This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json) Hash identifier: YYm+hTZxXB2YE5A+5dr3hVIbmMKSvXE3h90aiG6AIKw= Subject key identifier: DA:D9:99:00:D1:52:B4:48:68:E7:9B:98:FA:6F:EE:C7:D4:89:E6:86 Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65 Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165 Certificate serial: 019AF19AD3EA27B39FDCD13B6DA2142B9AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: DUG/1UR8GZ0091nkSeKRaMlioxvXE+KJEU5VM+8fw6c=) 2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d3:ea:27:b3:9f:dc:d1:3b:6d:a2:14:2b:9a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=dad99900d152b44868e79b98fa6feec7d489e686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:39:3e:5d:24:a1:43:b2:14:c8:b1:58:ef: ea:13:65:c4:82:ce:20:25:08:0f:64:77:9b:ef:19: c0:c0:c7:bf:eb:25:b1:de:27:b6:27:2c:2a:2a:c4: e6:4c:c3:61:2e:ea:ff:fe:66:3a:a9:be:aa:dc:c2: 36:ff:51:fc:5f:b7:3d:88:95:d1:d8:41:54:1b:f6: 84:e6:ca:42:c2:21:2f:11:b5:f6:ba:04:d7:af:78: ff:fc:d1:a3:27:31:b0:71:d9:93:a4:09:9a:e4:3d: 22:14:4d:a8:6c:de:91:d6:2d:af:f2:60:01:b4:4f: 41:75:e0:bf:fc:07:2d:2b:ed:df:ca:11:84:53:8d: 0b:84:b1:0d:77:3d:db:bc:88:d0:e4:fa:e4:0b:06: 42:0f:d1:06:e1:0f:fd:d2:3b:78:fb:c3:ca:60:5c: 51:92:65:20:0c:e3:44:40:fb:04:90:fa:7f:bd:c7: 1a:b9:c1:9d:f2:b8:60:4a:43:cc:19:d4:df:f4:d4: d3:07:dc:2a:43:db:28:a1:a9:07:de:b8:dc:8e:0f: d4:06:d5:96:11:a1:ea:d6:f5:c6:5e:e3:af:26:d1: a7:b4:a7:2c:1e:72:cb:e9:06:98:63:94:80:25:ff: d4:3f:58:f0:a0:0c:38:5b:7b:c9:8c:a3:f2:53:3e: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:99:00:D1:52:B4:48:68:E7:9B:98:FA:6F:EE:C7:D4:89:E6:86 X509v3 Authority Key Identifier: keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ca:67:c4:c0:fd:b7:9e:38:66:20:c0:9e:1f:ed:6c:50:56: 06:75:01:06:4b:35:3e:2f:d6:6f:d7:4b:98:04:14:4e:ce:5b: be:b7:ee:82:f7:df:2d:74:86:f8:20:64:c0:b4:71:1a:97:f2: f5:31:15:d6:09:e2:58:7f:c7:d1:18:de:cd:c7:01:16:66:2e: 90:df:c5:7c:bb:1e:c3:ea:0b:8e:41:00:81:20:47:86:d6:f5: 2e:08:80:bd:44:7e:ea:c1:5d:70:9c:1b:4d:75:2d:1b:c2:d5: 5c:e6:30:f3:4d:3b:5b:b3:80:f8:aa:16:82:10:f0:73:3b:f6: 4e:0d:a1:37:8c:d7:ed:7c:b4:af:41:0c:1f:46:73:6f:0f:9f: 26:d3:b4:1b:06:3b:32:41:e0:67:d7:a9:93:c3:7d:9c:f6:8d: 7c:7d:f7:d1:38:d0:c5:99:1e:d1:7b:6a:54:db:5a:37:1d:1e: a7:40:2b:79:c7:5b:c7:ef:5f:a4:f5:f9:9f:83:79:14:fb:a2: 18:a0:60:4e:1c:25:df:a6:fc:75:f9:88:2a:29:b3:ce:73:7b: ce:b4:88:5e:65:ff:37:0a:fc:43:54:9f:31:b4:3d:89:9f:7d: 6a:42:ac:92:91:c7:ff:b7:f4:e9:9d:84:5a:fd:3d:4c:97:a0: 20:78:27:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmtPqJ7Of3NE7baIUK5qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYjc5NmQ5ODBmYTYwZmUyNTE0ZmNlNjI2NDZmNDVkMTJj OTUxNjUwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EyhkYWQ5OTkwMGQxNTJiNDQ4NjhlNzliOThmYTZmZWVjN2Q0ODllNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX05Pl0koUOyFMixWO/qE2XEgs4g JQgPZHeb7xnAwMe/6yWx3ie2JywqKsTmTMNhLur//mY6qb6q3MI2/1H8X7c9iJXR 2EFUG/aE5spCwiEvEbX2ugTXr3j//NGjJzGwcdmTpAma5D0iFE2obN6R1i2v8mAB tE9BdeC//ActK+3fyhGEU40LhLENdz3bvIjQ5PrkCwZCD9EG4Q/90jt4+8PKYFxR kmUgDONEQPsEkPp/vccaucGd8rhgSkPMGdTf9NTTB9wqQ9sooakH3rjcjg/UBtWW EaHq1vXGXuOvJtGntKcsHnLL6QaYY5SAJf/UP1jwoAw4W3vJjKPyUz6FzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNrZmQDRUrRIaOebmPpv7sfUieaGMB8GA1UdIwQY MBaAFPq3ltmA+mD+JRT85iZG9F0SyVFlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1yZVcyWUQ2WVA0bEZQem1Ka2IwWFJMSlVXVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTdmODllLTgyYjUtNDQyYi1iNjcy LTVkMTkyZmJmY2IwYi8xLzEtcmVXMllENllQNGxGUHptSmtiMFhSTEpVV1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE4Lzk3Zjg5ZS04MmI1LTQ0MmItYjY3Mi01ZDE5MmZiZmNi MGIvMS8xLXJlVzJZRDZZUDRsRlB6bUprYjBYUkxKVVdVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXspn xMD9t544ZiDAnh/tbFBWBnUBBks1Pi/Wb9dLmAQUTs5bvrfugvffLXSG+CBkwLRx Gpfy9TEV1gniWH/H0RjezccBFmYukN/FfLsew+oLjkEAgSBHhtb1LgiAvUR+6sFd cJwbTXUtG8LVXOYw8007W7OA+KoWghDwczv2Tg2hN4zX7Xy0r0EMH0Zzbw+fJtO0 GwY7MkHgZ9epk8N9nPaNfH330TjQxZke0XtqVNtaNx0ep0Arecdbx+9fpPX5n4N5 FPuiGKBgThwl36b8dfmIKimzznN7zrSIXmX/Nwr8Q1SfMbQ9iZ99akKskpHH/7f0 6Z2EWv09TJegIHgnzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:38 2025 by rpki-client