This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json) Hash identifier: eMck12nI66tc72ed39NVgogVelPX2gmxR3VXoFMumkc= Subject key identifier: 73:39:AE:A8:C7:C6:E2:BD:65:DD:AF:93:3F:12:42:4B:D3:D9:6C:B7 Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B3EA3A60ED8BB1A6157E9776ECD1260FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft Manifest number: 17B8 Signing time: Sun 21 Dec 2025 02:01:10 +0000 Manifest this update: Sun 21 Dec 2025 02:01:10 +0000 Manifest next update: Mon 22 Dec 2025 02:01:10 +0000 Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: 236i1VIZZR9che06g04SibLwcE/dH8qu70/J76meBS8=) 2: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=) 3: KOSFefQ82yRsHMP6xQC1amzxZ5A.roa (hash: PbOvMYy+aS17nQQCkPtiW0Swv+8ZrIMSdL3ZQAHYmIQ=) 4: U4B8gIRkl6vMFpf6uf4FiRg-PGU.roa (hash: xjlWzszBjbkzgZlr1n6anraY55j54PVbdFl2R0E6OSc=) 5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a6:0e:d8:bb:1a:61:57:e9:77:6e:cd:12:60:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Dec 21 02:01:10 2025 GMT Not After : Dec 22 02:01:10 2025 GMT Subject: CN=7339aea8c7c6e2bd65ddaf933f12424bd3d96cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:48:5f:1c:67:06:8d:2c:b3:71:e7:e0:1c: 42:fa:da:3d:6c:65:38:78:04:99:2c:f9:65:d3:9d: d6:50:fd:0a:56:9d:01:d4:1f:ee:d9:f2:f8:03:55: e5:f2:27:b8:0e:e2:b2:c4:eb:64:53:d9:c3:eb:0f: 59:8c:a4:cd:39:37:ae:de:b2:8d:32:a7:8c:25:02: 06:5e:67:1f:21:c6:07:8e:c6:66:b9:f1:aa:b5:8b: ab:59:f1:67:fe:3c:b7:01:ec:0e:3d:51:bb:40:8d: c2:28:f2:ec:52:90:20:1f:bf:8c:7c:3f:a2:fd:97: 93:76:ab:78:8a:62:6e:f9:9d:ae:fe:af:03:ea:22: d6:a6:62:48:d1:5a:5f:b1:ba:e0:4e:39:5b:ab:9e: 12:89:73:12:37:21:e9:e7:8a:a8:c4:a8:5e:e6:d9: 18:d9:06:d0:04:f0:89:ec:41:16:fd:84:34:47:fb: 02:0d:0e:2b:5e:85:07:dd:a2:5f:31:ba:b6:50:46: c0:d6:1f:09:ee:9b:ef:8d:9b:28:7f:ee:77:c3:0e: 0c:7e:e7:80:60:43:1a:4c:cf:6b:5a:07:d2:b9:47: bd:4c:de:2f:c1:d1:22:9e:18:a6:22:70:f2:2b:a9: d0:bb:19:d4:c7:77:41:61:7d:1e:35:44:c8:c5:3a: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:AE:A8:C7:C6:E2:BD:65:DD:AF:93:3F:12:42:4B:D3:D9:6C:B7 X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:0f:0d:c1:ac:e7:9b:78:38:26:20:9f:71:d5:96:c6:93: 07:5a:ee:cc:a4:8e:38:c9:0c:5e:19:ab:bc:5d:f5:c2:b1:81: f6:47:b3:6d:75:fc:f2:a8:37:19:fa:94:aa:cf:cf:13:1c:d1: b6:f8:33:55:c4:3b:47:2a:63:b4:35:da:53:be:f0:b6:b6:49: 14:71:16:3c:05:c0:f3:54:63:74:6c:9c:55:c8:db:1a:5d:fa: d9:a2:b6:89:15:40:6d:f3:86:f9:21:8d:72:24:f7:d9:21:99: ae:d3:c7:87:40:fc:97:f7:4b:53:fc:61:1d:5b:83:e8:1a:74: 48:46:e4:ba:93:d5:93:4d:fd:76:a4:c9:fb:29:6c:c3:ce:d5: 74:4d:c8:05:85:35:23:de:58:89:ae:ef:cb:35:60:68:97:10: 93:c5:ff:4c:c5:63:3a:38:fb:48:c7:94:f8:ff:22:13:f1:b0: 32:9b:d9:40:39:63:a3:e4:76:84:6d:37:2b:17:6c:93:e8:59: 6d:e6:47:47:2f:a6:e4:48:c4:a6:37:07:a8:c0:7c:a5:17:64: dc:7b:3e:86:5c:b3:a9:e5:0f:14:7c:24:1a:44:49:12:d0:1d: cf:81:44:f4:26:b3:18:92:b2:f6:88:09:73:bd:ec:45:1f:1a: e3:cb:ca:27 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+o6YO2LsaYVfpd27NEmD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjUxMjIxMDIwMTEwWhcNMjUxMjIyMDIwMTEwWjAzMTEwLwYDVQQD Eyg3MzM5YWVhOGM3YzZlMmJkNjVkZGFmOTMzZjEyNDI0YmQzZDk2Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY5IXxxnBo0ss3Hn4BxC+to9bGU4 eASZLPll053WUP0KVp0B1B/u2fL4A1Xl8ie4DuKyxOtkU9nD6w9ZjKTNOTeu3rKN MqeMJQIGXmcfIcYHjsZmufGqtYurWfFn/jy3AewOPVG7QI3CKPLsUpAgH7+MfD+i /ZeTdqt4imJu+Z2u/q8D6iLWpmJI0VpfsbrgTjlbq54SiXMSNyHp54qoxKhe5tkY 2QbQBPCJ7EEW/YQ0R/sCDQ4rXoUH3aJfMbq2UEbA1h8J7pvvjZsof+53ww4MfueA YEMaTM9rWgfSuUe9TN4vwdEinhimInDyK6nQuxnUx3dBYX0eNUTIxTobvQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHM5rqjHxuK9Zd2vkz8SQkvT2Wy3MB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRkP DcGs55t4OCYgn3HVlsaTB1ruzKSOOMkMXhmrvF31wrGB9kezbXX88qg3GfqUqs/P ExzRtvgzVcQ7RypjtDXaU77wtrZJFHEWPAXA81RjdGycVcjbGl362aK2iRVAbfOG +SGNciT32SGZrtPHh0D8l/dLU/xhHVuD6Bp0SEbkupPVk039dqTJ+ylsw87VdE3I BYU1I95Yia7vyzVgaJcQk8X/TMVjOjj7SMeU+P8iE/GwMpvZQDljo+R2hG03Kxds k+hZbeZHRy+m5EjEpjcHqMB8pRdk3Hs+hlyzqeUPFHwkGkRJEtAdz4FE9CazGJKy 9ogJc73sRR8a48vKJw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:38 2025 by rpki-client