This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json) Hash identifier: sXfmbCx10d1tSZp7tVc//JUAyodPjo/n49pff42+xp4= Subject key identifier: 2C:03:60:21:31:E3:36:41:E4:40:EB:CC:CA:83:25:D8:E5:51:36:33 Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Certificate serial: 019AF464C22250A4843459940BBD2F183EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft Manifest number: 0F03 Signing time: Sat 06 Dec 2025 16:00:35 +0000 Manifest this update: Sat 06 Dec 2025 16:00:35 +0000 Manifest next update: Sun 07 Dec 2025 16:00:35 +0000 Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: o8I1CA5U0Vz3VqXrGVPUVztRywAVH+nl5NoJV3IshzQ=) 2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=) 3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c2:22:50:a4:84:34:59:94:0b:bd:2f:18:3e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Validity Not Before: Dec 6 16:00:35 2025 GMT Not After : Dec 7 16:00:35 2025 GMT Subject: CN=2c03602131e33641e440ebccca8325d8e5513633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:84:51:1c:32:c6:c9:39:78:fd:ed:7f:18: a1:ce:04:c0:d8:62:be:ca:4e:74:7a:c1:58:57:5e: e1:30:55:38:5b:7e:c9:e5:37:75:4f:f9:24:de:a2: 84:55:b4:ad:fc:05:7f:90:06:27:22:31:0e:ff:b7: 09:ee:12:33:68:a1:02:2f:da:31:7e:d6:15:c0:35: 6d:ea:24:21:7a:57:84:a6:5a:60:50:5f:a6:a2:d3: b7:04:89:ed:cc:02:cf:9b:23:c9:a9:3e:da:82:c0: 0a:7d:8b:da:b2:b2:fb:31:eb:19:cc:17:89:77:45: 4c:dc:99:1d:42:67:8e:8b:6b:74:70:a0:74:0a:fa: 1f:69:e0:29:32:64:c5:55:2a:e3:7e:45:8a:23:2e: a0:13:4c:e6:23:f7:dc:3a:c5:51:38:d6:77:e5:3c: 1e:73:92:52:91:41:1e:0f:6c:4e:4f:4a:a7:c2:a8: 57:77:18:95:ef:5d:ba:f9:2f:81:6c:41:cf:c9:21: fe:b0:03:72:e9:ff:41:20:be:55:53:59:44:e0:c7: eb:3f:8a:79:8c:e6:9a:b7:74:1f:46:04:4e:bf:40: 25:78:e6:ba:2e:76:84:0b:78:c0:76:d1:28:90:45: 2b:65:43:12:a1:0d:52:39:c3:56:59:56:99:19:fb: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:60:21:31:E3:36:41:E4:40:EB:CC:CA:83:25:D8:E5:51:36:33 X509v3 Authority Key Identifier: keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:14:f6:f5:b5:19:23:c1:9b:fd:36:b3:d4:38:8a:bf:d0:8a: 87:18:28:a1:cd:0f:cd:b2:91:a5:98:c5:82:51:5c:17:75:32: 5a:8c:1d:2c:09:b0:f4:4a:a4:88:eb:10:8d:bd:c7:f4:23:e8: 4f:a9:b2:5b:77:60:d9:11:b8:f8:c8:88:22:bd:39:73:f8:bf: e9:58:fb:42:a0:1b:31:e0:c6:57:45:7c:d2:fb:da:69:d4:a6: db:c2:c2:b9:84:ce:be:a3:a3:9f:98:52:bf:c1:d3:c7:80:25: ff:0a:a6:ec:29:f0:fa:41:43:e2:2a:29:4c:ca:f3:76:3a:00: 63:7d:4c:d5:e8:c8:32:26:0f:38:8c:3b:e0:fa:c8:47:b5:64: 28:53:63:1e:33:fe:43:93:61:e3:07:c5:d9:a4:ce:31:b2:52: dc:96:5c:d7:73:f6:f3:dd:a0:d9:f3:73:30:4e:a4:b5:38:f8: cf:7e:0c:1b:4a:a6:2b:d5:6b:b8:40:73:b5:50:8f:f5:a2:35: ab:b3:b6:43:99:02:e5:59:3d:31:65:da:f9:88:52:ba:81:aa: c0:33:e2:5c:78:b1:69:41:90:f0:49:a5:6c:2c:af:16:c0:3c: ef:19:11:50:84:19:c7:5b:bf:72:64:5d:8f:04:05:d3:d6:0d: ac:76:f2:ec -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0ZMIiUKSENFmUC70vGD7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk YTk3ZjAwHhcNMjUxMjA2MTYwMDM1WhcNMjUxMjA3MTYwMDM1WjAzMTEwLwYDVQQD EygyYzAzNjAyMTMxZTMzNjQxZTQ0MGViY2NjYTgzMjVkOGU1NTEzNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGEURwyxsk5eP3tfxihzgTA2GK+ yk50esFYV17hMFU4W37J5Td1T/kk3qKEVbSt/AV/kAYnIjEO/7cJ7hIzaKECL9ox ftYVwDVt6iQheleEplpgUF+motO3BIntzALPmyPJqT7agsAKfYvasrL7MesZzBeJ d0VM3JkdQmeOi2t0cKB0CvofaeApMmTFVSrjfkWKIy6gE0zmI/fcOsVRONZ35Twe c5JSkUEeD2xOT0qnwqhXdxiV7126+S+BbEHPySH+sANy6f9BIL5VU1lE4MfrP4p5 jOaat3QfRgROv0AleOa6LnaEC3jAdtEokEUrZUMSoQ1SOcNWWVaZGfuBWwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCwDYCEx4zZB5EDrzMqDJdjlUTYzMB8GA1UdIwQY MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2 LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2 NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRT2 9bUZI8Gb/Taz1DiKv9CKhxgooc0PzbKRpZjFglFcF3UyWowdLAmw9EqkiOsQjb3H 9CPoT6myW3dg2RG4+MiIIr05c/i/6Vj7QqAbMeDGV0V80vvaadSm28LCuYTOvqOj n5hSv8HTx4Al/wqm7Cnw+kFD4iopTMrzdjoAY31M1ejIMiYPOIw74PrIR7VkKFNj HjP+Q5Nh4wfF2aTOMbJS3JZc13P2892g2fNzME6ktTj4z34MG0qmK9VruEBztVCP 9aI1q7O2Q5kC5Vk9MWXa+YhSuoGqwDPiXHixaUGQ8EmlbCyvFsA87xkRUIQZx1u/ cmRdjwQF09YNrHby7A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:30 2025 by rpki-client