This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json) Hash identifier: b/epcOdLKFE4MXMMiDl87iAHH3BBTonkk+yrYjpmqwE= Subject key identifier: 43:F8:12:EF:83:89:49:0D:AF:CC:23:7D:72:2D:97:88:7D:5C:FC:F4 Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3 Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3 Certificate serial: 019B3A21EB5FB3015A4A2AD5BE33EDD9386F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft Manifest number: 0F8B Signing time: Sat 20 Dec 2025 05:00:59 +0000 Manifest this update: Sat 20 Dec 2025 05:00:59 +0000 Manifest next update: Sun 21 Dec 2025 05:00:59 +0000 Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: ZbL38b4yrvFQaR1S06wf7pJL/ddYiFFw38lQ+jV352I=) 2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:eb:5f:b3:01:5a:4a:2a:d5:be:33:ed:d9:38:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3 Validity Not Before: Dec 20 05:00:59 2025 GMT Not After : Dec 21 05:00:59 2025 GMT Subject: CN=43f812ef8389490dafcc237d722d97887d5cfcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b1:e9:fc:89:fc:b0:0b:c4:22:8a:ad:a4:55: be:1c:7f:2b:29:61:54:e2:94:b3:64:d4:c0:8a:fe: 7b:4f:30:15:d2:f3:48:c6:50:31:f3:2f:ad:4b:23: 5f:b5:00:3e:91:b9:ec:b2:0a:56:dd:aa:b9:03:06: 63:e2:57:11:c8:99:b3:46:cf:d9:7e:75:ed:d0:9a: ee:af:ed:af:20:8f:0e:d2:25:af:5c:4a:80:b3:71: bb:df:f6:aa:29:7c:0b:21:77:15:12:7e:9e:7b:63: e0:aa:d7:1b:56:f9:8e:51:54:a5:18:33:94:af:2f: 31:d2:1a:f5:ea:13:c4:30:fc:f7:d7:be:f3:b2:f4: 32:7c:3b:f3:2e:3b:62:b3:0d:bf:6f:ac:8f:de:b8: 77:90:a5:dc:0d:b6:b5:dc:34:52:9d:8f:41:58:1e: 46:b3:18:32:81:52:54:af:b8:a0:71:ee:da:82:5d: bd:34:bf:b7:b4:cd:e6:5b:75:7d:0f:49:70:ba:f5: d0:d6:da:03:0c:18:8e:df:88:7c:3f:1c:b1:ec:16: 43:2a:d8:55:50:e6:76:d4:9b:eb:dc:c0:26:a6:81: e7:02:48:0b:de:74:35:d6:41:8b:a6:94:e6:35:16: 43:ca:eb:94:f5:9b:ce:0c:80:a4:df:47:a7:d7:6a: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F8:12:EF:83:89:49:0D:AF:CC:23:7D:72:2D:97:88:7D:5C:FC:F4 X509v3 Authority Key Identifier: keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a6:21:2c:41:6d:9a:a8:66:09:31:e6:81:6c:00:5e:1d:32: 48:b0:1e:12:a5:13:4b:96:90:27:0b:37:dc:93:71:b3:95:02: ee:83:8a:1c:ae:81:82:c2:4c:30:05:df:60:00:aa:56:88:64: 95:bc:f1:cd:7f:77:ea:5a:2c:84:af:a8:4a:07:40:a5:e6:bf: 11:58:1f:be:47:f0:57:6f:5e:8c:e2:89:a2:d2:18:3b:4e:26: f0:89:92:c6:2b:b9:05:4a:4a:e0:fd:c1:83:0c:7e:5c:c6:7c: 41:88:53:68:2e:a3:16:18:39:b7:d6:99:e3:27:a9:91:fd:51: 0b:2e:72:3b:5f:95:28:d0:bb:92:d6:86:8d:6a:cf:f0:f9:f8: 39:81:15:30:e3:f0:4c:af:10:03:1f:3f:f9:1f:e2:37:04:7e: bf:87:41:1b:ac:b9:b8:c8:f6:06:95:e2:10:f8:27:33:37:88: fc:dc:71:2d:51:c3:5b:9b:79:5f:24:e9:8d:16:96:fa:68:9e: 94:d7:f4:12:8e:8f:78:44:92:b3:fe:73:9f:9f:5d:c1:1e:3a: 1a:c7:9d:93:4e:78:f3:8b:93:4d:23:92:77:fc:1d:42:68:69: 13:02:62:a7:bd:43:48:28:c6:57:bf:72:90:d3:30:7f:d5:06: 9b:35:7f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IetfswFaSirVvjPt2ThvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh NWFhYTMwHhcNMjUxMjIwMDUwMDU5WhcNMjUxMjIxMDUwMDU5WjAzMTEwLwYDVQQD Eyg0M2Y4MTJlZjgzODk0OTBkYWZjYzIzN2Q3MjJkOTc4ODdkNWNmY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LHp/In8sAvEIoqtpFW+HH8rKWFU 4pSzZNTAiv57TzAV0vNIxlAx8y+tSyNftQA+kbnssgpW3aq5AwZj4lcRyJmzRs/Z fnXt0Jrur+2vII8O0iWvXEqAs3G73/aqKXwLIXcVEn6ee2PgqtcbVvmOUVSlGDOU ry8x0hr16hPEMPz3177zsvQyfDvzLjtisw2/b6yP3rh3kKXcDba13DRSnY9BWB5G sxgygVJUr7igce7agl29NL+3tM3mW3V9D0lwuvXQ1toDDBiO34h8Pxyx7BZDKthV UOZ21Jvr3MAmpoHnAkgL3nQ11kGLppTmNRZDyuuU9ZvODICk30en12rIywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP4Eu+DiUkNr8wjfXItl4h9XPz0MB8GA1UdIwQY MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt OWFkYTIzNzhhOWEwLzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqYhLEFt mqhmCTHmgWwAXh0ySLAeEqUTS5aQJws33JNxs5UC7oOKHK6BgsJMMAXfYACqVohk lbzxzX936loshK+oSgdApea/EVgfvkfwV29ejOKJotIYO04m8ImSxiu5BUpK4P3B gwx+XMZ8QYhTaC6jFhg5t9aZ4yepkf1RCy5yO1+VKNC7ktaGjWrP8Pn4OYEVMOPw TK8QAx8/+R/iNwR+v4dBG6y5uMj2BpXiEPgnMzeI/NxxLVHDW5t5XyTpjRaW+mie lNf0Eo6PeESSs/5zn59dwR46Gsedk05484uTTSOSd/wdQmhpEwJip71DSCjGV79y kNMwf9UGmzV/Pg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:27 2025 by rpki-client