This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json) Hash identifier: uqD/k8FWGlcT0eEjm3sgkM5TIwKIZJPwe4pUg3G+ivg= Subject key identifier: D1:E5:D6:DD:64:49:C8:DA:16:D4:74:DC:6C:41:2D:61:3C:B1:5A:A4 Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09 Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209 Certificate serial: 019AF540F287547A1F5022713E11F8A8BF39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:01:05 +0000 Manifest this update: Sat 06 Dec 2025 20:01:05 +0000 Manifest next update: Sun 07 Dec 2025 20:01:05 +0000 Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: BpgZvXakSkBqSb8kgpZwT7FQA4t4C4cRzqUkjs1Ypbk=) 2: bXTr3E6VnWX26W0oqBoPPL1PlHA.roa (hash: G0OUsQqR41YHtb5AbPT1gfl1AXhku70rwPK53DaTikA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f2:87:54:7a:1f:50:22:71:3e:11:f8:a8:bf:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209 Validity Not Before: Dec 6 20:01:05 2025 GMT Not After : Dec 7 20:01:05 2025 GMT Subject: CN=d1e5d6dd6449c8da16d474dc6c412d613cb15aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:ad:d9:f0:c0:92:9d:89:54:52:cc:bc:12: 02:b3:bf:db:79:aa:81:fa:eb:cb:83:27:47:75:95: 5a:b5:db:7c:9e:6f:b9:70:09:40:ae:a5:ed:48:c6: 9a:b5:89:c6:73:ff:f4:28:a3:23:85:ad:9b:68:9c: 07:ac:c7:bc:72:63:98:6e:8e:fe:c7:9f:29:ce:57: 65:68:8a:7d:e2:23:30:05:55:5e:6b:b6:20:1b:fb: 9e:fe:0c:da:5e:fc:21:3a:b5:02:b3:8a:62:d1:55: a1:00:4b:58:c7:69:dd:b6:cc:bf:64:28:ea:fa:c3: 88:0a:c5:a9:fd:5f:32:e3:34:d3:0e:49:6a:cf:58: 5d:6b:9b:ab:8d:58:aa:26:62:a4:d6:54:d0:71:17: 6a:ae:6f:c4:f9:06:ba:42:16:b9:c9:da:82:b0:1f: f3:d4:43:91:12:54:2d:8e:4a:87:48:fa:2c:9f:13: 04:22:98:84:24:ad:0b:76:ff:31:fc:c2:e5:b3:7e: 9d:7b:be:b4:45:f1:92:d0:5c:60:66:f8:4a:d7:cb: b1:33:89:36:59:1c:00:e6:7c:7f:a0:dd:f3:28:ca: 46:1f:f5:d4:db:6b:fd:bd:d2:c2:b3:6b:7d:84:fe: 5d:5b:1f:b2:8b:2b:c7:8b:82:51:92:71:8a:d6:9e: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E5:D6:DD:64:49:C8:DA:16:D4:74:DC:6C:41:2D:61:3C:B1:5A:A4 X509v3 Authority Key Identifier: keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ac:0c:2e:5b:05:ea:9a:ec:21:43:27:fd:36:f1:18:d0:83: fe:03:b0:3b:67:0b:92:da:43:cb:a0:2e:84:de:16:88:c1:09: 85:56:43:50:47:4f:c0:ec:d8:55:71:5f:5f:9e:e8:8b:f3:c4: 01:2b:57:45:48:9a:70:36:e0:51:02:09:b1:2a:bf:85:a9:97: c2:c4:56:fb:ad:8e:86:ed:9b:3d:4c:82:d8:bf:24:eb:b7:15: 9e:78:a0:c0:43:9a:d2:9e:83:eb:b6:1d:41:cb:85:0c:25:53: ac:bd:93:01:ef:68:e7:f5:fe:a1:0b:c4:c8:5e:23:2a:89:18: 78:a7:55:e4:be:10:87:f9:05:c5:44:bb:01:92:0a:7e:e6:9a: 89:04:b4:e1:f9:9c:16:e5:0a:c7:c0:9f:a7:45:e4:2b:75:60: 78:f9:00:90:9a:eb:9d:a7:86:3a:a9:58:14:e0:3b:17:40:7d: a6:0b:69:22:ac:1f:9b:04:3b:69:57:a9:57:98:22:24:16:41: 39:ac:c9:12:24:14:fc:36:3f:96:f2:63:8b:54:c1:7e:18:c9: ef:7a:d1:64:97:ac:92:50:72:8c:a8:44:e4:65:38:a5:83:fd: 8b:5c:25:94:5e:39:d4:65:23:c0:64:4d:e6:ba:da:50:01:1c: 70:6b:00:ed -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1QPKHVHofUCJxPhH4qL85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYjBhMjU4MTBkMDI2NDY2NTZmOTA5YzQ0ZWIyYmE5Mzlk MjMyMDkwHhcNMjUxMjA2MjAwMTA1WhcNMjUxMjA3MjAwMTA1WjAzMTEwLwYDVQQD EyhkMWU1ZDZkZDY0NDljOGRhMTZkNDc0ZGM2YzQxMmQ2MTNjYjE1YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF2t2fDAkp2JVFLMvBICs7/beaqB +uvLgydHdZVatdt8nm+5cAlArqXtSMaatYnGc//0KKMjha2baJwHrMe8cmOYbo7+ x58pzldlaIp94iMwBVVea7YgG/ue/gzaXvwhOrUCs4pi0VWhAEtYx2ndtsy/ZCjq +sOICsWp/V8y4zTTDklqz1hda5urjViqJmKk1lTQcRdqrm/E+Qa6Qha5ydqCsB/z 1EORElQtjkqHSPosnxMEIpiEJK0Ldv8x/MLls36de760RfGS0FxgZvhK18uxM4k2 WRwA5nx/oN3zKMpGH/XU22v9vdLCs2t9hP5dWx+yiyvHi4JRknGK1p4tlQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNHl1t1kScjaFtR03GxBLWE8sVqkMB8GA1UdIwQY MBaAFPuwolgQ0CZGZW+QnETrK6k50jIJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03Q2lXQkRRSmtabGI1Q2NST3NycVRuU01nay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMzRjYzEyLWM4MjQtNDQ5OS1hNWFm LTI5ZWYxNzU0MDIyMi8xLzEtN0NpV0JEUUprWmxiNUNjUk9zcnFUblNNZ2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg2LzM0Y2MxMi1jODI0LTQ0OTktYTVhZi0yOWVmMTc1NDAy MjIvMS8xLTdDaVdCRFFKa1psYjVDY1JPc3JxVG5TTWdrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgawM LlsF6prsIUMn/TbxGNCD/gOwO2cLktpDy6AuhN4WiMEJhVZDUEdPwOzYVXFfX57o i/PEAStXRUiacDbgUQIJsSq/hamXwsRW+62Ohu2bPUyC2L8k67cVnnigwEOa0p6D 67YdQcuFDCVTrL2TAe9o5/X+oQvEyF4jKokYeKdV5L4Qh/kFxUS7AZIKfuaaiQS0 4fmcFuUKx8Cfp0XkK3VgePkAkJrrnaeGOqlYFOA7F0B9pgtpIqwfmwQ7aVepV5gi JBZBOazJEiQU/DY/lvJji1TBfhjJ73rRZJesklByjKhE5GU4pYP9i1wllF451GUj wGRN5rraUAEccGsA7Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:02 2025 by rpki-client