This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json) Hash identifier: Zwtf0Ivl7YIIxnxK8pnMLHPdi37u33VOC4+IeSZzSGU= Subject key identifier: 5D:F7:42:50:C1:E3:85:93:B9:B9:C2:CB:B9:59:98:F9:26:13:A4:5A Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Certificate serial: 019AF3F78B038B0338223F0A0E669483D8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft Manifest number: 1404 Signing time: Sat 06 Dec 2025 14:01:17 +0000 Manifest this update: Sat 06 Dec 2025 14:01:17 +0000 Manifest next update: Sun 07 Dec 2025 14:01:17 +0000 Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: el/QOTBtK7alxpCBrJFNqdO/HNtIjf8s5Fq/6ALjaaU=) 2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=) 3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8b:03:8b:03:38:22:3f:0a:0e:66:94:83:d8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Validity Not Before: Dec 6 14:01:17 2025 GMT Not After : Dec 7 14:01:17 2025 GMT Subject: CN=5df74250c1e38593b9b9c2cbb95998f92613a45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:ba:ad:92:c2:3d:77:3c:fa:6d:30:1a:f2: d9:20:63:1f:84:ba:03:2f:26:1c:a1:87:2f:7c:bd: 5e:91:0c:58:4c:d5:de:59:b1:3f:12:3e:f3:c6:28: 7e:c1:82:7d:a2:88:07:fe:56:8c:16:9b:d4:4a:75: bb:91:3a:15:72:b2:52:1b:9c:7e:61:db:11:19:4b: 7f:45:74:18:d4:bb:62:61:0b:e0:21:25:d8:77:a3: e4:1e:58:5b:e0:f9:48:aa:9f:ea:fc:51:10:9c:22: ce:26:6c:40:f7:4e:cc:b4:85:dc:5a:df:cd:63:a9: 62:0f:96:72:10:d1:dc:19:a7:41:e7:df:d5:b7:1e: 21:31:62:92:7a:d1:4a:f3:06:3a:13:37:a0:a8:39: f7:96:a0:05:91:ed:40:18:85:f1:c4:38:ae:45:1a: 27:c0:66:b0:8e:7b:cd:43:64:28:bb:9a:9d:ee:d0: bf:4b:20:f3:09:73:3c:4f:29:72:e7:47:a8:c6:d8: a3:bb:c0:bc:a1:c1:3c:44:a7:62:5e:8c:fc:28:8d: c5:b4:a2:cb:84:9a:eb:8a:72:92:4e:55:c4:7c:6d: ff:54:a6:69:65:cb:02:34:f8:c0:96:29:02:09:07: e1:e8:89:64:e0:73:15:90:ea:c2:0c:44:d0:4f:37: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F7:42:50:C1:E3:85:93:B9:B9:C2:CB:B9:59:98:F9:26:13:A4:5A X509v3 Authority Key Identifier: keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:ce:5a:85:c5:5b:4a:27:88:2a:c9:3c:10:82:08:bf:3c: 13:d3:89:4c:b5:21:2b:09:77:de:de:17:75:30:80:bd:ff:50: 15:a6:05:61:dd:2f:6a:ce:a5:36:b7:f1:79:5b:bf:f0:89:d5: 6a:dc:d4:88:d6:9f:96:87:8b:ff:5e:ca:65:50:f6:5b:5f:d0: 21:d7:3e:0b:53:bb:58:c0:f1:52:33:da:b0:03:ea:b4:93:95: eb:e8:08:15:02:c7:be:a4:6b:d8:33:ea:77:1c:43:b0:ae:9a: b9:65:98:01:99:63:f2:35:1f:c9:4c:5f:b2:c5:30:fb:88:8b: f7:52:c5:5c:d2:a1:8f:46:61:5c:02:da:d5:78:d8:75:2c:07: 60:9f:55:ec:58:bd:72:9f:9d:8d:74:0e:13:1a:19:ef:d5:7e: 25:b7:0d:37:9b:eb:53:59:05:4e:a9:7c:a8:b7:eb:78:89:bf: 0e:16:06:8f:ce:a6:d0:59:d9:2d:88:1b:91:ab:84:24:92:94: 53:d7:b0:4f:f6:af:1b:2f:1f:81:e2:f1:74:01:ba:b7:90:59: 72:29:11:bc:c8:73:9a:9e:cd:1d:d1:47:37:07:21:9b:db:92: 7d:e7:11:54:72:dc:44:23:5e:63:fa:e3:b6:a4:78:c1:5a:fe: 8d:f5:0d:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrz94sDiwM4Ij8KDmaUg9jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy MjI4YTQwHhcNMjUxMjA2MTQwMTE3WhcNMjUxMjA3MTQwMTE3WjAzMTEwLwYDVQQD Eyg1ZGY3NDI1MGMxZTM4NTkzYjliOWMyY2JiOTU5OThmOTI2MTNhNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZe6rZLCPXc8+m0wGvLZIGMfhLoD LyYcoYcvfL1ekQxYTNXeWbE/Ej7zxih+wYJ9oogH/laMFpvUSnW7kToVcrJSG5x+ YdsRGUt/RXQY1LtiYQvgISXYd6PkHlhb4PlIqp/q/FEQnCLOJmxA907MtIXcWt/N Y6liD5ZyENHcGadB59/Vtx4hMWKSetFK8wY6EzegqDn3lqAFke1AGIXxxDiuRRon wGawjnvNQ2Qou5qd7tC/SyDzCXM8Tyly50eoxtiju8C8ocE8RKdiXoz8KI3FtKLL hJrrinKSTlXEfG3/VKZpZcsCNPjAlikCCQfh6Ilk4HMVkOrCDETQTzc2jQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF33QlDB44WTubnCy7lZmPkmE6RaMB8GA1UdIwQY MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAknO WoXFW0oniCrJPBCCCL88E9OJTLUhKwl33t4XdTCAvf9QFaYFYd0vas6lNrfxeVu/ 8InVatzUiNafloeL/17KZVD2W1/QIdc+C1O7WMDxUjPasAPqtJOV6+gIFQLHvqRr 2DPqdxxDsK6auWWYAZlj8jUfyUxfssUw+4iL91LFXNKhj0ZhXALa1XjYdSwHYJ9V 7Fi9cp+djXQOExoZ79V+JbcNN5vrU1kFTql8qLfreIm/DhYGj86m0FnZLYgbkauE JJKUU9ewT/avGy8fgeLxdAG6t5BZcikRvMhzmp7NHdFHNwchm9uSfecRVHLcRCNe Y/rjtqR4wVr+jfUNVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:18 2025 by rpki-client