This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft File: 1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json) Hash identifier: tar8Jo9yPmiXRMYc1pJcb/6GcdRFXD4mLL09DA85g9E= Subject key identifier: 43:B9:31:F8:4C:BB:98:CA:1F:78:9C:51:C8:A7:86:03:83:4F:9C:F1 Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0 Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0 Certificate serial: 019B4EBBD0DBFAD96AF811554E28A1F86C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 05:01:30 +0000 Manifest this update: Wed 24 Dec 2025 05:01:30 +0000 Manifest next update: Thu 25 Dec 2025 05:01:30 +0000 Files and hashes: 1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: oUwqKC7wfwa7J4/Gw4VFUPNVT0wITtsuQGoVVyISNbo=) 2: qSALXGZS-mStlLpg8jjf75z_AxA.roa (hash: JTmyN1Wglwwaiz8Y4z1qxOyBmB8F9ra5LEBRhnN+ctY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:d0:db:fa:d9:6a:f8:11:55:4e:28:a1:f8:6c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0 Validity Not Before: Dec 24 05:01:30 2025 GMT Not After : Dec 25 05:01:30 2025 GMT Subject: CN=43b931f84cbb98ca1f789c51c8a78603834f9cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:86:59:91:c1:a1:22:77:7c:70:7b:bf:38: ee:fa:be:8e:fc:1d:75:80:7b:a2:c7:4c:6b:58:ea: 09:f8:78:05:89:6d:6c:3c:6f:64:2c:10:a3:32:62: 06:12:a8:f1:39:b1:7c:35:5c:1f:7c:c7:f5:2e:dc: 09:6b:c0:2f:92:ec:8d:d9:57:16:9d:9c:ab:2e:1c: 46:c7:fb:aa:57:9f:ca:cf:9f:23:68:20:07:c0:fb: 9b:68:15:07:45:75:37:d3:38:4b:a7:57:1b:09:74: eb:54:24:82:50:59:34:32:2a:cb:d4:7a:3c:d0:87: 8e:63:7c:ec:60:3c:d8:92:d2:71:9e:ee:78:e7:09: 76:fe:6e:49:f6:bd:b5:93:8f:4e:d3:62:83:2f:b1: 22:8e:ae:f2:db:e4:43:8e:8f:c3:3a:ec:7d:c7:1e: 94:3a:ce:cc:fb:ee:4a:7a:3a:4a:da:59:aa:56:ea: ab:14:4d:b4:02:36:52:d3:95:60:2e:ba:71:da:a9: d2:8d:98:99:69:97:12:69:c0:c4:91:34:56:7d:5f: 2c:ce:53:56:68:64:b3:bb:d7:30:f5:dd:0e:a8:cd: ff:7d:41:ea:35:85:64:be:c8:33:ff:64:d4:c9:51: 76:57:72:a7:20:8b:28:8c:29:4d:ab:21:69:7a:05: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B9:31:F8:4C:BB:98:CA:1F:78:9C:51:C8:A7:86:03:83:4F:9C:F1 X509v3 Authority Key Identifier: keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:31:00:4c:70:c7:6a:57:ca:9e:fc:54:43:24:92:c6:af: 89:dd:e7:2d:ad:8e:04:76:0b:97:e4:5f:ea:23:22:d0:7e:7c: 3f:3b:25:b5:12:5b:90:63:47:f4:4b:9a:c6:dd:3f:92:2a:c5: 10:59:1c:50:f1:33:ce:e5:1f:d9:83:7b:eb:6e:ba:3d:28:57: e9:47:ae:4f:23:ae:88:76:f0:af:1d:b4:f9:83:e9:6f:8c:23: fe:5c:51:ca:b2:2d:08:49:14:74:2d:fe:61:bb:cc:7e:ad:f2: 5a:9c:a7:8f:8f:87:5c:7e:1c:01:ff:c5:ae:17:49:41:63:32: ae:0a:19:98:9d:4d:78:4f:f4:21:e2:f3:e8:3b:7a:b7:4c:cb: fb:65:02:3a:80:f0:e9:c9:a9:d1:2a:2d:6f:1f:3b:54:90:13: dd:9e:c9:48:20:1d:e6:23:60:8e:53:25:38:45:62:46:13:1a: 9d:e7:91:6e:17:04:d2:f6:0e:bc:08:02:42:4f:ee:cc:0a:81: ce:1a:50:cf:39:f6:ab:4e:de:86:c3:b4:81:f0:cd:4c:67:80: fd:91:21:0b:51:8f:36:89:2b:c7:e9:4b:5c:9b:38:fe:bf:3a: 98:32:b8:cb:d1:ed:da:ab:f4:7d:dc:ed:c9:3e:7a:f9:55:7f: 3f:1c:52:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu9Db+tlq+BFVTiih+GyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzQ4MGJhYzk3MjYwN2ZkYWI2MDU1OTNhODRiODM2NGM2 YWIxYjAwHhcNMjUxMjI0MDUwMTMwWhcNMjUxMjI1MDUwMTMwWjAzMTEwLwYDVQQD Eyg0M2I5MzFmODRjYmI5OGNhMWY3ODljNTFjOGE3ODYwMzgzNGY5Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59mGWZHBoSJ3fHB7vzju+r6O/B11 gHuix0xrWOoJ+HgFiW1sPG9kLBCjMmIGEqjxObF8NVwffMf1LtwJa8AvkuyN2VcW nZyrLhxGx/uqV5/Kz58jaCAHwPubaBUHRXU30zhLp1cbCXTrVCSCUFk0MirL1Ho8 0IeOY3zsYDzYktJxnu545wl2/m5J9r21k49O02KDL7Eijq7y2+RDjo/DOux9xx6U Os7M++5KejpK2lmqVuqrFE20AjZS05VgLrpx2qnSjZiZaZcSacDEkTRWfV8szlNW aGSzu9cw9d0OqM3/fUHqNYVkvsgz/2TUyVF2V3KnIIsojClNqyFpegULrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO5MfhMu5jKH3icUcinhgODT5zxMB8GA1UdIwQY MBaAFNbEgLrJcmB/2rYFWTqEuDZMarGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMt OTdjNzNiZTkzYmNkLzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMtOTdjNzNiZTkzYmNk LzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICYxAExw x2pXyp78VEMkksavid3nLa2OBHYLl+Rf6iMi0H58PzsltRJbkGNH9Euaxt0/kirF EFkcUPEzzuUf2YN76266PShX6UeuTyOuiHbwrx20+YPpb4wj/lxRyrItCEkUdC3+ YbvMfq3yWpynj4+HXH4cAf/FrhdJQWMyrgoZmJ1NeE/0IeLz6Dt6t0zL+2UCOoDw 6cmp0Sotbx87VJAT3Z7JSCAd5iNgjlMlOEViRhManeeRbhcE0vYOvAgCQk/uzAqB zhpQzzn2q07ehsO0gfDNTGeA/ZEhC1GPNokrx+lLXJs4/r86mDK4y9Ht2qv0fdzt yT56+VV/PxxSrw== -----END CERTIFICATE-----Generated at Wed Dec 24 12:55:06 2025 by rpki-client