This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json) Hash identifier: 07ay5Ue7+ZEv57pKamFVHNVsl1KJEYuK7gxAoGRcUyg= Subject key identifier: 26:D4:C4:9C:8C:B6:09:74:5F:DB:70:17:74:C0:1E:13:E9:46:E4:CC Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Certificate serial: 019AF3C03BDA5BC0D2D0917C8968AC99B9D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 13:00:52 +0000 Manifest this update: Sat 06 Dec 2025 13:00:52 +0000 Manifest next update: Sun 07 Dec 2025 13:00:52 +0000 Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: niipP+22XjFWJLm19BDF43vOc6NXYXkfdfYnZp2q4ho=) 2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=) 3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3b:da:5b:c0:d2:d0:91:7c:89:68:ac:99:b9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Validity Not Before: Dec 6 13:00:52 2025 GMT Not After : Dec 7 13:00:52 2025 GMT Subject: CN=26d4c49c8cb609745fdb701774c01e13e946e4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:87:bf:3e:2b:2c:e7:b0:ea:0a:4a:d7:54: eb:da:06:a9:1f:fc:c5:1d:16:dc:63:86:15:94:77: ea:f7:32:2a:42:7f:18:33:a8:85:0d:67:71:c7:ae: 05:4f:62:f2:a0:01:f2:de:70:22:f9:ec:ae:6f:9c: ce:ff:89:b7:dd:53:2d:94:36:b9:13:53:a1:aa:60: c0:c0:6a:af:e4:d2:d5:2d:da:4c:35:09:d4:54:d9: 27:ab:42:fe:26:b0:57:f5:46:eb:b5:18:21:a1:6e: 7b:41:92:ec:f4:18:64:04:85:37:b8:99:49:54:26: d7:3b:85:72:e2:12:a1:30:14:f3:1a:f1:cf:ac:e5: 72:db:b8:c9:eb:86:1c:9e:04:5d:45:29:89:81:bb: 19:56:09:7c:55:a0:2d:03:84:49:9e:27:69:5c:08: 24:43:37:db:f4:1c:5a:99:a9:18:9b:5e:02:78:ae: 89:22:32:fb:5e:c1:c3:64:ca:85:94:59:b4:8f:11: 06:68:5d:d2:73:94:37:3c:c4:07:74:c5:a0:a7:46: 37:15:7e:c8:ab:b5:29:49:27:e2:9a:35:87:8f:23: 20:2d:42:0c:6f:2d:26:49:05:b1:aa:c1:d2:20:14: 7b:71:17:40:8c:78:7d:7b:a9:6e:96:66:8c:f8:55: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D4:C4:9C:8C:B6:09:74:5F:DB:70:17:74:C0:1E:13:E9:46:E4:CC X509v3 Authority Key Identifier: keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:71:62:d8:4d:4c:55:0d:a7:d1:3c:77:d3:a8:bb:00:ed:c2: a9:95:04:d2:7a:d8:b0:40:fb:ea:d3:fe:f0:a5:2c:cf:17:78: 4c:90:c1:74:24:54:67:7d:c3:50:39:63:8c:1c:16:20:ab:0b: 96:04:6a:6b:03:57:96:70:7d:b7:fb:d8:ef:3f:b5:11:08:2b: 72:ae:b2:c2:41:fd:80:ca:cc:e8:56:dd:c7:d5:e8:f0:c5:c5: cc:26:1a:61:57:a4:4c:c8:ed:29:24:fa:4a:51:83:a1:97:21: 5f:c2:7a:c1:e6:2a:3a:9a:6c:59:ca:5a:4b:09:29:db:a7:96: 3e:cf:b1:93:ed:9f:1e:f4:46:bf:01:20:b8:93:5b:05:d2:5f: fd:4b:3b:78:30:9f:22:a8:f0:59:35:22:00:6a:c5:72:c2:7e: a7:b6:96:5b:5d:ca:b5:cd:b2:46:a3:15:98:3d:d7:4a:d9:de: ff:ff:3a:de:f2:d3:3e:18:41:f9:a5:26:f4:a2:0e:03:5c:48: f7:9d:17:65:3d:1e:6d:56:bf:31:ff:99:86:e1:e8:04:c7:f1: c6:c5:aa:6f:85:f3:f0:a2:f7:a0:45:a7:ee:14:f6:30:a8:2f: 6d:57:6a:e7:e0:f3:ba:25:91:d5:08:e5:17:77:07:5b:83:50: 5a:c8:0a:a5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzwDvaW8DS0JF8iWismbnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk YTExMjYwHhcNMjUxMjA2MTMwMDUyWhcNMjUxMjA3MTMwMDUyWjAzMTEwLwYDVQQD EygyNmQ0YzQ5YzhjYjYwOTc0NWZkYjcwMTc3NGMwMWUxM2U5NDZlNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot+Hvz4rLOew6gpK11Tr2gapH/zF HRbcY4YVlHfq9zIqQn8YM6iFDWdxx64FT2LyoAHy3nAi+eyub5zO/4m33VMtlDa5 E1OhqmDAwGqv5NLVLdpMNQnUVNknq0L+JrBX9UbrtRghoW57QZLs9BhkBIU3uJlJ VCbXO4Vy4hKhMBTzGvHPrOVy27jJ64YcngRdRSmJgbsZVgl8VaAtA4RJnidpXAgk Qzfb9BxamakYm14CeK6JIjL7XsHDZMqFlFm0jxEGaF3Sc5Q3PMQHdMWgp0Y3FX7I q7UpSSfimjWHjyMgLUIMby0mSQWxqsHSIBR7cRdAjHh9e6lulmaM+FU9DQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCbUxJyMtgl0X9twF3TAHhPpRuTMMB8GA1UdIwQY MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4 OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3Fi 2E1MVQ2n0Tx306i7AO3CqZUE0nrYsED76tP+8KUszxd4TJDBdCRUZ33DUDljjBwW IKsLlgRqawNXlnB9t/vY7z+1EQgrcq6ywkH9gMrM6Fbdx9Xo8MXFzCYaYVekTMjt KST6SlGDoZchX8J6weYqOppsWcpaSwkp26eWPs+xk+2fHvRGvwEguJNbBdJf/Us7 eDCfIqjwWTUiAGrFcsJ+p7aWW13Ktc2yRqMVmD3XStne//863vLTPhhB+aUm9KIO A1xI950XZT0ebVa/Mf+ZhuHoBMfxxsWqb4Xz8KL3oEWn7hT2MKgvbVdq5+DzuiWR 1QjlF3cHW4NQWsgKpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:17 2025 by rpki-client