This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json) Hash identifier: r9EMvyW+NY6tK483i27jHB5lxa/t+8J7278MNGnA7Ns= Subject key identifier: F3:87:93:8E:8B:ED:C6:7F:F2:13:36:B0:20:25:32:F8:4C:2C:61:A8 Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7 Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7 Certificate serial: 019AF31B524455F1519EF63F3CF8D96F6588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft Manifest number: 0422 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: semDG7g6r4txFC/0XzbxS9gGGgprZ+lAAofd2d9hZew=) 2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:52:44:55:f1:51:9e:f6:3f:3c:f8:d9:6f:65:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7 Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=f387938e8bedc67ff21336b0202532f84c2c61a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:e4:88:f0:c4:ba:62:e9:a3:b4:2b:22:e6: e1:05:72:3e:01:42:4a:4a:b5:67:52:a9:b6:d0:48: a3:b6:55:16:97:ca:b8:f6:8e:13:c8:96:5d:e4:49: 81:17:e0:e8:53:d1:ea:b2:96:22:89:92:39:d0:5f: e5:3b:9e:a4:a5:2c:51:b5:0b:e9:ae:8e:84:64:ac: 6d:54:8f:2e:9c:46:15:50:6e:36:65:4a:f4:66:64: 0b:f3:4b:b4:1a:90:49:39:2e:70:37:4c:7e:2c:e9: b8:ef:ec:85:a9:d2:23:fa:55:d6:fe:d5:44:0d:36: a5:45:21:a1:7f:76:d6:c7:55:0a:6f:2c:82:56:7b: 10:7a:2a:a3:2c:4d:f0:a9:59:49:71:1f:86:08:c3: 7d:48:da:da:69:6b:bd:9e:a4:db:fd:a6:af:8b:eb: aa:1d:5c:7e:c4:7b:8a:48:0a:c7:ee:18:a8:f0:74: 66:2c:96:f4:9d:48:a0:fd:4d:7a:f4:00:00:ea:14: 54:7e:3f:cc:d8:b6:fc:62:41:20:6d:32:9f:09:08: 82:4a:32:c5:96:c3:6d:d6:98:92:b6:05:7f:d0:06: 15:0a:00:e7:0e:0e:4c:ed:52:69:45:96:b9:30:77: 80:de:ed:e7:45:3e:c9:79:0a:57:fd:02:0e:c9:28: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:87:93:8E:8B:ED:C6:7F:F2:13:36:B0:20:25:32:F8:4C:2C:61:A8 X509v3 Authority Key Identifier: keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2f:ea:c1:9f:43:30:59:84:94:67:d0:e2:43:dd:69:80:54: 71:9f:8a:9c:99:3c:83:41:58:84:a5:f2:86:7b:7c:f1:cc:8c: 00:f2:ff:41:d1:dc:fe:24:8b:07:a1:0c:f1:c6:e3:2e:cc:73: 1c:c2:9b:97:bc:01:49:7a:2b:38:24:cb:51:a8:0d:8e:df:a0: 73:9d:dc:cb:78:31:2d:38:69:fb:cc:68:04:cc:90:f1:8f:ba: 27:72:d6:fb:ae:d9:fe:f1:f4:3c:5a:2f:68:ce:ed:05:99:b8: 60:43:bf:22:2d:34:d6:28:2f:34:25:10:59:fa:cb:6d:19:8c: 00:73:3d:70:b5:8c:2f:1d:98:57:d7:60:15:37:18:0b:bb:e6: 14:5c:16:da:bd:e2:92:e6:c4:5c:5d:1e:02:7f:ce:34:b2:7d: 90:df:ce:e4:87:eb:ef:b5:14:9b:e0:6a:3e:b3:2e:99:af:32: 00:0e:77:24:f3:18:de:57:35:82:68:68:da:8a:d0:7e:19:85: 7c:07:a9:c9:cf:95:f9:f4:51:ab:d9:b3:b6:14:2b:00:c8:28: a8:03:bf:2d:00:1e:41:bf:08:4c:31:b4:13:d5:b3:0c:0a:37: fa:79:15:c0:3f:33:90:da:3c:d8:a5:13:01:85:11:a5:9e:2a: dd:4b:4c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1JEVfFRnvY/PPjZb2WIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3 OTc5ZjcwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD EyhmMzg3OTM4ZThiZWRjNjdmZjIxMzM2YjAyMDI1MzJmODRjMmM2MWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20LkiPDEumLpo7QrIubhBXI+AUJK SrVnUqm20EijtlUWl8q49o4TyJZd5EmBF+DoU9HqspYiiZI50F/lO56kpSxRtQvp ro6EZKxtVI8unEYVUG42ZUr0ZmQL80u0GpBJOS5wN0x+LOm47+yFqdIj+lXW/tVE DTalRSGhf3bWx1UKbyyCVnsQeiqjLE3wqVlJcR+GCMN9SNraaWu9nqTb/aavi+uq HVx+xHuKSArH7hio8HRmLJb0nUig/U169AAA6hRUfj/M2Lb8YkEgbTKfCQiCSjLF lsNt1piStgV/0AYVCgDnDg5M7VJpRZa5MHeA3u3nRT7JeQpX/QIOyShtUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOHk46L7cZ/8hM2sCAlMvhMLGGoMB8GA1UdIwQY MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt ZjA0OTgzOWZhNzMwLzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy/qwZ9D MFmElGfQ4kPdaYBUcZ+KnJk8g0FYhKXyhnt88cyMAPL/QdHc/iSLB6EM8cbjLsxz HMKbl7wBSXorOCTLUagNjt+gc53cy3gxLThp+8xoBMyQ8Y+6J3LW+67Z/vH0PFov aM7tBZm4YEO/Ii001igvNCUQWfrLbRmMAHM9cLWMLx2YV9dgFTcYC7vmFFwW2r3i kubEXF0eAn/ONLJ9kN/O5Ifr77UUm+BqPrMuma8yAA53JPMY3lc1gmho2orQfhmF fAepyc+V+fRRq9mzthQrAMgoqAO/LQAeQb8ITDG0E9WzDAo3+nkVwD8zkNo82KUT AYURpZ4q3UtMnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:05 2025 by rpki-client