This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json) Hash identifier: U66dEirGuA4VcXbmuEjpvwFQBVxRwFnlLjaAlWFyyc4= Subject key identifier: 52:DF:1D:37:84:A6:10:78:C0:A1:8E:EC:9E:A0:F3:3C:DF:EA:CD:F3 Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Certificate serial: 019B3CEC8BA0E9BAA9F19FC23A5D535C703C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft Manifest number: 143F Signing time: Sat 20 Dec 2025 18:01:33 +0000 Manifest this update: Sat 20 Dec 2025 18:01:33 +0000 Manifest next update: Sun 21 Dec 2025 18:01:33 +0000 Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: 8PD3m9Vffc8a0a7Pf8BZuqfKFfGtcDHOo7trtYAq3NM=) 2: r5AAElpvoRvsvqDIStvP7OwyqiY.roa (hash: 5QwlL37mFb39gbIRkjIRN+81w2qi6CPjGZSoYRa8lhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:8b:a0:e9:ba:a9:f1:9f:c2:3a:5d:53:5c:70:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Validity Not Before: Dec 20 18:01:33 2025 GMT Not After : Dec 21 18:01:33 2025 GMT Subject: CN=52df1d3784a61078c0a18eec9ea0f33cdfeacdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:16:b3:79:c5:c7:c0:50:ba:f2:da:bb:d0: 48:a2:a7:1c:84:4d:69:1c:f7:df:07:1d:09:d6:96: 49:a6:26:a4:21:3d:48:c9:20:02:62:cc:cf:69:86: 9a:a3:03:f9:0a:bc:24:c1:3b:ea:76:5f:45:38:3c: bd:f6:15:df:6b:30:cb:ff:11:17:04:af:1f:05:a5: 86:be:1c:4f:31:95:14:25:6c:0f:f5:79:b9:7a:e7: 08:d4:23:dd:7b:f5:bc:b0:c7:3f:dd:ea:13:fa:0e: e0:dd:8d:6a:39:19:eb:2e:cc:19:6a:52:75:2b:d7: e1:ea:5d:16:53:b8:68:13:5c:c7:1e:00:97:46:b7: 87:1e:87:77:b4:aa:5a:d0:ec:59:14:76:0a:58:a8: 45:7f:54:92:b8:d5:d9:3b:a5:3b:50:3f:a0:7f:7a: 98:52:9a:a5:68:28:e5:98:b8:28:43:0f:9f:4e:45: 99:80:c5:80:69:eb:02:da:9b:a0:dd:b8:43:8b:49: 98:75:8c:9f:3d:18:d9:18:b7:12:a6:ba:ca:c4:fa: a6:d8:d5:6e:15:fc:0d:cb:b3:1d:38:08:4a:dd:96: d5:96:9b:fb:18:8e:a2:ff:12:c1:ea:bd:89:4f:dc: b5:2b:c7:55:37:77:23:38:18:b0:a5:e2:07:cb:b6: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:1D:37:84:A6:10:78:C0:A1:8E:EC:9E:A0:F3:3C:DF:EA:CD:F3 X509v3 Authority Key Identifier: keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:79:f7:db:74:95:6f:7c:18:9b:2f:62:20:27:a3:da:ce: 7a:46:9d:29:3a:d4:d9:9a:ee:9c:10:cb:8d:39:d4:40:3a:b8: d1:43:66:2f:18:2c:4f:da:12:d6:e1:fc:c1:08:46:81:2d:ec: f8:20:d9:bd:1b:36:9b:77:6f:7a:7e:0f:06:8f:3a:5e:bc:db: 8f:80:89:91:20:8d:ef:ad:1e:43:5c:f7:14:15:6e:ea:73:20: a0:61:9d:7f:f8:42:30:b6:28:69:ef:5a:47:97:04:24:7f:56: 04:bd:18:75:1a:b6:6a:0d:e1:20:1c:7d:8f:18:92:b0:a0:2c: 22:7f:b9:c3:6b:38:0a:fe:45:01:3d:01:14:e4:1c:42:41:1a: cd:7c:39:71:21:6d:f4:77:14:61:2b:98:e8:cd:11:69:27:da: 66:f8:75:ea:62:fb:95:9b:ce:f9:fd:1b:8a:d1:39:3a:a1:6a: c5:7a:6d:0a:e8:af:46:0a:59:1e:52:1e:d4:1e:15:b7:03:f2: 34:c5:4f:99:87:f3:bf:f1:fd:83:44:39:08:4d:30:d6:ca:ed: a9:af:f2:f7:2b:83:af:86:1a:9b:da:13:3f:a3:2a:69:b3:c7: 8d:8f:83:ea:db:d1:f2:98:f2:94:8b:1c:7f:c2:bf:94:f6:99: 22:7a:47:0d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs87Iug6bqp8Z/COl1TXHA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy NTMwMWEwHhcNMjUxMjIwMTgwMTMzWhcNMjUxMjIxMTgwMTMzWjAzMTEwLwYDVQQD Eyg1MmRmMWQzNzg0YTYxMDc4YzBhMThlZWM5ZWEwZjMzY2RmZWFjZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5gWs3nFx8BQuvLau9BIoqcchE1p HPffBx0J1pZJpiakIT1IySACYszPaYaaowP5CrwkwTvqdl9FODy99hXfazDL/xEX BK8fBaWGvhxPMZUUJWwP9Xm5eucI1CPde/W8sMc/3eoT+g7g3Y1qORnrLswZalJ1 K9fh6l0WU7hoE1zHHgCXRreHHod3tKpa0OxZFHYKWKhFf1SSuNXZO6U7UD+gf3qY UpqlaCjlmLgoQw+fTkWZgMWAaesC2pug3bhDi0mYdYyfPRjZGLcSprrKxPqm2NVu FfwNy7MdOAhK3ZbVlpv7GI6i/xLB6r2JT9y1K8dVN3cjOBiwpeIHy7Z9XwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFLfHTeEphB4wKGO7J6g8zzf6s3zMB8GA1UdIwQY MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz LWRhZDA0MjBiODVkMy8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2LzFjOTgwOS0xZjYwLTQzYzItODEwMy1kYWQwNDIwYjg1 ZDMvMS8xLVJuaDhfNXB0T3ZmOENxYWhYNThiQ3NsTUJvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwh5 99t0lW98GJsvYiAno9rOekadKTrU2ZrunBDLjTnUQDq40UNmLxgsT9oS1uH8wQhG gS3s+CDZvRs2m3dven4PBo86Xrzbj4CJkSCN760eQ1z3FBVu6nMgoGGdf/hCMLYo ae9aR5cEJH9WBL0YdRq2ag3hIBx9jxiSsKAsIn+5w2s4Cv5FAT0BFOQcQkEazXw5 cSFt9HcUYSuY6M0RaSfaZvh16mL7lZvO+f0bitE5OqFqxXptCuivRgpZHlIe1B4V twPyNMVPmYfzv/H9g0Q5CE0w1srtqa/y9yuDr4Yam9oTP6MqabPHjY+D6tvR8pjy lIscf8K/lPaZInpHDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:11 2025 by rpki-client