This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json) Hash identifier: cAx/L6ESpU9iNNOmc/DWO1D9yVjgyfqoF3R7xEJE2QQ= Subject key identifier: B2:98:9D:7D:71:26:5F:DE:72:31:1C:EA:E3:F8:F3:EF:DE:08:BE:35 Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Certificate serial: 019B34FB94FA3DF5E23B4855CD5AD5C67C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 05:01:01 +0000 Manifest this update: Fri 19 Dec 2025 05:01:01 +0000 Manifest next update: Sat 20 Dec 2025 05:01:01 +0000 Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=) 2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: c/Ql/JvtE7hynUrKz9qaQuzNk/mPjED36D1mNreHEhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:94:fa:3d:f5:e2:3b:48:55:cd:5a:d5:c6:7c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Validity Not Before: Dec 19 05:01:01 2025 GMT Not After : Dec 20 05:01:01 2025 GMT Subject: CN=b2989d7d71265fde72311ceae3f8f3efde08be35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:f7:25:c2:fa:be:65:9c:2e:57:e3:2b:9d: f4:c1:3e:e5:26:c9:bf:0b:03:6d:3d:b5:e7:49:6a: 5e:37:d6:55:81:07:87:2b:4f:59:48:e4:11:ef:d4: 28:85:5a:7a:c9:4a:9a:b2:3c:08:09:cc:32:90:7a: c8:35:c4:1f:a8:9e:a9:40:95:91:ff:c0:71:3e:79: ac:c0:1b:e5:ba:bd:65:58:af:12:6d:5a:6e:08:26: 76:f5:1d:0e:8d:23:ac:3a:34:c2:80:ac:bb:b6:6e: 3a:cc:28:97:ed:13:0f:5a:7b:2b:dd:1b:ff:e9:ed: 2b:5c:d3:5a:03:f4:30:77:db:62:9c:75:59:2e:80: a0:69:e7:cf:a5:e2:8f:e7:ca:d3:1b:14:62:5b:0e: 06:c1:b0:a3:0f:3f:84:88:f8:ba:3f:1c:bb:dd:c7: f6:c0:6e:1e:a1:51:58:0f:0b:65:de:e0:0e:2d:d0: dd:9b:d5:fb:39:36:a4:b8:27:0a:4c:3e:b1:0d:67: 6d:d6:27:33:ff:00:b5:e6:11:cd:6f:a4:ca:e0:38: 3d:05:f7:2f:82:07:0c:44:4b:16:c9:35:b5:8b:16: ba:fa:97:8e:49:85:8f:31:31:52:8f:c5:b3:78:33: 4c:60:9d:53:c5:5e:4c:bd:6e:3b:84:af:76:44:46: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:98:9D:7D:71:26:5F:DE:72:31:1C:EA:E3:F8:F3:EF:DE:08:BE:35 X509v3 Authority Key Identifier: keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e2:0d:82:fe:02:3d:a3:08:f5:d2:9b:c4:8b:94:6c:ed:22: 95:10:2a:ae:d6:e9:16:80:c1:e3:1e:2e:5b:e1:4e:b8:ad:e6: af:8c:d4:ad:56:ab:09:44:fc:4b:0d:82:a0:c8:b0:b3:3a:7c: e7:cf:87:8e:50:58:6b:73:2e:65:d0:30:8f:50:9a:3b:ae:3a: 5d:7f:68:c7:51:fd:f4:87:4a:6f:b2:68:af:ed:71:a4:a3:e3: 7f:b3:30:2c:11:d5:fb:49:b3:86:bf:2a:9c:ba:11:cb:87:5a: 3b:6c:75:3e:a2:e1:79:c9:bc:ae:b8:f5:27:a9:8b:2f:56:bc: 96:ad:d9:6d:85:a9:4c:5c:66:7d:33:b5:37:25:0b:2a:5c:32: b1:3b:16:14:d0:53:02:a8:8d:5e:ac:c5:66:9f:2f:89:8f:52: 94:47:00:33:e9:36:a5:34:70:97:07:41:1a:61:8e:4e:97:47: d4:53:33:ef:8c:07:dd:3e:ee:59:4f:97:06:de:08:0f:cc:a3: 3c:b6:98:93:10:04:41:56:29:78:2f:34:64:7a:06:96:6b:90: e9:59:78:26:8c:ab:00:37:c2:94:38:91:f0:4d:e9:47:a4:b4: 63:97:0e:70:ad:54:19:1c:de:19:f1:c4:48:20:ff:24:55:5a: 68:54:94:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+5T6PfXiO0hVzVrVxnyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNWEyOWNjZGExZGM4YThhMTYzYWMyNzc4MWU4ZWM1OTdl NzZkYjkwHhcNMjUxMjE5MDUwMTAxWhcNMjUxMjIwMDUwMTAxWjAzMTEwLwYDVQQD EyhiMjk4OWQ3ZDcxMjY1ZmRlNzIzMTFjZWFlM2Y4ZjNlZmRlMDhiZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcf3JcL6vmWcLlfjK530wT7lJsm/ CwNtPbXnSWpeN9ZVgQeHK09ZSOQR79QohVp6yUqasjwICcwykHrINcQfqJ6pQJWR /8BxPnmswBvlur1lWK8SbVpuCCZ29R0OjSOsOjTCgKy7tm46zCiX7RMPWnsr3Rv/ 6e0rXNNaA/Qwd9tinHVZLoCgaefPpeKP58rTGxRiWw4GwbCjDz+EiPi6Pxy73cf2 wG4eoVFYDwtl3uAOLdDdm9X7OTakuCcKTD6xDWdt1icz/wC15hHNb6TK4Dg9Bfcv ggcMREsWyTW1ixa6+peOSYWPMTFSj8WzeDNMYJ1TxV5MvW47hK92REYPnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKYnX1xJl/ecjEc6uP48+/eCL41MB8GA1UdIwQY MBaAFP9aKczaHciooWOsJ3gejsWX5225MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQt OWJjNTVmNjJkYWJhLzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQtOWJjNTVmNjJkYWJh LzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOINgv4C PaMI9dKbxIuUbO0ilRAqrtbpFoDB4x4uW+FOuK3mr4zUrVarCUT8Sw2CoMiwszp8 58+HjlBYa3MuZdAwj1CaO646XX9ox1H99IdKb7Jor+1xpKPjf7MwLBHV+0mzhr8q nLoRy4daO2x1PqLhecm8rrj1J6mLL1a8lq3ZbYWpTFxmfTO1NyULKlwysTsWFNBT AqiNXqzFZp8viY9SlEcAM+k2pTRwlwdBGmGOTpdH1FMz74wH3T7uWU+XBt4ID8yj PLaYkxAEQVYpeC80ZHoGlmuQ6Vl4JoyrADfClDiR8E3pR6S0Y5cOcK1UGRzeGfHE SCD/JFVaaFSUTw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:53 2025 by rpki-client