This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json) Hash identifier: vN4XffHfyr7yHqwryvAnrEfnAucOkrq4OpmnsRTzrr0= Subject key identifier: E8:F2:54:95:02:62:F4:B2:53:BC:37:81:AB:08:86:15:36:E3:64:2A Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9 Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9 Certificate serial: 019B3A587771C5F4D1181FA880B1BFED5D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft Manifest number: 024A Signing time: Sat 20 Dec 2025 06:00:34 +0000 Manifest this update: Sat 20 Dec 2025 06:00:34 +0000 Manifest next update: Sun 21 Dec 2025 06:00:34 +0000 Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: 6SBL6VQc3Xz6XPX3Uk4k9sT6WgcHOMpRAjT2gTDYNxs=) 2: jBcC68-4tNTaOUs94kizBYj_5jE.roa (hash: CWF9O9xI5w99y3uaUjJU6mOhyBR4YqldPuJsucAG1t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:77:71:c5:f4:d1:18:1f:a8:80:b1:bf:ed:5d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9 Validity Not Before: Dec 20 06:00:34 2025 GMT Not After : Dec 21 06:00:34 2025 GMT Subject: CN=e8f254950262f4b253bc3781ab08861536e3642a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:60:f6:8d:90:71:66:b8:c0:69:f9:17:d4: 95:a2:0b:b2:f5:59:44:d0:2f:5a:ae:c7:37:b6:36: ce:bd:fa:95:16:07:90:87:13:eb:86:3a:9f:7f:11: a1:08:88:7d:ca:58:36:ef:8d:10:dc:63:f7:49:fe: 2c:6c:1c:f5:17:80:ee:9e:61:a3:52:81:de:ef:ac: ce:9c:85:12:c3:ef:09:8e:93:a9:33:9b:49:3e:98: c1:c6:db:d9:fc:87:ac:64:6b:fe:81:7e:24:a5:50: 1c:dc:51:85:7f:4a:f8:59:ba:bb:f3:cf:ce:eb:8a: ad:e3:a6:a3:ee:7c:59:37:8a:43:8b:21:46:c4:10: f7:f5:b8:3f:00:22:90:8f:20:d1:f7:69:f1:a3:d6: 50:de:9c:95:0c:9b:db:fa:c9:7b:31:24:97:0a:29: 10:56:b8:b8:d7:b3:50:a0:30:30:20:e5:f2:d2:c7: 77:37:cd:db:1d:1c:3e:0f:af:2f:68:e8:e9:11:b0: e8:ce:24:d4:ad:da:92:54:a9:9b:11:e7:c3:67:ca: 49:34:8e:3b:5e:bf:33:32:d6:01:c7:c7:74:0c:c8: 9a:1a:63:02:43:77:05:d9:e0:ee:0e:ed:16:58:fa: a3:d2:7a:fd:e0:46:f5:25:c0:14:90:b6:fe:ad:8e: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F2:54:95:02:62:F4:B2:53:BC:37:81:AB:08:86:15:36:E3:64:2A X509v3 Authority Key Identifier: keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:92:e8:78:7f:8b:03:62:fd:1b:62:fa:61:0b:e2:c8:64:97: 55:2e:62:2f:e8:64:84:cc:e2:17:8a:5e:8c:33:a5:96:e8:77: ad:7b:cb:ff:55:a1:96:25:0f:d8:6d:86:2f:d2:58:28:03:76: 45:a4:56:bf:c7:29:88:3a:10:4b:d5:27:58:31:78:73:45:bb: 5a:46:30:72:4f:1f:c3:ae:7b:5b:a6:50:0b:0e:49:58:5b:be: b5:9d:93:50:49:4e:1c:48:c3:42:97:63:92:d1:5e:31:e6:c1: a6:8b:c9:23:33:c1:a4:86:e1:53:a1:36:1d:76:76:b9:b7:2c: 3a:fc:d7:79:8d:cc:23:56:7b:3b:87:cd:4d:05:03:cc:85:e7: 9e:cf:98:7b:e4:55:05:31:d5:29:7f:12:85:f9:9c:3a:53:5a: 03:02:cb:4d:cb:f4:cd:8a:73:f7:84:9f:57:68:12:4d:29:a9: ec:3b:5a:18:bb:f0:10:c4:ab:c0:bd:10:cc:51:fc:f6:6f:34: d1:aa:55:4a:d5:de:3d:e0:80:a4:e7:d0:fe:26:78:36:27:a7: ac:e5:ec:5f:25:fa:31:18:9d:c6:fa:6c:da:5e:c5:1f:4c:fc: c9:08:f2:51:26:0d:f7:fe:07:ec:d4:51:55:4c:38:18:18:96: 13:bf:ea:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHdxxfTRGB+ogLG/7V02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NzgzMWMxZjVlNjAwMjU0MmJjZWJhZGVmMjQxMjhhZDg0 NmVhZjkwHhcNMjUxMjIwMDYwMDM0WhcNMjUxMjIxMDYwMDM0WjAzMTEwLwYDVQQD EyhlOGYyNTQ5NTAyNjJmNGIyNTNiYzM3ODFhYjA4ODYxNTM2ZTM2NDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y9g9o2QcWa4wGn5F9SVoguy9VlE 0C9arsc3tjbOvfqVFgeQhxPrhjqffxGhCIh9ylg2740Q3GP3Sf4sbBz1F4DunmGj UoHe76zOnIUSw+8JjpOpM5tJPpjBxtvZ/IesZGv+gX4kpVAc3FGFf0r4Wbq788/O 64qt46aj7nxZN4pDiyFGxBD39bg/ACKQjyDR92nxo9ZQ3pyVDJvb+sl7MSSXCikQ Vri417NQoDAwIOXy0sd3N83bHRw+D68vaOjpEbDoziTUrdqSVKmbEefDZ8pJNI47 Xr8zMtYBx8d0DMiaGmMCQ3cF2eDuDu0WWPqj0nr94Eb1JcAUkLb+rY549QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjyVJUCYvSyU7w3gasIhhU242QqMB8GA1UdIwQY MBaAFNV4McH15gAlQrzrre8kEorYRur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQt NzQ2MzY1ZGJhNWJiLzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQtNzQ2MzY1ZGJhNWJi LzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJLoeH+L A2L9G2L6YQviyGSXVS5iL+hkhMziF4pejDOlluh3rXvL/1WhliUP2G2GL9JYKAN2 RaRWv8cpiDoQS9UnWDF4c0W7WkYwck8fw657W6ZQCw5JWFu+tZ2TUElOHEjDQpdj ktFeMebBpovJIzPBpIbhU6E2HXZ2ubcsOvzXeY3MI1Z7O4fNTQUDzIXnns+Ye+RV BTHVKX8ShfmcOlNaAwLLTcv0zYpz94SfV2gSTSmp7DtaGLvwEMSrwL0QzFH89m80 0apVStXePeCApOfQ/iZ4NienrOXsXyX6MRidxvps2l7FH0z8yQjyUSYN9/4H7NRR VUw4GBiWE7/q5w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:12:48 2025 by rpki-client