This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft File: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json) Hash identifier: +fx2nsg8bi2k/6QSv7t3mCwR0+1aKcqhB8dert2RLRs= Subject key identifier: D7:96:E7:35:19:5B:73:08:3E:9A:ED:12:FD:02:E1:44:EF:AD:9C:6A Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3 Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3 Certificate serial: 019B3B34B55BB2B4BB08389059F399D3F6AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft Manifest number: 17B3 Signing time: Sat 20 Dec 2025 10:01:08 +0000 Manifest this update: Sat 20 Dec 2025 10:01:08 +0000 Manifest next update: Sun 21 Dec 2025 10:01:08 +0000 Files and hashes: 1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: RVd99QtfX/RHoVXEwT9B8uBgX1xaOob6IS6hL+z4+uc=) 2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=) 3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=) 4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=) 5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=) 6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b5:5b:b2:b4:bb:08:38:90:59:f3:99:d3:f6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3 Validity Not Before: Dec 20 10:01:08 2025 GMT Not After : Dec 21 10:01:08 2025 GMT Subject: CN=d796e735195b73083e9aed12fd02e144efad9c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:df:06:e9:e3:06:74:75:72:6b:4e:d1:2a: cc:e5:a0:f7:41:fc:7d:36:1c:3f:bd:50:7b:84:ed: 08:01:b5:b2:9f:28:43:dc:d2:84:bb:d4:34:2b:1a: a7:c0:e5:01:c3:b0:de:30:3e:f0:2f:93:b7:83:df: cc:9a:2e:ff:40:5d:3e:57:b1:98:de:9d:11:99:2e: 16:2e:12:b5:37:fb:30:05:d6:09:98:ae:22:d1:95: 08:bb:0a:1f:94:a9:64:c2:1f:df:ce:5c:eb:46:b3: 20:b9:97:41:ce:2f:3d:57:e2:26:ae:76:07:79:9d: ca:6c:dd:d4:98:0c:0e:fb:8d:e6:cc:1d:05:4c:c0: e8:42:50:85:d8:6b:46:8c:8a:e0:2d:c9:7b:6e:20: b7:c3:2b:e3:da:14:cf:f9:fb:a6:10:7d:f3:ed:d2: c4:aa:8d:fb:12:6f:67:c1:46:de:3d:d4:c6:fb:ec: ba:07:79:d8:15:06:be:e3:c5:ba:22:bf:9f:89:90: e1:ff:a3:c1:c9:aa:bd:5a:f6:1e:61:bb:bb:3a:16: 43:e6:59:88:dd:28:b7:06:56:7f:ca:e1:be:d7:92: 5d:fe:3a:a2:ec:af:5a:4b:cc:32:5c:a2:dc:78:8b: 2b:a7:6e:42:9e:20:db:48:13:38:fd:d2:19:d1:dc: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:96:E7:35:19:5B:73:08:3E:9A:ED:12:FD:02:E1:44:EF:AD:9C:6A X509v3 Authority Key Identifier: keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:14:26:9d:ab:f4:ad:e3:17:c0:24:78:34:59:9b:7f:fa:e8: f5:b2:e7:76:c2:33:91:00:ea:b0:95:c8:35:66:e6:f2:03:b9: 51:c7:84:47:8e:33:b4:3f:f8:da:94:df:58:4e:54:d7:e1:eb: 62:a9:af:e2:3d:c5:ef:da:18:85:56:41:e1:38:92:c8:97:7b: b1:b0:cc:26:c6:c6:61:73:b1:07:b9:4e:43:12:03:1d:e4:7f: 33:67:41:39:f5:a4:f7:e9:aa:31:92:70:15:df:8b:6b:9b:59: eb:1b:7a:de:9f:1f:78:0b:ff:8f:3f:db:34:47:d2:b8:a3:3e: 43:1c:fd:40:23:62:c0:1d:34:6a:f7:65:cb:62:25:59:fd:1b: 99:ab:a0:2c:5e:7f:05:5d:f7:0f:24:af:bb:a8:43:66:24:b2: 50:0c:e6:7a:9e:01:ce:04:1e:c3:fa:cf:37:15:ac:e8:b6:77: b1:4c:02:02:e8:b8:8a:13:0a:8b:04:2a:f0:dd:53:02:67:18: 96:15:fc:c4:80:13:64:e3:29:14:52:15:d8:4b:a6:4b:11:38: c5:44:a0:22:79:84:8f:0c:c2:b5:4c:72:d8:c1:cb:48:11:78: 73:86:1c:6c:0f:be:f4:cf:03:09:30:05:0f:a3:e9:c9:1e:3c: 0a:32:ca:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7NLVbsrS7CDiQWfOZ0/aqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMzJlOWY0YWEzMmFiYTczMTJmYWIwNTRiMTc0ZGNlOGM1 MTVjYTMwHhcNMjUxMjIwMTAwMTA4WhcNMjUxMjIxMTAwMTA4WjAzMTEwLwYDVQQD EyhkNzk2ZTczNTE5NWI3MzA4M2U5YWVkMTJmZDAyZTE0NGVmYWQ5YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKjfBunjBnR1cmtO0SrM5aD3Qfx9 Nhw/vVB7hO0IAbWynyhD3NKEu9Q0KxqnwOUBw7DeMD7wL5O3g9/Mmi7/QF0+V7GY 3p0RmS4WLhK1N/swBdYJmK4i0ZUIuwoflKlkwh/fzlzrRrMguZdBzi89V+ImrnYH eZ3KbN3UmAwO+43mzB0FTMDoQlCF2GtGjIrgLcl7biC3wyvj2hTP+fumEH3z7dLE qo37Em9nwUbePdTG++y6B3nYFQa+48W6Ir+fiZDh/6PByaq9WvYeYbu7OhZD5lmI 3Si3BlZ/yuG+15Jd/jqi7K9aS8wyXKLceIsrp25CniDbSBM4/dIZ0dw9QQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNeW5zUZW3MIPprtEv0C4UTvrZxqMB8GA1UdIwQY MBaAFPsy6fSqMqunMS+rBUsXTc6MUVyjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16THA5S295cTZjeEw2c0ZTeGROem94UlhLTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMjc4NjYzLWIxMzUtNGRiMS1hMDQ0 LTIwNjI0YjNjMTU3Zi8xLzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UyLzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1 N2YvMS8xLXpMcDlLb3lxNmN4TDZzRlN4ZE56b3hSWEtNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBQm nav0reMXwCR4NFmbf/ro9bLndsIzkQDqsJXINWbm8gO5UceER44ztD/42pTfWE5U 1+HrYqmv4j3F79oYhVZB4TiSyJd7sbDMJsbGYXOxB7lOQxIDHeR/M2dBOfWk9+mq MZJwFd+La5tZ6xt63p8feAv/jz/bNEfSuKM+Qxz9QCNiwB00avdly2IlWf0bmaug LF5/BV33DySvu6hDZiSyUAzmep4BzgQew/rPNxWs6LZ3sUwCAui4ihMKiwQq8N1T AmcYlhX8xIATZOMpFFIV2EumSxE4xUSgInmEjwzCtUxy2MHLSBF4c4YcbA++9M8D CTAFD6PpyR48CjLKag== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:04 2025 by rpki-client