This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json) Hash identifier: j3EqxXph7lchP0uTUuZREauBTbDYgechSsDRybF1K3M= Subject key identifier: 76:8B:C5:E3:F1:3E:38:27:F1:AF:84:72:05:CE:FC:9C:C2:6F:13:5B Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc Certificate serial: 019AF3522B49C9EAF19087018D4C50A5394B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft Manifest number: 0C6B Signing time: Sat 06 Dec 2025 11:00:39 +0000 Manifest this update: Sat 06 Dec 2025 11:00:39 +0000 Manifest next update: Sun 07 Dec 2025 11:00:39 +0000 Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: fS/CgxAM8a+xVeVlV/NCskS1vOHdxlU951hMG4OofMI=) 2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2b:49:c9:ea:f1:90:87:01:8d:4c:50:a5:39:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc Validity Not Before: Dec 6 11:00:39 2025 GMT Not After : Dec 7 11:00:39 2025 GMT Subject: CN=768bc5e3f13e3827f1af847205cefc9cc26f135b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:d5:70:d8:72:2e:15:7e:f1:33:46:7d:71: 28:e4:ce:cc:e1:79:30:b2:64:ae:13:04:52:f1:da: 6b:d3:22:24:f3:1c:b5:e2:56:9c:ea:a7:02:f6:87: fb:53:80:d2:4c:08:e5:76:39:bc:82:a1:33:c9:d8: 46:61:a3:95:58:05:f3:84:44:0b:96:e0:fc:59:87: 45:6d:4a:41:fc:7f:68:5a:4b:7a:c4:51:ff:c1:83: e0:e6:01:41:4a:08:a4:5d:96:d2:d0:89:f0:b8:8e: b4:54:e6:7f:9c:82:e7:c5:3a:66:80:37:a3:7d:54: e2:e4:c3:55:3a:7a:50:98:36:c6:94:9e:dd:0a:3d: 35:b7:dd:da:a8:9c:24:17:c1:83:d1:54:99:ac:ba: 56:32:b3:00:04:33:41:b3:16:5d:a2:8f:04:30:72: 9a:83:ec:c9:3e:03:31:35:a6:bb:4b:f9:f1:f6:ff: 24:7c:38:d6:7a:dd:2a:a7:5b:5a:41:27:05:77:28: 0d:98:3a:d1:5f:ca:fc:d4:44:9f:cf:8b:6f:35:b9: 2b:17:75:ae:74:14:31:e5:24:72:a7:6a:94:79:f4: d0:bc:72:83:f9:b1:0b:1b:ff:c3:af:e6:3d:79:b1: b2:b6:2c:a7:5f:bc:a5:7c:9b:76:ac:59:72:3b:24: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8B:C5:E3:F1:3E:38:27:F1:AF:84:72:05:CE:FC:9C:C2:6F:13:5B X509v3 Authority Key Identifier: keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:9c:98:c2:9a:8b:ae:c6:5e:53:f4:20:c8:36:ad:bf:63:41: c8:ae:90:59:be:16:a2:8d:82:8a:c7:a7:b1:98:12:45:68:92: 49:00:33:e0:61:0b:e9:b8:77:f6:b8:b4:1f:8a:54:f9:28:18: 87:9c:50:2a:ee:13:0d:34:7b:cc:3e:2e:09:a6:69:41:d1:b6: 23:74:28:82:43:71:b5:97:b8:aa:85:82:d1:93:fa:d8:28:84: 5f:0e:3c:6a:76:2b:4c:2c:14:0a:7e:58:00:e6:54:41:c0:6f: c4:20:cc:f9:2c:a7:89:fb:3f:9d:f3:39:e3:52:41:2d:c8:bc: 10:5c:58:f8:8e:fa:8f:ff:49:6a:7d:0a:24:30:ed:b3:c3:d1: 76:24:03:24:10:af:f0:ca:2e:e1:33:cb:fb:7f:8a:65:12:98: 0f:8b:96:a1:92:39:f2:92:39:6c:ce:e6:69:cc:28:28:7a:ee: 07:b7:dd:01:4c:a6:88:5f:72:2b:ca:f7:68:d1:f4:2f:49:96: 9b:c5:3f:97:c9:5c:da:7f:c1:3a:9a:ff:73:89:3f:9d:07:84: da:8b:03:61:40:e1:46:64:d4:f8:7b:0e:9a:52:81:b3:dd:fe: 9b:c6:6f:1f:f5:b9:51:78:38:88:28:05:21:a6:df:6f:3a:e9: d1:ed:0e:52 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzUitJyerxkIcBjUxQpTlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWQzOWU1YjY4OTBhNDZjOGNlNWM5MDM3ZTZkMjYzNjVl ODU3YmMwHhcNMjUxMjA2MTEwMDM5WhcNMjUxMjA3MTEwMDM5WjAzMTEwLwYDVQQD Eyg3NjhiYzVlM2YxM2UzODI3ZjFhZjg0NzIwNWNlZmM5Y2MyNmYxMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWDVcNhyLhV+8TNGfXEo5M7M4Xkw smSuEwRS8dpr0yIk8xy14lac6qcC9of7U4DSTAjldjm8gqEzydhGYaOVWAXzhEQL luD8WYdFbUpB/H9oWkt6xFH/wYPg5gFBSgikXZbS0InwuI60VOZ/nILnxTpmgDej fVTi5MNVOnpQmDbGlJ7dCj01t93aqJwkF8GD0VSZrLpWMrMABDNBsxZdoo8EMHKa g+zJPgMxNaa7S/nx9v8kfDjWet0qp1taQScFdygNmDrRX8r81ESfz4tvNbkrF3Wu dBQx5SRyp2qUefTQvHKD+bELG//Dr+Y9ebGytiynX7ylfJt2rFlyOyTSsQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHaLxePxPjgn8a+EcgXO/JzCbxNbMB8GA1UdIwQY MBaAFPldOeW2iQpGyM5ckDfm0mNl6Fe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WMDU1YmFKQ2tiSXpseVFOLWJTWTJYb1Y3dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYzMyMDZhLTljMTYtNDUyNy04Yjg5 LTZlOGRjYmFlYWY3Zi8xLzEtVjA1NWJhSkNrYkl6bHlRTi1iU1kyWG9WN3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU3L2MzMjA2YS05YzE2LTQ1MjctOGI4OS02ZThkY2JhZWFm N2YvMS8xLVYwNTViYUpDa2JJemx5UU4tYlNZMlhvVjd3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpyY wpqLrsZeU/QgyDatv2NByK6QWb4Woo2CisensZgSRWiSSQAz4GEL6bh39ri0H4pU +SgYh5xQKu4TDTR7zD4uCaZpQdG2I3QogkNxtZe4qoWC0ZP62CiEXw48anYrTCwU Cn5YAOZUQcBvxCDM+Synifs/nfM541JBLci8EFxY+I76j/9Jan0KJDDts8PRdiQD JBCv8Mou4TPL+3+KZRKYD4uWoZI58pI5bM7macwoKHruB7fdAUymiF9yK8r3aNH0 L0mWm8U/l8lc2n/BOpr/c4k/nQeE2osDYUDhRmTU+HsOmlKBs93+m8ZvH/W5UXg4 iCgFIabfbzrp0e0OUg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:37 2025 by rpki-client