This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json) Hash identifier: CvomQKvPwx67OYCQdMC5q1wej0o1m3F/SUGrcFmohJg= Subject key identifier: 5D:D2:B0:A0:E3:09:F9:B8:E5:9A:C8:26:55:18:45:34:5B:CA:0B:EB Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Certificate serial: 019AF389B0F5B7BFED1E0B043F39A60DAB1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft Manifest number: 0263 Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: dM0829WD17cwQd/A6OT8XBY+PCdkiZJjQHVi35qHJOE=) 2: EOs1OcIjU7QpGNyQW0WAVHDhwZk.roa (hash: GhAzKLkw2PqF2q1j22FlhKv8LsjLpt0qx1W6/h0p4Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b0:f5:b7:bf:ed:1e:0b:04:3f:39:a6:0d:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=5dd2b0a0e309f9b8e59ac826551845345bca0beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:5d:7c:da:08:d1:bc:cc:0f:93:d4:2b:b6: 40:5e:0a:04:9f:bc:52:6f:c3:9d:73:0c:80:d2:c3: 35:52:cb:c7:dd:97:93:b0:2e:ca:0a:ae:07:04:6a: 4d:23:cf:56:25:41:5a:9b:8d:2b:d9:31:5a:98:f2: 59:8f:96:31:f5:8e:ce:ad:79:33:a8:bf:ad:88:83: 40:b0:ea:30:09:e1:84:64:0a:da:64:35:f2:83:76: b4:c9:85:bc:b5:b2:05:eb:0d:40:12:86:e4:5a:4b: b5:3d:f6:00:eb:df:a3:9b:44:bd:d6:e7:23:4a:ea: 62:1f:72:52:93:19:8b:8e:ab:89:3d:a0:3d:8a:37: f9:79:32:65:87:e3:1c:51:18:53:13:74:98:ca:f0: 6d:8f:8b:f9:df:8f:c6:1a:80:19:9b:12:9f:06:8a: 2c:3d:77:bf:23:fc:7b:7e:81:43:ae:a4:8d:5c:22: d1:0e:d8:16:b0:c6:15:d6:73:4a:59:7b:3a:72:27: ab:92:96:43:3d:36:09:c8:3f:4f:3b:5a:eb:3f:b9: ff:40:e6:4f:59:38:dc:dc:62:41:e3:7b:ab:ce:4a: 6c:f9:57:f1:e7:01:9a:2f:51:62:13:c9:99:00:c3: c0:c9:9b:f6:7a:04:7e:b5:6f:e8:36:07:b2:de:a2: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:B0:A0:E3:09:F9:B8:E5:9A:C8:26:55:18:45:34:5B:CA:0B:EB X509v3 Authority Key Identifier: keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:75:c9:81:fc:b1:0c:24:1b:6c:a0:0e:c7:db:f0:cf:1e:dd: 30:0f:e6:38:c4:c2:70:59:50:5e:7d:59:fd:d5:9a:06:14:62: 46:10:8d:09:63:ad:50:34:e8:42:de:96:8e:65:4b:6a:54:f8: 53:93:ec:a3:c0:97:dd:1a:f5:66:f6:92:01:0c:eb:92:0c:ed: 02:f2:e0:79:23:d1:07:57:17:40:4b:20:f1:08:f6:b4:79:d7: d5:bb:4a:97:3e:01:72:32:5c:bd:da:b5:65:b6:d1:49:e8:45: 9d:54:9d:40:83:ba:7d:eb:f3:dd:f6:1f:8c:88:b2:89:77:71: 62:73:72:1a:81:7b:99:dc:98:20:ee:75:27:28:e3:14:6e:02: 73:e9:9e:33:47:53:e6:84:6a:79:5f:98:2d:23:10:7e:8e:c3: 12:b8:0a:1f:bf:34:5b:4e:2e:6c:f2:df:63:98:a0:16:3c:86: b8:1d:4c:36:1d:df:21:38:83:d7:96:16:49:94:0f:62:17:50: 2a:09:6c:27:2b:60:55:de:80:08:fd:4e:32:14:d9:6a:5e:2e: 49:7f:3e:92:90:48:6f:24:f4:4e:42:6e:93:e9:11:c2:c1:0b: 71:df:28:03:ba:f0:18:82:06:4d:63:ee:8a:81:a4:40:4a:83: a7:68:42:7e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzibD1t7/tHgsEPzmmDasdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhN2NmYWM2YWYxMDg2NjBkOTRlMmZjZWQ2MWU2MWZmMjE5 YzBhNTYwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD Eyg1ZGQyYjBhMGUzMDlmOWI4ZTU5YWM4MjY1NTE4NDUzNDViY2EwYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1dfNoI0bzMD5PUK7ZAXgoEn7xS b8OdcwyA0sM1UsvH3ZeTsC7KCq4HBGpNI89WJUFam40r2TFamPJZj5Yx9Y7OrXkz qL+tiINAsOowCeGEZAraZDXyg3a0yYW8tbIF6w1AEobkWku1PfYA69+jm0S91ucj SupiH3JSkxmLjquJPaA9ijf5eTJlh+McURhTE3SYyvBtj4v534/GGoAZmxKfBoos PXe/I/x7foFDrqSNXCLRDtgWsMYV1nNKWXs6cierkpZDPTYJyD9PO1rrP7n/QOZP WTjc3GJB43urzkps+Vfx5wGaL1FiE8mZAMPAyZv2egR+tW/oNgey3qI4IwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF3SsKDjCfm45ZrIJlUYRTRbygvrMB8GA1UdIwQY MBaAFPp8+savEIZg2U4vztYeYf8hnApWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uejZ4cThRaG1EWlRpX08xaDVoX3lHY0NsWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjgyMjMwLWI0Y2QtNDU5NS1iZDFl LTMyYTQxYmEzZTNjNS8xLzEtbno2eHE4UWhtRFpUaV9PMWg1aF95R2NDbFkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZkLzY4MjIzMC1iNGNkLTQ1OTUtYmQxZS0zMmE0MWJhM2Uz YzUvMS8xLW56NnhxOFFobURaVGlfTzFoNWhfeUdjQ2xZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXXJ gfyxDCQbbKAOx9vwzx7dMA/mOMTCcFlQXn1Z/dWaBhRiRhCNCWOtUDToQt6WjmVL alT4U5Pso8CX3Rr1ZvaSAQzrkgztAvLgeSPRB1cXQEsg8Qj2tHnX1btKlz4BcjJc vdq1ZbbRSehFnVSdQIO6fevz3fYfjIiyiXdxYnNyGoF7mdyYIO51JyjjFG4Cc+me M0dT5oRqeV+YLSMQfo7DErgKH780W04ubPLfY5igFjyGuB1MNh3fITiD15YWSZQP YhdQKglsJytgVd6ACP1OMhTZal4uSX8+kpBIbyT0TkJuk+kRwsELcd8oA7rwGIIG TWPuioGkQEqDp2hCfg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:27 2025 by rpki-client