This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json) Hash identifier: 6fr9hlzYK5+3ieTyoGaWkWIVch6XZybxUUHayul5dwI= Subject key identifier: 18:E9:8D:4B:29:4A:EF:81:98:F3:BD:E3:BE:C5:72:40:5B:8F:E0:EF Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3 Certificate serial: 019AF16425692C1F921BDF464964F6C82776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: LDlUbfvp/rM99Py4kW0deFRnDXd91+EPE9QIHqJPuSQ=) 2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:25:69:2c:1f:92:1b:df:46:49:64:f6:c8:27:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=18e98d4b294aef8198f3bde3bec572405b8fe0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:88:b2:60:81:96:e0:1d:b5:6e:f3:88:3f: dc:8d:f7:6e:b7:da:19:7a:fd:c9:a9:1d:ba:40:f9: 40:b8:06:83:4d:6d:1c:1c:0a:54:f7:14:87:6c:24: e7:1a:4b:63:22:68:a3:ba:df:75:ea:a3:a9:b2:6a: c4:98:b9:69:34:35:e5:83:e6:80:8c:50:0c:8c:d9: b6:aa:5e:23:d7:61:8b:e5:78:de:8e:74:dc:fc:a7: f2:2b:6f:b6:ae:53:c5:c4:74:76:e2:dd:9d:5b:f6: 8c:f5:f3:ae:b3:70:17:62:5b:13:8d:fe:05:84:dc: 4e:1d:f0:45:31:fc:e2:00:1a:3f:9b:04:80:34:5f: b9:84:43:18:3c:8d:e0:86:6e:9c:95:e4:2d:bd:5a: 57:b5:ba:36:b8:b7:7f:d3:a6:d0:8e:ba:c5:57:d7: e4:a8:5a:6a:ce:a3:a0:e9:11:e5:d4:64:ca:39:52: f2:60:64:9d:22:7a:c0:4b:c3:d5:d0:eb:55:29:ba: a3:38:80:49:24:00:ec:f3:20:3c:5d:f2:91:57:c1: 8a:19:eb:6a:75:f4:22:7e:b0:16:a9:4a:00:79:14: 65:cc:81:c9:e1:23:f0:ce:ea:74:81:20:cb:8a:44: 51:43:7b:de:d8:1f:b7:de:52:ba:a6:b1:df:94:39: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:8D:4B:29:4A:EF:81:98:F3:BD:E3:BE:C5:72:40:5B:8F:E0:EF X509v3 Authority Key Identifier: keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e3:f0:87:ae:4f:c5:0a:b5:ee:df:bc:57:43:fd:cf:8e:a9: 7a:8b:6b:01:e1:02:dd:70:70:23:64:ed:ea:e4:5f:d5:d4:c5: e3:81:b3:f9:41:71:18:d5:e9:a9:37:36:ea:8b:98:d2:8d:f5: a4:cb:0e:66:06:13:4f:da:ff:0b:0e:eb:09:4a:74:5b:95:ce: 92:0e:4b:b9:f5:2f:52:d8:c7:a1:88:b4:0f:2c:47:77:8f:de: 87:19:aa:08:81:bb:b0:1e:57:ed:77:4d:d7:5d:a8:e8:ee:d2: 32:87:00:3c:1c:c6:a0:62:cf:6b:53:e6:fe:26:2a:98:27:e6: fa:07:ee:ee:70:45:ca:cc:c7:2d:86:23:6b:91:00:4c:ec:58: 59:5e:47:58:80:9a:3c:9a:b7:a9:bf:fa:6b:e0:b3:38:6c:a0: 2e:21:ee:6c:91:84:40:50:1c:d4:19:ee:69:8f:a0:af:c7:8d: c2:48:ae:34:d0:b8:8c:d8:69:12:b1:c6:d8:c7:ae:32:0a:45: 58:14:26:1a:e0:2b:32:f2:db:62:03:7b:0e:e9:cf:fd:67:03: 82:4a:3d:49:33:df:01:eb:47:be:26:29:a2:7b:3c:1b:fc:a0: 9a:8d:e5:52:c6:eb:61:bd:c0:a6:5b:c6:a3:aa:e6:83:26:a9: d2:88:99:ce -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZCVpLB+SG99GSWT2yCd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz MTIyYjMwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EygxOGU5OGQ0YjI5NGFlZjgxOThmM2JkZTNiZWM1NzI0MDViOGZlMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oqIsmCBluAdtW7ziD/cjfdut9oZ ev3JqR26QPlAuAaDTW0cHApU9xSHbCTnGktjImijut916qOpsmrEmLlpNDXlg+aA jFAMjNm2ql4j12GL5XjejnTc/KfyK2+2rlPFxHR24t2dW/aM9fOus3AXYlsTjf4F hNxOHfBFMfziABo/mwSANF+5hEMYPI3ghm6cleQtvVpXtbo2uLd/06bQjrrFV9fk qFpqzqOg6RHl1GTKOVLyYGSdInrAS8PV0OtVKbqjOIBJJADs8yA8XfKRV8GKGetq dfQifrAWqUoAeRRlzIHJ4SPwzup0gSDLikRRQ3ve2B+33lK6prHflDksYQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBjpjUspSu+BmPO9477FckBbj+DvMB8GA1UdIwQY MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4 LTkyMGI1MmE5ZjZhNS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQyLzA0NjZmOC0zMzBkLTRhYzktYWMxOC05MjBiNTJhOWY2 YTUvMS8xLXFGcENjcE5vNWsxNnJtdkE0dFlwU014SXJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuPw h65PxQq17t+8V0P9z46peotrAeEC3XBwI2Tt6uRf1dTF44Gz+UFxGNXpqTc26ouY 0o31pMsOZgYTT9r/Cw7rCUp0W5XOkg5LufUvUtjHoYi0DyxHd4/ehxmqCIG7sB5X 7XdN112o6O7SMocAPBzGoGLPa1Pm/iYqmCfm+gfu7nBFyszHLYYja5EATOxYWV5H WICaPJq3qb/6a+CzOGygLiHubJGEQFAc1BnuaY+gr8eNwkiuNNC4jNhpErHG2Meu MgpFWBQmGuArMvLbYgN7DunP/WcDgko9STPfAetHviYpons8G/ygmo3lUsbrYb3A plvGo6rmgyap0oiZzg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:52 2025 by rpki-client