This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft File: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json) Hash identifier: 1vYui7vm8vxV12VpfIp/hTCPoqUzcyoF+dkENUYlhdI= Subject key identifier: 41:F4:3C:20:D2:7C:16:4A:D4:4A:10:F0:35:7A:CE:B5:E0:BD:46:65 Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75 Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775 Certificate serial: 019B49270B8D7AA697109CFC2E07550D0E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft Manifest number: 1796 Signing time: Tue 23 Dec 2025 03:00:54 +0000 Manifest this update: Tue 23 Dec 2025 03:00:54 +0000 Manifest next update: Wed 24 Dec 2025 03:00:54 +0000 Files and hashes: 1: CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa (hash: wxQvo+G+ZM9xHSY4rXReEADz55sy+G82AZg77QhhlvE=) 2: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: XJz7ii4m0jWKscmjMOXWPSpia+w7ll9n3wflM5qDhak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:0b:8d:7a:a6:97:10:9c:fc:2e:07:55:0d:0e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775 Validity Not Before: Dec 23 03:00:54 2025 GMT Not After : Dec 24 03:00:54 2025 GMT Subject: CN=41f43c20d27c164ad44a10f0357aceb5e0bd4665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:f1:6f:13:27:8e:73:b7:89:d0:3b:23:84: fa:67:26:28:56:ec:cd:89:47:1b:2b:f1:76:fb:9f: c6:49:88:5a:86:04:7e:33:b7:1a:21:78:b0:e6:82: c7:b7:4f:6d:e1:69:d0:02:22:d2:c2:c5:f0:c6:45: 4d:04:f5:f3:72:d5:fb:e0:0d:c2:a1:80:e8:b5:08: 15:de:3c:cf:78:e2:9e:f3:05:f9:ce:f8:28:0c:22: fe:05:43:40:fa:9e:97:cc:48:45:70:e9:4b:34:6b: aa:6e:9b:50:1e:cb:03:4f:e6:9c:0f:50:18:61:0d: f4:8a:70:df:90:b8:99:76:54:21:a7:62:7a:c7:8f: 81:21:3c:8e:29:99:e7:82:ce:55:4b:f7:54:0a:7f: a5:7a:8e:30:50:ef:55:d8:e9:6c:d1:f5:db:d4:6a: 47:34:36:44:6f:bc:75:08:86:49:d2:9c:d4:cc:9e: 08:48:20:3c:e8:e6:67:d4:26:ff:18:ce:48:45:b4: 37:43:2d:84:12:35:49:d2:51:82:31:4e:44:19:7b: 0e:0f:a0:b7:31:ed:43:3f:5f:2d:6c:72:35:db:ac: fa:85:9c:9a:a7:4b:4e:c6:2a:89:d9:bb:c8:a6:c4: 5c:58:02:51:c4:d7:6f:29:7c:9c:0e:22:9a:56:9b: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:3C:20:D2:7C:16:4A:D4:4A:10:F0:35:7A:CE:B5:E0:BD:46:65 X509v3 Authority Key Identifier: keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ad:9f:29:75:c2:96:ce:01:39:bb:24:2a:ff:a2:fb:0f:fb: 10:c4:19:8e:64:8b:75:a0:ba:f4:f8:4c:6b:a9:3c:7c:89:40: a3:b6:07:c9:2a:4d:f1:98:26:74:59:f9:cd:a3:0f:45:6d:f9: 1b:64:da:0b:43:0d:4b:17:b5:0d:de:88:01:ef:a5:b3:8d:38: f1:2d:ce:bd:cf:f2:4c:24:82:f9:5a:3c:4e:d3:ca:7b:5c:c3: 42:95:b8:88:14:00:00:e8:fa:b6:26:89:30:05:bb:af:c3:74: 7e:eb:8a:2b:f3:36:77:1e:10:84:64:d6:60:80:e0:5f:95:17: 76:7b:20:63:1a:72:23:ad:03:f8:2b:bd:1c:57:b7:f0:fa:17: 50:4b:26:87:a3:19:78:7b:27:cc:fc:42:fb:fa:35:41:5f:37: 49:5f:84:c1:c8:06:70:06:44:ea:15:f7:c4:5d:70:50:23:90: 08:6b:04:40:0b:97:04:1f:6b:95:7f:b2:45:14:64:30:f8:a5: c6:cb:e9:07:26:2b:38:16:33:c8:4a:90:e2:2a:ef:d4:1e:4c: 99:71:b4:31:eb:c2:6d:82:54:6f:48:4f:c6:4a:6a:1d:ed:84: b9:e9:94:62:c6:c0:9f:53:98:3e:46:bd:5f:38:25:f1:21:f8: bc:a6:68:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJwuNeqaXEJz8LgdVDQ4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTAyNGZhMjIyZDA5ZjZlZDk5ZDBjOGU2YjdjZWQxNjhl M2E3NzUwHhcNMjUxMjIzMDMwMDU0WhcNMjUxMjI0MDMwMDU0WjAzMTEwLwYDVQQD Eyg0MWY0M2MyMGQyN2MxNjRhZDQ0YTEwZjAzNTdhY2ViNWUwYmQ0NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDbxbxMnjnO3idA7I4T6ZyYoVuzN iUcbK/F2+5/GSYhahgR+M7caIXiw5oLHt09t4WnQAiLSwsXwxkVNBPXzctX74A3C oYDotQgV3jzPeOKe8wX5zvgoDCL+BUNA+p6XzEhFcOlLNGuqbptQHssDT+acD1AY YQ30inDfkLiZdlQhp2J6x4+BITyOKZnngs5VS/dUCn+leo4wUO9V2Ols0fXb1GpH NDZEb7x1CIZJ0pzUzJ4ISCA86OZn1Cb/GM5IRbQ3Qy2EEjVJ0lGCMU5EGXsOD6C3 Me1DP18tbHI126z6hZyap0tOxiqJ2bvIpsRcWAJRxNdvKXycDiKaVpsbVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH0PCDSfBZK1EoQ8DV6zrXgvUZlMB8GA1UdIwQY MBaAFFdQJPoiLQn27ZnQyOa3ztFo46d1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAt ZTY2MTg2YzdhNjg5LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAtZTY2MTg2YzdhNjg5 LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq2fKXXC ls4BObskKv+i+w/7EMQZjmSLdaC69PhMa6k8fIlAo7YHySpN8ZgmdFn5zaMPRW35 G2TaC0MNSxe1Dd6IAe+ls4048S3Ovc/yTCSC+Vo8TtPKe1zDQpW4iBQAAOj6tiaJ MAW7r8N0fuuKK/M2dx4QhGTWYIDgX5UXdnsgYxpyI60D+Cu9HFe38PoXUEsmh6MZ eHsnzPxC+/o1QV83SV+EwcgGcAZE6hX3xF1wUCOQCGsEQAuXBB9rlX+yRRRkMPil xsvpByYrOBYzyEqQ4irv1B5MmXG0MevCbYJUb0hPxkpqHe2EuemUYsbAn1OYPka9 Xzgl8SH4vKZohA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:36 2025 by rpki-client