This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json) Hash identifier: K6H2P4JWguJXupyrnfqaXmMP2wRyxTy81h71vHEkBQA= Subject key identifier: 42:6E:84:9B:D6:8E:F6:D1:DC:8C:98:F3:F5:27:25:C8:65:F9:28:F3 Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92 Certificate serial: 019AFB431EA57F0B0DF60E9AD9B686DFAAE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft Manifest number: 0E3C Signing time: Mon 08 Dec 2025 00:01:11 +0000 Manifest this update: Mon 08 Dec 2025 00:01:11 +0000 Manifest next update: Tue 09 Dec 2025 00:01:11 +0000 Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: 1XPml8NG+L7/baEdCGpo9/O2ox+cdyaq+3WVROQnIgk=) 2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:1e:a5:7f:0b:0d:f6:0e:9a:d9:b6:86:df:aa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92 Validity Not Before: Dec 8 00:01:11 2025 GMT Not After : Dec 9 00:01:11 2025 GMT Subject: CN=426e849bd68ef6d1dc8c98f3f52725c865f928f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:07:47:c7:10:6a:78:f2:fb:82:1b:a2:ef: c6:da:94:2d:a3:b3:c3:4a:7a:fb:1a:e6:e5:c1:27: af:ba:aa:f2:5c:99:f1:f9:18:81:f7:52:92:5e:45: 54:63:9a:0f:0a:d4:98:50:3b:12:34:9d:fb:39:a6: 4a:cb:06:29:ad:8b:ce:55:a8:1d:d0:45:6c:71:26: 4e:cd:a6:9d:cc:e5:89:af:b6:da:14:00:4d:fc:ee: bc:54:b8:24:b0:23:d1:04:4d:71:37:94:27:55:50: 9a:e6:d2:3c:40:a4:a5:9f:f3:75:18:08:f9:ad:17: 7c:c5:97:bc:ea:f7:80:de:70:52:1c:0a:26:78:1e: f4:8a:03:8a:a8:37:de:25:91:0c:0c:83:e4:eb:10: 7e:c5:96:6b:de:43:26:15:b9:19:f0:e6:15:c0:74: 8d:a1:48:76:74:75:db:ec:7d:e3:28:27:cd:48:bb: 68:e3:3a:e5:82:6b:1f:2d:0f:82:b7:55:6b:45:bb: 6f:14:96:8b:97:de:8a:20:09:eb:1d:a2:27:54:5d: a8:49:28:45:3b:ee:25:44:cf:3e:d9:55:dd:75:b4: 74:dc:36:26:65:78:ba:a9:06:ad:c1:5c:a7:34:db: 18:44:ac:7c:07:cd:8b:f1:eb:84:f5:cc:e4:8c:6b: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:84:9B:D6:8E:F6:D1:DC:8C:98:F3:F5:27:25:C8:65:F9:28:F3 X509v3 Authority Key Identifier: keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:69:ba:86:33:f2:53:ad:f8:9c:2d:93:f7:f6:bc:e9:21:44: d8:a6:36:2e:d1:e0:4f:f2:c4:2b:13:4d:84:67:11:e1:ee:d9: ad:16:3f:b9:0d:3f:a4:af:54:47:72:87:b0:d6:2a:a7:85:9a: b2:08:39:70:67:ec:56:88:05:0a:cd:b8:80:f2:80:b0:76:71: 52:30:04:49:a1:1a:8b:5a:3e:2d:27:21:6f:b4:af:b1:cc:c6: fe:6c:9e:6e:c8:54:b6:48:b3:ab:57:b9:72:b8:e8:90:18:30: b4:19:87:83:92:19:d2:2c:e3:26:e3:3d:5e:0f:ab:87:7e:1d: 41:17:5d:b0:15:85:81:5c:47:1a:17:78:fe:e1:1a:30:2f:57: 84:33:04:33:a5:e5:80:e9:0f:5d:8e:2c:fd:66:3a:82:7f:5b: ba:d8:ff:30:35:44:e1:c9:d1:9b:56:e3:3d:48:e3:89:d3:19: 25:52:6f:bd:73:c6:04:13:e7:32:04:cd:38:8d:9e:a4:40:8d: cc:d2:b5:bd:24:d3:93:d1:74:27:2c:87:23:fd:8b:34:f6:43: 43:ba:78:00:69:80:cf:f8:7a:26:36:3d:4e:b4:76:e5:98:d7: 44:72:46:a4:ff:c6:6c:a5:1a:02:f0:e7:5a:89:ee:ee:1d:bc: 69:82:fb:db -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr7Qx6lfwsN9g6a2baG36rgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2 MjNlOTIwHhcNMjUxMjA4MDAwMTExWhcNMjUxMjA5MDAwMTExWjAzMTEwLwYDVQQD Eyg0MjZlODQ5YmQ2OGVmNmQxZGM4Yzk4ZjNmNTI3MjVjODY1ZjkyOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDcHR8cQanjy+4Ibou/G2pQto7PD Snr7GublwSevuqryXJnx+RiB91KSXkVUY5oPCtSYUDsSNJ37OaZKywYprYvOVagd 0EVscSZOzaadzOWJr7baFABN/O68VLgksCPRBE1xN5QnVVCa5tI8QKSln/N1GAj5 rRd8xZe86veA3nBSHAomeB70igOKqDfeJZEMDIPk6xB+xZZr3kMmFbkZ8OYVwHSN oUh2dHXb7H3jKCfNSLto4zrlgmsfLQ+Ct1VrRbtvFJaLl96KIAnrHaInVF2oSShF O+4lRM8+2VXddbR03DYmZXi6qQatwVynNNsYRKx8B82L8euE9czkjGsHiwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEJuhJvWjvbR3IyY8/UnJchl+SjzMB8GA1UdIwQY MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0 LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgzLzQ5ZjNhZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1 ODEvMS8xLXRrakk5SXJSQ2RkenMxTjRwVzBSNVJpUHBJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2m6 hjPyU634nC2T9/a86SFE2KY2LtHgT/LEKxNNhGcR4e7ZrRY/uQ0/pK9UR3KHsNYq p4Wasgg5cGfsVogFCs24gPKAsHZxUjAESaEai1o+LSchb7SvsczG/myebshUtkiz q1e5crjokBgwtBmHg5IZ0izjJuM9Xg+rh34dQRddsBWFgVxHGhd4/uEaMC9XhDME M6XlgOkPXY4s/WY6gn9butj/MDVE4cnRm1bjPUjjidMZJVJvvXPGBBPnMgTNOI2e pECNzNK1vSTTk9F0JyyHI/2LNPZDQ7p4AGmAz/h6JjY9TrR25ZjXRHJGpP/GbKUa AvDnWonu7h28aYL72w== -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:28 2025 by rpki-client