This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json) Hash identifier: uiQkffYm4vRUl4eLuKtYo/PrWFYTNib8Cs23QxFy9kU= Subject key identifier: D2:3F:B9:F9:49:C4:35:BF:9A:74:88:DB:FE:3F:8C:C9:D5:C2:15:B9 Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Certificate serial: 019AF19B919EA37CF9DDCA2F175B8B82BD3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft Manifest number: 05A9 Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: YwOPFMtQuY9kqeubIzI7nvb3wQtPCdkiYz1BxTzG1w8=) 2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:91:9e:a3:7c:f9:dd:ca:2f:17:5b:8b:82:bd:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=d23fb9f949c435bf9a7488dbfe3f8cc9d5c215b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:1a:05:6d:af:9f:11:16:18:a5:ce:29:c4: 6f:a0:4e:ca:31:b6:21:6b:e1:e1:cb:27:da:c2:e8: 21:f3:06:f6:4a:48:cf:26:11:97:ee:32:29:eb:ce: 7e:58:5c:4b:b7:5c:4d:83:06:ae:12:2b:96:ed:53: f5:ea:a5:32:8b:59:41:dd:d2:01:c3:cf:fd:d7:b2: 36:97:a8:3d:3e:61:e8:e3:97:b2:67:87:db:a8:5a: a5:71:5f:1d:5d:de:2a:fc:31:a2:b8:15:e4:51:f8: e8:30:a2:67:25:ec:d0:49:be:8c:67:75:b7:ee:98: 6d:08:06:ae:87:20:1c:4e:94:9d:db:61:4f:16:00: 9f:19:69:ea:d6:61:15:04:52:0a:97:49:1c:4c:f0: 48:50:be:ee:5d:c3:a8:37:65:1e:bb:01:ad:d4:63: d2:64:03:5d:0f:03:8d:7d:d2:f7:fd:7f:b1:f3:f4: 83:5f:c1:ac:e9:a7:05:9a:dd:b3:28:b6:cf:1c:70: ba:04:82:9c:eb:c6:4c:19:6a:8d:d4:81:b8:95:ef: 5b:61:8e:9a:b6:01:be:79:2a:ff:7b:17:62:57:e3: 7f:63:5c:a9:98:3d:40:19:d2:61:b1:66:12:c5:06: ea:4a:2c:e2:b2:24:40:d0:a3:53:c1:fa:a2:82:3a: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3F:B9:F9:49:C4:35:BF:9A:74:88:DB:FE:3F:8C:C9:D5:C2:15:B9 X509v3 Authority Key Identifier: keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:1a:e5:ef:2f:18:e6:de:2c:d3:6d:29:91:6c:68:de:5b: 3a:f0:b8:2d:97:90:0a:10:70:9d:3b:c5:1b:06:2d:6c:b2:1e: 19:f7:d7:7d:1a:71:dc:e1:1b:2f:3e:60:12:15:83:4e:23:dd: 7f:f3:01:f2:6a:26:e5:36:b0:0e:83:ae:9d:a4:a7:81:5a:25: 19:9e:b9:57:e9:a7:d8:1c:fb:0b:26:b4:a9:9d:13:57:fc:a8: 92:00:0d:2a:95:33:07:ae:91:9d:c9:65:fd:ea:53:54:69:ab: fe:93:c8:4b:86:b2:7b:81:bd:4c:3a:47:a1:5a:dc:c3:13:a4: 80:1c:d9:d2:b8:26:0c:c0:cd:53:c8:e6:d4:99:ca:51:83:b0: 54:16:84:70:5c:42:93:d7:c6:3b:00:43:e5:b1:52:d9:7e:37: 49:4b:fd:01:0e:47:f4:8f:e9:16:ca:59:c4:ef:45:14:f3:85: 27:a7:21:95:a4:49:ea:f5:27:a9:e8:06:a6:39:bb:3d:ad:2d: 5d:8e:61:1f:f3:8b:f0:4f:77:b5:ca:ba:95:81:d4:7c:97:94: 29:4b:03:9d:aa:5c:a5:a6:99:31:d4:a6:0e:e1:34:e7:83:be: 5d:6e:4b:c4:a2:d9:d3:a0:0d:98:4a:06:ed:22:84:ec:98:a9: e1:cd:36:60 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxm5Geo3z53covF1uLgr0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy MzFmZjIwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD EyhkMjNmYjlmOTQ5YzQzNWJmOWE3NDg4ZGJmZTNmOGNjOWQ1YzIxNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS8aBW2vnxEWGKXOKcRvoE7KMbYh a+Hhyyfawugh8wb2SkjPJhGX7jIp685+WFxLt1xNgwauEiuW7VP16qUyi1lB3dIB w8/917I2l6g9PmHo45eyZ4fbqFqlcV8dXd4q/DGiuBXkUfjoMKJnJezQSb6MZ3W3 7phtCAauhyAcTpSd22FPFgCfGWnq1mEVBFIKl0kcTPBIUL7uXcOoN2UeuwGt1GPS ZANdDwONfdL3/X+x8/SDX8Gs6acFmt2zKLbPHHC6BIKc68ZMGWqN1IG4le9bYY6a tgG+eSr/exdiV+N/Y1ypmD1AGdJhsWYSxQbqSizisiRA0KNTwfqigjqNkQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNI/uflJxDW/mnSI2/4/jMnVwhW5MB8GA1UdIwQY MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4 LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1 NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsEa 5e8vGObeLNNtKZFsaN5bOvC4LZeQChBwnTvFGwYtbLIeGffXfRpx3OEbLz5gEhWD TiPdf/MB8mom5TawDoOunaSngVolGZ65V+mn2Bz7Cya0qZ0TV/yokgANKpUzB66R ncll/epTVGmr/pPIS4aye4G9TDpHoVrcwxOkgBzZ0rgmDMDNU8jm1JnKUYOwVBaE cFxCk9fGOwBD5bFS2X43SUv9AQ5H9I/pFspZxO9FFPOFJ6chlaRJ6vUnqegGpjm7 Pa0tXY5hH/OL8E93tcq6lYHUfJeUKUsDnapcpaaZMdSmDuE054O+XW5LxKLZ06AN mEoG7SKE7Jip4c02YA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:28 2025 by rpki-client