This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json) Hash identifier: 6aAW3Lne9ZOvyXYR0Tcyhl5nB/0Oeh1mFSYaTzl7DhU= Subject key identifier: AB:47:F1:12:AC:0C:6D:50:ED:C9:76:9C:25:DB:77:8A:DD:59:2F:CA Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Certificate serial: 019AF49C42FD75FFDDB76746F88A0475BB1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft Manifest number: 08F6 Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:12 +0000 Manifest next update: Sun 07 Dec 2025 17:01:12 +0000 Files and hashes: 1: 0TM8RaOIPFOpyp7Wz-Yo2ky-FH4.roa (hash: XeQkg3QeFHikM/cwWNNdphRvfPZiBaMh4xO56QjpXcM=) 2: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: uku0Q8OdVeX6ajxgQnkelW9uEZ1xg9j0P/yATo4pC3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:42:fd:75:ff:dd:b7:67:46:f8:8a:04:75:bb:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Validity Not Before: Dec 6 17:01:12 2025 GMT Not After : Dec 7 17:01:12 2025 GMT Subject: CN=ab47f112ac0c6d50edc9769c25db778add592fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:07:41:76:96:dd:d1:04:e4:17:d9:bb:0d: c1:f3:b7:ad:e6:13:d8:c1:89:b0:ef:ae:67:71:da: 88:e2:56:05:96:a2:a1:89:28:df:9f:a4:53:5b:72: 84:60:cb:f4:2c:cb:d8:84:3e:25:01:34:45:c1:0e: 27:57:34:91:cf:28:7b:59:aa:a7:f1:8f:58:db:8b: 41:8a:03:57:76:3c:c4:bf:c8:08:5f:7c:a6:47:a9: 7a:ca:88:9c:c3:c7:e3:f5:6e:a1:45:a4:1e:41:9d: 5f:36:29:4e:6e:34:f5:5f:c1:9a:cd:91:92:29:1f: fa:76:db:07:1e:27:c6:c1:44:2f:4d:17:10:b9:8b: fe:df:38:26:cb:9e:d3:f1:1f:f8:11:61:64:84:c5: 28:8f:0b:53:8f:c4:6e:b2:d5:47:2d:e9:80:eb:eb: 54:9e:de:0e:8f:fb:87:c8:de:a7:83:76:e8:cc:7c: df:46:d6:17:5b:f3:57:2a:49:b5:49:1e:0d:dd:2a: 94:33:6f:dc:6e:e2:a5:0b:16:31:c5:c3:7b:d6:fa: 28:42:1e:a0:b6:08:d3:b8:0f:7b:19:12:4d:fc:1a: b1:da:ba:be:64:04:f0:64:37:0a:dc:19:27:5c:b2: d9:01:35:c2:b2:12:d0:10:4c:70:ab:81:4d:bc:fa: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:47:F1:12:AC:0C:6D:50:ED:C9:76:9C:25:DB:77:8A:DD:59:2F:CA X509v3 Authority Key Identifier: keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:bd:32:52:57:4c:0e:d7:37:2e:1b:a0:a7:80:2a:e1:6c:f1: f4:3d:0d:69:7e:32:97:65:be:f8:10:0f:bc:85:a2:a3:9f:fe: 19:1d:6e:d6:5c:ce:8c:48:e5:f0:c1:2f:99:d0:bc:6f:0e:a9: 5a:3e:03:2d:53:ed:0c:51:29:d8:b0:3b:ce:5c:6e:5e:dd:f9: d6:43:81:aa:ce:25:31:78:6e:c4:be:92:20:19:3a:0e:90:5f: 04:38:ba:eb:2b:ce:b6:07:3b:63:57:41:c6:d1:0b:69:dd:5d: 4b:77:14:f2:ac:b0:c2:6a:2e:ad:a2:8f:34:79:3f:8b:b1:8f: c0:e1:79:d7:cc:f4:e6:04:56:1e:07:8a:fc:d6:8b:d8:4b:99: 23:5b:47:4b:e1:8e:08:10:ae:4c:cf:e3:82:e4:f7:5b:bc:69: 4b:7b:a3:29:8e:67:cb:f1:c2:e4:ec:26:d0:a6:92:0a:b3:50: a0:ad:a5:38:b1:98:4c:23:ad:42:7c:3d:6f:27:cf:e4:3b:e6: f6:c6:34:6b:eb:86:4a:26:cb:af:6b:9b:02:4c:76:14:92:55: 9e:27:b7:8f:bd:50:67:2d:cf:91:6d:a6:5c:f2:7e:d0:63:fd: 25:71:d4:d7:af:bf:72:33:7c:35:f7:d7:ad:66:e6:10:ad:f4: fc:ed:e7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEL9df/dt2dG+IoEdbsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjVlN2RkZGM0N2M3MTA0NDg2NWJjNWNkYzI1ODdlZmRh YjBiOWMwHhcNMjUxMjA2MTcwMTEyWhcNMjUxMjA3MTcwMTEyWjAzMTEwLwYDVQQD EyhhYjQ3ZjExMmFjMGM2ZDUwZWRjOTc2OWMyNWRiNzc4YWRkNTkyZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYHQXaW3dEE5BfZuw3B87et5hPY wYmw765ncdqI4lYFlqKhiSjfn6RTW3KEYMv0LMvYhD4lATRFwQ4nVzSRzyh7Waqn 8Y9Y24tBigNXdjzEv8gIX3ymR6l6yoicw8fj9W6hRaQeQZ1fNilObjT1X8GazZGS KR/6dtsHHifGwUQvTRcQuYv+3zgmy57T8R/4EWFkhMUojwtTj8RustVHLemA6+tU nt4Oj/uHyN6ng3bozHzfRtYXW/NXKkm1SR4N3SqUM2/cbuKlCxYxxcN71vooQh6g tgjTuA97GRJN/Bqx2rq+ZATwZDcK3BknXLLZATXCshLQEExwq4FNvPp4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtH8RKsDG1Q7cl2nCXbd4rdWS/KMB8GA1UdIwQY MBaAFNX1593cR8cQRIZbxc3CWH79qwucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAt MjlmZTdjYzY2YzhkLzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAtMjlmZTdjYzY2Yzhk LzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaL0yUldM Dtc3Lhugp4Aq4Wzx9D0NaX4yl2W++BAPvIWio5/+GR1u1lzOjEjl8MEvmdC8bw6p Wj4DLVPtDFEp2LA7zlxuXt351kOBqs4lMXhuxL6SIBk6DpBfBDi66yvOtgc7Y1dB xtELad1dS3cU8qywwmouraKPNHk/i7GPwOF518z05gRWHgeK/NaL2EuZI1tHS+GO CBCuTM/jguT3W7xpS3ujKY5ny/HC5Owm0KaSCrNQoK2lOLGYTCOtQnw9byfP5Dvm 9sY0a+uGSibLr2ubAkx2FJJVnie3j71QZy3PkW2mXPJ+0GP9JXHU16+/cjN8NffX rWbmEK30/O3njg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:03:51 2025 by rpki-client