This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft File: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft (raw, json) Hash identifier: 4U8xqQV4AO0YVUtzBoCnNPNcXyyv5jRIkks2S2Q/434= Subject key identifier: 88:A0:E6:46:6F:30:C3:0E:6C:80:E7:F8:55:6E:0F:D3:E7:9A:D4:6F Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04 Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504 Certificate serial: 019AF2092F678283490740DDB2B6C9DC636C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft Manifest number: 1711 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl (hash: TJF3U7Ea1NrXCRYj3nRvcPVkGcVTMj+Svmj55JBuh+w=) 2: 1LPXXVcn8YcrOhINi57GGnN80Vc.roa (hash: EuzggDd0CDcAYZ0FKfuRQi6JcLt5k3MGrLBckBR8HEg=) 3: Rxqhs05VJgswf5IagYYVduWK4dw.roa (hash: 9jWiYjM3BCeOeN51O2+mgMeypqqwXkFllajBFOOYBzI=) 4: XavjocBFIutlJdfL1sKuNImyrMg.roa (hash: oh/q69e5+eXgvcKp0NEmx4+imfE5MSwLrZ5wZjvugUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2f:67:82:83:49:07:40:dd:b2:b6:c9:dc:63:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504 Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=88a0e6466f30c30e6c80e7f8556e0fd3e79ad46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:6b:2c:2f:15:57:6b:0e:e2:7a:97:f3:99: eb:4b:0e:80:8d:1f:02:da:32:59:19:33:69:8c:75: 56:72:26:7f:fa:59:48:f8:64:fb:8b:51:35:42:e8: 36:c7:c1:03:c2:6e:65:6f:7d:b8:50:f4:e0:98:c5: 73:d7:5b:70:23:d5:21:61:b6:4a:39:e8:31:69:05: a1:f7:a8:46:9c:50:e8:7f:70:cc:9f:c0:25:fa:96: 67:fe:d9:18:fa:9b:14:22:55:d9:ac:bc:29:a1:d3: cf:3c:0b:c3:e9:2e:c8:a7:be:2a:fc:e8:bc:3f:6e: d6:31:5f:91:81:e3:a4:84:a3:fc:72:e9:db:3d:94: 21:99:73:eb:03:63:2e:10:7d:56:19:40:c0:b2:d5: a5:a3:a2:89:f7:c4:28:e2:dd:07:29:19:a3:52:4e: e3:69:2e:f0:a1:52:26:a7:3f:49:35:43:9a:f8:16: aa:ca:a5:56:db:60:5d:d0:65:4b:64:d7:a6:3f:a3: 0b:83:33:37:98:93:1b:a7:9c:66:e5:b7:de:b7:05: 42:38:26:ea:43:9a:18:6e:5d:4c:24:73:f1:b3:f4: 69:95:cd:e6:aa:bf:c5:d0:9a:77:de:8b:a9:d8:f2: 05:d1:ca:4b:7f:7a:d6:2c:5f:71:4d:93:4f:bd:c3: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:E6:46:6F:30:C3:0E:6C:80:E7:F8:55:6E:0F:D3:E7:9A:D4:6F X509v3 Authority Key Identifier: keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b0:13:0b:77:94:82:9d:e8:32:21:ff:29:fd:6e:8c:7f:05: cd:31:9f:21:20:50:b6:4b:af:5d:a8:cd:b0:01:17:46:90:d2: ed:61:5e:91:ff:9c:b5:05:23:e6:d4:d2:90:a6:31:70:b0:b0: 34:33:72:40:a4:0e:5c:4c:a8:11:47:16:32:93:33:63:f9:ad: 48:e4:b0:ca:17:bc:c7:03:4d:57:96:76:82:33:12:0e:ce:53: ee:12:1d:1e:fc:31:cd:7c:2b:24:15:08:2b:23:90:a1:a3:45: 26:c1:36:3c:23:90:a2:a8:37:84:b2:87:71:50:90:cb:56:c7: ca:31:a8:15:ec:6d:33:82:ed:7c:56:99:3e:06:41:37:0c:0f: ec:78:d9:f2:8f:5f:af:14:a5:87:b2:06:95:e3:8c:f9:c3:c7: 7a:62:62:9a:1b:69:29:da:8c:d1:46:af:34:8b:9a:3b:6a:9b: 61:c0:76:62:50:26:f1:94:8f:0b:e6:5d:4a:1e:a6:42:11:3f: 1c:cf:7d:6b:57:3a:96:d9:e6:97:c1:98:3f:3a:0c:b9:46:c3: c3:3a:0a:18:b9:cc:1f:6f:0d:b1:bc:b2:d3:b9:34:91:89:b6: 02:f9:7b:c6:e3:4e:b0:4f:a3:f0:df:3a:55:c0:91:78:6d:57: 7f:b3:48:95 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCS9ngoNJB0DdsrbJ3GNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYmUzM2M4ZDE4ZTUzYmZkMjQ4MjIwOThkYzc0ODY0MDU1 MGM1MDQwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD Eyg4OGEwZTY0NjZmMzBjMzBlNmM4MGU3Zjg1NTZlMGZkM2U3OWFkNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvStrLC8VV2sO4nqX85nrSw6AjR8C 2jJZGTNpjHVWciZ/+llI+GT7i1E1Qug2x8EDwm5lb324UPTgmMVz11twI9UhYbZK OegxaQWh96hGnFDof3DMn8Al+pZn/tkY+psUIlXZrLwpodPPPAvD6S7Ip74q/Oi8 P27WMV+RgeOkhKP8cunbPZQhmXPrA2MuEH1WGUDAstWlo6KJ98Qo4t0HKRmjUk7j aS7woVImpz9JNUOa+BaqyqVW22Bd0GVLZNemP6MLgzM3mJMbp5xm5bfetwVCOCbq Q5oYbl1MJHPxs/Rplc3mqr/F0Jp33oup2PIF0cpLf3rWLF9xTZNPvcNulQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIig5kZvMMMObIDn+FVuD9PnmtRvMB8GA1UdIwQY MBaAFPu+M8jRjlO/0kgiCY3HSGQFUMUEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03NHp5TkdPVTdfU1NDSUpqY2RJWkFWUXhRUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOWNmZWU4LTk0NDYtNGY1ZS1hZDFl LTA1NTQzMTFkODdiNS8xLzEtNzR6eU5HT1U3X1NTQ0lKamNkSVpBVlF4UVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcwLzljZmVlOC05NDQ2LTRmNWUtYWQxZS0wNTU0MzExZDg3 YjUvMS8xLTc0enlOR09VN19TU0NJSmpjZElaQVZReFFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrAT C3eUgp3oMiH/Kf1ujH8FzTGfISBQtkuvXajNsAEXRpDS7WFekf+ctQUj5tTSkKYx cLCwNDNyQKQOXEyoEUcWMpMzY/mtSOSwyhe8xwNNV5Z2gjMSDs5T7hIdHvwxzXwr JBUIKyOQoaNFJsE2PCOQoqg3hLKHcVCQy1bHyjGoFextM4LtfFaZPgZBNwwP7HjZ 8o9frxSlh7IGleOM+cPHemJimhtpKdqM0UavNIuaO2qbYcB2YlAm8ZSPC+ZdSh6m QhE/HM99a1c6ltnml8GYPzoMuUbDwzoKGLnMH28Nsbyy07k0kYm2Avl7xuNOsE+j 8N86VcCReG1Xf7NIlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:39 2025 by rpki-client