This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json) Hash identifier: /h0HRBZfwpG20S6nmzo8dZr6l8/iMqtE3wW6u2P4gx0= Subject key identifier: 5F:89:A4:D4:1C:33:23:D1:20:E2:C1:BE:C7:EF:5F:7B:C1:85:4B:E1 Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0 Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0 Certificate serial: 019AF19B355B93FD253659459598C1BCABEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft Manifest number: 149F Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=) 2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: uVTTCJbBvgQWU/mDm4qomJaPIXGe0Gib0RP9XWmbShg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:35:5b:93:fd:25:36:59:45:95:98:c1:bc:ab:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=5f89a4d41c3323d120e2c1bec7ef5f7bc1854be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:23:aa:b8:ff:46:13:ce:9c:79:88:9d:e3: 80:e2:24:58:16:b1:5c:a9:ce:2c:a3:f8:03:ca:6a: 69:20:4a:f2:06:9e:06:c6:ad:41:fd:89:7f:8c:2d: f9:56:61:1d:c3:18:db:2a:e6:7c:6c:c2:93:00:42: f0:d3:58:df:03:3c:90:36:f0:21:50:ef:1f:a0:76: 0b:f6:12:3f:db:cd:1f:d8:3c:2b:56:90:f7:fe:5b: 61:a5:f1:4f:52:70:f1:0c:b9:1d:60:37:14:62:93: 4a:0f:cb:76:49:db:d1:d0:bc:56:c2:59:43:7d:74: 17:4f:f9:77:f2:1c:19:07:d6:fe:7e:a3:f1:e7:8a: ca:e9:ad:d3:0c:ee:3b:4d:cc:af:d6:b9:b4:ef:d9: 63:d1:a3:da:8a:f4:a9:f8:18:ee:a6:37:14:4f:2b: da:61:25:d8:02:50:df:18:1f:a6:0a:77:05:84:43: 50:5f:c1:54:4e:50:4b:4e:9f:fb:70:75:b2:28:2c: 68:d6:0e:f3:3c:ce:32:30:ff:57:67:f6:42:48:e9: 78:59:ca:b0:60:04:a0:ca:84:66:f6:89:5f:fb:1a: b3:71:96:6f:73:ba:6d:48:71:53:97:2b:47:3b:7a: ad:a1:bc:53:48:5f:06:c6:c6:d4:9c:07:18:3a:ca: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:A4:D4:1C:33:23:D1:20:E2:C1:BE:C7:EF:5F:7B:C1:85:4B:E1 X509v3 Authority Key Identifier: keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:5c:3b:e6:3a:7c:4b:f3:66:0f:70:ac:3c:85:20:ab:3e: 92:5e:19:d7:25:a5:fb:3b:bc:7b:7e:b1:68:29:26:16:a7:94: c9:d5:4a:a4:21:7d:3d:df:a7:f0:64:87:9a:23:9a:d7:f6:d0: ac:52:75:33:57:cc:20:eb:36:cf:a5:10:74:08:4c:43:bf:80: 99:7d:c3:2a:54:a2:98:7c:ce:32:66:ec:61:24:3b:7d:88:70: 5c:c9:b0:77:2d:91:ff:44:2a:1e:98:eb:1b:80:8b:92:78:fa: fe:c3:de:f7:88:39:93:31:99:2b:4f:d2:c3:c7:24:20:fc:f5: e5:65:64:2e:d1:ca:6f:4e:fb:ba:ad:65:fd:65:b7:2a:0f:1d: 1f:af:16:38:13:13:15:e0:0c:b3:d3:f1:be:cb:c6:58:41:33: 80:60:e9:d2:03:8b:c0:7f:ae:20:75:f5:17:78:1e:4f:76:67: 5e:ac:c2:d4:ff:af:f7:19:3f:d3:ca:5e:d4:17:69:e2:aa:7a: 07:d8:67:23:0f:e4:26:30:7d:ea:96:27:55:87:2a:7e:f9:99: ca:d2:b3:6d:4b:01:d3:24:68:e0:a8:51:a5:36:64:c4:5e:a4: 06:aa:b2:91:ab:2b:65:df:c0:0c:92:79:0d:18:82:20:fb:c8: 6c:32:62:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzVbk/0lNllFlZjBvKvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZWFiYTUzZDZkZmJhYjRlOTc2MTIwYzFlMjAyNjhiYmZl OGEwZTAwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg1Zjg5YTRkNDFjMzMyM2QxMjBlMmMxYmVjN2VmNWY3YmMxODU0YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nojqrj/RhPOnHmIneOA4iRYFrFc qc4so/gDymppIEryBp4Gxq1B/Yl/jC35VmEdwxjbKuZ8bMKTAELw01jfAzyQNvAh UO8foHYL9hI/280f2DwrVpD3/lthpfFPUnDxDLkdYDcUYpNKD8t2SdvR0LxWwllD fXQXT/l38hwZB9b+fqPx54rK6a3TDO47Tcyv1rm079lj0aPaivSp+BjupjcUTyva YSXYAlDfGB+mCncFhENQX8FUTlBLTp/7cHWyKCxo1g7zPM4yMP9XZ/ZCSOl4Wcqw YASgyoRm9olf+xqzcZZvc7ptSHFTlytHO3qtobxTSF8GxsbUnAcYOsoqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+JpNQcMyPRIOLBvsfvX3vBhUvhMB8GA1UdIwQY MBaAFNfqulPW37q06XYSDB4gJou/6KDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQt MmFlNzkzZGE0NzcwLzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQtMmFlNzkzZGE0Nzcw LzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4RcO+Y6 fEvzZg9wrDyFIKs+kl4Z1yWl+zu8e36xaCkmFqeUydVKpCF9Pd+n8GSHmiOa1/bQ rFJ1M1fMIOs2z6UQdAhMQ7+AmX3DKlSimHzOMmbsYSQ7fYhwXMmwdy2R/0QqHpjr G4CLknj6/sPe94g5kzGZK0/Sw8ckIPz15WVkLtHKb077uq1l/WW3Kg8dH68WOBMT FeAMs9PxvsvGWEEzgGDp0gOLwH+uIHX1F3geT3ZnXqzC1P+v9xk/08pe1Bdp4qp6 B9hnIw/kJjB96pYnVYcqfvmZytKzbUsB0yRo4KhRpTZkxF6kBqqykasrZd/ADJJ5 DRiCIPvIbDJivA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:28 2025 by rpki-client