This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json) Hash identifier: /kSAE7kwmsm6adqUzdRUNIct4ZkoyasvzNUKlzUrzPM= Subject key identifier: A5:FB:E9:A5:80:6E:56:B6:EF:F8:6B:93:F4:37:9E:E3:4B:95:07:9F Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B Certificate issuer: /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b Certificate serial: 019AF509F6CEFF7F08D872F9BA6C3565E4AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft Manifest number: 0443 Signing time: Sat 06 Dec 2025 19:01:02 +0000 Manifest this update: Sat 06 Dec 2025 19:01:02 +0000 Manifest next update: Sun 07 Dec 2025 19:01:02 +0000 Files and hashes: 1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: Lbh8tPue+u8jrmhIRRHavN0+SRfYmZnr55Y1tUL/Gq8=) 2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f6:ce:ff:7f:08:d8:72:f9:ba:6c:35:65:e4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b Validity Not Before: Dec 6 19:01:02 2025 GMT Not After : Dec 7 19:01:02 2025 GMT Subject: CN=a5fbe9a5806e56b6eff86b93f4379ee34b95079f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:87:36:40:9c:0f:36:fd:fc:de:95:32:42: 7e:3f:23:e8:20:2f:fa:f7:56:f5:fd:81:ea:0b:af: ca:41:96:09:66:af:c9:e3:56:45:2b:52:5a:ea:93: e4:b9:25:b6:e1:f9:73:51:94:cc:e1:32:2e:a7:2d: 0f:a0:91:62:6d:b3:1e:3b:5a:75:24:7f:da:46:26: 65:41:5d:0b:24:1e:ad:b9:c1:5f:7b:0b:bf:b9:82: 5a:c9:10:71:ba:0b:92:d3:27:14:63:d8:f5:b1:cc: 63:b3:24:f5:78:a8:70:f6:c8:5b:28:21:ca:ac:32: a8:0e:22:e3:16:b7:b6:10:2e:0a:74:0d:3d:75:8a: e6:3c:3d:f9:ce:62:5b:a0:08:84:10:db:39:47:68: 2f:53:cb:4a:a8:da:4e:18:57:d5:4d:59:6b:d4:3e: 55:c2:70:8d:4b:46:92:1a:b4:15:8a:a2:15:f0:e2: 86:63:4e:41:70:5b:04:29:a8:73:a3:f1:b7:38:9d: a3:47:f1:c0:1d:73:c8:34:5e:b3:d3:93:58:d9:37: 45:71:2c:0e:13:0f:7c:43:28:51:7a:15:af:bc:1e: c4:31:c7:eb:fe:6c:85:2a:83:20:09:b9:f3:0b:fd: 7b:1e:18:97:df:6b:1f:52:b0:a5:5a:9e:64:0a:ca: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FB:E9:A5:80:6E:56:B6:EF:F8:6B:93:F4:37:9E:E3:4B:95:07:9F X509v3 Authority Key Identifier: keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:38:cd:0b:31:59:10:46:8e:dd:7a:f6:c5:b5:c3:2e:df: e7:1d:f0:fa:b7:c6:76:8d:68:75:fc:c2:cd:f2:35:f1:5c:2f: 53:75:e5:90:47:f9:87:11:80:75:8f:e5:54:b8:dd:68:ef:9f: 91:54:e7:94:f2:19:a0:fb:66:9f:bf:c0:4d:95:9b:09:de:ab: 6a:dd:dd:06:d0:69:69:c5:f4:8c:b5:19:95:ff:b3:9a:fb:8e: 21:c5:73:de:9d:bf:3b:f1:16:46:7b:d1:08:f6:eb:50:20:3b: 14:8c:a4:ee:8e:fe:8a:26:2f:67:23:e7:b1:d8:c7:5b:44:bc: 10:af:41:b0:23:79:1f:45:8d:fc:de:3c:b5:7c:94:d4:0c:3a: 43:86:8e:57:b7:6d:d2:64:5b:2b:d0:61:84:8d:d6:10:53:bd: 49:d9:08:62:f5:6b:a6:02:e3:52:8d:93:a7:b3:2b:80:bf:7f: 7c:29:43:79:5a:25:e8:2a:f8:63:2f:72:ee:08:26:10:19:a7: 23:0f:3f:e8:88:d5:81:c5:b8:26:9f:2b:4c:10:47:b6:c4:08: d5:60:74:f3:3d:24:ed:e6:f1:7e:16:a7:76:c6:8c:c3:b6:c4: 27:6f:41:46:18:75:b2:44:c4:1b:c1:a7:62:99:ee:36:0c:f3: 3c:04:7e:3e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1CfbO/38I2HL5umw1ZeSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMDg5NmNmMTgyM2M3NGJmY2I3ZDYyM2UyYzQzODc4N2I5 ZjE2N2IwHhcNMjUxMjA2MTkwMTAyWhcNMjUxMjA3MTkwMTAyWjAzMTEwLwYDVQQD EyhhNWZiZTlhNTgwNmU1NmI2ZWZmODZiOTNmNDM3OWVlMzRiOTUwNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml+HNkCcDzb9/N6VMkJ+PyPoIC/6 91b1/YHqC6/KQZYJZq/J41ZFK1Ja6pPkuSW24flzUZTM4TIupy0PoJFibbMeO1p1 JH/aRiZlQV0LJB6tucFfewu/uYJayRBxuguS0ycUY9j1scxjsyT1eKhw9shbKCHK rDKoDiLjFre2EC4KdA09dYrmPD35zmJboAiEENs5R2gvU8tKqNpOGFfVTVlr1D5V wnCNS0aSGrQViqIV8OKGY05BcFsEKahzo/G3OJ2jR/HAHXPINF6z05NY2TdFcSwO Ew98QyhRehWvvB7EMcfr/myFKoMgCbnzC/17HhiX32sfUrClWp5kCsqT4QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKX76aWAbla27/hrk/Q3nuNLlQefMB8GA1UdIwQY MBaAFPoIls8YI8dL/LfWI+LEOHh7nxZ7MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1naVd6eGdqeDB2OHQ5WWo0c1E0ZUh1ZkZucy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYTI3NjIwLWQzMmQtNGU5OC1hZWM0 LWJmNmE5N2E1NmYxMC8xLzEtZ2lXenhnangwdjh0OVlqNHNRNGVIdWZGbnMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzc5L2EyNzYyMC1kMzJkLTRlOTgtYWVjNC1iZjZhOTdhNTZm MTAvMS8xLWdpV3p4Z2p4MHY4dDlZajRzUTRlSHVmRm5zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa44 zQsxWRBGjt169sW1wy7f5x3w+rfGdo1odfzCzfI18VwvU3XlkEf5hxGAdY/lVLjd aO+fkVTnlPIZoPtmn7/ATZWbCd6rat3dBtBpacX0jLUZlf+zmvuOIcVz3p2/O/EW RnvRCPbrUCA7FIyk7o7+iiYvZyPnsdjHW0S8EK9BsCN5H0WN/N48tXyU1Aw6Q4aO V7dt0mRbK9BhhI3WEFO9SdkIYvVrpgLjUo2Tp7MrgL9/fClDeVol6Cr4Yy9y7ggm EBmnIw8/6IjVgcW4Jp8rTBBHtsQI1WB08z0k7ebxfhandsaMw7bEJ29BRhh1skTE G8GnYpnuNgzzPAR+Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:15 2025 by rpki-client