This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json) Hash identifier: iXMLZWg4h462KAusoUCjmhxghE/K6m0DLgj3QpXnRP4= Subject key identifier: 49:95:30:EB:D8:F7:F5:38:4A:21:97:C8:B7:EF:39:74:D5:97:BD:A7 Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b Certificate serial: 019B668C951E535CF0D1211729D7C3A758E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft Manifest number: 101B Signing time: Sun 28 Dec 2025 20:00:47 +0000 Manifest this update: Sun 28 Dec 2025 20:00:47 +0000 Manifest next update: Mon 29 Dec 2025 20:00:47 +0000 Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: LVFgcuEMWs+Oc5b5mK1Kr2vXLTM82EtPaFofGs1ggWk=) 2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:95:1e:53:5c:f0:d1:21:17:29:d7:c3:a7:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b Validity Not Before: Dec 28 20:00:47 2025 GMT Not After : Dec 29 20:00:47 2025 GMT Subject: CN=499530ebd8f7f5384a2197c8b7ef3974d597bda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:36:68:54:28:5b:14:92:4c:ad:2b:8b:b4: f4:bf:c7:7d:9f:7f:5d:01:d6:8e:87:39:3e:01:a2: 33:bf:ff:52:62:40:1a:f5:ac:69:2b:c7:3c:4a:72: e6:a1:e5:43:b7:29:79:81:60:ca:c5:25:8d:ba:44: 2f:58:14:fb:4a:f2:3f:0a:2a:de:9d:71:27:64:3d: 9b:95:98:cf:e1:fc:ba:19:1b:94:f1:ef:12:c0:59: 82:11:b3:89:08:7c:51:e9:b9:0d:43:aa:19:0e:41: f3:69:13:22:b0:ab:da:93:32:c4:52:ae:08:01:bc: 2b:4f:88:73:67:0d:a3:b0:65:0f:03:e7:5b:b8:7a: 56:74:3d:1f:83:04:ce:c0:f2:db:b3:9c:c8:f7:1b: f7:27:38:f7:16:e6:68:14:b4:a6:05:f3:a4:ad:e7: aa:6a:77:44:c0:a0:09:96:ce:cb:a9:d9:d2:af:84: 2a:52:7d:ce:ad:c2:d1:96:b4:ed:3c:7d:f1:ff:a3: 82:0f:2c:2e:e7:75:3b:3d:42:d7:4f:ae:b1:34:8d: 3c:02:69:57:b3:dd:bf:9f:dd:07:13:18:5a:6d:f1: c1:e1:39:4c:18:b8:8d:13:3e:3f:cc:09:4c:37:fc: fb:7b:aa:9c:08:50:67:90:53:d7:29:6d:bd:0d:2d: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:95:30:EB:D8:F7:F5:38:4A:21:97:C8:B7:EF:39:74:D5:97:BD:A7 X509v3 Authority Key Identifier: keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e5:7a:9b:8b:17:41:01:28:5e:76:d9:42:a2:f2:2d:35:f2: 0a:7d:94:5a:01:1b:64:49:7c:9c:ce:41:cf:4b:7f:58:ea:b2: 09:e9:e4:25:2a:e6:53:33:f3:85:88:18:39:17:15:76:82:00: 33:38:f2:e0:85:a2:e7:10:b0:d6:ff:e6:3d:ce:d3:45:f0:da: dd:08:ca:4a:1f:e7:51:12:05:28:35:13:0a:0c:39:db:e0:07: 05:b9:bc:09:cd:da:48:89:c4:c9:9a:ee:d6:3f:5c:48:af:e8: 16:ee:32:24:bc:19:3f:29:15:f2:9c:92:17:9b:57:de:c9:ff: fd:95:4f:36:0e:06:39:14:f0:b4:40:37:76:33:03:ae:67:fd: fc:13:ad:43:6a:91:d4:2b:81:42:f6:2c:27:84:08:84:9c:5b: 4b:dd:ff:60:8f:8a:c0:ad:2c:4c:73:a0:1c:29:79:83:37:a3: 0e:8b:a5:37:6f:38:9e:f9:04:a0:b9:03:f0:44:f1:d3:5c:c3: 82:f1:bd:68:19:60:7d:7f:7b:f3:2e:3e:16:74:3f:f0:b7:9a: 9a:fc:2b:3a:9b:b4:9a:54:fd:f2:1d:bf:f2:7d:4c:f6:ca:de: 35:4e:a8:7c:51:40:72:71:31:4c:53:16:bf:89:41:94:67:f1: ad:b9:89:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjJUeU1zw0SEXKdfDp1jlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk MWExOWIwHhcNMjUxMjI4MjAwMDQ3WhcNMjUxMjI5MjAwMDQ3WjAzMTEwLwYDVQQD Eyg0OTk1MzBlYmQ4ZjdmNTM4NGEyMTk3YzhiN2VmMzk3NGQ1OTdiZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXc2aFQoWxSSTK0ri7T0v8d9n39d AdaOhzk+AaIzv/9SYkAa9axpK8c8SnLmoeVDtyl5gWDKxSWNukQvWBT7SvI/Cire nXEnZD2blZjP4fy6GRuU8e8SwFmCEbOJCHxR6bkNQ6oZDkHzaRMisKvakzLEUq4I AbwrT4hzZw2jsGUPA+dbuHpWdD0fgwTOwPLbs5zI9xv3Jzj3FuZoFLSmBfOkreeq andEwKAJls7LqdnSr4QqUn3OrcLRlrTtPH3x/6OCDywu53U7PULXT66xNI08AmlX s92/n90HExhabfHB4TlMGLiNEz4/zAlMN/z7e6qcCFBnkFPXKW29DS0OyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmVMOvY9/U4SiGXyLfvOXTVl72nMB8GA1UdIwQY MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct YzA5NTZhODAxMzJkLzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeV6m4sX QQEoXnbZQqLyLTXyCn2UWgEbZEl8nM5Bz0t/WOqyCenkJSrmUzPzhYgYORcVdoIA Mzjy4IWi5xCw1v/mPc7TRfDa3QjKSh/nURIFKDUTCgw52+AHBbm8Cc3aSInEyZru 1j9cSK/oFu4yJLwZPykV8pySF5tX3sn//ZVPNg4GORTwtEA3djMDrmf9/BOtQ2qR 1CuBQvYsJ4QIhJxbS93/YI+KwK0sTHOgHCl5gzejDoulN284nvkEoLkD8ETx01zD gvG9aBlgfX978y4+FnQ/8LeamvwrOpu0mlT98h2/8n1M9sreNU6ofFFAcnExTFMW v4lBlGfxrbmJcQ== -----END CERTIFICATE-----Generated at Mon Dec 29 05:25:45 2025 by rpki-client