This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json) Hash identifier: GO3QIMBCIWi9oa3xVQ/XReZDQ4NzUksDhtsYG3nHXlU= Subject key identifier: FE:F7:D3:BD:F0:EE:44:45:94:7C:76:67:E7:9D:6F:1B:CC:46:B5:EA Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Certificate serial: 019B2B8A81CFE1290AB5D8262370060AB4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft Manifest number: 09E9 Signing time: Wed 17 Dec 2025 09:00:56 +0000 Manifest this update: Wed 17 Dec 2025 09:00:56 +0000 Manifest next update: Thu 18 Dec 2025 09:00:56 +0000 Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: kWpKnSRsx6zoyTPg8UnJVWhA94cf7mv77BM7eHkLlbQ=) 2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:81:cf:e1:29:0a:b5:d8:26:23:70:06:0a:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Validity Not Before: Dec 17 09:00:56 2025 GMT Not After : Dec 18 09:00:56 2025 GMT Subject: CN=fef7d3bdf0ee4445947c7667e79d6f1bcc46b5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:45:75:13:63:3c:e8:ab:99:cb:72:f8:93: f6:a4:93:bc:11:74:38:6b:89:2a:09:dd:a4:46:3b: 69:39:ef:b6:f2:28:07:33:b1:95:d8:2f:fe:3b:ad: fe:4e:a7:9d:e5:42:ca:0f:9c:16:16:1a:ea:b9:68: 3f:db:cd:30:60:59:bf:61:27:9e:37:f4:e0:be:c1: e7:cb:9c:ba:8d:f9:82:b1:96:72:68:53:e6:36:7b: 9c:a3:d1:c2:0f:10:b3:eb:b4:56:b8:77:4e:b1:09: aa:b7:9b:db:9c:83:dc:2f:73:9e:24:23:11:70:f9: 41:86:e5:3d:ee:2a:01:fa:20:88:a2:5e:16:00:d5: 23:8d:95:fd:70:70:ad:65:80:27:b8:44:ca:10:19: 39:29:99:1d:5d:b5:4e:06:df:09:9a:80:e1:79:03: 03:ad:78:80:b1:c0:f8:c1:b9:6d:c9:82:c7:c4:aa: c9:03:44:32:ea:20:13:48:9f:f9:3f:c7:17:40:1c: 43:86:9d:5d:2a:fb:01:2e:72:94:81:59:d2:bf:77: 21:c1:17:1d:05:94:17:aa:42:80:47:53:f4:18:a2: 18:a6:58:a1:ad:9c:cf:59:a5:03:63:22:ef:16:33: 29:f8:4b:2f:23:da:5f:79:b1:10:34:9e:da:89:aa: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F7:D3:BD:F0:EE:44:45:94:7C:76:67:E7:9D:6F:1B:CC:46:B5:EA X509v3 Authority Key Identifier: keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a4:50:c1:49:41:86:f4:64:3b:86:4f:04:24:ec:fc:5b:69: 8c:a8:6d:4a:17:05:49:0e:1d:b8:05:dd:c6:ca:7d:a5:c5:b6: ef:4d:30:f2:e6:0a:8e:6a:66:68:9d:ce:04:4f:fd:c8:0e:5d: e0:95:df:94:76:01:0c:c2:b2:d7:96:a8:4f:a1:90:d1:60:a3: 61:dd:b4:34:3a:01:8f:b9:e2:9e:88:7b:61:39:3f:f7:de:6a: 0e:3e:f3:9e:f0:1c:0f:8a:7c:86:8d:d5:7c:09:c9:b3:21:59: 5e:07:7f:e4:31:8f:e3:e6:33:3d:43:ae:f2:80:68:4e:cf:3b: 11:90:0a:5e:43:9b:10:7a:9d:6d:2d:5f:65:00:68:ee:9f:72: 0d:1e:61:44:86:e3:ed:27:7c:4a:38:5b:07:14:19:af:02:36: 36:7a:25:53:ff:54:d0:72:64:a1:3e:86:f5:20:45:f7:f1:32: 1f:8e:0b:51:4e:d6:2d:b8:65:33:4c:dd:36:23:f6:79:6a:55: 19:36:9e:c0:ed:a5:a6:69:a1:0f:77:df:e3:9c:b4:90:c4:e6: db:23:72:20:9f:12:ec:b5:f3:d1:23:7c:34:47:72:97:81:b3: a7:2e:ec:67:25:2e:67:35:eb:05:e4:9b:b4:a0:a4:9e:3d:e5: 57:6d:a9:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrioHP4SkKtdgmI3AGCrS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2 ZTJjNDAwHhcNMjUxMjE3MDkwMDU2WhcNMjUxMjE4MDkwMDU2WjAzMTEwLwYDVQQD EyhmZWY3ZDNiZGYwZWU0NDQ1OTQ3Yzc2NjdlNzlkNmYxYmNjNDZiNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l1FdRNjPOirmcty+JP2pJO8EXQ4 a4kqCd2kRjtpOe+28igHM7GV2C/+O63+Tqed5ULKD5wWFhrquWg/280wYFm/YSee N/TgvsHny5y6jfmCsZZyaFPmNnuco9HCDxCz67RWuHdOsQmqt5vbnIPcL3OeJCMR cPlBhuU97ioB+iCIol4WANUjjZX9cHCtZYAnuETKEBk5KZkdXbVOBt8JmoDheQMD rXiAscD4wbltyYLHxKrJA0Qy6iATSJ/5P8cXQBxDhp1dKvsBLnKUgVnSv3chwRcd BZQXqkKAR1P0GKIYplihrZzPWaUDYyLvFjMp+EsvI9pfebEQNJ7aiaqF6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP73073w7kRFlHx2Z+edbxvMRrXqMB8GA1UdIwQY MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt MGU5ZDNlY2E0NGMyLzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKRQwUlB hvRkO4ZPBCTs/FtpjKhtShcFSQ4duAXdxsp9pcW2700w8uYKjmpmaJ3OBE/9yA5d 4JXflHYBDMKy15aoT6GQ0WCjYd20NDoBj7ninoh7YTk/995qDj7znvAcD4p8ho3V fAnJsyFZXgd/5DGP4+YzPUOu8oBoTs87EZAKXkObEHqdbS1fZQBo7p9yDR5hRIbj 7Sd8SjhbBxQZrwI2NnolU/9U0HJkoT6G9SBF9/EyH44LUU7WLbhlM0zdNiP2eWpV GTaewO2lpmmhD3ff45y0kMTm2yNyIJ8S7LXz0SN8NEdyl4Gzpy7sZyUuZzXrBeSb tKCknj3lV22pyA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:59 2025 by rpki-client