This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json) Hash identifier: aaIpmeEnQQ809N/X4lgbIg/T0n8JaV+OhCOtoAsJfX4= Subject key identifier: 29:5A:A3:17:D8:D4:01:08:93:58:61:01:33:5E:9B:D6:61:CC:73:28 Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76 Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576 Certificate serial: 019AF38A067E68D5FE7147C944DD0025ED9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:40 +0000 Manifest this update: Sat 06 Dec 2025 12:01:40 +0000 Manifest next update: Sun 07 Dec 2025 12:01:40 +0000 Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: 3rwAzyt/I6lHVLCNYnEPEmjFwptXfoP0LvZTfoaQ45E=) 2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=) 3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:06:7e:68:d5:fe:71:47:c9:44:dd:00:25:ed:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576 Validity Not Before: Dec 6 12:01:40 2025 GMT Not After : Dec 7 12:01:40 2025 GMT Subject: CN=295aa317d8d4010893586101335e9bd661cc7328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:57:ed:d0:fa:a9:8d:c7:79:65:ff:44:b6: ec:d0:35:fa:7e:24:4f:9b:6d:da:20:d2:58:36:c1: 57:52:8c:be:c2:ca:bd:cd:04:17:46:0d:9f:de:e2: 9b:1d:ea:37:a4:23:31:06:c4:f4:d7:79:27:c6:54: a9:48:a7:6a:fe:d1:fc:54:b0:ce:74:cc:d6:f9:02: da:b9:d5:98:ca:de:83:62:18:15:4a:d1:87:ee:9b: a0:8b:97:ff:70:bb:b7:ee:df:21:e3:25:f7:c5:0d: 43:60:68:bc:02:dd:1c:94:e2:8f:34:e0:d5:98:29: 76:4a:00:d8:05:6d:6a:e5:71:5e:24:e5:15:fd:94: 4b:44:6e:4c:0f:05:e1:af:3c:98:8a:d1:79:ee:70: 66:bc:19:33:bf:0b:bf:14:43:c8:18:ff:b4:cc:b3: 8b:f8:6b:27:39:44:38:ac:3d:78:a8:3b:db:88:80: 81:10:24:09:e3:43:dc:68:9e:f6:68:29:5e:3f:d6: a4:25:0f:c3:d3:72:1b:4f:3d:e0:57:67:dc:2b:81: 32:62:13:7a:93:b7:5e:3a:e3:0b:3b:63:1e:86:a8: 3c:4c:f6:a3:e9:5f:ac:a0:16:f1:64:e2:0b:3f:91: 02:aa:5c:ab:50:2e:c7:90:5b:6a:d0:5a:06:1f:7e: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:A3:17:D8:D4:01:08:93:58:61:01:33:5E:9B:D6:61:CC:73:28 X509v3 Authority Key Identifier: keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:03:2f:88:ca:46:0f:fa:bf:d2:1d:f7:84:de:98:8d:cd:da: 2a:25:95:8b:fe:ae:bd:6a:f9:ec:7a:87:c1:d4:eb:df:8e:68: 93:7e:c3:24:31:9e:4b:b8:25:46:5d:bc:3b:5c:a5:e2:68:a5: 23:70:21:7e:52:4c:62:56:c0:00:2a:e0:05:ce:9d:c5:18:1d: a7:5c:76:82:b7:04:7a:06:38:92:13:23:d3:6c:fd:7d:98:36: 63:8c:4d:2b:7f:c6:e9:74:62:b2:11:f2:f8:7c:09:85:5c:cc: 17:14:8c:f7:7a:f7:2e:13:88:af:6a:07:05:51:09:fa:c8:3c: 47:1b:89:66:d1:7d:04:47:74:8a:0a:11:cd:2a:3d:5b:bd:c9: 6e:e0:c3:7b:51:19:43:10:e2:82:8f:89:84:94:29:44:75:10: cc:18:44:d4:9d:27:f1:6b:4a:0c:88:3f:b3:b6:29:bb:f7:08: f2:f0:ec:7c:5b:41:0c:bf:b8:03:c9:8a:65:a8:c1:65:cb:42: 35:a2:03:4a:c7:40:e5:7a:f6:02:85:dc:5c:d7:13:ee:23:3b: bb:bb:5d:12:99:91:eb:a3:92:24:4b:6b:4c:46:be:69:50:b8: 43:09:3b:d5:aa:d9:a0:9f:fd:d1:a4:b2:39:53:b6:65:ca:39: 46:0b:45:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzigZ+aNX+cUfJRN0AJe2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDNlOWRhZWRiNmJhNDI2YjY4MTZkMWM5MGYzNzkyMjNi ZTc1NzYwHhcNMjUxMjA2MTIwMTQwWhcNMjUxMjA3MTIwMTQwWjAzMTEwLwYDVQQD EygyOTVhYTMxN2Q4ZDQwMTA4OTM1ODYxMDEzMzVlOWJkNjYxY2M3MzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv9X7dD6qY3HeWX/RLbs0DX6fiRP m23aINJYNsFXUoy+wsq9zQQXRg2f3uKbHeo3pCMxBsT013knxlSpSKdq/tH8VLDO dMzW+QLaudWYyt6DYhgVStGH7pugi5f/cLu37t8h4yX3xQ1DYGi8At0clOKPNODV mCl2SgDYBW1q5XFeJOUV/ZRLRG5MDwXhrzyYitF57nBmvBkzvwu/FEPIGP+0zLOL +GsnOUQ4rD14qDvbiICBECQJ40PcaJ72aCleP9akJQ/D03IbTz3gV2fcK4EyYhN6 k7deOuMLO2Mehqg8TPaj6V+soBbxZOILP5ECqlyrUC7HkFtq0FoGH35/WwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFClaoxfY1AEIk1hhATNem9ZhzHMoMB8GA1UdIwQY MBaAFPjT6drttrpCa2gW0ckPN5IjvnV2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUHAydTIydWtKcmFCYlJ5UTgza2lPLWRYWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMjI4ZjM0LTM1NjMtNDRkNC04ZmZi LTZiMzI3M2YzNDRmMy8xLzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0 ZjMvMS8xLU5QcDJ1MjJ1a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQMv iMpGD/q/0h33hN6Yjc3aKiWVi/6uvWr57HqHwdTr345ok37DJDGeS7glRl28O1yl 4milI3AhflJMYlbAACrgBc6dxRgdp1x2grcEegY4khMj02z9fZg2Y4xNK3/G6XRi shHy+HwJhVzMFxSM93r3LhOIr2oHBVEJ+sg8RxuJZtF9BEd0igoRzSo9W73JbuDD e1EZQxDigo+JhJQpRHUQzBhE1J0n8WtKDIg/s7Ypu/cI8vDsfFtBDL+4A8mKZajB ZctCNaIDSsdA5Xr2AoXcXNcT7iM7u7tdEpmR66OSJEtrTEa+aVC4Qwk71arZoJ/9 0aSyOVO2Zco5RgtFww== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:24 2025 by rpki-client