This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json) Hash identifier: QjjEImqe7m4V6C/MUPUl/tUrJOvq+OTr00ERNGbEzno= Subject key identifier: F7:0B:01:FB:8F:40:93:EB:AF:65:3C:B9:FA:C7:D0:41:4C:73:A4:91 Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Certificate serial: 019B32D6B27901E94C9350F0D85F552757AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft Manifest number: 101C Signing time: Thu 18 Dec 2025 19:01:29 +0000 Manifest this update: Thu 18 Dec 2025 19:01:29 +0000 Manifest next update: Fri 19 Dec 2025 19:01:29 +0000 Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: zRDs4xnD91D1UqrCHajg+nao1WZSWgz787AYmILMJdI=) 2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:b2:79:01:e9:4c:93:50:f0:d8:5f:55:27:57:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Validity Not Before: Dec 18 19:01:29 2025 GMT Not After : Dec 19 19:01:29 2025 GMT Subject: CN=f70b01fb8f4093ebaf653cb9fac7d0414c73a491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:a2:34:2a:d2:1d:c8:77:0c:64:49:26:4e: d8:9a:d0:48:b7:2c:0c:61:ea:d6:38:6e:db:46:f1: 24:b1:55:cf:79:c5:64:e0:1f:d4:27:e1:f3:df:25: 2a:2a:3e:fe:01:e5:fa:6c:57:49:fe:98:b0:08:59: 2f:77:fc:d1:d1:66:6f:f6:52:d6:21:d8:a5:84:88: 8a:79:bf:46:3d:1e:47:b9:29:9d:77:89:7d:15:0b: 09:47:45:15:61:64:32:e5:1e:84:b7:c6:80:55:39: 8e:d0:f3:1d:3c:e2:23:22:79:b3:e5:fd:95:9b:dc: ee:75:e9:f4:0f:a5:11:fa:f6:1e:36:39:5b:1d:13: 6c:9e:79:77:69:54:6a:55:14:ac:fd:18:4e:94:0e: 54:cd:64:42:19:59:f8:ff:df:b6:1f:af:24:f4:1b: 2c:ac:a4:4f:a1:c4:bd:60:4d:0a:93:1a:20:f0:1d: 19:5b:ce:00:08:d9:b5:1a:02:d0:9a:74:bb:5e:74: 3b:ed:14:36:6b:ad:45:8a:3f:ad:81:f4:4d:28:da: 87:c9:6a:82:49:9f:30:dc:7c:42:c7:cf:35:1d:a2: 78:d8:0f:1e:2d:ca:b7:45:83:e1:e3:cd:29:5e:b7: 57:98:76:36:93:78:d9:c4:09:96:54:f3:be:f2:58: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:01:FB:8F:40:93:EB:AF:65:3C:B9:FA:C7:D0:41:4C:73:A4:91 X509v3 Authority Key Identifier: keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:60:05:83:27:05:51:ac:78:29:93:55:80:8e:5a:e5:9e:ee: 14:42:18:ac:5c:5b:f1:c3:3c:ec:12:37:3c:67:99:98:c1:40: 39:aa:ca:51:09:de:d7:78:10:d7:d7:06:59:8b:61:7a:da:f9: 59:2f:a1:00:99:0c:b8:85:00:19:80:92:31:b4:c7:76:13:d2: 6b:4f:73:63:cc:3d:d9:e1:ab:e3:d7:22:fc:b6:77:9c:af:cc: 88:1b:5f:ce:20:e8:fb:73:58:95:ec:ad:c5:0e:78:6d:4c:f7: d1:4d:45:82:66:33:28:d5:d8:69:46:cd:6c:4d:6f:4a:1f:8d: 3c:47:b8:9a:bf:2c:8f:54:cd:fd:7a:9d:8c:98:8b:98:0c:53: 71:29:04:27:c8:30:a8:1e:58:ae:12:3d:81:37:03:d4:28:68: 2c:76:80:63:e5:7a:66:c9:8a:1c:3f:66:78:5c:77:cc:3a:c5: fd:cb:b9:6f:ca:1f:24:b1:ce:8a:aa:1a:8a:f8:23:a5:46:eb: ed:8c:22:cb:e0:2f:af:9b:33:1e:ce:e8:08:b8:3a:0e:6b:93: 1a:34:1c:c1:c3:26:8a:ec:38:7f:cb:34:87:b3:13:b6:a5:40: 4a:d6:2b:a9:7e:6e:dc:b6:3a:81:a1:60:14:3a:86:f1:0b:b6: df:c7:64:26 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsy1rJ5AelMk1Dw2F9VJ1euMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1 ZjZjZTAwHhcNMjUxMjE4MTkwMTI5WhcNMjUxMjE5MTkwMTI5WjAzMTEwLwYDVQQD EyhmNzBiMDFmYjhmNDA5M2ViYWY2NTNjYjlmYWM3ZDA0MTRjNzNhNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV+iNCrSHch3DGRJJk7YmtBItywM YerWOG7bRvEksVXPecVk4B/UJ+Hz3yUqKj7+AeX6bFdJ/piwCFkvd/zR0WZv9lLW IdilhIiKeb9GPR5HuSmdd4l9FQsJR0UVYWQy5R6Et8aAVTmO0PMdPOIjInmz5f2V m9zuden0D6UR+vYeNjlbHRNsnnl3aVRqVRSs/RhOlA5UzWRCGVn4/9+2H68k9Bss rKRPocS9YE0Kkxog8B0ZW84ACNm1GgLQmnS7XnQ77RQ2a61Fij+tgfRNKNqHyWqC SZ8w3HxCx881HaJ42A8eLcq3RYPh480pXrdXmHY2k3jZxAmWVPO+8li2mQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPcLAfuPQJPrr2U8ufrH0EFMc6SRMB8GA1UdIwQY MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3 LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1 YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGAF gycFUax4KZNVgI5a5Z7uFEIYrFxb8cM87BI3PGeZmMFAOarKUQne13gQ19cGWYth etr5WS+hAJkMuIUAGYCSMbTHdhPSa09zY8w92eGr49ci/LZ3nK/MiBtfziDo+3NY leytxQ54bUz30U1FgmYzKNXYaUbNbE1vSh+NPEe4mr8sj1TN/XqdjJiLmAxTcSkE J8gwqB5YrhI9gTcD1ChoLHaAY+V6ZsmKHD9meFx3zDrF/cu5b8ofJLHOiqoaivgj pUbr7Ywiy+Avr5szHs7oCLg6DmuTGjQcwcMmiuw4f8s0h7MTtqVAStYrqX5u3LY6 gaFgFDqG8Qu238dkJg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:48 2025 by rpki-client