This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json) Hash identifier: Kwy4LqzBbPaJDg+lm1zJA1MrQsnvo9i4WL4vaV3FT8Q= Subject key identifier: 54:FA:99:D0:5F:4E:7B:5A:5D:73:96:73:05:22:D0:25:00:BC:70:A5 Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2 Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2 Certificate serial: 019B34C547C902CE151A8C3AFD8644D2C0F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:01:42 +0000 Manifest this update: Fri 19 Dec 2025 04:01:42 +0000 Manifest next update: Sat 20 Dec 2025 04:01:42 +0000 Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: IbzTonxGpnvn8zi8qs01KK6uZjU4fDFl/tsWK1z6n94=) 2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:47:c9:02:ce:15:1a:8c:3a:fd:86:44:d2:c0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2 Validity Not Before: Dec 19 04:01:42 2025 GMT Not After : Dec 20 04:01:42 2025 GMT Subject: CN=54fa99d05f4e7b5a5d7396730522d02500bc70a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:cf:e0:cb:fb:f8:ca:c5:72:f1:48:36:db: 0a:91:4c:7b:f1:74:15:a3:2e:cd:66:94:4f:ce:20: d8:a9:72:e3:cd:5e:d2:d7:7f:91:84:80:38:bc:ef: 3e:e6:39:75:f4:ca:1d:d9:dd:b8:f6:85:eb:ff:91: d0:5e:da:b8:45:eb:17:35:95:de:2e:53:a7:35:5b: f0:15:29:29:2c:b1:1e:0b:94:70:eb:11:de:9f:5d: 13:6f:00:4e:86:2a:a8:4e:59:72:49:2b:98:df:36: bc:f2:95:74:6d:89:d7:74:0c:fe:27:c7:44:72:72: 95:a9:f4:35:ba:dd:ae:eb:2a:68:1b:59:dc:b2:8f: 39:18:ba:fb:a2:5d:e8:42:a1:b8:62:76:33:29:5e: 50:dd:53:bf:0e:a8:9b:11:0e:c9:fc:fe:97:1d:41: 32:36:e6:25:86:34:b9:57:ab:d4:4a:6d:c4:bb:89: 23:58:da:6e:3a:57:a6:b8:c2:d7:ed:01:ff:37:43: 8a:52:f2:da:64:9b:2d:a4:9a:90:81:f7:f3:44:a5: 4c:ba:9f:c6:30:6a:d2:3f:bf:ff:9a:47:9e:de:af: 01:77:b0:79:6d:8d:f3:5c:25:71:6b:a7:f1:f2:c1: 80:65:44:69:55:06:c5:0b:bb:30:dc:8e:5e:63:7e: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FA:99:D0:5F:4E:7B:5A:5D:73:96:73:05:22:D0:25:00:BC:70:A5 X509v3 Authority Key Identifier: keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4c:b5:ef:9d:bb:8b:a7:82:df:b0:0e:17:cd:02:30:83:7f: ca:0f:78:3e:a5:a5:94:9d:44:65:cf:15:bf:79:92:b8:17:f6: 44:37:9b:4d:98:a2:eb:ec:90:d1:42:cd:8c:cd:b4:58:51:5b: b1:b5:6c:63:9f:58:57:12:51:d9:46:59:68:9b:06:37:8c:88: 57:b0:8b:31:aa:5b:20:5d:09:36:4b:7b:ad:b6:21:ca:c6:ae: 78:2b:0d:19:7a:b6:78:6c:1d:49:f1:5b:5b:13:88:24:fc:dd: 1d:72:be:a0:aa:fa:50:63:03:73:2d:22:b0:bc:e2:ab:05:09: 78:56:4f:21:c6:6c:2d:ca:0e:f2:ad:ed:f0:3e:69:2e:91:bf: 09:4d:d0:35:30:6c:59:8b:13:b0:fa:9d:3f:f5:18:7e:18:7b: e1:f7:e6:c9:8e:ef:e7:8e:48:ca:1d:aa:51:b3:40:ee:66:0f: 58:82:d1:23:5f:8c:26:fb:6d:8f:e2:88:c7:eb:da:42:b5:5a: d5:fd:b4:02:52:e9:6a:56:69:4a:43:1d:f2:e8:2b:9d:1f:80: ea:b7:03:67:8e:95:c1:5a:c8:e0:1f:fb:d1:b7:86:7c:d8:67: e4:98:db:36:c9:76:ad:20:a2:8b:46:97:0c:f3:67:7b:d2:d9: ef:aa:57:b9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs0xUfJAs4VGow6/YZE0sD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5 M2U2YTIwHhcNMjUxMjE5MDQwMTQyWhcNMjUxMjIwMDQwMTQyWjAzMTEwLwYDVQQD Eyg1NGZhOTlkMDVmNGU3YjVhNWQ3Mzk2NzMwNTIyZDAyNTAwYmM3MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumPP4Mv7+MrFcvFINtsKkUx78XQV oy7NZpRPziDYqXLjzV7S13+RhIA4vO8+5jl19Mod2d249oXr/5HQXtq4ResXNZXe LlOnNVvwFSkpLLEeC5Rw6xHen10TbwBOhiqoTllySSuY3za88pV0bYnXdAz+J8dE cnKVqfQ1ut2u6ypoG1ncso85GLr7ol3oQqG4YnYzKV5Q3VO/DqibEQ7J/P6XHUEy NuYlhjS5V6vUSm3Eu4kjWNpuOlemuMLX7QH/N0OKUvLaZJstpJqQgffzRKVMup/G MGrSP7//mkee3q8Bd7B5bY3zXCVxa6fx8sGAZURpVQbFC7sw3I5eY35abwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFT6mdBfTntaXXOWcwUi0CUAvHClMB8GA1UdIwQY MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0 LWY5NTg1NWYxMDc2My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU0LzliM2Y2Zi05NzU0LTQ1OGYtYjViNC1mOTU4NTVmMTA3 NjMvMS8xLV9RQTVqeXlZc0lBRGdjYzZRcW5MdmFUNXFJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOky1 7527i6eC37AOF80CMIN/yg94PqWllJ1EZc8Vv3mSuBf2RDebTZii6+yQ0ULNjM20 WFFbsbVsY59YVxJR2UZZaJsGN4yIV7CLMapbIF0JNkt7rbYhysaueCsNGXq2eGwd SfFbWxOIJPzdHXK+oKr6UGMDcy0isLziqwUJeFZPIcZsLcoO8q3t8D5pLpG/CU3Q NTBsWYsTsPqdP/UYfhh74ffmyY7v545Iyh2qUbNA7mYPWILRI1+MJvttj+KIx+va QrVa1f20AlLpalZpSkMd8ugrnR+A6rcDZ46VwVrI4B/70beGfNhn5JjbNsl2rSCi i0aXDPNne9LZ76pXuQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:57:10 2025 by rpki-client