This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json) Hash identifier: z4gtcxD+5dvEKDJqmJ3bWew9COq7MRzKHXANCZYzfVE= Subject key identifier: B8:71:6E:A1:A4:02:18:57:98:8B:E3:24:42:E4:F8:20:CF:CD:08:D2 Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Certificate serial: 019AF2769BBC4243AED38C530B1A95D90AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: s5HnZFXBHVBkgz7xFuga3iClm3ibe/YnZYrN0SjUfHw=) 2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=) 3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=) 4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9b:bc:42:43:ae:d3:8c:53:0b:1a:95:d9:0a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=b8716ea1a4021857988be32442e4f820cfcd08d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:8f:84:88:85:a0:45:8e:8d:b9:2a:e5:d2: 8f:c4:e5:1a:cc:bb:17:f5:a9:26:17:76:6a:43:97: 8c:87:e4:05:1c:df:3c:08:1d:6f:cb:49:f0:ab:bd: 53:61:f7:1a:d7:5c:37:08:dd:8c:08:98:f1:3d:f0: 14:b7:1a:94:63:13:0a:bb:d0:a9:58:f3:05:28:3f: bc:20:8e:8c:74:f2:4c:79:93:26:c0:e9:bb:e6:65: 82:8c:51:7f:11:1c:26:23:60:89:f7:a4:fb:26:48: ed:45:d9:23:53:32:10:0e:ed:0d:2e:d6:60:b1:81: bc:fd:80:b1:13:30:2d:05:74:f3:7b:f5:9c:27:f8: 76:03:19:41:2b:f8:ae:81:1f:58:56:a5:3f:56:07: a0:db:31:c0:fa:ea:66:63:a2:68:b4:ef:a9:bb:6c: 5e:80:26:f0:a4:7b:91:62:fc:7c:17:be:88:7d:1a: b0:81:1a:11:66:e6:55:f9:79:f3:59:08:7b:40:ab: 54:97:ed:7b:ab:68:43:13:66:fe:14:55:ff:c9:1a: f3:6d:80:5a:db:77:ac:ba:4d:31:e3:b5:c1:12:55: 1e:9f:77:bc:53:99:eb:a8:7e:51:65:ef:c0:d0:dd: 48:d5:eb:2f:44:d5:0d:b6:21:3f:65:0f:8b:38:23: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:71:6E:A1:A4:02:18:57:98:8B:E3:24:42:E4:F8:20:CF:CD:08:D2 X509v3 Authority Key Identifier: keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b4:2d:4a:75:95:e8:f7:11:d2:f6:50:70:27:ba:00:6b:27: f6:26:68:ad:4e:7d:6e:98:6a:9c:9a:d8:bb:2a:17:13:ce:a6: 86:63:20:c5:94:fb:13:33:cb:af:9f:b0:27:4f:fa:99:b9:0b: 8e:c0:dd:57:e4:74:06:80:da:a8:6b:8d:ea:0e:fa:e5:da:37: a4:c8:a8:26:3b:73:b1:7e:52:24:e8:a0:9c:eb:3f:8e:d3:4f: e0:00:d6:d1:6e:79:08:08:9e:8c:c3:a5:de:79:8c:4c:bd:a4: 35:72:6f:49:7e:66:86:6a:d5:fd:e7:41:27:b4:72:b4:1e:09: 89:c5:8d:70:58:83:8a:80:4d:91:fe:31:99:57:5c:43:22:53: 9b:e0:8a:6e:17:46:92:94:ba:44:33:79:35:09:58:d3:17:cb: 96:96:c8:f4:b8:6b:e8:ee:d5:06:3d:07:39:42:78:8a:74:b2: 29:2a:e4:0b:3a:32:8c:0d:6b:0b:0e:18:f8:35:2a:99:86:17: 55:61:07:54:1d:9a:94:6f:85:c2:99:19:a8:01:cc:77:a7:24: 09:f8:49:25:eb:6f:3c:cd:30:e5:82:89:8b:e1:2a:4c:18:d4: 49:ec:e5:1d:fc:52:f3:bd:04:f6:16:14:12:c2:0b:42:86:cf: b4:a2:9d:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydpu8QkOu04xTCxqV2QrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4 YmM4NmQwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EyhiODcxNmVhMWE0MDIxODU3OTg4YmUzMjQ0MmU0ZjgyMGNmY2QwOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CCPhIiFoEWOjbkq5dKPxOUazLsX 9akmF3ZqQ5eMh+QFHN88CB1vy0nwq71TYfca11w3CN2MCJjxPfAUtxqUYxMKu9Cp WPMFKD+8II6MdPJMeZMmwOm75mWCjFF/ERwmI2CJ96T7JkjtRdkjUzIQDu0NLtZg sYG8/YCxEzAtBXTze/WcJ/h2AxlBK/iugR9YVqU/Vgeg2zHA+upmY6JotO+pu2xe gCbwpHuRYvx8F76IfRqwgRoRZuZV+XnzWQh7QKtUl+17q2hDE2b+FFX/yRrzbYBa 23esuk0x47XBElUen3e8U5nrqH5RZe/A0N1I1esvRNUNtiE/ZQ+LOCN0DwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLhxbqGkAhhXmIvjJELk+CDPzQjSMB8GA1UdIwQY MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1 LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbQt SnWV6PcR0vZQcCe6AGsn9iZorU59bphqnJrYuyoXE86mhmMgxZT7EzPLr5+wJ0/6 mbkLjsDdV+R0BoDaqGuN6g765do3pMioJjtzsX5SJOignOs/jtNP4ADW0W55CAie jMOl3nmMTL2kNXJvSX5mhmrV/edBJ7RytB4JicWNcFiDioBNkf4xmVdcQyJTm+CK bhdGkpS6RDN5NQlY0xfLlpbI9Lhr6O7VBj0HOUJ4inSyKSrkCzoyjA1rCw4Y+DUq mYYXVWEHVB2alG+FwpkZqAHMd6ckCfhJJetvPM0w5YKJi+EqTBjUSezlHfxS870E 9hYUEsILQobPtKKdkw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:07 2025 by rpki-client