This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft File: 1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json) Hash identifier: P0SO/5smbKFyHsOMKHxNsLKMxj638ksAAfXLB7gAI0g= Subject key identifier: 8A:25:FC:A9:34:60:70:1F:8C:1F:0B:9A:1C:E7:93:CF:20:BD:51:6B Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 Certificate issuer: /CN=d55d0f8888edc920868c661622f643744e6e56c8 Certificate serial: 019B54BD74D8BE5E1EF4A1C4AD8AA38435B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft Manifest number: 07FC Signing time: Thu 25 Dec 2025 09:01:00 +0000 Manifest this update: Thu 25 Dec 2025 09:01:00 +0000 Manifest next update: Fri 26 Dec 2025 09:01:00 +0000 Files and hashes: 1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: 6x3MK5zuVyvjzrcktEwg8sI8iF/DhuwIMqJrJnlrDHo=) 2: A4__EnOrPLl7kNPioZRAoADCUG8.roa (hash: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:74:d8:be:5e:1e:f4:a1:c4:ad:8a:a3:84:35:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8 Validity Not Before: Dec 25 09:01:00 2025 GMT Not After : Dec 26 09:01:00 2025 GMT Subject: CN=8a25fca93460701f8c1f0b9a1ce793cf20bd516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:77:c3:9f:71:db:cf:ac:02:bd:51:a1:a1: 53:1c:af:78:47:60:23:4d:6f:86:b1:43:9e:44:4f: 20:c1:cc:a0:2e:e4:3c:47:42:0d:85:80:70:b8:ff: f1:fc:36:4c:49:71:3f:e5:21:7e:2f:84:2d:a9:53: 07:54:23:9d:62:ed:7d:36:e7:51:84:9c:f0:23:cc: d0:9f:a9:34:03:54:a6:f0:21:9f:53:4d:c1:d2:7d: 67:05:42:e6:cc:06:a3:06:5d:d6:fa:b8:a9:9e:f0: c6:54:52:1a:05:db:56:fc:ba:67:a1:2c:40:2d:ce: 9d:84:73:9f:38:20:85:53:f8:cb:0d:1e:de:83:9f: f2:c4:fa:76:f3:6c:88:32:09:11:55:59:e6:a8:b0: 0c:fe:1b:ea:42:1a:d7:4f:51:04:80:1b:65:a3:ad: 77:68:78:d8:e0:e6:35:38:1f:34:e5:2d:8d:35:b0: 43:31:62:f4:5a:04:4c:7f:9c:42:99:c7:f3:69:59: 0c:81:ef:c5:f8:95:5a:fb:dd:24:2b:33:6e:7c:17: d9:f1:55:42:f7:14:8d:33:f4:db:38:3d:af:2e:90: 9d:a1:6b:fe:57:ab:6e:af:48:95:92:fa:ce:1e:28: a0:09:de:38:a1:2f:a7:63:9d:a1:3a:82:2a:a3:4a: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:FC:A9:34:60:70:1F:8C:1F:0B:9A:1C:E7:93:CF:20:BD:51:6B X509v3 Authority Key Identifier: keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:23:0b:f1:bd:8a:af:26:01:b2:31:da:b7:f9:49:09:b6:3c: ca:f7:93:4e:de:ff:46:2c:b9:8d:fc:37:12:33:97:1b:fb:c1: a2:35:6d:47:6b:9e:e0:49:25:0e:1e:13:88:52:63:3b:6e:5a: 15:35:f5:55:25:27:47:8d:f1:21:06:01:46:e4:a0:51:f2:86: b2:b9:8f:73:d8:71:9c:56:18:07:41:7a:f0:80:18:d3:0e:04: 60:fe:97:7c:e1:8e:4f:ab:30:7d:35:76:18:3a:c1:a7:4a:4d: 64:a4:33:81:2b:50:2f:56:68:de:48:d3:27:8e:bc:73:c6:2d: bf:49:88:6b:f3:36:9e:d8:74:f5:aa:98:65:a1:7f:c2:66:d2: 68:4b:62:a4:fc:56:3e:40:f8:5a:83:6d:83:9a:03:d5:cf:47: fe:f1:86:f8:b7:1d:ab:e4:88:b4:8d:7d:88:e6:46:72:f3:a5: 70:4c:6e:48:4c:5a:71:de:a5:79:55:64:27:32:c8:ca:6d:91: b9:d3:8b:63:4f:57:3e:b3:d3:27:be:0f:39:b1:0d:4f:77:c8: 4d:94:a0:b0:ba:23:ff:cd:cf:cd:19:9f:e8:39:6c:45:53:d1: b8:c2:94:c6:b1:6f:12:4f:fe:48:b4:0f:5f:4c:17:e6:96:b1: ee:59:5a:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvXTYvl4e9KHErYqjhDWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NWQwZjg4ODhlZGM5MjA4NjhjNjYxNjIyZjY0Mzc0NGU2 ZTU2YzgwHhcNMjUxMjI1MDkwMTAwWhcNMjUxMjI2MDkwMTAwWjAzMTEwLwYDVQQD Eyg4YTI1ZmNhOTM0NjA3MDFmOGMxZjBiOWExY2U3OTNjZjIwYmQ1MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArox3w59x28+sAr1RoaFTHK94R2Aj TW+GsUOeRE8gwcygLuQ8R0INhYBwuP/x/DZMSXE/5SF+L4QtqVMHVCOdYu19NudR hJzwI8zQn6k0A1Sm8CGfU03B0n1nBULmzAajBl3W+ripnvDGVFIaBdtW/LpnoSxA Lc6dhHOfOCCFU/jLDR7eg5/yxPp282yIMgkRVVnmqLAM/hvqQhrXT1EEgBtlo613 aHjY4OY1OB805S2NNbBDMWL0WgRMf5xCmcfzaVkMge/F+JVa+90kKzNufBfZ8VVC 9xSNM/TbOD2vLpCdoWv+V6tur0iVkvrOHiigCd44oS+nY52hOoIqo0pllQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIol/Kk0YHAfjB8Lmhznk88gvVFrMB8GA1UdIwQY MBaAFNVdD4iI7ckghoxmFiL2Q3ROblbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgt ZGU0MGRhYTI2ODRkLzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgtZGU0MGRhYTI2ODRk LzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSML8b2K ryYBsjHat/lJCbY8yveTTt7/Riy5jfw3EjOXG/vBojVtR2ue4EklDh4TiFJjO25a FTX1VSUnR43xIQYBRuSgUfKGsrmPc9hxnFYYB0F68IAY0w4EYP6XfOGOT6swfTV2 GDrBp0pNZKQzgStQL1Zo3kjTJ468c8Ytv0mIa/M2nth09aqYZaF/wmbSaEtipPxW PkD4WoNtg5oD1c9H/vGG+Lcdq+SItI19iOZGcvOlcExuSExacd6leVVkJzLIym2R udOLY09XPrPTJ74PObENT3fITZSgsLoj/83PzRmf6DlsRVPRuMKUxrFvEk/+SLQP X0wX5pax7llaQg== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:38 2025 by rpki-client