This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json) Hash identifier: 5deZspPpbAgY4jdgyhuS+VPk6euJX0s5uylM477LrqM= Subject key identifier: 9A:20:A5:E4:84:94:0D:5B:33:0E:8D:55:DE:F3:47:36:9F:1F:7E:3E Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Certificate serial: 019AF12E2D6AA7689C94BC736A12FB40DD07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft Manifest number: 1648 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: eU/pWf7/pcn+BQU3+/u9Dhf6aj724DoewgUexeQlbW0=) 2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2d:6a:a7:68:9c:94:bc:73:6a:12:fb:40:dd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=9a20a5e484940d5b330e8d55def347369f1f7e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:e4:85:b7:47:05:d8:bb:a6:a6:bd:5c:d4: c6:99:db:f2:48:7c:3f:b3:c9:a1:5f:49:b6:c5:59: d0:f7:ba:f7:14:4f:cb:5a:7f:b6:13:8f:ca:10:b6: 03:d4:a9:01:c9:f4:cc:0d:ab:25:31:31:d1:66:1c: 36:71:fb:80:44:5c:73:b0:f5:b0:c9:3a:41:1a:36: 8a:a4:85:e7:02:ea:a4:6e:9b:59:43:61:55:86:10: 4d:e2:34:cd:b4:3d:bd:cf:84:34:70:28:be:56:2c: 04:8c:72:55:f2:3b:5f:7f:49:f6:5a:52:62:c9:2a: bf:16:07:0b:0b:53:6b:15:ac:65:6f:44:b6:eb:1b: ce:f8:d1:4d:68:4e:ce:15:d7:43:05:47:52:4a:0b: 3f:1f:a3:30:c3:76:1f:64:0c:79:38:ee:e4:24:41: b2:3a:de:83:d8:4b:ae:c2:7c:9d:40:17:49:8d:72: 90:65:77:17:36:7c:0e:5f:d9:af:b5:6b:07:5c:85: 9c:65:c2:6e:c5:23:2a:f1:1a:40:d8:6c:03:e7:74: 2c:80:0b:a1:43:85:6f:6d:5c:c5:4e:b5:97:6c:6d: f3:5c:dd:96:ab:d0:ac:72:c1:f4:00:48:9a:de:ba: f1:7e:c7:8d:56:f8:36:47:cc:c1:8f:10:c7:d9:df: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:A5:E4:84:94:0D:5B:33:0E:8D:55:DE:F3:47:36:9F:1F:7E:3E X509v3 Authority Key Identifier: keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:82:ac:32:61:08:9f:b1:f4:22:24:aa:8e:f5:70:04:89:89: 57:18:70:c7:28:f3:33:dc:8a:0f:00:06:7a:5a:14:5f:0c:54: ec:86:c2:b9:56:2d:7d:5c:79:18:80:76:99:6f:f3:ac:55:b3: 07:00:37:ae:7b:c1:b3:81:87:d9:1e:ff:3b:a8:09:2c:fe:03: bb:e2:07:4c:4c:82:d0:9c:7c:ba:3d:7c:25:86:79:bf:ec:d1: e5:de:39:67:d3:a3:71:ac:ea:c0:d1:2d:6d:03:91:5a:2d:21: f0:e8:0d:ac:b2:94:c9:c0:95:3c:9b:ba:b7:17:c6:81:81:a8: af:80:69:f1:e7:9b:d6:53:6f:40:2e:87:eb:ac:14:45:c9:31: e7:5e:25:ce:f1:29:9f:cf:ad:55:db:df:d9:30:46:c2:77:89: de:4e:34:d4:cc:b1:c4:f4:9c:b6:59:8e:63:21:79:e6:64:34: 3a:a0:4b:47:8e:8b:a5:73:59:20:56:9b:e1:c8:f6:ba:68:72: b4:df:72:4e:60:2a:59:8a:5f:c9:e5:a6:45:3c:06:28:dc:c5: fa:ee:ed:6c:25:bc:24:9b:fc:2c:26:f7:3e:fe:cf:d5:60:06: e6:f4:76:eb:70:9b:24:69:5a:f6:e0:ec:ea:a8:54:dd:06:1d: 84:30:9f:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi1qp2iclLxzahL7QN0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx MTY2NDQwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD Eyg5YTIwYTVlNDg0OTQwZDViMzMwZThkNTVkZWYzNDczNjlmMWY3ZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAbkhbdHBdi7pqa9XNTGmdvySHw/ s8mhX0m2xVnQ97r3FE/LWn+2E4/KELYD1KkByfTMDaslMTHRZhw2cfuARFxzsPWw yTpBGjaKpIXnAuqkbptZQ2FVhhBN4jTNtD29z4Q0cCi+ViwEjHJV8jtff0n2WlJi ySq/FgcLC1NrFaxlb0S26xvO+NFNaE7OFddDBUdSSgs/H6Mww3YfZAx5OO7kJEGy Ot6D2EuuwnydQBdJjXKQZXcXNnwOX9mvtWsHXIWcZcJuxSMq8RpA2GwD53QsgAuh Q4VvbVzFTrWXbG3zXN2Wq9CscsH0AEia3rrxfseNVvg2R8zBjxDH2d/GFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJogpeSElA1bMw6NVd7zRzafH34+MB8GA1UdIwQY MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIKsMmEI n7H0IiSqjvVwBImJVxhwxyjzM9yKDwAGeloUXwxU7IbCuVYtfVx5GIB2mW/zrFWz BwA3rnvBs4GH2R7/O6gJLP4Du+IHTEyC0Jx8uj18JYZ5v+zR5d45Z9OjcazqwNEt bQORWi0h8OgNrLKUycCVPJu6txfGgYGor4Bp8eeb1lNvQC6H66wURckx514lzvEp n8+tVdvf2TBGwneJ3k401MyxxPSctlmOYyF55mQ0OqBLR46LpXNZIFab4cj2umhy tN9yTmAqWYpfyeWmRTwGKNzF+u7tbCW8JJv8LCb3Pv7P1WAG5vR263CbJGla9uDs 6qhU3QYdhDCfOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:25 2025 by rpki-client