This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json) Hash identifier: L9wUJx7XLM6gLrx21dp9G7wNXumcQTQrMseYsTAA8Qc= Subject key identifier: 3C:9A:D6:0F:9C:1D:EB:8F:1B:AF:93:8F:7B:58:E4:AB:AE:02:F0:99 Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Certificate serial: 019B55D006EE25070FE1943708DD2052CEFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 14:00:55 +0000 Manifest this update: Thu 25 Dec 2025 14:00:55 +0000 Manifest next update: Fri 26 Dec 2025 14:00:55 +0000 Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: +wZg7XNsP8s5xAuYyIYeFVjQTS4Ir59cXVlrFbnaHHA=) 2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:06:ee:25:07:0f:e1:94:37:08:dd:20:52:ce:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Validity Not Before: Dec 25 14:00:55 2025 GMT Not After : Dec 26 14:00:55 2025 GMT Subject: CN=3c9ad60f9c1deb8f1baf938f7b58e4abae02f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:fe:34:20:fd:15:8b:ef:dd:93:84:aa:e3: b8:4d:c8:2f:87:dc:d7:d4:aa:cd:2e:f5:f5:c1:00: 58:b8:a1:f6:b8:95:b5:f6:1c:6b:52:a2:37:18:c3: 52:65:9d:86:b5:17:a0:32:e6:71:eb:1f:23:92:ae: c9:37:dd:ed:d7:aa:f0:2f:3f:32:e5:13:72:e7:04: 25:76:49:f5:6a:d0:cd:c4:fe:a7:98:72:43:48:7b: e3:f9:70:c5:eb:0c:65:5f:03:18:a6:53:e7:ba:19: 54:0d:77:de:ec:62:03:2a:4a:36:68:68:e3:3c:08: 64:d5:f7:63:20:50:eb:66:dd:32:cc:11:2e:c7:38: 59:d7:88:dd:2d:e7:dd:ae:0a:2b:9c:2b:28:ac:07: 13:6d:21:78:dc:f7:84:0b:86:fb:1a:4f:78:00:e0: e3:38:00:54:af:c2:51:be:2c:e7:c7:65:7b:ec:65: cb:0f:c9:a0:0d:a9:df:42:60:76:39:d2:c0:6b:c8: 72:56:91:9c:f9:7f:42:53:6f:4b:0b:93:ad:ba:e6: 8d:4f:09:37:70:04:7b:3d:eb:66:56:0e:bd:4c:8a: c6:a2:e3:68:16:22:f4:3c:4c:8c:b3:bb:0c:20:45: 34:16:5a:ed:2a:1a:ba:7b:29:66:2a:bb:8b:54:26: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9A:D6:0F:9C:1D:EB:8F:1B:AF:93:8F:7B:58:E4:AB:AE:02:F0:99 X509v3 Authority Key Identifier: keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b0:b1:8f:b1:c5:f9:b7:b1:c7:ef:53:dd:78:9e:a8:bf:f7: 86:aa:d9:aa:7e:fe:82:b0:69:0f:e1:b7:44:36:9c:24:54:b3: 0f:ce:f1:80:2d:c0:99:17:e6:83:88:3c:ff:3a:ab:8e:68:98: 79:3b:ef:e1:d4:c0:55:f4:36:e4:44:ca:58:55:3b:65:b8:ad: f3:99:28:aa:93:a9:fd:1e:94:fd:84:54:e8:81:1c:24:b3:b4: b6:55:27:9c:dc:aa:5c:e1:65:aa:ea:ab:be:d1:5f:b6:f8:19: 7e:65:ef:19:5d:71:80:ee:04:ad:10:55:97:90:8a:e5:cd:96: 06:d4:d8:f6:34:82:fe:05:a5:6c:f5:d4:8b:a4:88:aa:e3:d5: 7a:73:c6:e1:c2:aa:b3:da:cc:0a:26:4f:8e:27:c3:5a:cf:03: 06:c0:8d:ba:a9:4a:d0:c9:06:8a:33:3c:bc:f5:15:72:3f:9f: b8:3e:8d:57:cf:d2:59:1c:f1:f2:78:c9:d0:1d:68:e7:a3:05: 3e:c7:ba:88:8f:d4:d4:ae:b1:0c:13:a8:e0:10:60:50:ff:10: bb:6a:30:c1:f1:17:98:02:08:0c:c0:b1:68:13:3a:b3:3a:10: b6:ab:f6:1d:e1:fb:dc:8a:81:01:0e:e3:8d:c9:f9:45:cb:34: 3c:38:df:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0AbuJQcP4ZQ3CN0gUs79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw YTZjYjYwHhcNMjUxMjI1MTQwMDU1WhcNMjUxMjI2MTQwMDU1WjAzMTEwLwYDVQQD EygzYzlhZDYwZjljMWRlYjhmMWJhZjkzOGY3YjU4ZTRhYmFlMDJmMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXv+NCD9FYvv3ZOEquO4Tcgvh9zX 1KrNLvX1wQBYuKH2uJW19hxrUqI3GMNSZZ2GtRegMuZx6x8jkq7JN93t16rwLz8y 5RNy5wQldkn1atDNxP6nmHJDSHvj+XDF6wxlXwMYplPnuhlUDXfe7GIDKko2aGjj PAhk1fdjIFDrZt0yzBEuxzhZ14jdLefdrgornCsorAcTbSF43PeEC4b7Gk94AODj OABUr8JRviznx2V77GXLD8mgDanfQmB2OdLAa8hyVpGc+X9CU29LC5OtuuaNTwk3 cAR7PetmVg69TIrGouNoFiL0PEyMs7sMIEU0FlrtKhq6eylmKruLVCZdZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDya1g+cHeuPG6+Tj3tY5KuuAvCZMB8GA1UdIwQY MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7Cxj7HF +bexx+9T3XieqL/3hqrZqn7+grBpD+G3RDacJFSzD87xgC3AmRfmg4g8/zqrjmiY eTvv4dTAVfQ25ETKWFU7Zbit85koqpOp/R6U/YRU6IEcJLO0tlUnnNyqXOFlquqr vtFftvgZfmXvGV1xgO4ErRBVl5CK5c2WBtTY9jSC/gWlbPXUi6SIquPVenPG4cKq s9rMCiZPjifDWs8DBsCNuqlK0MkGijM8vPUVcj+fuD6NV8/SWRzx8njJ0B1o56MF Pse6iI/U1K6xDBOo4BBgUP8Qu2owwfEXmAIIDMCxaBM6szoQtqv2HeH73IqBAQ7j jcn5Rcs0PDjffA== -----END CERTIFICATE-----Generated at Thu Dec 25 22:14:10 2025 by rpki-client