This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json) Hash identifier: 6CQBBjDJtVh789WLd3aH3UUzsuXmvBGYdssJZrnJEPo= Subject key identifier: 15:C5:53:55:FA:7E:4B:8F:E5:43:C5:80:11:5D:F2:2D:73:EF:A9:89 Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b Certificate serial: 019AF61CDB5379154BB16AEA26360C3EAC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 00:01:17 +0000 Manifest this update: Sun 07 Dec 2025 00:01:17 +0000 Manifest next update: Mon 08 Dec 2025 00:01:17 +0000 Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: RcdNQi+Oo+iHA3ynF+CFBoKWjV5uqCk9he4mIdyF/ZQ=) 2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:db:53:79:15:4b:b1:6a:ea:26:36:0c:3e:ac:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b Validity Not Before: Dec 7 00:01:17 2025 GMT Not After : Dec 8 00:01:17 2025 GMT Subject: CN=15c55355fa7e4b8fe543c580115df22d73efa989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:3f:6a:12:09:0a:c0:5b:07:fd:42:97:dc: 2b:61:f9:c5:03:9d:7a:5d:32:c0:a5:21:e5:76:5b: e0:fd:6b:9b:23:71:9f:61:9b:7a:7c:0c:53:49:13: a0:10:c3:12:6c:df:f4:18:32:e5:27:26:70:4b:8d: e8:65:e1:50:b8:d9:f8:0d:cf:14:8f:26:ae:1c:fc: d7:75:a9:91:46:df:c5:e5:97:32:67:6c:28:d6:6e: 7e:e3:83:dc:87:a3:91:3a:42:e9:59:71:06:b4:89: ad:19:7c:fa:71:de:f1:cc:06:f2:15:a6:9f:42:09: a2:f1:f0:bf:67:d4:2f:f2:24:9b:2e:e7:c4:e0:6f: 8f:13:82:f7:60:04:11:d9:97:cd:87:1d:92:2c:b2: 91:28:63:af:3d:39:3e:c0:3c:5a:14:c0:8a:62:c4: 1f:3d:e4:b7:f5:a5:1a:b3:d0:5b:63:ce:21:83:61: c4:1b:7d:19:74:4c:6b:28:4d:31:14:f7:d5:46:22: 80:de:35:22:57:d6:2b:a6:8e:91:3c:a6:b6:c5:4c: 62:bd:9f:15:a8:3e:d5:28:b3:2f:ae:ed:1a:8a:c0: c3:ec:ac:1d:ee:4a:eb:7b:7c:f6:6a:62:25:af:0c: 31:e4:4a:ef:c6:33:81:1a:26:02:44:29:7e:e2:9d: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C5:53:55:FA:7E:4B:8F:E5:43:C5:80:11:5D:F2:2D:73:EF:A9:89 X509v3 Authority Key Identifier: keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:dc:94:f2:e2:55:08:59:79:ee:2f:b3:51:ba:6b:bc:53: 62:e1:d2:d3:49:4b:14:4c:80:78:97:c5:1e:5d:0b:6e:e6:fb: d0:25:2b:dc:55:38:96:84:4a:83:4a:66:b2:31:5d:25:c7:53: 1d:38:b3:7d:e8:ee:28:2e:df:1e:29:c1:0f:5c:1d:09:c7:64: 98:ea:a5:f8:cb:29:bd:35:17:be:c8:68:bc:3c:d8:0d:7e:f6: 69:51:f7:fe:50:7d:a7:59:34:f4:32:5c:15:74:2e:43:fe:a9: 1a:2d:f1:c2:d4:85:ff:47:7d:15:25:d4:a8:3c:0f:d5:2a:43: 1a:70:27:ad:4f:48:c0:35:22:8a:48:5a:e6:41:c7:79:07:e8: d8:f0:9a:b3:98:2f:26:4d:08:61:23:f7:4e:97:84:9d:2a:bb: 79:b5:87:0d:d3:64:68:4d:d4:16:03:a9:13:e3:c2:27:2b:5c: a9:ac:58:2c:27:b3:3e:13:07:3f:5a:09:97:cb:b9:20:2f:4d: 62:1d:21:d1:dc:1a:78:cb:22:80:79:69:0b:48:b1:2b:13:30: 80:5c:72:05:ba:68:36:11:d2:38:1d:9d:f9:82:8f:db:34:59: 50:90:cb:22:d6:5f:b1:92:51:ae:f1:24:a3:7a:fb:c5:44:92: b3:2b:38:25 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr2HNtTeRVLsWrqJjYMPqwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YTM1MjBmZDljMjk5YTI4NzRkZjVlNDdiNjMwMmE0MjUy YTcyNmIwHhcNMjUxMjA3MDAwMTE3WhcNMjUxMjA4MDAwMTE3WjAzMTEwLwYDVQQD EygxNWM1NTM1NWZhN2U0YjhmZTU0M2M1ODAxMTVkZjIyZDczZWZhOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQw/ahIJCsBbB/1Cl9wrYfnFA516 XTLApSHldlvg/WubI3GfYZt6fAxTSROgEMMSbN/0GDLlJyZwS43oZeFQuNn4Dc8U jyauHPzXdamRRt/F5ZcyZ2wo1m5+44Pch6OROkLpWXEGtImtGXz6cd7xzAbyFaaf Qgmi8fC/Z9Qv8iSbLufE4G+PE4L3YAQR2ZfNhx2SLLKRKGOvPTk+wDxaFMCKYsQf PeS39aUas9BbY84hg2HEG30ZdExrKE0xFPfVRiKA3jUiV9Yrpo6RPKa2xUxivZ8V qD7VKLMvru0aisDD7Kwd7krre3z2amIlrwwx5ErvxjOBGiYCRCl+4p33dwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBXFU1X6fkuP5UPFgBFd8i1z76mJMB8GA1UdIwQY MBaAFPmjUg/Zwpmih0315HtjAqQlKnJrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1hTlNEOW5DbWFLSFRmWGtlMk1DcENVcWNtcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvODQwNzU3LTgxNDktNDBmZS1hNDli LWFlNWU3NGVkNWJhMC8xLzEtYU5TRDluQ21hS0hUZlhrZTJNQ3BDVXFjbXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI1Lzg0MDc1Ny04MTQ5LTQwZmUtYTQ5Yi1hZTVlNzRlZDVi YTAvMS8xLWFOU0Q5bkNtYUtIVGZYa2UyTUNwQ1VxY21zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpbc lPLiVQhZee4vs1G6a7xTYuHS00lLFEyAeJfFHl0Lbub70CUr3FU4loRKg0pmsjFd JcdTHTizfejuKC7fHinBD1wdCcdkmOql+MspvTUXvshovDzYDX72aVH3/lB9p1k0 9DJcFXQuQ/6pGi3xwtSF/0d9FSXUqDwP1SpDGnAnrU9IwDUiikha5kHHeQfo2PCa s5gvJk0IYSP3TpeEnSq7ebWHDdNkaE3UFgOpE+PCJytcqaxYLCezPhMHP1oJl8u5 IC9NYh0h0dwaeMsigHlpC0ixKxMwgFxyBbpoNhHSOB2d+YKP2zRZUJDLItZfsZJR rvEko3r7xUSSsys4JQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:49:39 2025 by rpki-client