This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft File: 1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft (raw, json) Hash identifier: PtZ6tOzGTtlOOoMFwIG+1RJyejMLN0z9/s5WGY3u720= Subject key identifier: 1B:55:41:84:8B:D8:1F:44:0C:0B:0B:7F:06:16:19:D4:20:FA:60:D9 Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80 Certificate issuer: /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780 Certificate serial: 019AF0F5F1AB9A01C33BDA65FE6823E5F70A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft Manifest number: 0B50 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl (hash: 3lSKP1BDF2sKR1zne8702piGD+zM2+D2QvNj5BioCVI=) 2: 9jQwsZ6VF2I9K3_Gg297Dz4y1gw.roa (hash: YKW8EWi6VI2meHZlrdgZMKqoWyGxWtkWNwOA1wN8vzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f1:ab:9a:01:c3:3b:da:65:fe:68:23:e5:f7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=1b5541848bd81f440c0b0b7f061619d420fa60d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:e4:58:af:86:d2:44:f1:da:99:24:c2:6d: ca:98:2a:2a:61:16:fd:c1:4e:b3:64:3b:0d:f6:23: ce:12:c9:8c:17:72:3d:4f:65:63:13:f9:5c:25:ab: 2e:1c:bf:27:b1:8f:57:5b:75:9d:98:f5:52:3b:e6: 87:ec:80:97:1c:2c:aa:5f:2e:d3:2f:b6:80:8d:54: 45:d7:c0:f5:00:dd:3a:ad:e1:48:a0:18:9a:9f:ad: 8d:2d:1f:eb:02:db:65:51:19:35:6a:99:f3:75:d1: 72:76:df:72:b2:0e:79:ab:71:51:f6:20:2e:02:4a: 40:b0:6a:b7:1f:3b:32:c2:c9:09:cc:a6:17:cb:b0: 10:1f:37:9a:65:ec:08:70:53:75:7f:8a:d5:f9:cb: af:93:47:29:36:b8:08:39:52:ae:46:85:a3:03:57: ca:2b:45:da:e5:2e:07:a6:7f:a4:db:c3:78:10:a5: f1:1a:7a:8a:be:46:d1:dc:61:d8:d4:4d:7f:3a:b2: 4c:1d:b0:0a:ac:ff:3f:77:df:54:29:83:c4:5a:aa: dd:29:9d:bb:0a:95:ca:a7:71:13:be:09:08:58:a7: 86:11:11:5b:00:1a:69:58:21:b9:af:11:67:d1:d1: 9a:9c:74:73:dc:24:4f:02:a7:0e:39:ac:2b:dc:7c: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:55:41:84:8B:D8:1F:44:0C:0B:0B:7F:06:16:19:D4:20:FA:60:D9 X509v3 Authority Key Identifier: keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7e:ae:f1:9e:8c:af:9c:d0:12:3a:e6:b6:da:45:31:33:72: c4:b8:81:b0:54:97:27:62:52:90:dd:9b:d2:99:06:10:98:3f: fd:d9:c6:93:e1:be:09:c4:30:c0:af:2f:c3:9c:d6:66:c0:50: aa:2c:22:9a:ef:e8:f8:4a:19:79:e4:bd:d9:9c:e6:bb:8b:06: 33:da:e4:09:a2:56:7c:58:95:37:90:98:96:8e:c8:8f:29:f8: 88:7f:0b:0d:36:59:89:21:f5:3c:c9:41:1a:41:38:fe:4d:df: 60:95:0d:48:20:ae:ff:a0:a6:6b:6e:f3:29:2b:ad:b7:81:ee: a7:2a:87:a5:93:d4:99:46:f2:4f:e5:9e:95:27:e8:5b:d2:46: 4a:20:30:08:7a:16:32:cc:48:7f:57:a5:db:02:b2:66:e4:50: 92:28:f8:b9:3b:45:70:91:c8:42:71:67:cb:12:54:b3:85:2f: 6f:f8:a7:4b:ad:55:ba:36:ee:c0:6e:38:12:79:11:30:50:bb: b3:5e:04:65:c1:c7:d8:a3:05:13:a4:2a:fd:e6:6e:92:7f:c3: a5:14:75:1e:ec:62:e4:61:15:47:56:32:2f:92:e9:43:f7:df: c0:e7:7b:a9:63:16:72:58:45:46:a2:97:54:1e:13:31:6d:63: a9:b2:b4:65 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrw9fGrmgHDO9pl/mgj5fcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2I5NDc2NTEyNjBkOWQ4YjAyZjMxZDViYzdmMWQ1ZDBi MDE3ODAwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EygxYjU1NDE4NDhiZDgxZjQ0MGMwYjBiN2YwNjE2MTlkNDIwZmE2MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XHkWK+G0kTx2pkkwm3KmCoqYRb9 wU6zZDsN9iPOEsmMF3I9T2VjE/lcJasuHL8nsY9XW3WdmPVSO+aH7ICXHCyqXy7T L7aAjVRF18D1AN06reFIoBian62NLR/rAttlURk1apnzddFydt9ysg55q3FR9iAu AkpAsGq3HzsywskJzKYXy7AQHzeaZewIcFN1f4rV+cuvk0cpNrgIOVKuRoWjA1fK K0Xa5S4Hpn+k28N4EKXxGnqKvkbR3GHY1E1/OrJMHbAKrP8/d99UKYPEWqrdKZ27 CpXKp3ETvgkIWKeGERFbABppWCG5rxFn0dGanHRz3CRPAqcOOawr3Hx1BwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBtVQYSL2B9EDAsLfwYWGdQg+mDZMB8GA1UdIwQY MBaAFPvLlHZRJg2diwLzHVvH8dXQsBeAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04dVVkbEVtRFoyTEF2TWRXOGZ4MWRDd0Y0QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGE3NjU4LWZlNWQtNGY1YS04NjJj LWI1NmFiMjgyYjFjNy8xLzEtOHVVZGxFbURaMkxBdk1kVzhmeDFkQ3dGNEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgxL2RhNzY1OC1mZTVkLTRmNWEtODYyYy1iNTZhYjI4MmIx YzcvMS8xLTh1VWRsRW1EWjJMQXZNZFc4ZngxZEN3RjRBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn6u 8Z6Mr5zQEjrmttpFMTNyxLiBsFSXJ2JSkN2b0pkGEJg//dnGk+G+CcQwwK8vw5zW ZsBQqiwimu/o+EoZeeS92Zzmu4sGM9rkCaJWfFiVN5CYlo7Ijyn4iH8LDTZZiSH1 PMlBGkE4/k3fYJUNSCCu/6Cma27zKSutt4HupyqHpZPUmUbyT+WelSfoW9JGSiAw CHoWMsxIf1el2wKyZuRQkij4uTtFcJHIQnFnyxJUs4Uvb/inS61VujbuwG44EnkR MFC7s14EZcHH2KMFE6Qq/eZukn/DpRR1Huxi5GEVR1YyL5LpQ/ffwOd7qWMWclhF RqKXVB4TMW1jqbK0ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:24 2025 by rpki-client