This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json) Hash identifier: EcffFFJOBhifb0LPDxYFP4GYO8LkDJISuMUBw8PPW24= Subject key identifier: 94:63:D5:65:48:99:63:2C:EC:6C:DC:A5:81:8B:24:34:5C:16:26:CE Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Certificate serial: 019AF2093C124683E73A2B65893B23D4A1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: Cq3HaVLk5TH7sCTYYXVIVEK+bZvuOtsKlhw6E3mONMY=) 2: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (hash: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3c:12:46:83:e7:3a:2b:65:89:3b:23:d4:a1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=9463d5654899632cec6cdca5818b24345c1626ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:e9:72:f8:69:9f:a6:f9:58:0e:46:7b:3b: 7c:f1:dd:34:21:04:2e:61:29:a4:14:55:33:61:01: 18:5a:af:ae:33:05:97:bb:3d:42:22:19:c6:c1:0c: 75:e2:9b:e9:f6:8e:9b:60:13:df:40:32:d9:b4:8a: 3c:df:03:a1:a0:6a:9c:48:90:7f:0d:00:31:a8:1c: 6e:32:27:84:45:5b:46:52:77:80:58:ef:29:4a:9a: 43:ef:57:41:70:e9:f9:f9:5a:c2:b4:cf:27:09:b5: e2:e3:b7:e5:a7:78:b1:17:1d:b7:c4:e5:44:ca:5b: f0:ae:35:32:83:c6:24:98:a5:5f:b0:1c:0e:70:0f: dc:6e:6b:c2:6a:18:b1:78:75:77:0d:e1:ae:8a:49: d8:04:89:c4:49:46:57:52:a5:8d:42:d6:df:dd:21: 97:c7:0a:5b:e4:39:2d:8c:09:7f:0d:c1:3a:41:42: 6f:0b:2f:89:8b:01:01:07:7f:70:c8:c7:ab:16:a6: 50:57:4f:98:7c:d3:17:5e:2c:2e:2d:51:9b:65:22: 01:30:9c:84:58:b9:66:4c:5e:f8:9e:ca:6e:a1:f0: e2:21:67:5b:53:b7:62:ef:ad:63:71:8d:01:ee:84: 00:ee:cd:30:3e:a8:ec:5b:6b:2a:cd:d5:ed:86:7c: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:63:D5:65:48:99:63:2C:EC:6C:DC:A5:81:8B:24:34:5C:16:26:CE X509v3 Authority Key Identifier: keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5a:a1:2e:bd:cc:1b:00:f6:e7:7f:9f:aa:11:d0:0f:ad:27: 9d:1f:31:1d:43:0d:88:c6:0a:5e:c7:57:71:05:c1:40:2e:aa: 12:c6:85:06:8f:5b:a0:60:94:08:d9:c5:cc:41:b4:2f:ea:41: d6:14:c1:27:9f:72:fb:08:f2:d5:e7:6a:7f:da:1f:13:5b:72: ca:31:cf:2a:a9:fd:02:63:f0:f1:11:20:e8:a6:81:5f:2c:22: d1:66:05:b1:eb:9c:81:40:c4:88:d6:02:e2:ab:76:a4:2b:db: e2:94:8e:ea:f3:fa:21:3c:35:14:3d:0d:80:59:73:00:b7:60: 1c:d9:d0:33:3a:3c:cf:78:79:e9:e1:25:9e:4a:63:11:ed:28: 79:73:cf:df:ab:8d:d2:4a:12:6b:a1:23:e1:4f:e0:d9:42:a6: d2:9a:9a:e8:3d:09:29:72:0a:f8:4b:9d:36:a7:07:1f:84:52: 38:bc:24:b9:0d:d0:49:86:ec:6e:fa:69:d0:39:3b:0c:9c:02: db:23:10:6a:78:e3:64:31:6c:e3:7d:8a:a0:4c:63:a3:cc:a4: 27:7b:39:51:ed:ba:0f:6e:a1:36:c7:45:fb:41:98:a1:a7:c3: a0:37:f4:9b:4d:d8:c2:e1:7e:c0:10:7d:27:26:c1:72:5e:b8: e4:8b:87:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTwSRoPnOitliTsj1KHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjZmNDgyN2M1OGNiMjhmOTk2YTlhYWViMzQ4ZjFmZDI2 YTBjYTUwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD Eyg5NDYzZDU2NTQ4OTk2MzJjZWM2Y2RjYTU4MThiMjQzNDVjMTYyNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo13pcvhpn6b5WA5Gezt88d00IQQu YSmkFFUzYQEYWq+uMwWXuz1CIhnGwQx14pvp9o6bYBPfQDLZtIo83wOhoGqcSJB/ DQAxqBxuMieERVtGUneAWO8pSppD71dBcOn5+VrCtM8nCbXi47flp3ixFx23xOVE ylvwrjUyg8YkmKVfsBwOcA/cbmvCahixeHV3DeGuiknYBInESUZXUqWNQtbf3SGX xwpb5DktjAl/DcE6QUJvCy+JiwEBB39wyMerFqZQV0+YfNMXXiwuLVGbZSIBMJyE WLlmTF74nspuofDiIWdbU7di761jcY0B7oQA7s0wPqjsW2sqzdXthnzPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRj1WVImWMs7GzcpYGLJDRcFibOMB8GA1UdIwQY MBaAFNf29IJ8WMso+Zapqus0jx/SagylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQt NzBjNjdmMTI2YmYyLzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQtNzBjNjdmMTI2YmYy LzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlqhLr3M GwD253+fqhHQD60nnR8xHUMNiMYKXsdXcQXBQC6qEsaFBo9boGCUCNnFzEG0L+pB 1hTBJ59y+wjy1edqf9ofE1tyyjHPKqn9AmPw8REg6KaBXywi0WYFseucgUDEiNYC 4qt2pCvb4pSO6vP6ITw1FD0NgFlzALdgHNnQMzo8z3h56eElnkpjEe0oeXPP36uN 0koSa6Ej4U/g2UKm0pqa6D0JKXIK+EudNqcHH4RSOLwkuQ3QSYbsbvpp0Dk7DJwC 2yMQanjjZDFs432KoExjo8ykJ3s5Ue26D26hNsdF+0GYoafDoDf0m03YwuF+wBB9 JybBcl645IuHPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:42 2025 by rpki-client