This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft File: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json) Hash identifier: XaOliCOU7GH5gKb3+72megInl5hYCeGeq0xJGjm5Yjo= Subject key identifier: D1:F7:40:36:F1:4D:D5:2C:17:BC:54:80:9C:25:FA:93:3B:5F:BD:E3 Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Certificate serial: 019AF209618C63BA7AA35E3CB092DB1913DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft Manifest number: 15D1 Signing time: Sat 06 Dec 2025 05:01:32 +0000 Manifest this update: Sat 06 Dec 2025 05:01:32 +0000 Manifest next update: Sun 07 Dec 2025 05:01:32 +0000 Files and hashes: 1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: cZ+DD+KPpDqLuNvUoUeg98qGhFrlgZf/NOwGTy7m0ec=) 2: B0cXI8R5Jkebb1b4_AZX0QkItTI.roa (hash: qU3eVg9ZrPWSREJWyOFSPkiCSojLDzpwNgzDMrBwxd0=) 3: LOHHuqh5utbV1sVMvLXO9x4HEv0.roa (hash: zlFj/WpL6Qd/ZD0zeyPqhzWIhhj8Nvvt5witl0z9Yic=) 4: ndH6JM8LGw_-a86HEW7P-1qV0gM.roa (hash: PbblUtc0vHojXJBh5Iy7RwAYCiNyZajL5DEQ2efa9es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:61:8c:63:ba:7a:a3:5e:3c:b0:92:db:19:13:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Validity Not Before: Dec 6 05:01:32 2025 GMT Not After : Dec 7 05:01:32 2025 GMT Subject: CN=d1f74036f14dd52c17bc54809c25fa933b5fbde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:e2:86:ef:e8:ba:dc:2b:15:e2:80:8d:be: e6:56:18:ef:5e:c6:63:6e:e8:c0:b3:8e:c4:6c:a3: 49:44:13:7b:c3:b9:22:00:a7:df:48:21:aa:9f:85: 21:20:63:fa:f0:e1:84:37:29:bf:fa:18:ab:f8:e1: a0:74:f9:da:cf:3c:ee:b2:69:ec:68:6f:ce:2a:5e: 5f:4a:4a:9d:a0:71:74:8d:d3:d2:1d:a3:b2:92:a8: 87:cc:8a:e1:2d:4e:9f:e1:65:3e:19:e7:db:03:0f: 15:a0:fa:d2:c1:b1:8e:d8:de:8c:66:01:ee:b4:a6: 3d:10:cd:08:05:60:13:f0:fe:14:12:a7:a2:d1:82: a7:5a:d9:00:98:a6:19:e4:67:52:20:ae:26:33:b5: d0:c9:22:d6:cc:9d:03:d8:d2:16:97:0a:91:b6:50: e5:a5:11:53:02:b0:7f:6e:dd:68:cb:fe:0d:23:5a: 4e:b1:8b:5d:9d:6b:00:22:02:62:51:9b:8e:a5:d5: 74:d4:d9:00:13:4e:aa:5b:b8:4a:d7:14:86:52:16: 45:e0:f5:4d:4b:4a:94:a0:1a:14:fe:90:10:03:9c: 0f:7f:73:02:99:ad:a9:c2:ef:79:bb:af:d0:51:3d: 68:00:6d:85:30:2d:79:b6:3b:29:66:ad:33:42:db: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F7:40:36:F1:4D:D5:2C:17:BC:54:80:9C:25:FA:93:3B:5F:BD:E3 X509v3 Authority Key Identifier: keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d5:bc:cc:06:da:52:08:3a:43:f0:57:2a:bd:8b:cc:03:40: 76:97:62:bb:49:55:11:ba:0a:b7:18:4d:7a:27:df:41:c0:3e: e6:0a:c6:fd:e2:d5:ba:41:8c:e1:cc:61:6d:cd:b8:3b:f8:20: d0:19:52:b2:92:ba:41:e3:79:75:29:10:5a:d0:82:40:eb:87: 75:cc:bb:d1:13:25:a8:da:d9:2f:0f:19:4f:18:09:ec:58:04: a2:bc:9d:d7:10:e5:fa:76:eb:91:23:52:57:d9:21:71:0c:92: 5c:d0:a7:de:4f:e9:7c:57:46:aa:1b:18:5e:1b:c4:bd:83:cc: 41:41:e5:f7:44:8b:12:aa:23:4d:1a:88:50:de:4d:f3:aa:cd: 16:2e:1e:5e:4e:e3:bb:af:16:cd:0a:a4:b6:3a:cb:05:77:85: 0d:a4:f6:46:10:86:70:bf:b1:da:ea:22:11:44:0f:11:0f:b3: fd:74:a7:1e:77:47:fb:ea:5b:59:ea:dd:e4:dd:3e:02:22:7e: 4b:07:1e:1b:bc:d3:f6:86:50:8d:50:02:35:35:76:21:7a:da: dc:6a:46:ed:c2:14:d5:17:6f:2e:7d:f2:87:b6:45:c0:c7:31: 7f:47:c1:95:d9:78:1d:c5:ec:14:18:3d:85:85:9a:5b:58:d9: ed:66:52:e0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCWGMY7p6o148sJLbGRPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1 NTc2ODYwHhcNMjUxMjA2MDUwMTMyWhcNMjUxMjA3MDUwMTMyWjAzMTEwLwYDVQQD EyhkMWY3NDAzNmYxNGRkNTJjMTdiYzU0ODA5YzI1ZmE5MzNiNWZiZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzLihu/outwrFeKAjb7mVhjvXsZj bujAs47EbKNJRBN7w7kiAKffSCGqn4UhIGP68OGENym/+hir+OGgdPnazzzusmns aG/OKl5fSkqdoHF0jdPSHaOykqiHzIrhLU6f4WU+GefbAw8VoPrSwbGO2N6MZgHu tKY9EM0IBWAT8P4UEqei0YKnWtkAmKYZ5GdSIK4mM7XQySLWzJ0D2NIWlwqRtlDl pRFTArB/bt1oy/4NI1pOsYtdnWsAIgJiUZuOpdV01NkAE06qW7hK1xSGUhZF4PVN S0qUoBoU/pAQA5wPf3MCma2pwu95u6/QUT1oAG2FMC15tjspZq0zQtvTZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNH3QDbxTdUsF7xUgJwl+pM7X73jMB8GA1UdIwQY MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk LWZhYWM5MDgwMjkwOC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU3LzZhYzRkYS1mNTZhLTRjMWItYjViZC1mYWFjOTA4MDI5 MDgvMS8xLTBocUM2bTVzSjlONUhsaTRzS3VRZnhWZG9ZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9W8 zAbaUgg6Q/BXKr2LzANAdpdiu0lVEboKtxhNeiffQcA+5grG/eLVukGM4cxhbc24 O/gg0BlSspK6QeN5dSkQWtCCQOuHdcy70RMlqNrZLw8ZTxgJ7FgEoryd1xDl+nbr kSNSV9khcQySXNCn3k/pfFdGqhsYXhvEvYPMQUHl90SLEqojTRqIUN5N86rNFi4e Xk7ju68WzQqktjrLBXeFDaT2RhCGcL+x2uoiEUQPEQ+z/XSnHndH++pbWerd5N0+ AiJ+SwceG7zT9oZQjVACNTV2IXra3GpG7cIU1RdvLn3yh7ZFwMcxf0fBldl4HcXs FBg9hYWaW1jZ7WZS4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:02 2025 by rpki-client