This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json) Hash identifier: aYD6wMBpj5PmDEBaTL74vii8AraO+pkdHuJzEWZjBhE= Subject key identifier: 24:51:49:66:D6:BF:34:C3:81:AF:90:BB:A9:04:37:96:F5:F7:2B:E3 Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B4E16B861568B19F6D03925218BFAA02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft Manifest number: 17C0 Signing time: Wed 24 Dec 2025 02:01:10 +0000 Manifest this update: Wed 24 Dec 2025 02:01:10 +0000 Manifest next update: Thu 25 Dec 2025 02:01:10 +0000 Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: nyWni6FluoCa+p4E0I6NQ5crhdbb5k61I6f4hbyOVAk=) 2: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=) 3: KOSFefQ82yRsHMP6xQC1amzxZ5A.roa (hash: PbOvMYy+aS17nQQCkPtiW0Swv+8ZrIMSdL3ZQAHYmIQ=) 4: U4B8gIRkl6vMFpf6uf4FiRg-PGU.roa (hash: xjlWzszBjbkzgZlr1n6anraY55j54PVbdFl2R0E6OSc=) 5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:b8:61:56:8b:19:f6:d0:39:25:21:8b:fa:a0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Dec 24 02:01:10 2025 GMT Not After : Dec 25 02:01:10 2025 GMT Subject: CN=24514966d6bf34c381af90bba9043796f5f72be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:c6:51:8c:f8:02:a3:51:f1:b9:91:9e:2d: e6:2e:9c:e1:1d:2b:87:3a:13:a7:43:15:d3:cc:f8: 57:57:68:9f:c7:6b:d6:9d:c9:66:1a:13:7f:f4:75: 68:0b:0e:c7:91:ff:4d:e3:d6:c6:b7:55:f3:31:32: 74:06:b0:ff:ec:1e:14:31:b9:c4:85:e5:97:49:bf: 81:47:b3:57:82:09:c6:a3:89:40:57:2f:d8:f8:41: f1:c0:e7:cc:d0:2c:41:ee:06:4b:8e:69:db:bf:6e: 13:31:27:6f:c9:72:f3:3b:1e:fb:e3:7d:dd:fc:47: 21:1a:0d:9d:38:74:e4:3b:cf:df:22:b8:22:e9:1d: 44:f5:df:fd:e5:15:2a:3e:a7:1d:62:8d:00:4e:7e: 16:d6:bc:1d:4a:4e:00:fb:26:57:1c:98:4b:20:f3: e2:aa:61:bd:af:fe:cd:20:bb:f5:d1:bf:46:f3:f7: 95:0f:55:fc:ad:61:cf:da:1b:90:07:d8:5c:01:24: 0a:d0:d0:71:73:aa:7d:f9:fa:45:f4:3d:9b:df:e5: 2c:8c:05:d1:3e:42:ac:ff:f5:51:f1:3d:a6:0a:23: 5d:07:5d:1f:c5:90:a5:df:44:7b:ab:a3:e0:cc:a2: 56:73:8c:ca:16:ba:95:56:99:eb:dc:ed:5c:59:84: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:49:66:D6:BF:34:C3:81:AF:90:BB:A9:04:37:96:F5:F7:2B:E3 X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:60:c9:64:ed:d0:5b:c7:59:db:5e:75:21:5c:8c:1f:76:22: e7:4a:41:41:49:d3:15:fc:91:16:cb:69:b8:26:3c:3c:0f:d8: b3:73:5c:7e:24:88:be:b8:33:78:ea:1b:16:40:2c:8d:ca:7e: 83:69:8a:57:91:a7:b5:fa:7a:8d:ab:56:d6:20:18:4d:45:77: 07:5e:60:24:76:c5:36:c7:9e:db:52:2e:f2:13:7c:d9:23:4f: b2:56:6e:0d:3b:77:4d:8e:37:e7:ba:90:c2:3e:77:1f:27:b0: c8:2a:67:7e:2f:16:fe:58:ac:58:6f:c8:e5:6c:38:25:02:df: 66:fe:8b:80:8a:c9:84:22:83:9f:e3:3a:c0:27:c8:91:5d:37: 27:ba:76:20:e2:1d:b4:3b:3d:90:66:6e:84:25:d6:0b:c3:55: da:35:8c:c4:d6:84:c8:16:bd:23:08:14:26:63:a3:d5:e8:44: 2c:78:39:44:64:5b:4a:64:23:23:1c:33:55:f2:8b:eb:79:15: ca:12:4e:d0:84:4b:0e:5a:6a:83:46:73:13:c2:c5:8f:d3:ca: 89:9e:e3:49:32:8d:d0:7e:76:b3:11:2d:db:db:be:04:9c:f6: 16:73:d6:1d:4f:b0:70:29:df:c2:50:18:67:f2:c0:12:13:55: 81:46:b2:56 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtOFrhhVosZ9tA5JSGL+qAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjUxMjI0MDIwMTEwWhcNMjUxMjI1MDIwMTEwWjAzMTEwLwYDVQQD EygyNDUxNDk2NmQ2YmYzNGMzODFhZjkwYmJhOTA0Mzc5NmY1ZjcyYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tTGUYz4AqNR8bmRni3mLpzhHSuH OhOnQxXTzPhXV2ifx2vWnclmGhN/9HVoCw7Hkf9N49bGt1XzMTJ0BrD/7B4UMbnE heWXSb+BR7NXggnGo4lAVy/Y+EHxwOfM0CxB7gZLjmnbv24TMSdvyXLzOx77433d /EchGg2dOHTkO8/fIrgi6R1E9d/95RUqPqcdYo0ATn4W1rwdSk4A+yZXHJhLIPPi qmG9r/7NILv10b9G8/eVD1X8rWHP2huQB9hcASQK0NBxc6p9+fpF9D2b3+UsjAXR PkKs//VR8T2mCiNdB10fxZCl30R7q6PgzKJWc4zKFrqVVpnr3O1cWYTqQQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCRRSWbWvzTDga+Qu6kEN5b19yvjMB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWDJ ZO3QW8dZ2151IVyMH3Yi50pBQUnTFfyRFstpuCY8PA/Ys3NcfiSIvrgzeOobFkAs jcp+g2mKV5Gntfp6jatW1iAYTUV3B15gJHbFNsee21Iu8hN82SNPslZuDTt3TY43 57qQwj53HyewyCpnfi8W/lisWG/I5Ww4JQLfZv6LgIrJhCKDn+M6wCfIkV03J7p2 IOIdtDs9kGZuhCXWC8NV2jWMxNaEyBa9IwgUJmOj1ehELHg5RGRbSmQjIxwzVfKL 63kVyhJO0IRLDlpqg0ZzE8LFj9PKiZ7jSTKN0H52sxEt29u+BJz2FnPWHU+wcCnf wlAYZ/LAEhNVgUayVg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:09:17 2025 by rpki-client