This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft File: 1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json) Hash identifier: 10weLMv+rn7i4QTR9L/kp8dqY9oCn4yKzYWcmotqSkc= Subject key identifier: BF:06:A1:8B:17:D9:77:08:FD:15:30:F1:77:DC:53:B4:51:30:B1:09 Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Certificate serial: 019B39EB2AA3C16B1DAC4C80CD59EF2DC138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 04:01:11 +0000 Manifest this update: Sat 20 Dec 2025 04:01:11 +0000 Manifest next update: Sun 21 Dec 2025 04:01:11 +0000 Files and hashes: 1: 1-9AP2m6e3Yu4skuF6PnUZU7ynjw.roa (hash: SxUOeSb5IZbPcr5PULvmHmKXVLJgmiMvzroaF4Tx6vM=) 2: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: aisr4hcjaJe+xrvkLzvbPOndKNUzUhQ2rs4nBqhviNc=) 3: 2tFj9_tuvHdE6yjNxLbekXML8wY.roa (hash: /lbJk8NoZ4p8z6eLLr9xWEF8qpeemJ917/7L62Dt9OY=) 4: OhDCqCKfAFaXsXhd0gKQoDKYCvI.roa (hash: QLijyVoBjHRCj6G7QWN6t5aH2KftVDSPxZ4yQhURnSM=) 5: gpqrBIPPCCPf0ZtTIR8VqA07mI4.roa (hash: bX3sQ6zhlmJhD+C6SZtKleOngtVc916nv+7v57xeexs=) 6: tiYFwAJDJd26p4Ey1IP7FxpONvg.roa (hash: jiqo6KPoLT8BsZ7lPEc/rIbVXD1zFAqeKQ1qUkmvE44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:2a:a3:c1:6b:1d:ac:4c:80:cd:59:ef:2d:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Validity Not Before: Dec 20 04:01:11 2025 GMT Not After : Dec 21 04:01:11 2025 GMT Subject: CN=bf06a18b17d97708fd1530f177dc53b45130b109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:3c:5e:7e:83:47:1b:aa:83:50:eb:ee:85: 18:3b:5f:14:fa:a9:c0:18:d6:4c:30:c3:e2:8f:a8: 70:92:f6:75:a2:cd:2b:ca:f3:cc:a1:7c:ef:44:38: b9:ce:b5:7c:4c:21:98:c5:7e:90:ce:a9:7f:d2:50: 25:70:cc:1c:be:94:a9:0b:ed:85:9a:4b:ad:79:fc: 61:d4:51:a9:5c:71:1a:d1:34:a4:89:6f:89:ca:f4: 0e:56:38:63:dd:55:8e:00:ea:15:93:01:6a:c7:e3: f8:cf:57:59:d4:36:90:85:a6:c9:18:e0:28:34:5b: ac:aa:4d:31:6c:69:9e:60:f7:85:11:5a:f2:be:2d: 2e:44:7c:37:f9:f4:2b:bb:f5:1e:40:56:54:75:84: 01:0a:de:ac:4d:06:71:c4:2a:a8:18:6e:23:ce:d2: 43:75:fb:6d:26:d6:28:1a:de:d3:4c:49:32:c9:0b: 75:bd:7d:fb:62:05:6d:21:07:c6:c5:10:f9:e6:14: 70:5f:86:30:82:b1:10:4b:2f:f0:15:85:c3:43:0c: e6:20:72:b9:a8:e7:d6:25:60:f0:b1:74:21:46:ed: 45:71:2a:e9:48:16:35:df:89:e8:1e:5b:0a:3d:70: d4:28:35:93:82:e1:9b:85:b6:93:00:9f:c2:3e:7b: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:06:A1:8B:17:D9:77:08:FD:15:30:F1:77:DC:53:B4:51:30:B1:09 X509v3 Authority Key Identifier: keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:15:44:da:96:fb:d0:a5:72:08:c9:8b:df:eb:d2:e1:d6:9a: d7:0f:59:be:e7:de:f9:2b:dd:d0:29:0d:79:52:40:1e:9b:9b: 77:ff:44:f5:68:c9:b0:4c:1c:a6:2f:3f:12:5e:29:9e:4b:da: 7c:cb:cc:4c:a9:e5:cb:9a:6a:e2:57:27:fc:a3:7d:48:80:da: b3:68:4c:5b:ca:3b:c8:dd:b1:82:f5:19:8a:45:c3:78:72:0f: c3:8c:20:14:9d:8f:c5:34:df:2e:4c:8f:1d:4a:5e:e9:21:31: 40:47:47:d9:6c:12:f8:75:bb:27:53:87:40:3f:4c:e2:fb:0d: 10:8f:6c:58:b0:ff:18:9c:26:d3:d8:8a:f4:89:0a:30:23:35: 2d:d7:4f:5a:7f:f3:27:ff:76:97:c0:0f:e9:26:a2:98:4b:fe: d5:a8:9d:19:c1:3f:bd:ba:2e:48:64:6f:33:59:83:95:df:e3: 9c:f9:40:94:7b:a7:37:8d:22:5b:1c:0d:40:53:e8:df:61:a1: 55:60:f2:a9:e1:a0:ab:63:3f:98:9f:d9:29:e1:79:65:7f:76: ba:b1:c3:6b:14:9b:c9:56:b3:ff:3a:15:25:bc:7a:c1:30:88: 99:00:2b:49:6b:e7:3a:6d:a6:81:80:76:e5:30:7f:67:c1:fa: e4:86:9b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yqjwWsdrEyAzVnvLcE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5 ZjVmZWIwHhcNMjUxMjIwMDQwMTExWhcNMjUxMjIxMDQwMTExWjAzMTEwLwYDVQQD EyhiZjA2YTE4YjE3ZDk3NzA4ZmQxNTMwZjE3N2RjNTNiNDUxMzBiMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbE8Xn6DRxuqg1Dr7oUYO18U+qnA GNZMMMPij6hwkvZ1os0ryvPMoXzvRDi5zrV8TCGYxX6Qzql/0lAlcMwcvpSpC+2F mkutefxh1FGpXHEa0TSkiW+JyvQOVjhj3VWOAOoVkwFqx+P4z1dZ1DaQhabJGOAo NFusqk0xbGmeYPeFEVryvi0uRHw3+fQru/UeQFZUdYQBCt6sTQZxxCqoGG4jztJD dfttJtYoGt7TTEkyyQt1vX37YgVtIQfGxRD55hRwX4YwgrEQSy/wFYXDQwzmIHK5 qOfWJWDwsXQhRu1FcSrpSBY134noHlsKPXDUKDWTguGbhbaTAJ/CPnsNKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8GoYsX2XcI/RUw8XfcU7RRMLEJMB8GA1UdIwQY MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt NmExZTBlYzcxZGE4LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4 LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhVE2pb7 0KVyCMmL3+vS4daa1w9Zvufe+Svd0CkNeVJAHpubd/9E9WjJsEwcpi8/El4pnkva fMvMTKnly5pq4lcn/KN9SIDas2hMW8o7yN2xgvUZikXDeHIPw4wgFJ2PxTTfLkyP HUpe6SExQEdH2WwS+HW7J1OHQD9M4vsNEI9sWLD/GJwm09iK9IkKMCM1LddPWn/z J/92l8AP6SaimEv+1aidGcE/vbouSGRvM1mDld/jnPlAlHunN40iWxwNQFPo32Gh VWDyqeGgq2M/mJ/ZKeF5ZX92urHDaxSbyVaz/zoVJbx6wTCImQArSWvnOm2mgYB2 5TB/Z8H65Iabow== -----END CERTIFICATE-----Generated at Sat Dec 20 11:16:48 2025 by rpki-client