This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json) Hash identifier: gXXbavm84ttuiPndF8ElmFnrTWbpYZbvKmC/fdnSkD8= Subject key identifier: 12:C1:EF:5A:11:97:38:4F:D7:A4:9F:55:23:F6:93:38:0B:93:73:68 Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62 Certificate issuer: /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62 Certificate serial: 019AF31BC7C88BB03099EDBDABDA62EA44A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: vm5SkG0eyPkb5LhjMY+NdZpVup0uuU4PkjbZDUa1jbQ=) 2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c7:c8:8b:b0:30:99:ed:bd:ab:da:62:ea:44:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=12c1ef5a1197384fd7a49f5523f693380b937368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:f2:f0:e4:0f:47:1e:2b:de:6e:36:a7:09: 5e:97:93:98:63:b5:51:bd:51:4e:bd:d4:9f:d7:d4: db:7b:78:93:ad:70:90:ef:9d:39:5c:aa:11:b5:0a: 9d:71:e1:99:dd:3a:93:81:08:7e:60:a2:77:71:f8: 01:2e:b0:ec:93:40:f0:85:6a:74:4f:3e:9c:93:6a: 57:25:0a:21:a8:c0:96:9f:0a:d3:34:40:dc:fc:bb: 0a:6b:3d:df:65:8e:d0:a3:af:21:cb:71:06:18:ee: fc:8b:9d:6e:d8:a9:67:72:07:80:ec:3a:38:a5:84: 36:4f:07:58:8a:43:83:75:ec:6f:2f:b0:2f:8d:80: 6e:c0:9b:3a:b9:65:38:d5:28:1e:60:15:12:80:f7: b3:db:6d:99:48:84:fb:e6:6e:8d:45:31:05:66:5c: f8:68:21:38:8a:ed:52:45:b0:94:42:ec:65:cd:dc: 2b:54:f6:c6:37:9a:89:12:8d:85:aa:19:76:77:6d: 9c:b2:bc:e4:c4:32:da:e8:7b:fd:b8:1c:ec:fa:b9: 86:80:cc:ce:c5:88:8a:41:4e:99:77:90:6f:60:8a: 7f:b6:da:f4:4d:ca:0a:90:24:cd:09:d0:3d:78:e4: d1:79:3e:e9:87:ef:68:72:18:0f:b4:07:dc:40:ef: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:EF:5A:11:97:38:4F:D7:A4:9F:55:23:F6:93:38:0B:93:73:68 X509v3 Authority Key Identifier: keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9f:15:0f:d8:d7:6f:b4:f0:5b:6c:5a:fa:1f:db:da:57:a6: df:48:20:67:1b:a1:87:3f:2c:b8:b6:67:d8:b9:85:33:00:11: 65:9f:fc:e1:0f:ec:c5:f3:48:e7:78:2f:5f:a1:71:f5:7d:7c: cc:32:11:08:f4:40:66:0b:23:bf:38:63:01:44:6e:36:bc:a6: f0:0c:90:0d:70:d3:62:f5:9c:48:1e:a3:83:d8:e6:a4:6e:7f: 10:5b:ad:61:51:e3:a0:de:0d:9e:4e:a4:5f:9c:70:dd:8c:8d: 43:31:a1:4b:eb:82:2b:a0:18:35:1e:1a:1f:78:a3:bc:f9:cb: 79:4d:b1:0c:e7:d1:38:57:a2:6e:0b:29:73:7c:57:1a:3f:66: 41:69:71:86:b5:5b:c6:c6:ab:09:28:17:d9:da:97:10:92:6a: ee:0e:31:7b:ee:e7:88:97:9a:85:ca:62:34:25:14:42:07:0b: 25:2f:19:ea:8e:91:c1:59:37:81:e3:b8:b3:75:40:ff:c4:c6: 00:83:b1:c8:12:31:15:e4:42:7f:d0:ff:6b:f5:46:5f:b8:aa: a5:50:38:66:5a:6e:fc:73:13:07:aa:65:46:80:e2:cd:1f:f8: d3:12:47:f3:2b:5a:8c:be:e2:b9:4d:98:26:34:60:63:47:52: 40:cd:04:e8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG8fIi7Awme29q9pi6kSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWQwNGU2YzUwYmE5MDZmOWFjMTFjMmU3NWJmM2Y1ZDEw NDJhNjIwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD EygxMmMxZWY1YTExOTczODRmZDdhNDlmNTUyM2Y2OTMzODBiOTM3MzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydTy8OQPRx4r3m42pwlel5OYY7VR vVFOvdSf19Tbe3iTrXCQ7505XKoRtQqdceGZ3TqTgQh+YKJ3cfgBLrDsk0DwhWp0 Tz6ck2pXJQohqMCWnwrTNEDc/LsKaz3fZY7Qo68hy3EGGO78i51u2KlncgeA7Do4 pYQ2TwdYikODdexvL7AvjYBuwJs6uWU41SgeYBUSgPez222ZSIT75m6NRTEFZlz4 aCE4iu1SRbCUQuxlzdwrVPbGN5qJEo2Fqhl2d22csrzkxDLa6Hv9uBzs+rmGgMzO xYiKQU6Zd5BvYIp/ttr0TcoKkCTNCdA9eOTReT7ph+9ochgPtAfcQO9UOwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBLB71oRlzhP16SfVSP2kzgLk3NoMB8GA1UdIwQY MBaAFPhdBObFC6kG+awRwudb8/XRBCpiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GMEU1c1VMcVFiNXJCSEM1MXZ6OWRFRUttSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTNhYTMxLTk2NGYtNGE4MS1iY2Vl LWRlOGMyNjIwMmIxNy8xLzEtRjBFNXNVTHFRYjVyQkhDNTF2ejlkRUVLbUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU0L2UzYWEzMS05NjRmLTRhODEtYmNlZS1kZThjMjYyMDJi MTcvMS8xLUYwRTVzVUxxUWI1ckJIQzUxdno5ZEVFS21JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ8V D9jXb7TwW2xa+h/b2lem30ggZxuhhz8suLZn2LmFMwARZZ/84Q/sxfNI53gvX6Fx 9X18zDIRCPRAZgsjvzhjAURuNrym8AyQDXDTYvWcSB6jg9jmpG5/EFutYVHjoN4N nk6kX5xw3YyNQzGhS+uCK6AYNR4aH3ijvPnLeU2xDOfROFeibgspc3xXGj9mQWlx hrVbxsarCSgX2dqXEJJq7g4xe+7niJeahcpiNCUUQgcLJS8Z6o6RwVk3geO4s3VA /8TGAIOxyBIxFeRCf9D/a/VGX7iqpVA4Zlpu/HMTB6plRoDizR/40xJH8ytajL7i uU2YJjRgY0dSQM0E6A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:38 2025 by rpki-client