This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json) Hash identifier: bQaHF1dWvQjR1Rauin47Z35+O/msPUvBT+3AyoexAnI= Subject key identifier: DE:4F:03:88:DA:FE:D4:F7:57:C0:FE:1A:4D:93:DF:90:71:24:B3:72 Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Certificate serial: 019AF46540520A39AD9BC0B742F3752B52DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:07 +0000 Manifest this update: Sat 06 Dec 2025 16:01:07 +0000 Manifest next update: Sun 07 Dec 2025 16:01:07 +0000 Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: ikIqxIb5nG8XRtrITeWzPb/h/YGllcDtSWa1yvPyujI=) 2: x8LYnH5C-2yoYzHnpykE4OWasxo.roa (hash: NSrIlOVo8G3//8ZqRuyTqHM3vssNSeuuZzf6AApNyCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:40:52:0a:39:ad:9b:c0:b7:42:f3:75:2b:52:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Validity Not Before: Dec 6 16:01:07 2025 GMT Not After : Dec 7 16:01:07 2025 GMT Subject: CN=de4f0388dafed4f757c0fe1a4d93df907124b372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:1c:32:2e:9c:6b:74:16:ef:88:75:59:3c: 71:9d:66:d5:77:1a:71:71:db:3a:85:55:c2:be:c5: 64:cc:be:b1:78:c7:93:45:73:2a:93:58:e2:48:82: 0f:bf:d6:3a:1e:62:e4:b3:9b:1a:50:34:4c:3b:57: f1:ea:97:16:24:0c:9d:1a:73:a9:93:38:f2:cc:4c: 14:e7:bb:77:f6:f2:dd:93:16:66:75:b7:5c:0a:2f: 93:bb:82:e9:0a:02:76:ae:ab:e4:64:54:3b:fc:fd: 90:65:17:5e:0d:89:d0:5f:ad:fe:28:30:bf:1d:cb: 32:00:33:34:cd:f6:44:2b:4d:7c:0e:20:17:2a:7f: 8b:76:a9:e8:07:db:28:fc:a8:51:34:19:be:16:f9: ea:b4:df:9a:be:9f:ad:d4:04:5f:00:07:17:52:73: 79:cb:7e:1d:00:59:4e:78:77:b5:ed:54:26:fc:45: ad:43:60:fc:3c:e2:59:e0:a5:c8:e9:01:44:ec:0f: d2:4c:ab:90:6b:b0:13:03:62:32:0a:80:c0:9f:fa: 1c:4e:e2:be:a7:ed:5a:5a:36:0b:34:ac:e8:c9:ec: bc:0c:2e:f7:82:b9:f7:35:57:87:90:a4:3d:c6:b8: aa:b2:94:31:34:8a:10:0d:76:1a:9f:9f:35:3b:5b: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4F:03:88:DA:FE:D4:F7:57:C0:FE:1A:4D:93:DF:90:71:24:B3:72 X509v3 Authority Key Identifier: keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2a:27:b5:8e:e0:8b:85:72:0a:54:c6:60:51:5b:5d:4b:37: ca:14:67:ec:67:cb:cf:62:8b:bd:d9:58:bc:7a:b9:e0:3c:d5: 54:e8:d2:e2:fd:85:08:c5:7a:3e:dc:1a:cd:85:bd:3d:67:a7: 9b:48:de:18:95:7f:69:5a:9e:77:e7:36:db:1b:c9:a3:f9:70: 97:eb:46:c9:8e:8f:95:58:ae:61:7a:c7:84:4f:17:81:ca:ed: ce:bb:a6:39:ce:31:aa:f7:09:c5:69:8a:74:b4:1d:14:94:50: bc:e8:70:1f:64:47:f6:37:98:82:19:ef:2d:1c:62:33:64:f5: 2f:36:4d:6a:93:94:73:16:b1:29:70:90:62:21:47:cf:c5:b9: d0:5a:23:0d:ae:9b:7e:9e:d2:82:4d:fc:20:93:4f:82:ca:d9: 59:c3:ba:00:46:cd:08:91:ea:64:c2:9e:91:ce:5a:69:7c:b9: ff:db:66:cb:bb:78:51:db:02:46:41:d6:8d:ff:53:ec:03:c7: 79:fc:9a:df:96:68:f5:07:4e:37:9c:14:fc:9e:b3:62:17:f5: ce:12:4a:6a:51:f0:15:3b:1a:60:8c:b7:d1:5b:57:c5:c4:10: 8c:35:0f:e5:96:64:15:ff:c9:4b:0e:47:70:0d:d4:4c:df:13: 1d:3f:ab:0d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0ZUBSCjmtm8C3QvN1K1LfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj OGJkNTYwHhcNMjUxMjA2MTYwMTA3WhcNMjUxMjA3MTYwMTA3WjAzMTEwLwYDVQQD EyhkZTRmMDM4OGRhZmVkNGY3NTdjMGZlMWE0ZDkzZGY5MDcxMjRiMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HAcMi6ca3QW74h1WTxxnWbVdxpx cds6hVXCvsVkzL6xeMeTRXMqk1jiSIIPv9Y6HmLks5saUDRMO1fx6pcWJAydGnOp kzjyzEwU57t39vLdkxZmdbdcCi+Tu4LpCgJ2rqvkZFQ7/P2QZRdeDYnQX63+KDC/ HcsyADM0zfZEK018DiAXKn+LdqnoB9so/KhRNBm+FvnqtN+avp+t1ARfAAcXUnN5 y34dAFlOeHe17VQm/EWtQ2D8POJZ4KXI6QFE7A/STKuQa7ATA2IyCoDAn/ocTuK+ p+1aWjYLNKzoyey8DC73grn3NVeHkKQ9xriqspQxNIoQDXYan581O1vbxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN5PA4ja/tT3V8D+Gk2T35BxJLNyMB8GA1UdIwQY MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5 LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSon tY7gi4VyClTGYFFbXUs3yhRn7GfLz2KLvdlYvHq54DzVVOjS4v2FCMV6PtwazYW9 PWenm0jeGJV/aVqed+c22xvJo/lwl+tGyY6PlViuYXrHhE8XgcrtzrumOc4xqvcJ xWmKdLQdFJRQvOhwH2RH9jeYghnvLRxiM2T1LzZNapOUcxaxKXCQYiFHz8W50Foj Da6bfp7Sgk38IJNPgsrZWcO6AEbNCJHqZMKekc5aaXy5/9tmy7t4UdsCRkHWjf9T 7APHefya35Zo9QdON5wU/J6zYhf1zhJKalHwFTsaYIy30VtXxcQQjDUP5ZZkFf/J Sw5HcA3UTN8THT+rDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:34 2025 by rpki-client