This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json) Hash identifier: iFPcDRfjNzTF5WodXtzbrsXsO+E+dPH0rrVPLdVcfW0= Subject key identifier: 56:81:53:CD:B1:B3:D3:D6:36:82:D6:B0:9F:2F:83:20:1E:DF:E5:4E Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Certificate serial: 019B74ED9FDA25B0E6C65B9335EE08090B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft Manifest number: 1299 Signing time: Wed 31 Dec 2025 15:01:28 +0000 Manifest this update: Wed 31 Dec 2025 15:01:28 +0000 Manifest next update: Thu 01 Jan 2026 15:01:28 +0000 Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 2wRMhM81omt/ysjhcAA40wPakqWd5D6CLIL9em1baA0=) 2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=) 3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=) 4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:9f:da:25:b0:e6:c6:5b:93:35:ee:08:09:0b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Validity Not Before: Dec 31 15:01:28 2025 GMT Not After : Jan 1 15:01:28 2026 GMT Subject: CN=568153cdb1b3d3d63682d6b09f2f83201edfe54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:87:99:c9:73:61:fb:d1:71:74:e0:5b:34: e6:f5:5c:56:64:44:2c:a8:8a:4c:f6:d9:0f:28:b7: e5:e9:48:35:3c:60:30:19:d4:f4:5e:60:fd:2b:91: a0:6d:23:4a:30:24:61:70:0e:21:a4:34:ec:56:01: 80:da:85:eb:9f:11:97:31:2a:e9:78:b8:0f:10:5b: 00:91:7b:20:00:8c:c7:91:29:c9:56:05:58:b3:3c: b7:9e:4e:60:7d:2e:f7:a8:eb:bb:08:b3:99:d8:14: d8:8b:3b:cb:a8:61:42:7f:f7:55:1a:20:d6:9a:3c: 48:a2:83:dd:37:f1:09:9c:b8:d6:02:df:98:0c:b3: 44:24:a9:b2:45:3b:4a:25:7b:e3:d8:60:2f:64:66: 90:9e:b5:e6:50:ec:24:2f:b8:30:23:24:a7:33:fc: e6:2b:21:75:54:8a:d8:cc:76:74:30:3b:5b:b2:3d: 0b:34:24:71:31:45:00:20:1f:e8:de:66:23:8a:1d: 1d:76:d6:a4:dc:45:3c:c3:e4:cf:39:c8:c8:4e:8b: 69:80:12:40:a2:00:a5:c5:6e:c6:1f:45:bf:48:30: 77:bb:99:c6:7f:8f:29:a0:fb:19:f7:53:4f:b0:7a: 96:b7:2e:5e:e3:39:52:f6:89:25:d8:52:55:a6:62: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:81:53:CD:B1:B3:D3:D6:36:82:D6:B0:9F:2F:83:20:1E:DF:E5:4E X509v3 Authority Key Identifier: keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:77:81:1d:7c:7e:70:0f:05:ba:89:41:36:bd:7a:23:83: d3:7e:0c:f8:ab:f4:86:64:30:bd:51:f0:74:b9:5d:e2:4c:1b: 7e:79:3e:11:49:2f:80:cc:78:13:3c:3f:a3:45:bd:28:48:ff: 75:8a:1a:4a:d0:8d:23:94:5a:af:11:e3:10:dc:67:5d:92:a8: 39:0a:ec:82:b5:cb:65:56:a3:bb:fa:fc:28:89:f7:4b:50:59: 79:d6:03:fa:0c:9a:7e:fd:a4:1a:4e:2e:e1:88:31:e3:fc:fd: bc:66:81:71:f5:09:23:13:78:4d:9d:d1:e4:70:76:48:d9:4a: c5:94:c7:d9:63:55:dd:bf:6d:da:67:a2:df:85:36:df:17:01: 78:0a:77:c7:4e:9f:90:4e:f7:1f:9f:4a:48:eb:e1:73:1d:ca: 94:56:d3:f2:16:04:a7:9c:49:9b:46:de:d4:27:27:a9:9d:57: b6:5c:c3:88:d8:0b:93:24:a0:94:87:d8:52:06:7f:7c:de:fd: 54:3f:da:86:20:f7:1a:c0:30:00:0f:e7:9d:63:3e:05:07:08: 84:d5:d1:bc:37:6c:10:4b:e8:7b:4a:e2:1a:8d:48:b0:41:e5: f6:7f:2e:25:9a:7f:ea:7d:99:56:5f:6f:2a:9f:98:d2:32:97: 1b:29:e8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07Z/aJbDmxluTNe4ICQsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy ZDY1MDEwHhcNMjUxMjMxMTUwMTI4WhcNMjYwMTAxMTUwMTI4WjAzMTEwLwYDVQQD Eyg1NjgxNTNjZGIxYjNkM2Q2MzY4MmQ2YjA5ZjJmODMyMDFlZGZlNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCuHmclzYfvRcXTgWzTm9VxWZEQs qIpM9tkPKLfl6Ug1PGAwGdT0XmD9K5GgbSNKMCRhcA4hpDTsVgGA2oXrnxGXMSrp eLgPEFsAkXsgAIzHkSnJVgVYszy3nk5gfS73qOu7CLOZ2BTYizvLqGFCf/dVGiDW mjxIooPdN/EJnLjWAt+YDLNEJKmyRTtKJXvj2GAvZGaQnrXmUOwkL7gwIySnM/zm KyF1VIrYzHZ0MDtbsj0LNCRxMUUAIB/o3mYjih0ddtak3EU8w+TPOcjITotpgBJA ogClxW7GH0W/SDB3u5nGf48poPsZ91NPsHqWty5e4zlS9okl2FJVpmIfmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaBU82xs9PWNoLWsJ8vgyAe3+VOMB8GA1UdIwQY MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/53gR18 fnAPBbqJQTa9eiOD034M+Kv0hmQwvVHwdLld4kwbfnk+EUkvgMx4Ezw/o0W9KEj/ dYoaStCNI5RarxHjENxnXZKoOQrsgrXLZVaju/r8KIn3S1BZedYD+gyafv2kGk4u 4Ygx4/z9vGaBcfUJIxN4TZ3R5HB2SNlKxZTH2WNV3b9t2mei34U23xcBeAp3x06f kE73H59KSOvhcx3KlFbT8hYEp5xJm0be1CcnqZ1XtlzDiNgLkySglIfYUgZ/fN79 VD/ahiD3GsAwAA/nnWM+BQcIhNXRvDdsEEvoe0riGo1IsEHl9n8uJZp/6n2ZVl9v Kp+Y0jKXGynokA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:47:57 2025 by rpki-client