This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json) Hash identifier: dBBInR1F/pf6Hq4XsYMtyUHlMs+W018BOTMdQ+aK3xs= Subject key identifier: 7E:49:86:50:72:F4:59:D2:4C:89:64:31:92:5E:91:73:F0:15:15:2E Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Certificate serial: 019AF19AADA2D2B4662CDDB27AE24263CC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft Manifest number: 1113 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: TYiu+nyFJoNMSOT1FwAsIgYR3+ky27wBtr7+xnlBIXg=) 2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=) 3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=) 4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=) 5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=) 6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=) 7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=) 8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ad:a2:d2:b4:66:2c:dd:b2:7a:e2:42:63:cc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=7e49865072f459d24c896431925e9173f015152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:56:71:29:da:dc:48:cb:bf:a4:ae:dd:69: dc:8d:55:7b:d4:b8:a3:84:29:29:35:fa:2e:00:f9: ad:50:c1:4f:0c:98:18:13:b7:a3:2f:c7:0f:27:07: 51:7c:c4:55:eb:2b:8b:80:a2:df:f7:1c:93:ce:0f: 43:17:b7:0f:16:94:0f:b0:21:1e:5f:4b:e6:a9:78: 68:ce:35:a6:ba:01:04:ee:32:63:c3:bc:73:38:4a: e2:26:56:1d:5f:28:77:1c:1c:bf:16:21:40:60:65: f8:6c:bb:36:f0:69:0a:8e:9d:36:c4:1e:d0:31:10: 4b:7d:50:7d:b0:d1:51:c3:ec:92:de:c3:65:6a:74: e6:0b:25:c4:4d:57:6a:a3:96:c6:f7:08:2f:f5:ea: 5d:5d:c4:c3:49:84:33:8d:c0:58:d8:e0:06:05:4f: d2:4b:7c:68:b7:77:00:51:78:ce:b9:6c:b1:5f:7a: 03:ff:a8:97:7f:6e:b6:0d:27:90:8b:2e:5a:0d:fd: 78:73:0c:33:a8:87:fe:36:f8:da:07:8c:2e:20:c9: 48:5f:3d:4c:a5:2b:73:25:3f:55:13:b6:25:59:fd: 7d:5f:77:38:79:58:56:d7:25:4b:0d:d5:45:09:80: de:dc:75:75:3a:f6:fe:92:d3:81:6f:42:4f:f4:8c: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:49:86:50:72:F4:59:D2:4C:89:64:31:92:5E:91:73:F0:15:15:2E X509v3 Authority Key Identifier: keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ea:f0:61:7c:3f:a3:89:6d:38:bc:29:9e:8d:e3:d2:aa:ab: 58:2c:ff:a0:19:20:5e:95:12:bf:4c:11:6d:51:8c:f4:c0:29: c8:f5:12:ad:d9:5a:60:ab:7b:0f:6a:ad:29:23:f2:ac:a7:c6: e5:bc:3f:1f:40:ba:83:64:15:51:17:27:09:c6:7d:8c:9c:76: 6f:d5:1f:4c:e7:12:c4:ab:b5:bf:7b:2f:9c:43:c0:fb:57:e4: 0e:f5:b8:9b:2e:00:dd:18:bb:6a:5a:4e:a0:ca:92:0e:cb:4d: 55:53:d3:91:07:fe:f5:ca:8b:ce:8a:c7:f6:70:c0:2b:89:9b: 1b:a6:65:bb:ae:85:47:26:07:72:8a:8f:5a:4e:19:c5:b9:8e: aa:b8:9d:fd:d6:39:a9:73:83:3b:a8:0a:a0:29:70:cf:81:19: 7a:6d:82:4d:17:a1:22:34:cf:da:58:be:fd:36:aa:0b:3c:01: d1:b8:28:cd:58:b8:e7:e2:ca:94:d1:5b:22:42:43:e2:cd:2c: 27:51:7d:23:20:41:cd:02:87:c8:1e:49:a2:65:80:82:48:b1: 40:83:27:3c:de:2e:46:14:61:a6:ee:76:f7:f1:be:7d:3f:29: ca:eb:89:85:a8:bd:d0:ea:36:e4:b0:08:84:42:10:cb:cd:2d: 3c:c8:41:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq2i0rRmLN2yeuJCY8xBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj YWE2ZDQwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD Eyg3ZTQ5ODY1MDcyZjQ1OWQyNGM4OTY0MzE5MjVlOTE3M2YwMTUxNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHpWcSna3EjLv6Su3WncjVV71Lij hCkpNfouAPmtUMFPDJgYE7ejL8cPJwdRfMRV6yuLgKLf9xyTzg9DF7cPFpQPsCEe X0vmqXhozjWmugEE7jJjw7xzOEriJlYdXyh3HBy/FiFAYGX4bLs28GkKjp02xB7Q MRBLfVB9sNFRw+yS3sNlanTmCyXETVdqo5bG9wgv9epdXcTDSYQzjcBY2OAGBU/S S3xot3cAUXjOuWyxX3oD/6iXf262DSeQiy5aDf14cwwzqIf+NvjaB4wuIMlIXz1M pStzJT9VE7YlWf19X3c4eVhW1yVLDdVFCYDe3HV1Ovb+ktOBb0JP9IzhPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5JhlBy9FnSTIlkMZJekXPwFRUuMB8GA1UdIwQY MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt NmJmZmNiN2MwZjBhLzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARurwYXw/ o4ltOLwpno3j0qqrWCz/oBkgXpUSv0wRbVGM9MApyPUSrdlaYKt7D2qtKSPyrKfG 5bw/H0C6g2QVURcnCcZ9jJx2b9UfTOcSxKu1v3svnEPA+1fkDvW4my4A3Ri7alpO oMqSDstNVVPTkQf+9cqLzorH9nDAK4mbG6Zlu66FRyYHcoqPWk4ZxbmOqrid/dY5 qXODO6gKoClwz4EZem2CTRehIjTP2li+/TaqCzwB0bgozVi45+LKlNFbIkJD4s0s J1F9IyBBzQKHyB5JomWAgkixQIMnPN4uRhRhpu529/G+fT8pyuuJhai90Oo25LAI hEIQy80tPMhBoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:54 2025 by rpki-client