This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json) Hash identifier: nH4C32Og8pgdN6JHqbA+nfh0WtcDek/kGBJiiGGgB4g= Subject key identifier: 93:B7:4A:62:F7:20:07:C1:3A:B9:67:6A:79:53:C2:D4:0E:6A:E2:78 Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d Certificate serial: 019AF12E7F93D1F5DD937BA1B081D70A6D8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: bM3vRrZvnRDf11nXQElBzub4T4t8LDndJWlbfZ/YDbk=) 2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7f:93:d1:f5:dd:93:7b:a1:b0:81:d7:0a:6d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=93b74a62f72007c13ab9676a7953c2d40e6ae278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:44:b0:4f:58:0c:22:b1:96:b6:cf:0a:dc: 6a:46:9f:fc:30:9b:79:73:83:90:1b:88:45:67:bc: 2d:07:79:be:b7:ae:84:51:b8:40:ab:7c:1c:8f:7a: 58:aa:51:c7:e2:aa:89:67:1e:a9:ed:29:a7:b3:5f: d4:d9:40:d6:9f:d0:31:34:ee:39:16:98:e2:67:94: 82:3a:cc:31:65:17:8b:e3:6b:7b:07:6b:55:56:ec: 55:73:76:9e:5b:aa:da:25:c5:e5:6b:34:11:73:59: 45:81:8e:de:b6:9b:21:eb:ab:d4:a6:d6:ce:10:49: 28:86:ff:5d:68:36:75:fa:fa:fb:3e:55:c5:52:80: 8c:bb:9d:0e:1e:91:b3:d3:87:e8:82:ca:e7:94:da: 79:7f:cb:38:24:50:52:ae:ee:11:2c:c7:06:87:ae: fd:20:8a:04:43:ae:4e:02:4e:41:97:69:73:84:06: c4:aa:2a:c1:27:d2:35:c8:9c:69:ce:e9:9c:1c:84: 18:dc:f5:3c:f4:dd:42:5e:87:4e:4b:c2:5b:4e:2c: dd:fd:06:ad:89:34:32:14:b9:9f:32:b5:27:fb:e4: 8b:3c:4d:32:be:0b:96:21:42:f9:0a:85:31:cf:73: 79:87:03:73:b9:27:73:4e:78:d7:b8:6c:77:2e:14: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B7:4A:62:F7:20:07:C1:3A:B9:67:6A:79:53:C2:D4:0E:6A:E2:78 X509v3 Authority Key Identifier: keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:96:c1:1a:2c:62:50:3d:1a:25:d3:77:0b:4f:70:2c:e3:0d: 14:36:d9:2b:7e:7b:d1:dd:e3:66:eb:69:40:b5:a4:01:d1:c8: 5d:e7:fa:74:db:b8:a9:79:88:7b:b3:96:8c:d2:7f:02:2a:8c: 99:36:73:38:dd:e2:af:ea:9e:10:cc:71:c1:87:c9:42:ea:0a: 61:02:07:8e:a7:36:ee:2d:84:d8:37:98:df:cb:8f:8d:05:56: e4:ca:7d:a9:5a:9d:60:d2:fa:2f:76:7f:85:69:01:6e:96:53: 94:10:c4:9a:48:0b:89:40:fe:d3:e3:4b:8b:d7:11:3b:d7:f7: 2e:23:2b:7a:60:a8:7a:91:de:ea:f4:ee:98:71:9d:17:76:b1: 72:6a:61:47:37:f3:e8:09:69:6c:06:e0:7c:55:f2:38:f6:2f: e0:ae:aa:37:14:7f:50:4b:0e:6b:ba:48:9f:96:e4:85:5e:45: f5:fe:92:36:5a:07:47:78:c8:e5:50:05:b1:3b:27:df:11:02: 51:97:76:f8:36:86:fc:72:f9:8f:51:5d:b8:77:80:bc:63:8b: 45:e0:38:17:44:59:1c:c9:21:a1:e3:54:fa:64:47:68:8c:b1: 5b:23:45:de:24:0a:2b:98:36:dd:87:60:9f:6f:5e:a0:54:c0: 87:b5:9a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn+T0fXdk3uhsIHXCm2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWE4ZDkxZmU0NGYxYTk2MzlhZWQ1NjFjMWJjYWZjYmYx MGIyNWQwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD Eyg5M2I3NGE2MmY3MjAwN2MxM2FiOTY3NmE3OTUzYzJkNDBlNmFlMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygVEsE9YDCKxlrbPCtxqRp/8MJt5 c4OQG4hFZ7wtB3m+t66EUbhAq3wcj3pYqlHH4qqJZx6p7Smns1/U2UDWn9AxNO45 FpjiZ5SCOswxZReL42t7B2tVVuxVc3aeW6raJcXlazQRc1lFgY7etpsh66vUptbO EEkohv9daDZ1+vr7PlXFUoCMu50OHpGz04fogsrnlNp5f8s4JFBSru4RLMcGh679 IIoEQ65OAk5Bl2lzhAbEqirBJ9I1yJxpzumcHIQY3PU89N1CXodOS8JbTizd/Qat iTQyFLmfMrUn++SLPE0yvguWIUL5CoUxz3N5hwNzuSdzTnjXuGx3LhSKtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO3SmL3IAfBOrlnanlTwtQOauJ4MB8GA1UdIwQY MBaAFNRajZH+RPGpY5rtVhwbyvy/ELJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWIt NTg4NjVkMWUxNGUwLzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWItNTg4NjVkMWUxNGUw LzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZbBGixi UD0aJdN3C09wLOMNFDbZK3570d3jZutpQLWkAdHIXef6dNu4qXmIe7OWjNJ/AiqM mTZzON3ir+qeEMxxwYfJQuoKYQIHjqc27i2E2DeY38uPjQVW5Mp9qVqdYNL6L3Z/ hWkBbpZTlBDEmkgLiUD+0+NLi9cRO9f3LiMremCoepHe6vTumHGdF3axcmphRzfz 6AlpbAbgfFXyOPYv4K6qNxR/UEsOa7pIn5bkhV5F9f6SNloHR3jI5VAFsTsn3xEC UZd2+DaG/HL5j1FduHeAvGOLReA4F0RZHMkhoeNU+mRHaIyxWyNF3iQKK5g23Ydg n29eoFTAh7Wavg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:02 2025 by rpki-client