This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json) Hash identifier: J1x7GGezvZJe+9hf2ozBC+ixanDDXfhmDC3Vkm2GhvI= Subject key identifier: 68:70:5B:55:8D:32:32:F7:A1:E8:5F:8E:5B:8C:7A:9A:A1:4F:0E:C8 Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95 Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495 Certificate serial: 019B3D22F0F836D25D1691AA9D216E77F1E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:00:58 +0000 Manifest this update: Sat 20 Dec 2025 19:00:58 +0000 Manifest next update: Sun 21 Dec 2025 19:00:58 +0000 Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: Es+lUS8Ql2SrpourPnxeqebVLDTYEjywYR9CmcowsJ0=) 2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:f0:f8:36:d2:5d:16:91:aa:9d:21:6e:77:f1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495 Validity Not Before: Dec 20 19:00:58 2025 GMT Not After : Dec 21 19:00:58 2025 GMT Subject: CN=68705b558d3232f7a1e85f8e5b8c7a9aa14f0ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:f5:14:6b:67:80:24:76:bc:af:3b:10:12: 7e:09:10:4f:1e:7c:51:ce:87:b7:ee:13:15:f0:a2: 3e:b3:65:92:ed:ef:52:6f:1e:bd:b5:a0:a5:95:5a: 3f:aa:54:c0:f3:96:06:90:e2:aa:8e:1b:31:50:b6: 46:d9:f0:da:5a:52:c6:8b:da:d5:49:27:8c:82:d1: 0b:26:3f:78:6a:53:0a:1c:7c:da:7e:82:46:d2:19: 7d:c4:3c:3a:50:34:e8:2c:a9:27:b6:43:23:d5:07: bb:94:b7:84:b4:08:45:3a:3d:ac:92:2a:c4:61:5c: ae:12:c7:91:56:8f:7f:32:e4:ca:8f:25:9a:7c:7c: d9:48:a2:7c:2d:8f:e4:c3:d4:69:42:2b:48:e6:db: da:91:37:a3:71:3d:33:1b:76:6f:72:74:a9:dc:0d: f4:a1:59:b2:f3:0c:5f:47:3a:95:1a:23:e2:f0:75: 22:a6:76:23:20:fe:20:7b:99:fa:fc:94:ee:21:6a: 31:71:76:95:96:74:fe:9c:52:50:ca:ba:1e:5b:07: 71:fd:32:06:7f:9b:64:0c:c8:86:6b:4b:d1:66:dc: 89:f1:c7:88:ec:ad:86:34:6b:9e:54:ba:ca:07:ad: ea:e0:a4:ef:cf:6e:7e:83:8b:6e:73:2b:9d:e9:41: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:70:5B:55:8D:32:32:F7:A1:E8:5F:8E:5B:8C:7A:9A:A1:4F:0E:C8 X509v3 Authority Key Identifier: keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4e:ba:74:f4:ca:c5:ed:67:8a:20:da:46:84:78:ce:bc:5d: 3d:b1:64:f6:8d:b6:c5:2c:6a:df:40:77:da:7f:b5:7c:28:a2: 58:a9:2b:c5:af:75:b7:db:4f:43:ba:64:d5:48:2a:86:f2:08: 32:40:0d:37:0b:2d:61:24:58:a2:3b:55:2c:1b:a7:39:38:d0: 4f:2b:c9:b3:da:4e:a4:88:20:26:7b:94:82:b2:85:d3:7b:f2: e1:a9:c8:ab:a7:8e:f9:e1:fe:dc:2d:8e:1f:e6:fc:09:8a:ce: 6d:ed:6e:bd:1e:ba:8f:ac:67:b7:c4:93:7c:db:d9:d7:c5:cf: 42:cd:00:d8:a5:95:3b:34:f7:18:f7:63:8d:88:e5:ed:65:01: 27:cc:fd:8e:d7:48:97:61:ec:6f:92:93:dd:5b:62:0d:33:a3: 48:eb:32:9e:51:db:7c:58:a2:6a:73:75:8d:b2:9a:48:8c:b0: 56:12:90:ef:9b:68:e1:b5:4a:5e:49:08:c1:27:6a:4f:eb:c0: 25:69:9b:a4:2e:e2:69:18:4c:92:61:4e:02:aa:2e:ac:4a:e1: 73:bc:0a:56:ab:57:60:88:5e:85:79:3b:26:14:52:e6:af:0f: b2:66:18:7d:ba:f0:1b:74:da:a3:d3:dc:4f:42:32:88:17:77: 3e:ea:9d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IvD4NtJdFpGqnSFud/HiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz Y2I0OTUwHhcNMjUxMjIwMTkwMDU4WhcNMjUxMjIxMTkwMDU4WjAzMTEwLwYDVQQD Eyg2ODcwNWI1NThkMzIzMmY3YTFlODVmOGU1YjhjN2E5YWExNGYwZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnD1FGtngCR2vK87EBJ+CRBPHnxR zoe37hMV8KI+s2WS7e9Sbx69taCllVo/qlTA85YGkOKqjhsxULZG2fDaWlLGi9rV SSeMgtELJj94alMKHHzafoJG0hl9xDw6UDToLKkntkMj1Qe7lLeEtAhFOj2skirE YVyuEseRVo9/MuTKjyWafHzZSKJ8LY/kw9RpQitI5tvakTejcT0zG3ZvcnSp3A30 oVmy8wxfRzqVGiPi8HUipnYjIP4ge5n6/JTuIWoxcXaVlnT+nFJQyroeWwdx/TIG f5tkDMiGa0vRZtyJ8ceI7K2GNGueVLrKB63q4KTvz25+g4tucyud6UFBrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhwW1WNMjL3oehfjluMepqhTw7IMB8GA1UdIwQY MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU66dPTK xe1niiDaRoR4zrxdPbFk9o22xSxq30B32n+1fCiiWKkrxa91t9tPQ7pk1UgqhvII MkANNwstYSRYojtVLBunOTjQTyvJs9pOpIggJnuUgrKF03vy4anIq6eO+eH+3C2O H+b8CYrObe1uvR66j6xnt8STfNvZ18XPQs0A2KWVOzT3GPdjjYjl7WUBJ8z9jtdI l2Hsb5KT3VtiDTOjSOsynlHbfFiianN1jbKaSIywVhKQ75to4bVKXkkIwSdqT+vA JWmbpC7iaRhMkmFOAqourErhc7wKVqtXYIhehXk7JhRS5q8PsmYYfbrwG3Tao9Pc T0IyiBd3PuqdPQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:08 2025 by rpki-client