This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json) Hash identifier: mfeaOK+9VPtdpABAj1F31ENkOnlPLbvQKCAF738Oqt0= Subject key identifier: 11:F3:8D:F3:DB:31:39:C5:F5:10:15:B4:D0:61:09:6C:9F:00:89:C5 Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b Certificate serial: 019AF276704A2C0458D6850350A40FC2D3F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: kRpNbogcpY2ArTr9kCHhoKgp7MkrtLLf25wxSa1XzoA=) 2: rJdrJhQQmpxY59M8JPVpH2s71pI.roa (hash: xxb6VYq/XoyduiRjX57bX/HD20WZN47aVhzULOuwKsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:70:4a:2c:04:58:d6:85:03:50:a4:0f:c2:d3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=11f38df3db3139c5f51015b4d061096c9f0089c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:a5:5d:63:e1:c4:2e:83:f1:bc:97:4e:6a: 7e:cf:a6:49:47:1d:2a:9e:fe:43:fd:15:4a:93:ba: 6b:f6:65:5a:a1:4e:28:83:ea:5c:5e:96:a9:09:ec: 1c:2e:26:7f:ad:a1:ca:3e:4d:10:dc:e8:ab:28:87: c9:b0:55:34:bb:98:2c:f6:8e:45:25:33:63:42:ab: bf:87:e6:3d:76:51:e6:ae:2b:df:62:53:bd:e0:5e: 3b:37:e6:37:56:08:07:54:c0:a6:5e:eb:65:51:ca: 82:4f:6b:3c:3f:b6:de:df:f3:c2:41:5c:b5:e0:6d: 57:5a:6d:13:32:02:81:24:63:d7:c9:94:12:4e:68: 7c:c5:da:df:8d:6a:d9:46:da:a0:df:73:dc:98:df: 71:72:16:23:aa:26:a3:36:3e:bf:c2:45:5a:49:3a: fa:05:f3:3f:09:b9:56:26:eb:17:3f:4b:2c:e8:bb: 8c:af:c9:fc:f5:bb:6e:d4:2d:bd:3c:f7:99:df:d0: 6e:d4:34:2f:24:8d:f1:16:23:0d:7f:1b:ab:88:9d: 03:19:c1:65:37:8d:90:fa:ac:d8:5c:64:df:74:0c: a0:cf:fc:14:f7:80:90:be:2e:33:63:d3:54:55:24: 16:87:c1:3e:66:8c:33:32:44:e1:10:8b:17:ba:62: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F3:8D:F3:DB:31:39:C5:F5:10:15:B4:D0:61:09:6C:9F:00:89:C5 X509v3 Authority Key Identifier: keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:67:f4:33:2b:de:d2:e5:92:6d:d3:62:5c:79:84:c1:98:c8: 43:c0:09:d4:ea:cb:a5:25:62:2e:67:36:1c:46:12:1a:f0:f2: 70:7b:25:7a:41:6a:0d:31:9a:fd:95:1f:0b:0f:d5:80:57:3a: ab:65:94:13:6a:ef:81:54:52:f6:b5:d7:e8:d3:02:6a:dc:f3: 36:ee:4a:29:6c:df:51:bb:ca:8b:a5:c0:c1:00:d1:79:ba:3f: e5:2c:1a:11:34:1f:b3:2a:22:73:88:3d:97:1e:de:b6:71:c9: 4c:2d:ed:c0:e8:f1:b7:2f:e7:cd:c7:87:76:a4:40:e8:43:9f: 2d:e8:6d:e8:0d:44:0e:d4:23:ca:e4:f9:6b:8c:52:ee:6a:d2: 66:4a:33:70:1b:21:1c:19:68:fe:1c:6a:c5:e4:80:63:dd:db: 0e:1a:ae:05:f8:ba:d1:55:cb:af:17:9d:ff:c1:ca:cb:72:cf: d7:36:fb:fd:5d:bd:49:d1:5a:9b:e6:d2:a8:6f:c8:2b:70:66: 33:d5:f2:cb:10:c1:b5:d2:92:90:ab:be:44:86:cd:d2:69:6e: 42:ea:2a:92:41:11:d8:a9:7a:a3:fd:d6:42:51:ad:d3:f0:80: f2:e8:2e:1c:ac:ee:3e:66:01:d1:a1:03:98:bb:01:8a:fe:56: d5:e9:fa:57 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydnBKLARY1oUDUKQPwtPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2YxNTNmMjRmYThkMzIxNGNkN2M2ZTI1MGQ0YjE5ZjUw NjcyMmIwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EygxMWYzOGRmM2RiMzEzOWM1ZjUxMDE1YjRkMDYxMDk2YzlmMDA4OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQilXWPhxC6D8byXTmp+z6ZJRx0q nv5D/RVKk7pr9mVaoU4og+pcXpapCewcLiZ/raHKPk0Q3OirKIfJsFU0u5gs9o5F JTNjQqu/h+Y9dlHmrivfYlO94F47N+Y3VggHVMCmXutlUcqCT2s8P7be3/PCQVy1 4G1XWm0TMgKBJGPXyZQSTmh8xdrfjWrZRtqg33PcmN9xchYjqiajNj6/wkVaSTr6 BfM/CblWJusXP0ss6LuMr8n89btu1C29PPeZ39Bu1DQvJI3xFiMNfxuriJ0DGcFl N42Q+qzYXGTfdAygz/wU94CQvi4zY9NUVSQWh8E+ZowzMkThEIsXumL2hQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBHzjfPbMTnF9RAVtNBhCWyfAInFMB8GA1UdIwQY MBaAFPrPFT8k+o0yFM18biUNSxn1BnIrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zOFZQeVQ2alRJVXpYeHVKUTFMR2ZVR2Npcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvODYyMWU0LWU5YTktNGI2NC05NjQ4 LTlhYTczNzJiNjE2ZC8xLzEtczhWUHlUNmpUSVV6WHh1SlExTEdmVUdjaXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgxLzg2MjFlNC1lOWE5LTRiNjQtOTY0OC05YWE3MzcyYjYx NmQvMS8xLXM4VlB5VDZqVElVelh4dUpRMUxHZlVHY2lzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWf0 Myve0uWSbdNiXHmEwZjIQ8AJ1OrLpSViLmc2HEYSGvDycHslekFqDTGa/ZUfCw/V gFc6q2WUE2rvgVRS9rXX6NMCatzzNu5KKWzfUbvKi6XAwQDRebo/5SwaETQfsyoi c4g9lx7etnHJTC3twOjxty/nzceHdqRA6EOfLeht6A1EDtQjyuT5a4xS7mrSZkoz cBshHBlo/hxqxeSAY93bDhquBfi60VXLrxed/8HKy3LP1zb7/V29SdFam+bSqG/I K3BmM9XyyxDBtdKSkKu+RIbN0mluQuoqkkER2Kl6o/3WQlGt0/CA8uguHKzuPmYB 0aEDmLsBiv5W1en6Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:54 2025 by rpki-client