This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft File: 1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json) Hash identifier: xNwKfdImJ8EAyFn/cJDiZqTCLZyf4T87aSXxsR7ZrBE= Subject key identifier: F5:26:FB:28:EE:60:D6:DB:3B:A5:E6:89:47:A9:1B:5A:94:05:53:7A Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE Certificate issuer: /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe Certificate serial: 019AF5778665832455A5892AD5889DDE71B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft Manifest number: 068B Signing time: Sat 06 Dec 2025 21:00:42 +0000 Manifest this update: Sat 06 Dec 2025 21:00:42 +0000 Manifest next update: Sun 07 Dec 2025 21:00:42 +0000 Files and hashes: 1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: 86HbHo+8fNEzF/BZnMdsRlq03IwF8jKy3TH+Xt0SytQ=) 2: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (hash: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:86:65:83:24:55:a5:89:2a:d5:88:9d:de:71:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe Validity Not Before: Dec 6 21:00:42 2025 GMT Not After : Dec 7 21:00:42 2025 GMT Subject: CN=f526fb28ee60d6db3ba5e68947a91b5a9405537a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:0d:f8:92:ac:4e:fe:97:c3:43:73:84:da: 1f:70:fd:47:39:de:4d:9a:57:b0:0b:6e:4c:1b:c7: 2d:5a:f6:e8:cf:66:ff:38:a4:6f:2f:08:2d:01:e5: 36:d1:57:69:b5:fc:b8:0c:fb:1c:ed:34:f7:af:20: 90:8a:79:7f:2d:69:bf:f1:48:3e:9d:27:41:54:eb: cf:36:85:ef:24:94:0f:16:a1:78:ff:9d:80:24:9b: 59:73:c3:5e:ef:36:1c:c2:83:bf:e2:86:5d:f1:cc: 19:ad:3e:f0:5f:e2:e4:4a:67:0a:c0:12:e9:12:30: b5:5b:30:05:ac:c6:b1:f4:19:51:3f:0c:13:e3:13: 4d:ed:9b:4d:d1:32:37:71:3a:b7:a2:c0:bd:63:cb: 1c:a6:34:7a:16:fe:25:df:23:db:9f:6b:27:7b:cd: cc:4e:73:e1:d3:b5:27:a2:ff:3d:f4:12:41:71:0a: 27:1f:81:d9:16:72:87:f9:4f:dc:a1:4a:12:21:b9: 26:86:a2:1c:f0:be:22:56:5e:70:23:06:c8:e9:cd: 54:3e:ed:f9:b0:d9:9b:57:4b:ea:aa:43:b0:8c:eb: c4:ae:6f:fb:dc:99:0b:4c:f0:a3:89:bf:2f:f4:ed: 22:61:26:8d:32:55:82:0e:79:e0:83:ac:5e:65:dc: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:FB:28:EE:60:D6:DB:3B:A5:E6:89:47:A9:1B:5A:94:05:53:7A X509v3 Authority Key Identifier: keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ca:27:46:bd:65:12:96:6d:b1:82:87:c0:09:a9:52:d9:e8: 35:69:a1:ae:bc:ee:6c:94:29:09:45:51:03:cd:14:68:0b:5f: be:f5:20:93:02:f0:ee:20:97:2f:fc:02:9a:f9:f3:81:5b:06: b9:b1:86:ff:fd:ef:f0:38:94:99:cd:5c:56:75:d6:1f:f7:91: 78:7a:d3:df:45:ca:fe:cb:e1:40:bc:8c:f9:03:4c:80:d6:eb: d0:a0:e5:e5:cd:cd:f7:0c:64:93:f0:10:d9:30:6e:ec:a9:06: bd:e4:31:09:86:cc:b5:ca:75:3a:59:95:d6:e1:6d:4a:97:c7: 67:fc:ba:ec:56:4d:a7:f1:bf:ba:29:90:b3:4c:b4:d7:30:af: f5:13:62:f2:cb:10:78:14:3d:b3:18:93:1e:13:8a:79:25:69: 2f:29:d0:98:ea:47:8a:f6:27:93:a3:2e:a5:e3:e5:8b:43:c7: 79:37:ba:e0:09:8f:73:68:ec:b1:b8:78:5a:7d:c7:b7:5c:9a: e4:ae:70:0f:e1:12:a6:89:17:a8:73:d1:6b:83:8c:99:9f:0d: ca:ec:25:68:53:b1:0f:77:a4:2d:36:cc:5d:ad:d4:d5:d6:9e: 2d:e1:ec:59:7f:48:b7:b5:3b:84:ac:fb:c4:e2:31:fd:52:ef: dc:0e:cd:9c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1d4ZlgyRVpYkq1Yid3nGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTI3YjhjMWRlNmIxNjFjNzk4YWI3Yjg1MTUzZDZiYTM3 OWVmYmUwHhcNMjUxMjA2MjEwMDQyWhcNMjUxMjA3MjEwMDQyWjAzMTEwLwYDVQQD EyhmNTI2ZmIyOGVlNjBkNmRiM2JhNWU2ODk0N2E5MWI1YTk0MDU1MzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2cN+JKsTv6Xw0NzhNofcP1HOd5N mlewC25MG8ctWvboz2b/OKRvLwgtAeU20Vdptfy4DPsc7TT3ryCQinl/LWm/8Ug+ nSdBVOvPNoXvJJQPFqF4/52AJJtZc8Ne7zYcwoO/4oZd8cwZrT7wX+LkSmcKwBLp EjC1WzAFrMax9BlRPwwT4xNN7ZtN0TI3cTq3osC9Y8scpjR6Fv4l3yPbn2sne83M TnPh07Unov899BJBcQonH4HZFnKH+U/coUoSIbkmhqIc8L4iVl5wIwbI6c1UPu35 sNmbV0vqqkOwjOvErm/73JkLTPCjib8v9O0iYSaNMlWCDnngg6xeZdxRlwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPUm+yjuYNbbO6XmiUepG1qUBVN6MB8GA1UdIwQY MBaAFPrie4wd5rFhx5ire4UVPWujee++MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11SjdqQjNtc1dISG1LdDdoUlU5YTZONTc3NC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTQyZWZhLTE4YTUtNDY0OS05OTI5 LTdiZTcxMzY3OTYwOC8xLzEtdUo3akIzbXNXSEhtS3Q3aFJVOWE2TjU3NzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA4Lzk0MmVmYS0xOGE1LTQ2NDktOTkyOS03YmU3MTM2Nzk2 MDgvMS8xLXVKN2pCM21zV0hIbUt0N2hSVTlhNk41Nzc0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcson Rr1lEpZtsYKHwAmpUtnoNWmhrrzubJQpCUVRA80UaAtfvvUgkwLw7iCXL/wCmvnz gVsGubGG//3v8DiUmc1cVnXWH/eReHrT30XK/svhQLyM+QNMgNbr0KDl5c3N9wxk k/AQ2TBu7KkGveQxCYbMtcp1OlmV1uFtSpfHZ/y67FZNp/G/uimQs0y01zCv9RNi 8ssQeBQ9sxiTHhOKeSVpLynQmOpHivYnk6MupePli0PHeTe64AmPc2jssbh4Wn3H t1ya5K5wD+ESpokXqHPRa4OMmZ8NyuwlaFOxD3ekLTbMXa3U1daeLeHsWX9It7U7 hKz7xOIx/VLv3A7NnA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:30 2025 by rpki-client