This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json) Hash identifier: OIxBne/Fa8OJ1JacVoP/esQOW21DPpdIseoGhuCqQ3k= Subject key identifier: BB:FB:F4:01:75:7F:AC:22:B6:E7:AE:94:70:61:6A:52:57:8E:BC:FD Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18 Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418 Certificate serial: 019AF12E3EFA973C074E6871CD7C6DEC6B34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft Manifest number: 0857 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: ZPWWWlaxLloTM0ZQ2ojU0I895PZHLQbY2iD8bIpTWyI=) 2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3e:fa:97:3c:07:4e:68:71:cd:7c:6d:ec:6b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=bbfbf401757fac22b6e7ae9470616a52578ebcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:6f:d8:22:f3:03:4c:79:07:42:d3:4e:6a: 9d:98:8b:20:9c:a1:17:67:18:a8:3f:ca:62:4d:a9: f6:30:02:16:cb:fa:0a:8c:1e:ef:2a:47:9c:fb:16: f6:03:80:3a:a7:b8:15:68:63:e1:6c:e8:f4:d5:07: 67:e7:02:b9:61:68:44:f3:8d:7a:b7:d3:9f:d2:63: a8:d0:d1:93:26:57:a9:7f:42:1c:db:e4:db:38:4c: 14:f5:e6:51:0b:dd:5a:e1:8f:54:c6:2a:94:4a:5b: 3e:92:4f:3e:71:e0:6e:c0:71:f1:b2:22:55:b5:54: 88:a4:0f:9b:f8:74:38:a6:a7:f6:ca:dd:af:16:6f: 96:72:0c:85:6f:76:f6:4a:c4:aa:e6:56:12:e2:28: a9:18:62:54:a4:b1:ec:47:a7:04:29:b3:72:45:89: c0:2f:bf:d2:8e:6c:fd:68:69:cd:89:57:88:d0:9c: 31:af:7f:2f:39:ab:04:fb:50:bc:25:94:21:ff:68: ab:b1:4b:81:a7:98:23:8a:55:3e:bd:e4:0f:6b:fa: 31:bf:53:8f:b1:38:68:34:3a:ed:e0:0e:8f:99:e0: 06:cf:85:5c:0f:93:2d:b4:d4:1b:3e:44:8c:ef:62: 1f:fc:05:a3:5f:e8:5a:ff:4a:05:b3:d8:7d:38:67: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FB:F4:01:75:7F:AC:22:B6:E7:AE:94:70:61:6A:52:57:8E:BC:FD X509v3 Authority Key Identifier: keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:72:69:8f:a3:af:82:6d:e8:75:59:3c:7d:42:c4:7c:a8:f6: 88:63:60:fa:ab:65:67:78:4d:af:ae:8e:68:05:7a:a9:dc:e3: 3c:9b:e2:42:65:cc:f4:ab:5e:36:46:44:60:60:6e:6a:e5:8f: 36:49:9e:7f:e0:a6:d4:05:95:06:bb:1c:bc:5b:85:88:74:ad: 47:eb:50:f6:b7:9b:89:43:18:04:eb:c3:9e:8e:8a:de:fc:0a: 71:b6:89:c3:c7:93:0f:47:d2:06:ae:5c:f1:01:f9:f8:e3:2f: 7e:d9:8c:e3:c0:f5:90:93:69:32:e1:28:48:35:bf:3a:ba:60: 67:42:51:04:c5:f4:67:77:f3:a2:8e:e6:77:02:37:0d:95:fd: 07:40:88:2d:cf:63:18:cf:23:28:31:de:1d:5d:42:d7:d9:23: 0f:a1:e7:1f:7d:54:66:81:06:19:13:c9:bd:1d:bf:83:51:b0: 4d:99:b4:e5:27:71:19:de:e7:fd:56:d0:94:26:3c:2e:50:4f: b3:02:f3:c1:da:75:cd:0b:62:4c:c3:7d:df:79:17:c0:0b:59: 17:ab:81:f2:78:32:21:f8:41:e0:62:b2:92:f9:12:e0:e3:b2: d2:dc:ef:11:b0:68:76:00:b2:fc:9d:0c:c7:18:b7:ef:bd:e3: 6c:89:27:ae -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLj76lzwHTmhxzXxt7Gs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2JhZDdkMDY4NTk5NWNlZDM1MTA4YjJlMTE1MjVhN2Fh YjE0MTgwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD EyhiYmZiZjQwMTc1N2ZhYzIyYjZlN2FlOTQ3MDYxNmE1MjU3OGViY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpRv2CLzA0x5B0LTTmqdmIsgnKEX ZxioP8piTan2MAIWy/oKjB7vKkec+xb2A4A6p7gVaGPhbOj01Qdn5wK5YWhE8416 t9Of0mOo0NGTJlepf0Ic2+TbOEwU9eZRC91a4Y9UxiqUSls+kk8+ceBuwHHxsiJV tVSIpA+b+HQ4pqf2yt2vFm+WcgyFb3b2SsSq5lYS4iipGGJUpLHsR6cEKbNyRYnA L7/Sjmz9aGnNiVeI0Jwxr38vOasE+1C8JZQh/2irsUuBp5gjilU+veQPa/oxv1OP sThoNDrt4A6PmeAGz4VcD5MttNQbPkSM72If/AWjX+ha/0oFs9h9OGcX3QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLv79AF1f6witueulHBhalJXjrz9MB8GA1UdIwQY MBaAFPs7rX0GhZlc7TUQiy4RUlp6qxQYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16dXRmUWFGbVZ6dE5SQ0xMaEZTV25xckZCZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzlkNzQ2LTAzZjktNGM3MS1hZmM3 LWU1ZDBiNzZkZTViOC8xLzEtenV0ZlFhRm1WenROUkNMTGhGU1ducXJGQmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdhLzc5ZDc0Ni0wM2Y5LTRjNzEtYWZjNy1lNWQwYjc2ZGU1 YjgvMS8xLXp1dGZRYUZtVnp0TlJDTExoRlNXbnFyRkJnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynJp j6Ovgm3odVk8fULEfKj2iGNg+qtlZ3hNr66OaAV6qdzjPJviQmXM9KteNkZEYGBu auWPNkmef+Cm1AWVBrscvFuFiHStR+tQ9rebiUMYBOvDno6K3vwKcbaJw8eTD0fS Bq5c8QH5+OMvftmM48D1kJNpMuEoSDW/OrpgZ0JRBMX0Z3fzoo7mdwI3DZX9B0CI Lc9jGM8jKDHeHV1C19kjD6HnH31UZoEGGRPJvR2/g1GwTZm05SdxGd7n/VbQlCY8 LlBPswLzwdp1zQtiTMN933kXwAtZF6uB8ngyIfhB4GKykvkS4OOy0tzvEbBodgCy /J0Mxxi3773jbIknrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:23 2025 by rpki-client