3:47:c9:2c:40:7b:fd:91:eb:2c:45:89:17:af:5b: 80:6b:51:83:0d:0a:52:73:31:22:2e:01:c2:86:55:c4:23:54: 97:15:d8:7e:41:02:6b:05:4f:76:94:88:85:cd:f7:c5:96:66: 45:21:ed:79:a2:00:d4:b1:cf:c3:48:01:6b:54:d7:11:19:78: bf:0c:7c:0e:b4:ef:e9:fe:71:ba:ba:b6:88:20:74:4d:66:77: a0:90:11:88:56:87:01:f5:bb:75:3c:b8:78:a8:a8:f0:4e:ca: e6:75:71:f9:64:7a:5c:f8:96:9c:66:0b:5b:7e:97:34:a3:6a: 5b:d6:e7:fc:d4:87:f5:f1:39:69:a1:5f:7a:ae:8d:e6:5f:8a: ed:7a:22:4d:f1:12:7f:8a:48:29:9d:a5:b4:9d:4b:2a:7c:ff: 04:fe:11:8c:1a:f3:8a:80:0e:ba:c2:c3:ac:08:7e:fe:83:a9: c4:f5:45:6e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtuRggsIYbmNuufkGdF5flAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1 ZTJkODAwHhcNMjUxMjMwMDgwMDQxWhcNMjUxMjMxMDgwMDQxWjAzMTEwLwYDVQQD EyhmNmQzZDc1NmE0YzIzZWU3ZGZkYWQ1ODhjNjk4ZjdiNDdlMzgwNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhPvTk4OLGjrrj/cKwf1HYwqCWAO 11zPdSrDB+zNDDTxX3nYkQfhJS+dU6owkkVb1ztfuedWCgdPhz9vmNzxvHgtaRtA wZSH75PwBRD3IS3VWbCVUK8f+koaAEffJqq07l8pkkR/75h030+27YTSNYGYgJGv TOVGTYE+84OIXUu0wVYaXCyKiHCaJF2xuHUomYDatqUha38wACCOsrQZlArNrXWz fRiGzz73Dt9yP879qNQZDwUzTb+COVeNlcnyVlotpEdaZpAr6pSZBXYk0XbxFyG6 b4YZxtUlNFyx8EEuXst4fyOx+SI5zaLmVdNycD3Ogt6+PRBWP7Ad3aeGQwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPbT11akwj7n39rViMaY97R+OATRMB8GA1UdIwQY MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2 MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgOE pI71wnlx1EEDHp5cSC13RtJnHdYDLzfLY3fIezdqwhVtLu/2fat3Ua8bk3sUACnS 91aFYBDtwVPJ9riNA5PSnRt7v1lcKJ5Xs0fJLEB7/ZHrLEWJF69bgGtRgw0KUnMx Ii4BwoZVxCNUlxXYfkECawVPdpSIhc33xZZmRSHteaIA1LHPw0gBa1TXERl4vwx8 DrTv6f5xurq2iCB0TWZ3oJARiFaHAfW7dTy4eKio8E7K5nVx+WR6XPiWnGYLW36X NKNqW9bn/NSH9fE5aaFfeq6N5l+K7XoiTfESf4pIKZ2ltJ1LKnz/BP4RjBrzioAO usLDrAh+/oOpxPVFbg== -----END CERTIFICATE-----Generated at Tue Dec 30 10:33:15 2025 by rpki-client