This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json) Hash identifier: 8rALQPmyZDjL5CsyRDZ1ixGY7V8517zNZ5q8ETSaGBk= Subject key identifier: CF:C8:0C:24:FA:C2:BB:69:2B:07:A7:CD:50:76:1E:8D:3A:F0:6C:E6 Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10 Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710 Certificate serial: 019AF12DB4C4E79F90871AF5C816D05BCA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: +RfzgVStO4CUF5RDoYRTTO4m+DopSmudDNtpQ9xnSvI=) 2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b4:c4:e7:9f:90:87:1a:f5:c8:16:d0:5b:ca:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=cfc80c24fac2bb692b07a7cd50761e8d3af06ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:de:dd:f4:87:8b:06:bc:12:d7:ed:d9:b3: 54:11:3f:dc:03:6f:b5:dc:4c:ef:3c:f6:4e:f5:f0: a2:f4:74:5d:6a:5e:fc:a9:14:73:70:04:28:8f:30: 3a:e8:17:f5:50:37:a6:6d:d3:92:e9:48:4e:5c:a4: d4:b0:83:4e:53:af:2d:ec:52:25:4c:ee:e5:04:12: ea:5f:88:b4:83:15:09:b5:ac:28:81:dd:02:d5:27: 60:2e:38:24:28:5f:4c:89:52:c1:21:01:c7:df:b7: 0c:21:f2:13:31:1b:7e:a2:65:54:55:ed:a4:47:f7: 88:f3:5a:de:ab:92:66:b5:83:81:e6:6a:08:80:e6: f8:e7:4b:55:24:82:93:e7:f6:1b:86:e3:6a:34:f0: 48:71:a9:70:36:7d:80:db:26:2d:80:f5:c0:c7:17: 70:c9:9b:e9:e0:19:39:4d:7c:ac:07:87:ba:b6:cd: a7:cc:bd:57:84:53:62:a5:fc:b9:dd:ec:8d:8b:1b: 94:9b:51:11:aa:7f:2a:06:66:51:02:a6:09:0e:01: 8a:49:54:bf:77:62:fe:a0:b1:0d:9c:f3:6d:05:88: 6c:69:67:51:34:45:85:f7:b4:00:d9:dc:68:f5:65: 72:37:a3:8c:1f:48:f1:dd:67:5c:a7:23:2b:67:4e: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C8:0C:24:FA:C2:BB:69:2B:07:A7:CD:50:76:1E:8D:3A:F0:6C:E6 X509v3 Authority Key Identifier: keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b8:5b:02:c1:4e:f6:55:df:b4:84:9b:0a:5d:fa:7f:e7:db: 44:30:88:c4:1b:11:56:ab:1d:73:fb:af:5a:9c:c1:76:aa:e6: a4:76:aa:ed:06:4a:c7:5c:1d:1f:b0:ac:67:d3:04:27:60:4a: 38:0c:5c:96:e2:98:1f:07:e0:9e:dc:00:d0:78:da:2c:4c:31: 18:fb:02:d8:9d:6d:d6:81:01:f9:dd:55:65:19:42:a3:07:00: be:0c:1f:a2:92:dd:58:90:85:f6:63:3a:de:b3:44:67:80:73: 32:4d:08:55:f8:34:9c:20:bb:39:a1:7c:15:ab:08:dc:53:44: e5:7f:29:6c:96:1d:6f:95:3d:89:5e:b5:4b:36:36:1a:5b:d5: 5e:14:23:f3:4b:49:3e:8b:07:38:9c:bd:3b:7f:f6:ad:3e:8b: 31:a8:1f:24:30:e3:3d:39:e4:24:3f:f9:c2:46:d9:9a:cd:fd: 6f:b5:cd:0d:55:fb:18:2c:9c:92:96:12:e6:1e:02:8a:c1:fc: a1:c8:2d:a6:27:48:8a:04:e1:7e:5c:cd:25:4e:72:00:d0:3e: 58:39:20:cd:85:87:f7:5f:f8:35:9b:48:20:31:8e:88:00:f3: 75:45:8a:82:2b:04:64:79:fe:0e:c6:5c:9f:ea:7c:5b:2b:8c: fb:8f:bd:5d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLbTE55+Qhxr1yBbQW8qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1 ZTg3MTAwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EyhjZmM4MGMyNGZhYzJiYjY5MmIwN2E3Y2Q1MDc2MWU4ZDNhZjA2Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ3e3fSHiwa8Etft2bNUET/cA2+1 3EzvPPZO9fCi9HRdal78qRRzcAQojzA66Bf1UDembdOS6UhOXKTUsINOU68t7FIl TO7lBBLqX4i0gxUJtawogd0C1SdgLjgkKF9MiVLBIQHH37cMIfITMRt+omVUVe2k R/eI81req5JmtYOB5moIgOb450tVJIKT5/YbhuNqNPBIcalwNn2A2yYtgPXAxxdw yZvp4Bk5TXysB4e6ts2nzL1XhFNipfy53eyNixuUm1ERqn8qBmZRAqYJDgGKSVS/ d2L+oLENnPNtBYhsaWdRNEWF97QA2dxo9WVyN6OMH0jx3WdcpyMrZ043hQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM/IDCT6wrtpKwenzVB2Ho068GzmMB8GA1UdIwQY MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1 LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbhb AsFO9lXftISbCl36f+fbRDCIxBsRVqsdc/uvWpzBdqrmpHaq7QZKx1wdH7CsZ9ME J2BKOAxcluKYHwfgntwA0HjaLEwxGPsC2J1t1oEB+d1VZRlCowcAvgwfopLdWJCF 9mM63rNEZ4BzMk0IVfg0nCC7OaF8FasI3FNE5X8pbJYdb5U9iV61SzY2GlvVXhQj 80tJPosHOJy9O3/2rT6LMagfJDDjPTnkJD/5wkbZms39b7XNDVX7GCyckpYS5h4C isH8ocgtpidIigThflzNJU5yANA+WDkgzYWH91/4NZtIIDGOiADzdUWKgisEZHn+ DsZcn+p8WyuM+4+9XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:44 2025 by rpki-client