This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json) Hash identifier: dQS9fRUnW3P+I413iLiIcb7/YHzILVdEEJidE2DndHo= Subject key identifier: 4A:B8:D0:EB:F3:37:DB:4C:AA:4E:19:3E:F1:6E:AB:9E:31:56:F6:11 Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Certificate serial: 019B3B6BF44844BD6B8C75B9B1A279E95A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 11:01:29 +0000 Manifest this update: Sat 20 Dec 2025 11:01:29 +0000 Manifest next update: Sun 21 Dec 2025 11:01:29 +0000 Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: P1IdMpJcHV2jqtDTJoVR0wbBSBtF90cAbd6GglKguQw=) 2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f4:48:44:bd:6b:8c:75:b9:b1:a2:79:e9:5a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Validity Not Before: Dec 20 11:01:29 2025 GMT Not After : Dec 21 11:01:29 2025 GMT Subject: CN=4ab8d0ebf337db4caa4e193ef16eab9e3156f611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:e2:c5:da:89:2c:17:bc:55:f4:a6:a8:55: 81:b8:88:2a:00:02:c5:69:f8:53:e4:d8:fa:6a:bc: 5e:14:8b:aa:43:35:da:e9:ff:c2:3f:91:2d:fb:38: 09:a8:70:d6:15:80:0d:60:d6:8a:1a:2f:4b:6a:a1: b0:02:22:3e:48:b3:d7:3b:29:4e:83:15:db:17:c2: ba:88:b1:d9:f2:38:ce:c0:57:61:c4:a6:c6:43:9c: 69:d5:fc:1c:3d:23:d0:73:dd:f0:c2:60:d7:5d:e9: 96:25:18:b8:e5:5a:cd:99:b4:6b:79:a7:8b:a5:d1: 85:59:c1:b4:af:4b:f0:43:8a:87:bc:42:b9:9f:13: 1c:22:b1:af:1a:db:f3:0c:49:d3:ec:0a:5c:d8:84: 89:7a:42:a2:62:92:74:13:ec:09:c3:95:84:18:d0: fb:56:c7:c7:78:f1:0c:31:0f:96:ce:87:05:13:46: 44:96:47:d8:d3:db:f5:a7:0e:8a:f1:db:f7:75:4f: 54:25:cf:16:02:b3:f7:2e:74:55:b2:93:fd:e7:44: 78:81:1f:bd:fc:52:1d:db:a5:9c:9b:28:d0:94:e4: 0f:07:17:65:dd:3e:a2:eb:9e:88:1c:ec:ae:d0:5a: d4:83:c6:52:50:e0:3f:60:24:aa:7d:37:af:1d:f2: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B8:D0:EB:F3:37:DB:4C:AA:4E:19:3E:F1:6E:AB:9E:31:56:F6:11 X509v3 Authority Key Identifier: keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ad:1c:1d:46:1f:47:b4:a2:8c:24:13:9d:81:60:a6:cc:b5: ec:a1:ba:85:d5:16:4b:69:d8:c9:42:a4:fd:4c:91:79:13:90: 5f:d6:9d:00:ab:70:43:1b:13:ec:1c:e8:dc:77:bd:c2:11:bd: ba:63:56:0e:68:9f:1a:51:3b:95:2b:2c:38:20:4b:dd:d9:f7: 51:4b:ef:8c:f1:03:3c:8e:2d:ad:1c:91:90:98:70:fe:d7:94: d6:62:3a:e7:e9:ac:81:60:67:f7:d6:ff:35:10:9a:f0:29:5e: 49:a7:f1:1a:27:c7:c4:8a:64:f0:fd:3f:8f:0e:1a:83:08:6e: b8:8e:16:3e:75:24:43:22:1b:d2:52:5d:66:e1:f6:eb:77:3c: ad:45:7c:c8:e4:fb:d7:3d:44:63:f6:e6:65:00:0f:2f:71:16: ad:6a:dc:ec:25:df:d9:4f:ac:37:04:e6:9e:80:3f:9c:41:9a: a0:be:b4:0d:56:b8:ca:5f:7a:41:3a:9f:e2:98:48:89:03:6c: 8c:1e:39:5a:e7:1a:05:b4:35:c0:6b:42:9a:0f:06:45:73:4a: 60:ca:a7:92:c7:ee:7c:24:22:a2:30:2b:9f:4d:97:19:c3:58: d8:13:61:f9:3b:a5:82:44:35:d8:56:9a:18:cd:3e:93:9a:90: c9:58:c8:0a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7a/RIRL1rjHW5saJ56VobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5 MDMwNDEwHhcNMjUxMjIwMTEwMTI5WhcNMjUxMjIxMTEwMTI5WjAzMTEwLwYDVQQD Eyg0YWI4ZDBlYmYzMzdkYjRjYWE0ZTE5M2VmMTZlYWI5ZTMxNTZmNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4vixdqJLBe8VfSmqFWBuIgqAALF afhT5Nj6arxeFIuqQzXa6f/CP5Et+zgJqHDWFYANYNaKGi9LaqGwAiI+SLPXOylO gxXbF8K6iLHZ8jjOwFdhxKbGQ5xp1fwcPSPQc93wwmDXXemWJRi45VrNmbRreaeL pdGFWcG0r0vwQ4qHvEK5nxMcIrGvGtvzDEnT7Apc2ISJekKiYpJ0E+wJw5WEGND7 VsfHePEMMQ+WzocFE0ZElkfY09v1pw6K8dv3dU9UJc8WArP3LnRVspP950R4gR+9 /FId26WcmyjQlOQPBxdl3T6i656IHOyu0FrUg8ZSUOA/YCSqfTevHfK00QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEq40OvzN9tMqk4ZPvFuq54xVvYRMB8GA1UdIwQY MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3 LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAua0c HUYfR7SijCQTnYFgpsy17KG6hdUWS2nYyUKk/UyReROQX9adAKtwQxsT7Bzo3He9 whG9umNWDmifGlE7lSssOCBL3dn3UUvvjPEDPI4trRyRkJhw/teU1mI65+msgWBn 99b/NRCa8CleSafxGifHxIpk8P0/jw4agwhuuI4WPnUkQyIb0lJdZuH263c8rUV8 yOT71z1EY/bmZQAPL3EWrWrc7CXf2U+sNwTmnoA/nEGaoL60DVa4yl96QTqf4phI iQNsjB45WucaBbQ1wGtCmg8GRXNKYMqnksfufCQiojArn02XGcNY2BNh+TulgkQ1 2FaaGM0+k5qQyVjICg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:21:17 2025 by rpki-client