This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json) Hash identifier: 4u62sTFp4MzmNlM9uvDjpr6GsKkrJdX37OTgUhtjmLE= Subject key identifier: 53:B7:13:D9:8C:36:64:C7:35:82:88:29:9C:C1:8D:F8:91:7B:CF:2E Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13 Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13 Certificate serial: 019B43C9A58E8D8D7CE97702EF8E2B01055B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft Manifest number: 0F27 Signing time: Mon 22 Dec 2025 02:00:47 +0000 Manifest this update: Mon 22 Dec 2025 02:00:47 +0000 Manifest next update: Tue 23 Dec 2025 02:00:47 +0000 Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: /Pv5wtyR5MlcDiDwuktJH9JuxwF+shcq27a7ooc7/ZI=) 2: 2qEJf-3plphGQsWl8SQW6YyPVOo.asa (hash: 4+rKO1n6NP2bn9zS31aZfPbPe3Ulpd6fobeXDKXV5hg=) 3: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:a5:8e:8d:8d:7c:e9:77:02:ef:8e:2b:01:05:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13 Validity Not Before: Dec 22 02:00:47 2025 GMT Not After : Dec 23 02:00:47 2025 GMT Subject: CN=53b713d98c3664c7358288299cc18df8917bcf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:40:56:4b:4c:f0:98:6e:66:54:28:55:02: 9b:21:cd:b1:c3:bf:aa:dc:d7:be:25:71:1b:fb:86: 16:5d:bc:9e:94:fc:78:43:79:16:dd:c4:e8:04:f4: 87:e0:08:03:f2:f8:ae:b1:a9:56:02:d1:72:1d:9f: d1:12:d7:bd:d2:5e:d0:13:42:1e:b9:f4:f8:6d:86: f2:cc:af:9b:49:25:bc:11:a1:84:c1:97:6b:0b:37: 14:4e:2c:a4:04:3a:88:34:55:73:c5:df:a7:48:17: 15:d4:d8:89:2c:68:dc:89:dc:0f:87:63:d6:e3:ce: 12:ae:76:b0:13:78:c6:66:3c:0d:29:b0:88:a4:d7: a7:7d:04:bd:9f:b9:ca:bc:cc:57:85:2b:7d:d9:e5: a8:b6:60:b2:48:af:35:30:f5:91:48:7e:cc:75:dd: 0c:a4:00:22:60:a4:56:5d:23:6c:60:a2:be:8f:58: 2a:d6:d4:0b:01:03:03:b6:70:69:6a:de:8a:52:08: 07:78:8f:68:bf:44:04:12:d5:1b:48:2e:e6:14:c0: 34:a1:13:29:8a:c1:3a:12:95:b4:b1:83:2f:24:ec: da:31:cf:d2:e5:a2:b0:45:c6:51:3b:f4:37:c7:4d: db:d3:4e:0f:7f:b9:a6:8c:d5:cf:af:81:40:c4:e3: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B7:13:D9:8C:36:64:C7:35:82:88:29:9C:C1:8D:F8:91:7B:CF:2E X509v3 Authority Key Identifier: keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:dc:43:17:82:ce:c1:32:ee:30:e5:53:45:83:26:f8:8d:b3: 0b:af:88:2e:4f:b5:91:bf:19:db:ce:a5:da:ad:13:07:d4:d1: 74:8b:4a:ae:fa:0c:54:8e:b0:99:cd:69:a3:7f:cd:c1:f5:87: dc:f3:99:5a:ee:3d:23:21:a2:8c:65:8f:3f:8d:73:57:a1:77: 6a:86:42:2b:72:b3:8f:8e:22:3b:d0:77:ab:fe:a1:9b:a7:8b: 21:c1:bb:a1:fc:a1:b4:27:68:76:be:02:8f:7b:48:e1:81:cf: 54:4c:bd:e8:00:bb:58:a1:2c:8e:88:49:36:cc:2f:8e:28:c0: 45:60:8f:30:18:0e:b6:0d:a1:cc:3b:ce:97:86:14:91:f7:bd: 92:ec:bc:ec:a8:70:39:7f:b3:17:d8:95:c1:ea:d6:8e:dd:d0: ba:58:9f:2f:60:bd:bf:f3:7d:2f:fd:68:32:02:6b:69:ac:d8: 49:0c:29:d7:6a:68:ee:2a:01:40:d9:2c:35:1c:4c:1f:0f:f6: 04:a1:b9:a9:a9:cf:1d:89:a8:e2:75:1f:ce:de:da:7f:4c:db: eb:63:3c:e2:af:c9:32:f2:e7:68:75:a9:eb:87:0c:64:01:a2: 93:75:b5:ce:04:70:79:a8:d1:16:ff:dd:5f:87:8e:3a:26:33: d9:15:4a:24 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtDyaWOjY186XcC744rAQVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0 YjZlMTMwHhcNMjUxMjIyMDIwMDQ3WhcNMjUxMjIzMDIwMDQ3WjAzMTEwLwYDVQQD Eyg1M2I3MTNkOThjMzY2NGM3MzU4Mjg4Mjk5Y2MxOGRmODkxN2JjZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpVAVktM8JhuZlQoVQKbIc2xw7+q 3Ne+JXEb+4YWXbyelPx4Q3kW3cToBPSH4AgD8viusalWAtFyHZ/REte90l7QE0Ie ufT4bYbyzK+bSSW8EaGEwZdrCzcUTiykBDqINFVzxd+nSBcV1NiJLGjcidwPh2PW 484SrnawE3jGZjwNKbCIpNenfQS9n7nKvMxXhSt92eWotmCySK81MPWRSH7Mdd0M pAAiYKRWXSNsYKK+j1gq1tQLAQMDtnBpat6KUggHeI9ov0QEEtUbSC7mFMA0oRMp isE6EpW0sYMvJOzaMc/S5aKwRcZRO/Q3x03b004Pf7mmjNXPr4FAxOPC2QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFO3E9mMNmTHNYKIKZzBjfiRe88uMB8GA1UdIwQY MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh LTZiOWRjYTljNGVjZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhLzllNjdmNS1lNTgwLTQ2ODYtYjgyYS02YjlkY2E5YzRl Y2UvMS8xLXRwQmQwZGxwTTJ3VU5ncThSdW4wdFZMYmhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9xD F4LOwTLuMOVTRYMm+I2zC6+ILk+1kb8Z286l2q0TB9TRdItKrvoMVI6wmc1po3/N wfWH3POZWu49IyGijGWPP41zV6F3aoZCK3Kzj44iO9B3q/6hm6eLIcG7ofyhtCdo dr4Cj3tI4YHPVEy96AC7WKEsjohJNswvjijARWCPMBgOtg2hzDvOl4YUkfe9kuy8 7KhwOX+zF9iVwerWjt3QulifL2C9v/N9L/1oMgJraazYSQwp12po7ioBQNksNRxM Hw/2BKG5qanPHYmo4nUfzt7af0zb62M84q/JMvLnaHWp64cMZAGik3W1zgRweajR Fv/dX4eOOiYz2RVKJA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:05:29 2025 by rpki-client