This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json) Hash identifier: ozZ9MYv9UJ7IKl9j446Zjkb+mVUdB1EJs64Mlmof5ow= Subject key identifier: AD:15:76:7A:5B:31:E8:E7:DF:67:EC:B3:BE:04:5B:BB:2F:60:21:BD Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Certificate serial: 019B2FD5AAEFBC602CA6B1324409BFD34324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 05:01:30 +0000 Manifest this update: Thu 18 Dec 2025 05:01:30 +0000 Manifest next update: Fri 19 Dec 2025 05:01:30 +0000 Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: Wk1gX2l+G95aKTKq3Qf4/ILiyk/X0lXSjtBv5fPcAWI=) 2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=) 3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=) 4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:aa:ef:bc:60:2c:a6:b1:32:44:09:bf:d3:43:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Validity Not Before: Dec 18 05:01:30 2025 GMT Not After : Dec 19 05:01:30 2025 GMT Subject: CN=ad15767a5b31e8e7df67ecb3be045bbb2f6021bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:4b:42:1f:06:bd:44:41:08:8d:4d:c6:fa: 32:c5:d6:37:cf:fd:6e:7d:fc:0c:4f:3c:18:81:d6: 46:7e:8d:3e:92:fc:04:66:d2:84:7b:51:f9:b6:36: 0b:5e:38:b7:02:85:45:25:e4:11:01:10:3c:5e:62: 11:7e:10:ce:27:81:51:1d:3b:38:f2:52:f9:03:ab: e1:71:89:1c:a7:32:36:91:a6:57:f1:d6:6d:18:78: 89:f5:14:f8:0d:5a:e6:c2:da:58:37:79:8f:c9:50: 60:ca:25:b0:05:26:d9:0d:49:a1:c9:b3:00:17:4c: c9:ef:e6:f2:a6:48:10:38:7b:86:6e:3c:a0:a5:97: 8f:c7:8a:30:9a:33:71:0c:8f:49:2f:fa:94:ef:d1: 8a:d5:4a:ba:3e:91:27:66:dd:d3:1f:19:f5:40:66: 5b:4b:c1:17:64:ac:79:79:9c:d6:d8:c4:56:14:40: 31:f8:10:06:96:9b:8d:8d:f2:15:df:77:d4:e9:ff: f6:f8:14:5a:1f:16:10:86:b4:a5:ce:30:0f:a1:ea: 74:64:08:c5:52:d5:8e:4e:25:1a:54:c9:29:1f:ac: 91:83:7b:ed:ba:e9:4e:51:57:51:59:32:17:74:c6: c2:3f:8f:ec:74:44:2e:33:d9:53:6e:f7:70:21:34: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:76:7A:5B:31:E8:E7:DF:67:EC:B3:BE:04:5B:BB:2F:60:21:BD X509v3 Authority Key Identifier: keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:83:f2:eb:1a:52:88:01:a5:22:a0:a0:2f:0f:8f:ab:80:27: b8:2d:94:61:d2:20:89:94:3f:f3:f6:9c:71:a0:53:80:3f:29: 1a:f7:b3:08:56:8e:75:23:3a:3d:c2:a6:21:e8:dd:d0:98:c2: 6f:18:1a:93:5b:31:bc:1d:57:06:12:9a:e7:d3:29:ee:91:07: f5:24:a5:9b:a5:43:82:23:78:3b:ae:47:bd:32:77:81:8e:cc: f5:d2:2a:37:c4:09:03:7b:76:e7:b7:5d:3a:89:f1:4f:7b:3c: f6:5d:ae:ce:f6:4d:70:5f:37:ce:32:12:ad:0e:e9:2a:a3:1b: ea:ed:5f:65:e1:79:7e:08:f1:18:34:b5:05:35:31:b3:5d:f3: d6:d3:b9:55:a4:1f:b1:a0:be:c9:b1:e5:94:e7:6f:24:dc:26: 0e:e2:e1:d5:26:59:4d:f6:b0:44:bf:85:70:dd:c3:86:bd:bd: c7:98:1d:4d:4f:e9:a7:eb:36:61:f7:45:4a:b0:ac:c9:53:e1: be:d5:0c:86:50:66:47:e2:a5:01:e1:c3:b7:3d:bc:ef:c0:79: f0:7b:a9:f2:e2:e9:0a:2e:ae:2e:d4:9c:e3:13:73:cf:00:2f: c9:bb:2d:ed:dc:fc:34:fb:e8:e3:a7:92:d8:1e:51:75:97:be: b0:93:5b:c0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsv1arvvGAsprEyRAm/00MkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz NjJmZmMwHhcNMjUxMjE4MDUwMTMwWhcNMjUxMjE5MDUwMTMwWjAzMTEwLwYDVQQD EyhhZDE1NzY3YTViMzFlOGU3ZGY2N2VjYjNiZTA0NWJiYjJmNjAyMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi61LQh8GvURBCI1NxvoyxdY3z/1u ffwMTzwYgdZGfo0+kvwEZtKEe1H5tjYLXji3AoVFJeQRARA8XmIRfhDOJ4FRHTs4 8lL5A6vhcYkcpzI2kaZX8dZtGHiJ9RT4DVrmwtpYN3mPyVBgyiWwBSbZDUmhybMA F0zJ7+bypkgQOHuGbjygpZePx4owmjNxDI9JL/qU79GK1Uq6PpEnZt3THxn1QGZb S8EXZKx5eZzW2MRWFEAx+BAGlpuNjfIV33fU6f/2+BRaHxYQhrSlzjAPoep0ZAjF UtWOTiUaVMkpH6yRg3vtuulOUVdRWTIXdMbCP4/sdEQuM9lTbvdwITTvxQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK0VdnpbMejn32fss74EW7svYCG9MB8GA1UdIwQY MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3 LTQwYzFhNzI3MDJlZi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1LzQ3MDdiNC0wMDMyLTRhYzctYmNjNy00MGMxYTcyNzAy ZWYvMS8xLWg2YlRvM0VtLU9ycFpkQ1d1X1lzNlUyTF93LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYPy 6xpSiAGlIqCgLw+Pq4AnuC2UYdIgiZQ/8/accaBTgD8pGvezCFaOdSM6PcKmIejd 0JjCbxgak1sxvB1XBhKa59Mp7pEH9SSlm6VDgiN4O65HvTJ3gY7M9dIqN8QJA3t2 57ddOonxT3s89l2uzvZNcF83zjISrQ7pKqMb6u1fZeF5fgjxGDS1BTUxs13z1tO5 VaQfsaC+ybHllOdvJNwmDuLh1SZZTfawRL+FcN3Dhr29x5gdTU/pp+s2YfdFSrCs yVPhvtUMhlBmR+KlAeHDtz2878B58Hup8uLpCi6uLtSc4xNzzwAvybst7dz8NPvo 46eS2B5RdZe+sJNbwA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:23:56 2025 by rpki-client