This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json) Hash identifier: 9glDlg4ZYl8AD65D1q+Mu5B/ZzqKi0fw+/74LxKTDIg= Subject key identifier: 3A:E2:5C:A8:E2:82:71:8A:6E:54:2F:0E:77:E2:C5:0E:F2:52:4F:9E Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Certificate serial: 019AF31B166454C674E71376F49FD5DAB9A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft Manifest number: 0976 Signing time: Sat 06 Dec 2025 10:00:29 +0000 Manifest this update: Sat 06 Dec 2025 10:00:29 +0000 Manifest next update: Sun 07 Dec 2025 10:00:29 +0000 Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: l7oQ3ROGt20MVg9sXG6v7EbBy8tRpzKjzKwa4HExxaI=) 2: QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa (hash: MDrtXAxZplUH7/qxVqW6e+250Fu4R4SP6B723HR2u5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:16:64:54:c6:74:e7:13:76:f4:9f:d5:da:b9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5 Validity Not Before: Dec 6 10:00:29 2025 GMT Not After : Dec 7 10:00:29 2025 GMT Subject: CN=3ae25ca8e282718a6e542f0e77e2c50ef2524f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:bb:b2:ab:10:67:81:c5:d1:cb:47:f8:d9: 78:f1:d9:58:24:6c:af:c1:7b:6e:c6:4f:da:b9:f2: f9:96:e0:fd:1b:78:8e:2c:47:5b:af:8c:24:c3:1c: 4a:b5:de:0a:0e:f4:53:59:3b:e8:79:39:2d:2f:7e: 9b:7c:3e:09:62:a4:78:81:1d:91:4a:fa:58:d4:0f: 07:40:28:ad:e1:a1:d1:04:2e:03:2d:fc:fc:c8:63: 32:aa:bb:35:47:83:2d:3b:aa:2d:b0:b3:e7:7b:7a: 48:c5:a1:36:09:c3:78:f9:ae:90:da:33:e8:b5:d1: c8:a7:09:aa:0c:0e:e6:13:b1:14:c6:09:f5:fb:2d: e2:d0:d4:48:4e:7e:03:7a:f5:35:99:52:1b:04:d8: 9d:2c:ae:f8:65:fe:a7:5a:0a:c9:74:3d:44:73:8e: 61:fb:72:9c:ce:81:44:ed:e5:e5:b3:d3:fb:f5:aa: 78:df:da:69:a0:cb:57:4d:6b:58:7e:80:0d:9a:12: bb:2a:a8:46:26:62:b2:0c:45:9c:3d:23:25:49:eb: c0:03:c3:03:af:1e:2e:6b:93:b6:df:21:11:ba:ea: 36:9f:61:6f:8c:06:ab:39:5a:a0:79:d5:02:f0:34: c4:0c:d5:30:65:7f:dc:79:73:bc:bc:34:34:15:e8: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E2:5C:A8:E2:82:71:8A:6E:54:2F:0E:77:E2:C5:0E:F2:52:4F:9E X509v3 Authority Key Identifier: keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d7:03:56:36:f5:d3:0f:9a:4f:d4:3f:59:3c:0a:eb:31:95: 8f:a1:ca:66:ef:b6:80:95:44:88:ec:2c:72:13:2b:e9:0b:da: 3e:80:2b:b1:a2:42:cb:be:8b:8e:c0:6e:e4:30:f6:a4:d5:ec: 4d:98:61:61:3a:05:23:d0:3e:40:74:a9:8e:36:c9:93:61:70: 68:eb:30:bd:d8:ff:4b:22:ea:31:77:4d:44:84:1c:27:a9:fd: 04:bd:f9:79:aa:0b:7c:b4:83:9d:12:e1:c4:73:9e:59:dc:d7: 32:46:b3:1f:08:0f:c6:b3:8c:33:48:e6:d9:23:71:4f:91:10: b2:32:51:62:40:0e:04:a5:e3:f1:7f:92:b1:99:63:83:69:60: 65:b1:79:c3:fb:b1:a8:a7:2d:4f:34:6d:35:7e:7f:4b:b8:86: 8a:47:a6:b4:e2:12:79:42:7d:93:4c:e7:1b:20:2c:43:a1:52: 0c:c0:34:4e:93:9c:83:2f:67:7e:65:ae:cc:9a:79:21:56:c0: 22:33:65:30:09:58:c3:e4:ff:c0:d9:63:c4:63:cb:bb:51:3f: d6:01:af:7b:85:30:c3:1d:7e:c3:63:51:b1:98:99:71:aa:c2: 94:d0:6c:1c:ed:fe:e4:49:a6:65:61:c5:cc:97:47:d7:ae:94: 1b:9a:43:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzGxZkVMZ05xN29J/V2rmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTIwZjdkM2EyY2M5NWQ5ZGU2ZjRlMzM0Y2I0YjY3OTIy ZTcwZjUwHhcNMjUxMjA2MTAwMDI5WhcNMjUxMjA3MTAwMDI5WjAzMTEwLwYDVQQD EygzYWUyNWNhOGUyODI3MThhNmU1NDJmMGU3N2UyYzUwZWYyNTI0ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsy7sqsQZ4HF0ctH+Nl48dlYJGyv wXtuxk/aufL5luD9G3iOLEdbr4wkwxxKtd4KDvRTWTvoeTktL36bfD4JYqR4gR2R SvpY1A8HQCit4aHRBC4DLfz8yGMyqrs1R4MtO6otsLPne3pIxaE2CcN4+a6Q2jPo tdHIpwmqDA7mE7EUxgn1+y3i0NRITn4DevU1mVIbBNidLK74Zf6nWgrJdD1Ec45h +3KczoFE7eXls9P79ap439ppoMtXTWtYfoANmhK7KqhGJmKyDEWcPSMlSevAA8MD rx4ua5O23yERuuo2n2FvjAarOVqgedUC8DTEDNUwZX/ceXO8vDQ0FehpGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDriXKjignGKblQvDnfixQ7yUk+eMB8GA1UdIwQY MBaAFPniD306LMldneb04zTLS2eSLnD1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lSVBmVG9zeVYyZDV2VGpOTXRMWjVJdWNQVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMw LWE1NGViODU2NmJlZi8xLzEtZUlQZlRvc3lWMmQ1dlRqTk10TFo1SXVjUFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZhLzdlN2ZjZS00ODQxLTQ3NmItODRjMC1hNTRlYjg1NjZi ZWYvMS8xLWVJUGZUb3N5VjJkNXZUak5NdExaNUl1Y1BVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdcD Vjb10w+aT9Q/WTwK6zGVj6HKZu+2gJVEiOwschMr6QvaPoArsaJCy76LjsBu5DD2 pNXsTZhhYToFI9A+QHSpjjbJk2FwaOswvdj/SyLqMXdNRIQcJ6n9BL35eaoLfLSD nRLhxHOeWdzXMkazHwgPxrOMM0jm2SNxT5EQsjJRYkAOBKXj8X+SsZljg2lgZbF5 w/uxqKctTzRtNX5/S7iGikemtOISeUJ9k0znGyAsQ6FSDMA0TpOcgy9nfmWuzJp5 IVbAIjNlMAlYw+T/wNljxGPLu1E/1gGve4Uwwx1+w2NRsZiZcarClNBsHO3+5Emm ZWHFzJdH166UG5pDOw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:57 2025 by rpki-client