This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json) Hash identifier: YfmrVrW0Fd6FdYfhIy9U1TucbM42jdgh7BBxbDBu50E= Subject key identifier: E6:F5:FD:6E:EE:0B:18:52:FB:85:8C:21:5D:9A:2E:54:62:4D:D6:DC Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4 Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4 Certificate serial: 019AF31B462A81B494909C2BD7FC8B3C605F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft Manifest number: 0878 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: WnLYeAGzZGnZ1UV93tzHRwOYOYyvToMHRUBN7/PkPTc=) 2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:46:2a:81:b4:94:90:9c:2b:d7:fc:8b:3c:60:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4 Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=e6f5fd6eee0b1852fb858c215d9a2e54624dd6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:76:ec:a0:46:07:48:5c:fc:bc:19:54:05: 0a:52:67:09:f5:71:3d:22:9a:47:00:3f:7a:e3:83: 03:3c:54:9e:4e:00:87:3a:8f:ec:f7:6a:ac:f1:2f: 04:79:a5:d3:17:fd:39:b4:32:fe:e6:22:4a:5d:3e: 32:26:7a:0c:6a:81:f4:fc:13:9a:0d:f6:6e:18:fb: 33:b5:7e:67:ed:bc:f7:ac:c7:bf:37:b4:c2:97:06: dc:c2:55:53:05:14:26:de:ac:14:e8:d6:e0:fd:11: fb:1c:04:43:e1:0c:5f:69:c8:d0:8f:e3:d9:c0:4a: 6d:81:42:70:41:eb:db:f1:74:e3:70:80:81:5a:50: de:f1:98:1a:3f:91:24:1a:9f:1a:46:57:80:1f:65: 21:13:b9:bd:17:c3:59:41:c9:f4:33:30:f2:a3:b0: 0d:3b:03:af:72:93:ea:e0:4d:90:7b:61:b3:3a:eb: b0:37:f9:ab:8a:cb:17:57:af:8a:a6:45:b2:09:dd: cf:7f:73:01:33:ed:9d:b6:0e:38:dc:eb:84:ce:69: 78:ee:b9:14:90:cc:e2:47:37:99:d7:7f:9d:05:93: 17:e1:40:9f:7d:6a:e4:16:99:f4:a9:b8:a3:99:16: 29:1b:05:db:98:c1:ca:2a:6c:de:66:90:dc:ab:c5: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F5:FD:6E:EE:0B:18:52:FB:85:8C:21:5D:9A:2E:54:62:4D:D6:DC X509v3 Authority Key Identifier: keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:83:c2:9e:65:aa:5a:5b:53:43:cd:db:0f:4d:4c:a6:a0:6c: 6d:5a:ad:46:ff:50:03:97:0c:f0:b5:48:ee:96:a5:b1:02:44: c5:52:da:87:ab:12:b7:f5:49:fc:ae:ee:23:27:89:07:a2:d5: 58:55:71:5b:f7:7a:c5:d9:d6:37:38:a1:f3:32:9c:c4:c0:bb: f5:2c:3a:cf:0c:29:f9:59:54:fd:bd:de:bb:b5:a8:09:42:22: 08:1e:0e:23:f5:4b:c0:3b:94:b8:84:46:8c:c5:97:1b:b2:b5: ee:d6:8a:bf:4e:c9:bc:b1:c5:8c:fe:c8:04:93:e5:5b:d8:c4: 79:3f:09:9d:8d:1f:ac:8b:87:0a:39:5a:33:77:c5:cb:3c:80: 10:22:4a:fd:66:31:32:78:20:fc:54:6c:7f:dd:ba:78:a5:cb: 71:b7:d7:6c:36:0f:5a:ba:d5:2f:53:54:aa:fb:0d:6e:7c:91: 48:97:be:c1:28:d9:44:43:a2:36:b8:c9:ea:14:24:83:79:77: 85:6e:2d:1f:bd:7d:04:01:03:77:2d:76:80:c5:1b:25:eb:e9: a5:bc:f2:37:a9:6d:e3:57:0d:3b:63:35:8c:aa:36:f3:62:64: cb:b6:b7:f6:1f:2a:03:cf:9b:b7:86:2a:74:79:11:3c:c6:d9: a2:77:a3:4e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG0YqgbSUkJwr1/yLPGBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh YTY1YTQwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD EyhlNmY1ZmQ2ZWVlMGIxODUyZmI4NThjMjE1ZDlhMmU1NDYyNGRkNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMF27KBGB0hc/LwZVAUKUmcJ9XE9 IppHAD9644MDPFSeTgCHOo/s92qs8S8EeaXTF/05tDL+5iJKXT4yJnoMaoH0/BOa DfZuGPsztX5n7bz3rMe/N7TClwbcwlVTBRQm3qwU6Nbg/RH7HARD4QxfacjQj+PZ wEptgUJwQevb8XTjcICBWlDe8ZgaP5EkGp8aRleAH2UhE7m9F8NZQcn0MzDyo7AN OwOvcpPq4E2Qe2GzOuuwN/mrissXV6+KpkWyCd3Pf3MBM+2dtg443OuEzml47rkU kMziRzeZ13+dBZMX4UCffWrkFpn0qbijmRYpGwXbmMHKKmzeZpDcq8Ws9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOb1/W7uCxhS+4WMIV2aLlRiTdbcMB8GA1UdIwQY MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoPC nmWqWltTQ83bD01MpqBsbVqtRv9QA5cM8LVI7palsQJExVLah6sSt/VJ/K7uIyeJ B6LVWFVxW/d6xdnWNzih8zKcxMC79Sw6zwwp+VlU/b3eu7WoCUIiCB4OI/VLwDuU uIRGjMWXG7K17taKv07JvLHFjP7IBJPlW9jEeT8JnY0frIuHCjlaM3fFyzyAECJK /WYxMngg/FRsf926eKXLcbfXbDYPWrrVL1NUqvsNbnyRSJe+wSjZREOiNrjJ6hQk g3l3hW4tH719BAEDdy12gMUbJevppbzyN6lt41cNO2M1jKo282Jky7a39h8qA8+b t4YqdHkRPMbZonejTg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:30 2025 by rpki-client