This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json) Hash identifier: udXU+efhj0ezqPjsGiuwZMm2ssTpwpfskEEQiEPpSdw= Subject key identifier: 2C:06:12:D6:99:ED:98:59:1F:4E:FA:F2:50:48:AB:5C:5E:5F:64:94 Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f Certificate serial: 019AF0BF77974713908A3CCC277600E95410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft Manifest number: 0776 Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: +Q4562VV2yAPtwqSmKG9beB9ARP9ZxQC+vnion8wC9c=) 2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:77:97:47:13:90:8a:3c:cc:27:76:00:e9:54:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=2c0612d699ed98591f4efaf25048ab5c5e5f6494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:95:74:87:96:9a:5a:f8:84:94:d1:23:9d: 47:e6:66:fa:59:cc:96:ba:1a:e9:0a:b3:4a:f9:33: f1:fc:46:ed:28:e2:c7:ab:0a:0e:67:06:b6:b8:dc: 9e:1c:48:66:83:bc:e1:e0:48:48:b6:a6:aa:d6:19: 33:02:b2:eb:3f:34:fc:b5:08:8e:61:4c:3b:eb:a3: fc:ba:8c:93:1b:4e:70:17:bf:3a:a4:b9:d9:55:7e: fa:e6:40:14:5f:7f:93:88:dd:bd:22:00:bd:13:20: f2:46:05:09:70:77:bb:15:e0:76:4e:87:db:0b:ec: f2:36:a6:6e:4e:fc:f3:27:c5:05:0c:9a:b0:60:f6: 26:44:da:e5:75:1b:c9:ad:e0:eb:fa:cf:f8:62:dc: f5:1e:43:80:c1:c5:14:40:fd:a3:49:49:f6:dc:06: ab:49:50:88:3c:a6:7f:e2:52:9d:0a:6e:81:00:3d: ac:83:78:20:64:7b:b7:c2:8e:4b:c9:ab:8b:00:00: b8:df:4a:f5:e8:de:7f:8b:8c:70:53:c7:e5:6b:b0: 6e:05:03:47:20:d3:8c:99:e4:9b:00:f9:4e:81:b3: 09:e6:c9:87:2c:f9:a5:e4:35:2e:80:96:8a:58:8f: 9d:3e:d9:93:55:0a:2b:9d:b0:8f:1e:0d:2c:d8:9e: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:06:12:D6:99:ED:98:59:1F:4E:FA:F2:50:48:AB:5C:5E:5F:64:94 X509v3 Authority Key Identifier: keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ea:e8:19:b4:8a:13:cb:71:5d:7a:38:64:7f:66:56:ad:f0: b8:52:ab:96:2a:a7:e9:c4:2e:5d:56:6e:ac:48:4d:c8:a6:1f: 41:32:93:ea:77:d3:69:ff:e2:73:ba:b1:30:31:8b:88:5d:12: 04:0a:ff:3f:b6:6d:5e:6b:21:6d:b8:07:64:25:e9:46:37:73: d5:37:78:64:ed:d5:83:ff:af:19:6c:5d:f1:94:9c:f2:6f:6e: 7d:ba:92:35:16:1b:23:b7:56:eb:ce:af:18:9d:6d:5c:e5:95: 92:24:b8:e6:29:13:21:64:7b:ac:0e:92:88:f4:a9:6f:6a:e8: a6:1f:f7:a1:fa:bf:f7:61:56:da:e0:68:24:5a:fe:e2:3d:21: c6:a6:ed:85:b5:ff:5e:ae:43:c4:f8:e4:55:cf:28:7a:f5:d4: b4:8a:0d:2f:42:35:89:92:5c:32:12:cc:0e:20:94:8e:d0:af: 89:ac:ab:06:2e:fc:51:5b:51:e6:32:2d:84:d2:54:b7:9a:d9: 22:40:a2:e9:31:51:0e:58:b2:3d:a6:8f:19:c1:41:05:70:b0: 1e:e0:60:72:b0:05:e2:a8:6b:e9:46:fb:46:c2:66:35:aa:31: 86:d0:9b:e2:dc:69:38:3a:71:21:49:01:f5:17:ea:1b:63:4c: a2:33:7e:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwv3eXRxOQijzMJ3YA6VQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz N2ZjNGYwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EygyYzA2MTJkNjk5ZWQ5ODU5MWY0ZWZhZjI1MDQ4YWI1YzVlNWY2NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmuVdIeWmlr4hJTRI51H5mb6WcyW uhrpCrNK+TPx/EbtKOLHqwoOZwa2uNyeHEhmg7zh4EhItqaq1hkzArLrPzT8tQiO YUw766P8uoyTG05wF786pLnZVX765kAUX3+TiN29IgC9EyDyRgUJcHe7FeB2Tofb C+zyNqZuTvzzJ8UFDJqwYPYmRNrldRvJreDr+s/4Ytz1HkOAwcUUQP2jSUn23Aar SVCIPKZ/4lKdCm6BAD2sg3ggZHu3wo5LyauLAAC430r16N5/i4xwU8fla7BuBQNH INOMmeSbAPlOgbMJ5smHLPml5DUugJaKWI+dPtmTVQornbCPHg0s2J7iCQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCwGEtaZ7ZhZH0768lBIq1xeX2SUMB8GA1UdIwQY MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0 ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFero GbSKE8txXXo4ZH9mVq3wuFKrliqn6cQuXVZurEhNyKYfQTKT6nfTaf/ic7qxMDGL iF0SBAr/P7ZtXmshbbgHZCXpRjdz1Td4ZO3Vg/+vGWxd8ZSc8m9ufbqSNRYbI7dW 686vGJ1tXOWVkiS45ikTIWR7rA6SiPSpb2roph/3ofq/92FW2uBoJFr+4j0hxqbt hbX/Xq5DxPjkVc8oevXUtIoNL0I1iZJcMhLMDiCUjtCviayrBi78UVtR5jIthNJU t5rZIkCi6TFRDliyPaaPGcFBBXCwHuBgcrAF4qhr6Ub7RsJmNaoxhtCb4txpODpx IUkB9RfqG2NMojN+VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:58 2025 by rpki-client