This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json) Hash identifier: yADwU3UaAXrVHEWIWpVDahj30pt+q3ZH8/hF8eFc3/E= Subject key identifier: 5F:D8:17:18:0D:17:F0:97:3B:02:F8:27:19:8C:F1:95:44:09:E9:2F Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Certificate serial: 019B3D90CDA217B25E5B4B7F692BC0F7BB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft Manifest number: 165B Signing time: Sat 20 Dec 2025 21:00:58 +0000 Manifest this update: Sat 20 Dec 2025 21:00:58 +0000 Manifest next update: Sun 21 Dec 2025 21:00:58 +0000 Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: yl42XSIjvrDbnlpgGsEG174uPmTYv9WIM/GBspCZHss=) 2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=) 3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:cd:a2:17:b2:5e:5b:4b:7f:69:2b:c0:f7:bb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Validity Not Before: Dec 20 21:00:58 2025 GMT Not After : Dec 21 21:00:58 2025 GMT Subject: CN=5fd817180d17f0973b02f827198cf1954409e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:32:91:41:0f:2b:0d:0e:62:6f:fc:2d:fe: b2:d3:da:12:cb:34:72:7b:17:0a:ef:dd:7b:ce:b2: e3:6a:59:23:75:2f:79:03:33:f2:31:ef:92:a3:01: ca:e4:42:ee:d3:f6:2e:0b:96:fa:c7:b5:4e:2b:ce: 0e:b9:4c:57:4f:8a:aa:56:c3:1e:9a:82:40:1e:40: 27:79:9e:4a:37:d4:da:ee:48:6e:01:07:bf:ab:cc: 2a:61:41:0b:66:50:91:ab:30:83:f1:0c:e8:2b:91: ff:38:aa:56:fb:52:f6:c3:5d:85:37:2f:65:00:e0: 86:18:00:1e:6b:36:9b:67:d3:81:98:fa:f7:31:30: ef:7f:64:28:55:4a:a1:7f:1e:38:ed:45:a0:ea:21: 10:21:05:36:15:74:3e:40:9e:0b:94:0d:af:7b:55: a5:1c:1f:57:b0:95:db:b1:b8:00:76:e5:3b:5e:eb: a1:da:a2:e2:06:1e:b4:60:96:36:2e:b4:1d:22:fc: 5f:39:b5:ec:bd:cb:e4:ce:5d:cf:cb:57:4f:1a:8b: d4:bd:1f:a0:ba:71:89:c1:10:4e:37:76:85:b0:64: 50:8c:dc:28:f9:59:88:70:1b:37:eb:cd:ed:4e:88: b3:ae:f9:55:c8:91:32:4a:9e:6d:ec:ec:53:37:d5: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D8:17:18:0D:17:F0:97:3B:02:F8:27:19:8C:F1:95:44:09:E9:2F X509v3 Authority Key Identifier: keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d9:ab:55:79:c5:7c:68:de:2f:fd:8c:00:97:46:13:fd:64: f8:7b:f4:9d:16:7e:3a:a6:33:87:7d:29:fc:3c:eb:dd:4e:84: 84:ed:33:65:ec:1d:c3:59:f9:9b:3e:3e:9e:15:d4:51:2c:e5: 17:02:bb:17:27:10:94:58:11:bb:96:63:e8:aa:8e:4f:88:fd: aa:8c:cd:df:8e:aa:57:d2:e1:79:2a:f9:1b:cf:94:e3:40:d8: fa:ab:08:21:eb:4a:3a:68:40:b8:b6:4f:6b:65:1a:81:ea:e4: d8:b5:0f:b2:a3:68:33:62:79:3a:b1:b2:74:a9:15:dd:b3:71: 10:26:a8:62:19:f8:d3:27:11:14:b2:5f:72:44:83:47:41:bb: b5:9e:b3:7c:f7:32:33:88:46:cc:10:3b:ff:72:7d:13:62:f5: 15:6f:ec:ca:76:7e:f9:f0:3d:fe:54:a2:d9:33:14:a5:9c:99: a5:e1:08:3c:ce:e1:b5:c0:4d:7e:20:ad:34:68:b7:8f:d9:e2: 13:26:36:89:c3:7d:7c:0b:02:95:c3:5f:fb:de:41:3f:e9:97: 22:3c:c7:04:8e:55:8b:fe:fd:69:5d:de:f8:01:7c:10:6d:29: 4f:fa:5d:d8:60:25:1f:91:fb:b9:e4:d7:65:60:2e:40:2e:23: db:cc:7a:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9kM2iF7JeW0t/aSvA97sfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy YTdiZGUwHhcNMjUxMjIwMjEwMDU4WhcNMjUxMjIxMjEwMDU4WjAzMTEwLwYDVQQD Eyg1ZmQ4MTcxODBkMTdmMDk3M2IwMmY4MjcxOThjZjE5NTQ0MDllOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/0ykUEPKw0OYm/8Lf6y09oSyzRy excK7917zrLjalkjdS95AzPyMe+SowHK5ELu0/YuC5b6x7VOK84OuUxXT4qqVsMe moJAHkAneZ5KN9Ta7khuAQe/q8wqYUELZlCRqzCD8QzoK5H/OKpW+1L2w12FNy9l AOCGGAAeazabZ9OBmPr3MTDvf2QoVUqhfx447UWg6iEQIQU2FXQ+QJ4LlA2ve1Wl HB9XsJXbsbgAduU7Xuuh2qLiBh60YJY2LrQdIvxfObXsvcvkzl3Py1dPGovUvR+g unGJwRBON3aFsGRQjNwo+VmIcBs3683tToizrvlVyJEySp5t7OxTN9UrMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF/YFxgNF/CXOwL4JxmM8ZVECekvMB8GA1UdIwQY MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNmr VXnFfGjeL/2MAJdGE/1k+Hv0nRZ+OqYzh30p/Dzr3U6EhO0zZewdw1n5mz4+nhXU USzlFwK7FycQlFgRu5Zj6KqOT4j9qozN346qV9LheSr5G8+U40DY+qsIIetKOmhA uLZPa2Uagerk2LUPsqNoM2J5OrGydKkV3bNxECaoYhn40ycRFLJfckSDR0G7tZ6z fPcyM4hGzBA7/3J9E2L1FW/synZ++fA9/lSi2TMUpZyZpeEIPM7htcBNfiCtNGi3 j9niEyY2icN9fAsClcNf+95BP+mXIjzHBI5Vi/79aV3e+AF8EG0pT/pd2GAlH5H7 ueTXZWAuQC4j28x63A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:53 2025 by rpki-client