This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json) Hash identifier: KDZbDZJfQ7LLp3FiIZrTO3q124xlbLFrZ9oZzTnWtTk= Subject key identifier: B1:31:0A:DE:CF:11:3B:E5:6F:20:98:03:85:55:D3:83:28:49:0F:DE Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Certificate serial: 019B3231369C13BF9A8A5307C3C38735F27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 16:00:44 +0000 Manifest this update: Thu 18 Dec 2025 16:00:44 +0000 Manifest next update: Fri 19 Dec 2025 16:00:44 +0000 Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: x0B3bnsKUViYC0j666K4BkEJ6g5Xpksn26/JKqT0OW0=) 2: x8LYnH5C-2yoYzHnpykE4OWasxo.roa (hash: NSrIlOVo8G3//8ZqRuyTqHM3vssNSeuuZzf6AApNyCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:36:9c:13:bf:9a:8a:53:07:c3:c3:87:35:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Validity Not Before: Dec 18 16:00:44 2025 GMT Not After : Dec 19 16:00:44 2025 GMT Subject: CN=b1310adecf113be56f2098038555d38328490fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:23:c9:36:2c:09:fd:7b:d7:ea:56:65:b9: 94:cd:0b:3c:c4:9a:1b:27:01:0c:a2:72:df:a2:2a: 23:e4:b5:9f:c3:86:b1:32:8f:35:a9:ad:86:7f:16: 31:1a:5d:00:35:bc:b3:90:8f:cf:77:65:d9:d0:3d: 97:cb:82:8b:df:ce:49:f0:f4:4b:4b:02:d3:c3:f5: a2:84:80:70:c5:79:77:0b:76:c6:f5:1c:f8:d1:62: fe:a7:2b:59:7d:e4:b4:04:7a:91:3b:35:62:be:fc: 79:92:45:f2:cc:5b:9c:96:41:00:ae:2e:3c:f5:ef: b7:dd:32:ab:e1:2c:10:5f:2a:6c:95:08:72:f1:2f: b7:f6:58:89:9c:06:c7:85:54:56:a1:43:f6:6b:6a: e0:d6:58:c9:29:cb:6f:11:65:46:22:08:b0:03:e3: 21:74:b2:aa:27:be:ad:34:ba:36:a6:fa:a5:8c:e3: 87:0c:02:be:9f:04:52:cd:fe:3a:3a:3e:f1:13:11: 01:c8:3f:05:9e:c1:8a:fd:a6:36:cc:96:68:4c:49: 99:21:e2:9f:24:49:ab:86:4d:16:eb:7f:32:33:80: ac:07:fb:dd:c9:16:fd:a9:ce:13:f4:3f:a8:8c:b6: f2:ed:d0:1f:4a:1d:e2:c0:55:30:fa:73:3e:cd:f8: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:31:0A:DE:CF:11:3B:E5:6F:20:98:03:85:55:D3:83:28:49:0F:DE X509v3 Authority Key Identifier: keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9b:6c:87:27:a0:11:77:ca:fd:87:32:9f:15:02:da:7d:e6: ff:ba:1b:8e:f3:08:df:36:c0:76:83:fe:a0:07:d9:01:fe:21: 95:f4:32:56:25:30:77:19:1b:98:a3:f7:2a:ef:8c:ec:bc:07: bf:1c:77:b4:a0:e8:39:3a:f5:06:59:80:b7:83:55:45:51:24: 9c:9d:e1:5b:5e:dd:10:79:37:92:43:d9:d3:99:4e:5d:08:f0: ea:c4:53:6b:aa:69:8f:51:0a:d9:7f:7e:49:0a:2f:9c:05:ec: 01:1c:28:55:67:17:45:6e:a2:44:81:17:77:85:2a:0d:7f:ed: df:b6:30:b3:1b:39:1f:1d:75:41:a7:ff:a6:4d:63:02:e1:6c: 02:2c:39:4a:fe:d4:2d:af:dd:02:96:42:98:9a:57:6a:04:87: ab:c7:ea:14:e5:e7:9a:52:45:a8:70:c4:0b:c0:ea:98:6c:27: f0:df:0e:30:1a:22:ce:ac:b8:df:0b:da:19:90:6e:13:1e:58: 97:ba:68:3a:ca:e0:5b:10:96:60:47:8d:7a:84:c3:be:a9:05: ed:50:6b:4f:d0:3a:c2:5a:f4:fc:8a:4c:c7:2f:8f:dc:44:46: 40:34:c8:e2:fa:ca:df:9d:8b:b3:5f:6f:28:c5:6e:04:37:61: 73:30:46:1d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsyMTacE7+ailMHw8OHNfJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj OGJkNTYwHhcNMjUxMjE4MTYwMDQ0WhcNMjUxMjE5MTYwMDQ0WjAzMTEwLwYDVQQD EyhiMTMxMGFkZWNmMTEzYmU1NmYyMDk4MDM4NTU1ZDM4MzI4NDkwZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iAjyTYsCf171+pWZbmUzQs8xJob JwEMonLfoioj5LWfw4axMo81qa2GfxYxGl0ANbyzkI/Pd2XZ0D2Xy4KL385J8PRL SwLTw/WihIBwxXl3C3bG9Rz40WL+pytZfeS0BHqROzVivvx5kkXyzFuclkEAri48 9e+33TKr4SwQXypslQhy8S+39liJnAbHhVRWoUP2a2rg1ljJKctvEWVGIgiwA+Mh dLKqJ76tNLo2pvqljOOHDAK+nwRSzf46Oj7xExEByD8FnsGK/aY2zJZoTEmZIeKf JEmrhk0W638yM4CsB/vdyRb9qc4T9D+ojLby7dAfSh3iwFUw+nM+zfg7bQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLExCt7PETvlbyCYA4VV04MoSQ/eMB8GA1UdIwQY MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5 LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpts hyegEXfK/YcynxUC2n3m/7objvMI3zbAdoP+oAfZAf4hlfQyViUwdxkbmKP3Ku+M 7LwHvxx3tKDoOTr1BlmAt4NVRVEknJ3hW17dEHk3kkPZ05lOXQjw6sRTa6ppj1EK 2X9+SQovnAXsARwoVWcXRW6iRIEXd4UqDX/t37Ywsxs5Hx11Qaf/pk1jAuFsAiw5 Sv7ULa/dApZCmJpXagSHq8fqFOXnmlJFqHDEC8DqmGwn8N8OMBoizqy43wvaGZBu Ex5Yl7poOsrgWxCWYEeNeoTDvqkF7VBrT9A6wlr0/IpMxy+P3ERGQDTI4vrK352L s19vKMVuBDdhczBGHQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:04:00 2025 by rpki-client