This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json) Hash identifier: DGKfMbjpo7ZZ+2QjTtToa4SoqMpn3m6QbZjrWQ37MgM= Subject key identifier: B2:B6:3C:E8:4D:24:DE:7E:F4:30:2E:15:0B:28:EB:89:09:8E:A0:D8 Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Certificate serial: 019AF23FE9FFC04F69692327150543525BDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft Manifest number: 0243 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: vl20m8VpXFFIKsi3IiD63tNl+u8pSZxAi/pEsMWmMaI=) 2: sq3j0A4FF53FDnj1cQeAQwKHwYY.roa (hash: nIuc2CbfmY1z7G8hRZW0vMUbc2VvwrAvS4OcpulV6G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e9:ff:c0:4f:69:69:23:27:15:05:43:52:5b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=b2b63ce84d24de7ef4302e150b28eb89098ea0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:92:20:bc:c8:31:6b:62:ec:fd:23:bf:f6: fe:3a:b3:86:b9:ce:6e:42:57:8e:08:cf:8f:b5:c8: db:11:a4:c9:24:f1:c3:ee:b8:dd:10:5d:e2:7e:e0: 15:db:d2:f4:c1:68:ea:35:4c:94:31:27:bb:76:4e: e5:9a:a3:ff:bf:ab:55:07:3c:0b:e1:8d:51:fa:fc: 48:01:f1:7e:c7:25:56:a8:a9:e3:c5:df:20:50:0c: c2:5f:c5:54:18:82:8a:7a:ae:1d:dc:7c:0c:72:60: 9d:d7:ec:a5:98:9b:cf:74:95:05:9d:d5:6c:f8:0e: 07:1b:d2:a8:4c:a0:e6:04:c7:34:d5:fb:8f:5e:09: d5:4c:e2:1b:b7:a4:6c:0f:d7:88:bf:bd:6e:f0:bc: e4:88:8d:1f:15:cc:4f:5b:3f:3c:8a:5f:fd:8d:04: fc:13:a7:a6:1a:4e:3a:4a:3f:9b:09:7f:02:74:d6: 5a:b0:a7:e9:82:a5:da:fc:ac:d4:61:7b:4b:3f:8e: 56:c4:18:34:c9:cc:8b:48:63:2c:43:d6:6d:92:4f: a7:77:32:57:04:93:e6:5a:c9:3d:7b:17:a0:15:48: 25:dc:04:d1:11:82:cf:b0:8b:e3:99:a0:dc:18:b5: 01:fe:76:22:f8:26:f7:57:33:d8:ce:38:83:56:84: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:3C:E8:4D:24:DE:7E:F4:30:2E:15:0B:28:EB:89:09:8E:A0:D8 X509v3 Authority Key Identifier: keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:72:16:fe:90:c8:47:bb:cd:bb:9c:08:c6:fe:db:fb:a5:bc: e2:e8:d2:3e:99:a7:f0:09:e1:e4:7b:2f:96:64:34:f9:91:55: 78:2e:f8:a8:6b:9f:32:ad:29:3d:bd:7d:91:f3:b9:a0:1e:41: 3d:04:f8:0e:8c:6c:ce:5d:85:f9:f6:78:91:7b:53:1a:87:17: 18:f5:ca:ac:0c:8c:4a:f5:92:d5:b7:4f:05:e1:8c:ab:9f:c4: be:20:49:48:f8:30:0d:3c:62:cd:18:c7:a1:80:02:ec:8c:7c: 66:1c:a1:a0:1c:e4:fd:9a:ec:79:cb:f0:66:ea:8b:89:cf:42: 15:09:65:3e:06:f4:d0:ff:5c:3c:f2:b1:70:37:7c:6e:b9:ac: d7:c7:bf:28:49:64:4b:37:ac:3b:b6:12:98:0e:c3:4e:ac:6c: c0:dc:ad:4d:17:f6:12:50:99:44:4f:93:e9:5a:b7:9b:2d:ef: cb:0a:b1:7a:da:de:54:b6:e6:10:6a:4d:12:0a:3d:a7:e9:0d: 26:f5:5c:0e:01:6a:c6:cd:26:c6:29:24:77:a7:aa:77:1b:4f: 6e:ad:59:fe:24:71:d1:0b:3f:0c:2d:e3:b6:82:f2:67:06:1b: 74:60:5b:1a:a1:65:ee:5a:64:5e:33:4e:4b:be:32:ae:f4:38: 43:f5:5d:53 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryP+n/wE9paSMnFQVDUlvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODdhYzdlNWIyODljZTY4MWIyNDc0YzM4Zjc5NTJjY2E5 YzBmYjgwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EyhiMmI2M2NlODRkMjRkZTdlZjQzMDJlMTUwYjI4ZWI4OTA5OGVhMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAuSILzIMWti7P0jv/b+OrOGuc5u QleOCM+PtcjbEaTJJPHD7rjdEF3ifuAV29L0wWjqNUyUMSe7dk7lmqP/v6tVBzwL 4Y1R+vxIAfF+xyVWqKnjxd8gUAzCX8VUGIKKeq4d3HwMcmCd1+ylmJvPdJUFndVs +A4HG9KoTKDmBMc01fuPXgnVTOIbt6RsD9eIv71u8LzkiI0fFcxPWz88il/9jQT8 E6emGk46Sj+bCX8CdNZasKfpgqXa/KzUYXtLP45WxBg0ycyLSGMsQ9Ztkk+ndzJX BJPmWsk9exegFUgl3ATREYLPsIvjmaDcGLUB/nYi+Cb3VzPYzjiDVoRJWQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLK2POhNJN5+9DAuFQso64kJjqDYMB8GA1UdIwQY MBaAFPiHrH5bKJzmgbJHTDj3lSzKnA+4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JZXNmbHNvbk9hQnNrZE1PUGVWTE1xY0Q3Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2MzYWQ0LWZmMWEtNDQ5Ny04MmRh LThkNTFkYjY1ZGI2Ni8xLzEtSWVzZmxzb25PYUJza2RNT1BlVkxNcWNEN2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ5L2NjM2FkNC1mZjFhLTQ0OTctODJkYS04ZDUxZGI2NWRi NjYvMS8xLUllc2Zsc29uT2FCc2tkTU9QZVZMTXFjRDdnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHIW /pDIR7vNu5wIxv7b+6W84ujSPpmn8Anh5HsvlmQ0+ZFVeC74qGufMq0pPb19kfO5 oB5BPQT4Doxszl2F+fZ4kXtTGocXGPXKrAyMSvWS1bdPBeGMq5/EviBJSPgwDTxi zRjHoYAC7Ix8ZhyhoBzk/ZrsecvwZuqLic9CFQllPgb00P9cPPKxcDd8brms18e/ KElkSzesO7YSmA7DTqxswNytTRf2ElCZRE+T6Vq3my3vywqxetreVLbmEGpNEgo9 p+kNJvVcDgFqxs0mxikkd6eqdxtPbq1Z/iRx0Qs/DC3jtoLyZwYbdGBbGqFl7lpk XjNOS74yrvQ4Q/VdUw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:06 2025 by rpki-client