This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json) Hash identifier: PkWUEtw4EirIOGUPTbQVApz8ddE/R4KQxvIh1BK/8Tg= Subject key identifier: 5A:E3:8F:1F:5A:C9:89:38:26:B0:EE:63:06:D3:73:E4:46:68:78:56 Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Certificate serial: 019AF19B3D5C2FC0E8D991971A56091E5DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft Manifest number: 08FC Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: k0Z7nYxKM4Lo3M6SNmAI1bButSMaJvf74LRJSCjpndo=) 2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3d:5c:2f:c0:e8:d9:91:97:1a:56:09:1e:5d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=5ae38f1f5ac9893826b0ee6306d373e446687856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:83:cb:4a:b0:cf:3f:0d:7d:63:06:ff:ed: fa:cf:f7:c5:bf:45:67:f0:6e:64:92:f5:b9:19:c3: d9:e5:69:19:94:71:63:e9:48:fa:84:89:0e:37:c9: c6:10:f3:14:14:e0:52:da:f7:ef:04:d9:e6:8c:20: 63:79:4c:6f:b2:6f:29:7d:e2:81:23:50:0b:ed:25: 0e:95:de:2f:e7:2a:a2:48:8d:aa:c6:87:cb:f3:c4: 43:bb:2e:67:b3:a5:aa:8b:b5:37:b7:18:82:3a:a9: 5e:1f:7d:20:f4:ca:66:3c:56:0d:b3:fc:b1:3f:dd: 37:de:71:3f:ad:83:02:e2:b2:6f:f4:d0:b4:8c:1f: e2:54:fa:e4:c9:c2:d4:eb:d4:df:57:4c:5d:1a:c9: cd:6f:73:58:ce:32:c5:46:1e:f5:cd:9d:6e:3a:78: c2:5b:29:c4:fb:c2:fb:cd:67:7c:08:34:71:65:8b: e2:87:39:88:fa:27:0a:3a:b6:d1:2b:3e:9e:71:99: f2:cf:06:ee:19:1f:11:f2:42:34:2b:07:71:c8:ba: 5f:30:14:29:0c:d7:53:57:73:d4:45:fd:b7:6f:d3: 51:9a:b6:f4:b3:af:58:2d:2c:59:ec:a7:d1:37:8c: d2:07:90:24:3e:58:c5:dd:81:51:b0:ee:02:0e:12: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:8F:1F:5A:C9:89:38:26:B0:EE:63:06:D3:73:E4:46:68:78:56 X509v3 Authority Key Identifier: keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a9:5e:ef:89:be:c6:9c:ce:c2:c5:91:1e:ae:6a:85:7f:e6: 13:69:4f:6b:07:f6:2c:b8:d1:0e:4c:7d:34:07:6d:b6:a3:e6: 01:a9:70:43:e1:5f:99:4d:3a:c1:72:ab:b8:b3:96:e4:3a:37: 30:8b:a7:c2:86:7c:5a:7e:c1:5b:11:d3:9c:b1:cd:57:8d:e7: 19:6f:ef:5e:a4:cb:b1:70:33:02:37:fd:2e:0d:d3:b8:7c:62: ae:88:da:ef:93:96:d4:08:7d:5f:72:49:b1:b9:e6:10:ac:84: 16:ab:e3:af:fb:ce:35:b3:69:f1:c9:2d:e0:e7:dc:51:af:24: 16:a8:0e:a2:82:9d:b0:d3:2f:99:ce:e0:47:d1:1d:0d:4f:32: 0d:a7:c6:f9:45:dc:9c:68:11:c4:f8:41:64:e3:37:bd:28:c1: d9:8e:65:76:20:5d:c7:54:f1:f5:90:08:02:fe:d2:32:e3:70: 11:27:b3:d8:e8:c4:a6:76:47:07:bc:0d:5f:d4:10:e4:bc:72: db:60:9a:01:8a:df:fb:03:d2:14:9e:66:3e:d6:a9:ee:71:45: ea:69:73:04:f4:3e:67:9f:58:a4:9f:41:a3:1f:22:7b:7b:0d: 8f:b4:36:39:71:c2:95:60:fa:cf:67:e2:3b:76:7e:19:53:be: 94:30:66:2c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmz1cL8Do2ZGXGlYJHl2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj ZDNlNzMwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD Eyg1YWUzOGYxZjVhYzk4OTM4MjZiMGVlNjMwNmQzNzNlNDQ2Njg3ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06qDy0qwzz8NfWMG/+36z/fFv0Vn 8G5kkvW5GcPZ5WkZlHFj6Uj6hIkON8nGEPMUFOBS2vfvBNnmjCBjeUxvsm8pfeKB I1AL7SUOld4v5yqiSI2qxofL88RDuy5ns6Wqi7U3txiCOqleH30g9MpmPFYNs/yx P9033nE/rYMC4rJv9NC0jB/iVPrkycLU69TfV0xdGsnNb3NYzjLFRh71zZ1uOnjC WynE+8L7zWd8CDRxZYvihzmI+icKOrbRKz6ecZnyzwbuGR8R8kI0KwdxyLpfMBQp DNdTV3PURf23b9NRmrb0s69YLSxZ7KfRN4zSB5AkPljF3YFRsO4CDhLZGQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFrjjx9ayYk4JrDuYwbTc+RGaHhWMB8GA1UdIwQY MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5 ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEale 74m+xpzOwsWRHq5qhX/mE2lPawf2LLjRDkx9NAdttqPmAalwQ+FfmU06wXKruLOW 5Do3MIunwoZ8Wn7BWxHTnLHNV43nGW/vXqTLsXAzAjf9Lg3TuHxiroja75OW1Ah9 X3JJsbnmEKyEFqvjr/vONbNp8ckt4OfcUa8kFqgOooKdsNMvmc7gR9EdDU8yDafG +UXcnGgRxPhBZOM3vSjB2Y5ldiBdx1Tx9ZAIAv7SMuNwESez2OjEpnZHB7wNX9QQ 5Lxy22CaAYrf+wPSFJ5mPtap7nFF6mlzBPQ+Z59YpJ9Box8ie3sNj7Q2OXHClWD6 z2fiO3Z+GVO+lDBmLA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:48 2025 by rpki-client