This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json) Hash identifier: UpT7yeZAcsYw3LJJ5BmjJj2OfkF5g8fnyjkXiGtb0A8= Subject key identifier: F4:30:EA:D2:6E:D6:9A:A5:2D:40:DE:B0:65:A7:69:29:5D:B5:1C:A3 Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef Certificate serial: 019AF352A5761F3BE52861B8A19D26CF5510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: i5SS1cm49VtufKxT8Q/919KQ5rPCmPGnBEMavFfkOEQ=) 2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a5:76:1f:3b:e5:28:61:b8:a1:9d:26:cf:55:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=f430ead26ed69aa52d40deb065a769295db51ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:df:91:dc:66:4f:b7:18:de:00:48:f2:5a: 27:c1:25:e2:25:e9:29:d8:d6:9e:a6:52:88:60:be: 00:8e:3a:ed:32:78:e0:97:c4:17:36:a5:5d:1b:43: 0c:1d:bf:cc:03:7c:2c:e5:21:95:9e:1f:38:30:d7: 5d:d0:9c:2e:99:f2:ab:b2:78:aa:ff:4e:0b:13:c2: d2:f4:19:65:c3:4c:f2:b2:a0:f4:13:b4:91:23:d0: db:d4:7e:c4:fd:d0:25:4e:86:7f:38:81:01:43:2f: 14:32:93:d2:cf:c9:7d:35:29:9d:09:09:a4:03:fd: 18:ea:88:51:d3:b7:56:9c:dc:5b:c2:d7:85:33:bb: e2:df:9e:22:15:e8:6a:0f:6b:cf:54:e7:f2:73:f1: 92:93:33:d9:74:a1:79:10:d6:ad:01:9a:8e:bf:6e: a4:7d:9d:df:c3:64:51:a9:4f:f4:5f:e4:f9:1f:78: c3:6d:2c:af:4b:18:cb:ef:28:0c:6f:bf:0c:0b:49: ec:cc:5c:a5:31:d0:d1:1d:7a:6d:c2:4c:77:69:f8: 43:b5:3b:26:8c:da:23:ba:be:d0:c7:94:f5:3e:8a: 93:62:c6:8f:bb:55:2c:00:82:55:75:3e:db:46:2e: 93:91:a3:5d:5d:20:a4:0c:92:9f:0d:85:5e:79:9d: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:30:EA:D2:6E:D6:9A:A5:2D:40:DE:B0:65:A7:69:29:5D:B5:1C:A3 X509v3 Authority Key Identifier: keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:02:0f:15:c5:71:82:4f:f9:40:bc:67:70:a5:9c:3a:d2:3f: e1:f1:93:1d:86:41:6b:f5:da:4a:97:ad:36:fe:02:91:90:88: 9e:c3:4a:d9:9b:99:6f:50:27:e2:e7:9a:ca:d2:ce:b2:0e:87: 37:c2:25:6d:14:28:a5:40:f3:28:1f:47:46:77:50:70:33:43: 50:e3:7e:de:04:c6:00:23:72:22:0c:a3:11:cb:b8:09:43:52: bf:d5:ea:fd:da:0b:f0:c8:b5:9c:80:bf:ac:52:cd:9a:14:c9: 0c:0d:9e:4b:b5:d6:39:f2:cd:c8:7e:24:8e:e0:8d:fc:1a:67: 5d:05:c6:ef:29:b1:ed:43:d1:e4:3e:d0:82:09:5a:3b:99:17: ae:82:2a:0a:a0:87:64:f9:8a:91:29:59:d6:4e:b2:f7:78:e1: 39:62:3b:43:3f:ed:2f:7a:2e:37:bc:95:d2:a8:62:16:0a:fd: 69:ca:41:d8:8d:e9:16:25:98:e1:2a:7e:c0:3c:9e:98:9d:fc: 22:f5:66:ee:d1:29:04:3a:0c:1b:a6:26:0a:8c:39:86:60:ee: 07:8b:3f:1e:f7:85:b8:4b:b7:ee:d0:84:e3:50:36:7b:84:8c: fc:5a:fc:9f:4b:7b:ac:81:66:34:1e:db:6a:1b:d0:3b:d3:6b: f1:ce:71:db -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzUqV2HzvlKGG4oZ0mz1UQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MWY2YWQwZGYzODM3MjBkM2E1ZDAzYmE4OGMxOTMwOTVj NTc0ZWYwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EyhmNDMwZWFkMjZlZDY5YWE1MmQ0MGRlYjA2NWE3NjkyOTVkYjUxY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw/fkdxmT7cY3gBI8lonwSXiJekp 2NaeplKIYL4AjjrtMnjgl8QXNqVdG0MMHb/MA3ws5SGVnh84MNdd0JwumfKrsniq /04LE8LS9Bllw0zysqD0E7SRI9Db1H7E/dAlToZ/OIEBQy8UMpPSz8l9NSmdCQmk A/0Y6ohR07dWnNxbwteFM7vi354iFehqD2vPVOfyc/GSkzPZdKF5ENatAZqOv26k fZ3fw2RRqU/0X+T5H3jDbSyvSxjL7ygMb78MC0nszFylMdDRHXptwkx3afhDtTsm jNojur7Qx5T1PoqTYsaPu1UsAIJVdT7bRi6TkaNdXSCkDJKfDYVeeZ2bUwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPQw6tJu1pqlLUDesGWnaSldtRyjMB8GA1UdIwQY MBaAFPgfatDfODcg06XQO6iMGTCVxXTvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1COXEwTjg0TnlEVHBkQTdxSXdaTUpYRmRPOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTkzZTlmLThjYWYtNDlhMC04Njhl LWE4YzRhZGY5ODcyMS8xLzEtQjlxME44NE55RFRwZEE3cUl3Wk1KWEZkTzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0L2U5M2U5Zi04Y2FmLTQ5YTAtODY4ZS1hOGM0YWRmOTg3 MjEvMS8xLUI5cTBOODROeURUcGRBN3FJd1pNSlhGZE84LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwIP FcVxgk/5QLxncKWcOtI/4fGTHYZBa/XaSpetNv4CkZCInsNK2ZuZb1An4ueaytLO sg6HN8IlbRQopUDzKB9HRndQcDNDUON+3gTGACNyIgyjEcu4CUNSv9Xq/doL8Mi1 nIC/rFLNmhTJDA2eS7XWOfLNyH4kjuCN/BpnXQXG7ymx7UPR5D7QgglaO5kXroIq CqCHZPmKkSlZ1k6y93jhOWI7Qz/tL3ouN7yV0qhiFgr9acpB2I3pFiWY4Sp+wDye mJ38IvVm7tEpBDoMG6YmCow5hmDuB4s/HveFuEu37tCE41A2e4SM/Fr8n0t7rIFm NB7bahvQO9Nr8c5x2w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:42 2025 by rpki-client