This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: kFLOd5Q23dRwDAHN4ubLS5AeiRv1qnw93V/vrq9oVYg= Subject key identifier: 9A:1B:F2:91:3A:7E:10:F5:D5:34:60:B7:A5:A9:D7:68:2D:A9:0A:D2 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B3A8FC1A6B038A8B1D34BC09513A5B61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 07:00:58 +0000 Manifest this update: Sat 20 Dec 2025 07:00:58 +0000 Manifest next update: Sun 21 Dec 2025 07:00:58 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: OO3/5boQhi10geHUIsmH3OJxDMMXtiC81q6U7KKgKvw=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa (hash: Fo0TpQJlU+oLHQtTrtQM8XKofzaFbmPNMXg/+v+0LZE=) 12: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:c1:a6:b0:38:a8:b1:d3:4b:c0:95:13:a5:b6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Dec 20 07:00:58 2025 GMT Not After : Dec 21 07:00:58 2025 GMT Subject: CN=9a1bf2913a7e10f5d53460b7a5a9d7682da90ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:d6:4e:05:cc:9d:43:14:1a:4e:ef:66:54: 0d:13:ca:da:d0:2e:3c:2a:2d:7f:5b:70:8b:c8:28: 61:77:54:2a:1e:56:28:21:ce:2c:84:21:e5:77:7c: 51:3f:ae:e9:1e:d1:99:0f:24:c0:a9:00:2c:8c:0f: a3:e4:bb:6e:92:46:c7:a7:ac:2b:8e:2e:43:ba:13: a6:e4:a7:a9:7d:05:ed:df:9f:d0:56:9e:ab:21:12: ae:69:50:b7:42:9c:3f:ca:0c:1b:d4:f7:8f:70:64: 3d:0c:a1:42:92:f0:13:c6:cc:96:b3:c9:ab:1e:d9: b7:bf:f9:72:14:bd:6b:ee:92:3c:28:25:ea:60:65: 0b:2c:b0:e5:25:eb:db:74:26:8e:b4:15:0e:4c:1c: 5a:94:17:5d:2b:40:32:d5:1b:45:6d:c7:0f:2d:76: b4:a1:88:e2:a2:8f:d2:15:c1:49:74:15:1a:f4:61: 2c:81:80:83:8f:2e:66:26:6d:e0:0a:8b:64:67:79: 6b:4a:9e:f0:8d:a2:41:1b:03:c2:af:bd:5d:e1:ba: 9e:21:91:de:d2:47:80:84:ba:68:2a:7c:50:bb:05: ff:77:d8:71:d0:74:66:1d:c2:f2:bb:8e:52:13:44: 79:44:b3:52:b0:7e:88:e8:92:ca:a3:5d:ae:78:8b: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:F2:91:3A:7E:10:F5:D5:34:60:B7:A5:A9:D7:68:2D:A9:0A:D2 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9e:01:ae:37:4c:32:2a:5b:6b:0e:ee:b1:f2:19:0c:4f:ab: 2b:b9:21:f0:96:d6:11:bb:a2:cb:a9:5c:dc:1b:ea:8a:e7:29: 29:cc:41:5b:f0:12:28:b5:49:3f:8f:b1:61:07:f8:fd:25:41: 5e:60:7b:42:0d:5f:c0:79:ed:2d:12:9a:88:f4:80:54:81:01: 5d:94:3b:5a:76:32:07:de:f8:1f:86:01:b8:8c:50:c5:96:ca: 38:92:f9:75:cc:07:3e:69:2f:51:3d:cc:a8:dc:52:f2:48:2a: 90:8a:cd:db:c9:e4:0f:72:38:f9:75:10:c5:c8:58:70:6b:97: c0:ab:0f:6b:16:b9:ca:ac:63:f6:fe:e8:c8:ab:d2:3b:f3:0b: b7:65:78:a5:f5:13:55:8d:ae:ae:9b:86:58:5f:32:f4:6f:ec: 49:c2:e0:08:27:1f:33:84:de:28:39:2e:9e:cf:2e:9e:77:03: 68:80:c8:bd:a5:bc:a3:f2:d7:a2:42:98:33:6c:90:db:52:ec: 6e:72:a4:a6:f9:97:5d:48:f2:ac:8b:b4:4d:fa:6e:64:75:da: 9e:58:a0:a2:fb:e9:7e:46:dd:40:af:67:39:53:f5:53:33:f1: a0:56:94:71:dc:8e:5a:8f:77:16:eb:20:23:a6:e8:7d:e3:c7: 0e:2a:eb:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j8GmsDiosdNLwJUTpbYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUxMjIwMDcwMDU4WhcNMjUxMjIxMDcwMDU4WjAzMTEwLwYDVQQD Eyg5YTFiZjI5MTNhN2UxMGY1ZDUzNDYwYjdhNWE5ZDc2ODJkYTkwYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7vWTgXMnUMUGk7vZlQNE8ra0C48 Ki1/W3CLyChhd1QqHlYoIc4shCHld3xRP67pHtGZDyTAqQAsjA+j5LtukkbHp6wr ji5DuhOm5KepfQXt35/QVp6rIRKuaVC3Qpw/ygwb1PePcGQ9DKFCkvATxsyWs8mr Htm3v/lyFL1r7pI8KCXqYGULLLDlJevbdCaOtBUOTBxalBddK0Ay1RtFbccPLXa0 oYjioo/SFcFJdBUa9GEsgYCDjy5mJm3gCotkZ3lrSp7wjaJBGwPCr71d4bqeIZHe 0keAhLpoKnxQuwX/d9hx0HRmHcLyu45SE0R5RLNSsH6I6JLKo12ueIuy+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJob8pE6fhD11TRgt6Wp12gtqQrSMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA54BrjdM Mipbaw7usfIZDE+rK7kh8JbWEbuiy6lc3BvqiucpKcxBW/ASKLVJP4+xYQf4/SVB XmB7Qg1fwHntLRKaiPSAVIEBXZQ7WnYyB974H4YBuIxQxZbKOJL5dcwHPmkvUT3M qNxS8kgqkIrN28nkD3I4+XUQxchYcGuXwKsPaxa5yqxj9v7oyKvSO/MLt2V4pfUT VY2urpuGWF8y9G/sScLgCCcfM4TeKDkuns8unncDaIDIvaW8o/LXokKYM2yQ21Ls bnKkpvmXXUjyrIu0TfpuZHXanligovvpfkbdQK9nOVP1UzPxoFaUcdyOWo93Fusg I6bofePHDirrYw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:22:04 2025 by rpki-client