This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json) Hash identifier: daH91ftGwdfxdUhYF8Ife06TzEwPP1vlRMEkA1AImws= Subject key identifier: E7:D1:D1:B7:AA:F9:21:F5:19:2E:42:A1:37:EA:A6:4B:0A:F5:05:B8 Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Certificate serial: 019AF31D37FCD1357C738348645E2D97ABE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft Manifest number: 0FFB Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: PzDJe2frinxgaKCwLTT3ACQI/GmatEVGC1+i4/TZxsQ=) 2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:37:fc:d1:35:7c:73:83:48:64:5e:2d:97:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=e7d1d1b7aaf921f5192e42a137eaa64b0af505b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:be:4d:77:f8:d4:f5:ca:85:f9:35:75:fb: 62:fb:51:3d:40:34:1f:11:75:9e:ff:ed:f7:07:67: ee:bd:28:ca:f4:86:7d:06:46:67:d3:f0:18:7d:f6: 56:b9:a8:4b:63:28:0e:96:8a:2a:4a:ed:e8:4a:2c: 76:86:35:da:32:bc:d6:df:37:9a:b0:24:86:ee:eb: 8e:8b:63:66:bb:a5:2e:1e:20:84:db:6e:73:8f:ac: cf:b7:69:24:00:1c:4d:c4:c3:91:d2:be:65:b5:76: ef:c5:92:77:9e:4c:8c:7c:3f:b8:ae:83:27:3d:49: 26:51:76:de:9c:3c:48:01:5c:b5:51:c3:9e:85:3a: dd:6e:65:ac:96:05:0b:e6:48:16:fe:c3:c5:d8:03: 22:4a:05:2c:87:fc:a5:17:c3:72:96:e2:ae:b7:2e: d8:6d:8b:6f:a1:04:7f:f8:8e:78:6a:c3:2b:21:05: 40:fe:5b:44:1a:bd:72:bc:2b:3e:1d:01:35:a1:7c: dd:53:9a:aa:a8:81:63:62:fe:e8:2a:63:83:2a:05: 99:8f:46:46:16:c7:76:38:b5:15:ca:25:96:fd:83: 3a:50:c0:4f:89:f4:39:50:ff:c5:79:8d:8e:b1:7e: a6:7b:3c:d6:a9:3f:ec:f7:62:ee:20:c6:dd:06:b0: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D1:D1:B7:AA:F9:21:F5:19:2E:42:A1:37:EA:A6:4B:0A:F5:05:B8 X509v3 Authority Key Identifier: keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2e:79:6a:bb:ca:8e:d5:32:ec:a1:68:54:b0:ad:fc:59:4a: 68:98:f1:1f:a9:44:1c:77:23:72:33:a8:1b:55:38:87:7f:7a: a5:b5:05:6f:ec:91:fd:09:01:74:da:53:9c:a8:91:bd:35:8a: dc:06:e7:f3:97:22:c6:8f:45:cb:8d:26:2e:6c:cf:31:96:b5: 85:53:ac:67:16:5d:09:dd:d7:4b:5e:1c:2a:45:ac:ba:20:81: 63:67:d3:de:27:c8:21:e2:f4:36:42:70:30:f7:c7:64:ad:0e: c7:2d:7f:a1:f9:7b:be:e7:ff:4a:76:f3:a6:7c:5a:66:36:c2: f6:e4:ee:37:a5:e3:83:e3:27:4a:90:c6:10:7d:20:72:1b:78: f0:8f:17:d1:b0:f6:8b:dd:fb:6b:1f:9c:2c:c4:28:78:1d:d4: d3:49:f8:40:a7:e2:24:63:9d:ea:12:34:6d:85:32:ca:0e:42: e2:0c:fc:70:85:d0:4f:86:69:0b:95:7e:f2:e8:c0:38:d9:a4: d1:b0:47:a0:94:07:94:01:82:67:19:96:9e:b7:10:16:a8:13: bf:a3:95:61:d2:51:a1:ec:de:6e:d2:24:2e:e0:fe:0b:9b:c2: 58:bd:b5:b3:e9:b4:a9:cb:84:33:f7:cc:ea:34:15:a2:80:84: cf:91:c2:f7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHTf80TV8c4NIZF4tl6vgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1 ZjZjZTAwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD EyhlN2QxZDFiN2FhZjkyMWY1MTkyZTQyYTEzN2VhYTY0YjBhZjUwNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pq+TXf41PXKhfk1dfti+1E9QDQf EXWe/+33B2fuvSjK9IZ9BkZn0/AYffZWuahLYygOlooqSu3oSix2hjXaMrzW3zea sCSG7uuOi2Nmu6UuHiCE225zj6zPt2kkABxNxMOR0r5ltXbvxZJ3nkyMfD+4roMn PUkmUXbenDxIAVy1UcOehTrdbmWslgUL5kgW/sPF2AMiSgUsh/ylF8NyluKuty7Y bYtvoQR/+I54asMrIQVA/ltEGr1yvCs+HQE1oXzdU5qqqIFjYv7oKmODKgWZj0ZG Fsd2OLUVyiWW/YM6UMBPifQ5UP/FeY2OsX6mezzWqT/s92LuIMbdBrA27QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOfR0beq+SH1GS5CoTfqpksK9QW4MB8GA1UdIwQY MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3 LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1 YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS55 arvKjtUy7KFoVLCt/FlKaJjxH6lEHHcjcjOoG1U4h396pbUFb+yR/QkBdNpTnKiR vTWK3Abn85cixo9Fy40mLmzPMZa1hVOsZxZdCd3XS14cKkWsuiCBY2fT3ifIIeL0 NkJwMPfHZK0Oxy1/ofl7vuf/SnbzpnxaZjbC9uTuN6Xjg+MnSpDGEH0gcht48I8X 0bD2i937ax+cLMQoeB3U00n4QKfiJGOd6hI0bYUyyg5C4gz8cIXQT4ZpC5V+8ujA ONmk0bBHoJQHlAGCZxmWnrcQFqgTv6OVYdJRoezebtIkLuD+C5vCWL21s+m0qcuE M/fM6jQVooCEz5HC9w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:27 2025 by rpki-client