This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json) Hash identifier: ua/pSpAwqdGFUpiZKHIlT0Nu7afZApCoct1fpR9MzOk= Subject key identifier: 2A:39:7C:DD:7D:9A:FD:CC:EE:D3:34:93:EE:73:E7:3A:AD:72:2B:93 Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7 Certificate serial: 019B3BA26F0277077796FD327BF19D9AD7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 12:00:59 +0000 Manifest this update: Sat 20 Dec 2025 12:00:59 +0000 Manifest next update: Sun 21 Dec 2025 12:00:59 +0000 Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: I5Lx8d6XCi29+b+fi1hY6mRidIUIpWYck4O8S3Bq5pU=) 2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=) 3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:6f:02:77:07:77:96:fd:32:7b:f1:9d:9a:d7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7 Validity Not Before: Dec 20 12:00:59 2025 GMT Not After : Dec 21 12:00:59 2025 GMT Subject: CN=2a397cdd7d9afdcceed33493ee73e73aad722b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:30:66:d5:79:ad:36:3c:44:8b:dc:4b:d7: 20:8d:21:66:22:b1:10:e8:9c:a4:cc:08:49:3c:58: 14:ce:d8:51:7a:bd:ab:0a:58:3f:47:76:d9:47:0e: 2f:cd:78:0b:5e:82:9d:e2:6b:83:0b:4d:a2:f5:11: 58:93:1c:7c:20:25:3f:00:2f:53:54:ad:6c:8a:f0: cb:cd:a9:03:b6:72:8e:95:07:a8:32:47:3a:17:83: 4d:e0:d7:62:a6:75:ae:24:a1:b0:5d:b5:6c:fa:c0: 53:32:b1:75:47:6b:dd:88:65:01:96:a1:a7:de:a0: 6a:e7:c0:49:a8:47:2f:d1:07:07:fd:fb:b0:f2:6f: 2e:56:07:0c:05:5d:14:f8:a0:8a:a6:cb:97:4b:dc: 99:a5:b4:b2:9e:e4:d7:73:69:9d:54:f8:97:e6:d6: 78:a8:4e:ed:f9:0b:50:a2:a5:ee:23:ed:8b:39:45: ce:ef:bf:79:44:ac:87:34:39:4e:15:c7:c7:7a:e3: c3:33:8b:2a:bc:96:09:53:15:b7:59:ba:51:e5:91: f1:c2:30:44:70:a5:b9:be:f6:3b:0a:a0:95:15:d6: 61:04:96:18:9d:a1:77:83:99:41:41:b9:54:d5:75: 63:5b:08:f8:af:34:6f:57:09:91:34:9a:93:39:05: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:7C:DD:7D:9A:FD:CC:EE:D3:34:93:EE:73:E7:3A:AD:72:2B:93 X509v3 Authority Key Identifier: keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6a:2e:e8:30:d8:5d:34:c0:3b:6f:ff:99:a3:39:28:0e:1c: 65:8f:22:a8:ba:7d:37:a4:e8:c1:91:b5:87:89:65:32:9e:a6: 2a:e2:06:4a:69:d8:55:83:a3:e0:d9:d7:4a:ba:7c:27:c1:82: cc:36:54:b1:38:b1:68:7e:b4:23:7d:f1:f0:d9:16:33:bb:89: 5b:17:76:fe:e9:f3:9f:cf:12:8a:fa:f8:f1:8a:65:cb:8c:38: d6:fc:b2:8c:c0:f1:43:6f:9b:6f:1c:1c:b5:db:74:cf:e5:72: 27:eb:b2:d9:0a:55:69:a5:13:96:38:bd:cb:96:18:60:8b:9e: 2f:94:f3:48:bc:90:51:d1:0f:dc:eb:2f:7a:79:75:c6:4c:3d: 90:f9:69:eb:a9:f7:dc:74:f2:79:32:eb:42:8c:3b:59:5e:68: 01:e4:66:10:3a:1f:eb:67:2d:ee:ed:2d:6b:af:35:21:2a:e0: d2:cf:3b:1d:54:98:b9:b3:26:a0:5e:e3:f6:e1:e6:9c:5e:51: 2d:f6:a4:7b:1c:bf:2c:7e:ba:30:05:24:82:94:f2:da:fc:15: 8d:42:8a:b9:17:18:15:12:42:08:70:42:56:dd:19:a3:e0:a3: c5:d2:67:b0:38:92:4c:e2:a0:34:0f:d5:93:54:03:28:27:f9: 9f:cc:2b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7om8Cdwd3lv0ye/GdmtfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4 YzE4YzcwHhcNMjUxMjIwMTIwMDU5WhcNMjUxMjIxMTIwMDU5WjAzMTEwLwYDVQQD EygyYTM5N2NkZDdkOWFmZGNjZWVkMzM0OTNlZTczZTczYWFkNzIyYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFIwZtV5rTY8RIvcS9cgjSFmIrEQ 6JykzAhJPFgUzthRer2rClg/R3bZRw4vzXgLXoKd4muDC02i9RFYkxx8ICU/AC9T VK1sivDLzakDtnKOlQeoMkc6F4NN4NdipnWuJKGwXbVs+sBTMrF1R2vdiGUBlqGn 3qBq58BJqEcv0QcH/fuw8m8uVgcMBV0U+KCKpsuXS9yZpbSynuTXc2mdVPiX5tZ4 qE7t+QtQoqXuI+2LOUXO7795RKyHNDlOFcfHeuPDM4sqvJYJUxW3WbpR5ZHxwjBE cKW5vvY7CqCVFdZhBJYYnaF3g5lBQblU1XVjWwj4rzRvVwmRNJqTOQXhpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo5fN19mv3M7tM0k+5z5zqtciuTMB8GA1UdIwQY MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4 LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmou6DDY XTTAO2//maM5KA4cZY8iqLp9N6TowZG1h4llMp6mKuIGSmnYVYOj4NnXSrp8J8GC zDZUsTixaH60I33x8NkWM7uJWxd2/unzn88Sivr48Yply4w41vyyjMDxQ2+bbxwc tdt0z+VyJ+uy2QpVaaUTlji9y5YYYIueL5TzSLyQUdEP3Osvenl1xkw9kPlp66n3 3HTyeTLrQow7WV5oAeRmEDof62ct7u0ta681ISrg0s87HVSYubMmoF7j9uHmnF5R Lfakexy/LH66MAUkgpTy2vwVjUKKuRcYFRJCCHBCVt0Zo+CjxdJnsDiSTOKgNA/V k1QDKCf5n8wrLA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:39:49 2025 by rpki-client