This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json) Hash identifier: iVV5sue5teG0fCjYwm/3tkdb1Als3ZMnhLuyMikvbpI= Subject key identifier: 5A:34:9F:10:F7:D2:90:5B:1C:94:D9:2C:A0:A1:73:86:B9:00:FF:8B Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c Certificate serial: 019AF31BF1004D50F27BCD06F8D20C7D450E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:25 +0000 Manifest this update: Sat 06 Dec 2025 10:01:25 +0000 Manifest next update: Sun 07 Dec 2025 10:01:25 +0000 Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: CdCjGVV2kQliohkT0hKpt529GySjY1LZuk7FFOzUDkg=) 2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=) 3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=) 4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f1:00:4d:50:f2:7b:cd:06:f8:d2:0c:7d:45:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c Validity Not Before: Dec 6 10:01:25 2025 GMT Not After : Dec 7 10:01:25 2025 GMT Subject: CN=5a349f10f7d2905b1c94d92ca0a17386b900ff8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:3c:d3:39:07:0f:1e:9d:86:93:e8:68:b4: bf:35:f3:82:e8:56:e4:c4:e4:c3:1f:c1:af:75:e1: 6f:ac:b3:72:db:9f:41:0b:09:68:6b:74:6e:18:8a: ba:56:f6:7f:c2:5e:59:3f:cc:b0:44:40:ba:b5:6f: ec:d5:b3:15:ad:ae:42:10:13:24:44:fc:42:7e:a4: ca:b7:a2:79:ba:61:ad:82:27:27:c9:2a:22:11:9c: c9:a0:96:bd:b9:82:e5:c1:50:29:80:37:c8:0a:bb: 45:61:66:60:19:08:e4:2f:d9:00:fd:65:c3:e2:e3: c5:b8:5d:65:a5:1e:19:ad:9e:e0:9d:a9:96:06:c4: ec:ea:2c:33:51:1b:11:e6:47:08:e7:b3:ed:16:62: 78:dc:d9:07:fb:f5:9d:4c:b7:85:3c:77:ac:9b:f6: ad:7a:b5:f1:e3:24:48:24:7f:21:05:64:df:6a:f6: 82:3c:45:27:9a:15:6f:40:5d:3d:84:75:48:a1:26: 8f:29:65:7e:40:89:9e:95:40:93:cb:57:25:d5:86: 75:bb:26:48:00:f9:c0:60:af:08:59:0b:d3:ce:1a: 35:08:2d:39:9f:ce:61:63:ae:ba:8b:e9:56:00:b8: c4:ab:07:4d:ca:60:98:09:71:2e:52:c2:99:84:8b: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:34:9F:10:F7:D2:90:5B:1C:94:D9:2C:A0:A1:73:86:B9:00:FF:8B X509v3 Authority Key Identifier: keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:37:d8:a6:76:ab:71:be:0e:f1:6e:cd:f6:f3:83:e4:ac:c3: c9:ce:e5:64:54:6e:70:30:e6:6b:78:05:ef:e7:0d:26:bb:53: 58:d0:af:7c:f1:19:36:fa:98:82:0e:2e:56:a6:c4:dd:ed:fc: 92:f8:e7:14:80:c2:1f:af:6d:1a:93:6e:90:06:e5:d3:e4:a8: fa:51:ab:ce:3a:19:e8:09:79:78:ff:45:80:04:a5:d8:9f:d3: f7:1b:6b:b2:a4:50:31:31:f5:26:65:f0:54:37:9b:15:cc:c0: 47:c4:81:34:b8:87:f9:f4:5b:29:13:c2:b1:59:8a:87:3a:7c: 5b:42:9e:c3:1f:b0:55:09:9a:60:77:42:0c:9d:43:0e:75:96: d4:ac:b0:be:91:29:17:95:98:54:cd:5a:13:9a:54:c8:00:fc: 2e:ac:fa:23:db:9f:e5:d7:bf:3a:18:8e:35:60:6b:e3:3b:83: 31:2d:fb:e7:c0:fc:49:7b:98:52:c1:3f:a9:ec:af:c0:28:7b: 0d:68:5c:eb:a2:b2:60:cc:5b:97:41:5c:7b:55:11:ec:1b:89: c9:8f:6f:b4:c5:cf:72:b1:45:43:6b:47:cd:cc:ce:9f:10:69: 01:a4:8f:e2:cd:65:c7:af:e3:f3:d0:8d:11:de:51:53:c4:92: 67:43:1b:fe -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG/EATVDye80G+NIMfUUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYzA4OWE5Y2Q2YTAzNzViYWU0OTljYzA2YTRjYWEzMDcx YjVkNGMwHhcNMjUxMjA2MTAwMTI1WhcNMjUxMjA3MTAwMTI1WjAzMTEwLwYDVQQD Eyg1YTM0OWYxMGY3ZDI5MDViMWM5NGQ5MmNhMGExNzM4NmI5MDBmZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+I80zkHDx6dhpPoaLS/NfOC6Fbk xOTDH8GvdeFvrLNy259BCwloa3RuGIq6VvZ/wl5ZP8ywREC6tW/s1bMVra5CEBMk RPxCfqTKt6J5umGtgicnySoiEZzJoJa9uYLlwVApgDfICrtFYWZgGQjkL9kA/WXD 4uPFuF1lpR4ZrZ7gnamWBsTs6iwzURsR5kcI57PtFmJ43NkH+/WdTLeFPHesm/at erXx4yRIJH8hBWTfavaCPEUnmhVvQF09hHVIoSaPKWV+QImelUCTy1cl1YZ1uyZI APnAYK8IWQvTzho1CC05n85hY666i+lWALjEqwdNymCYCXEuUsKZhIvRYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFo0nxD30pBbHJTZLKChc4a5AP+LMB8GA1UdIwQY MBaAFPrAianNagN1uuSZzAakyqMHG11MMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zQ0pxYzFxQTNXNjVKbk1CcVRLb3djYlhVdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmZhYzlmLTYxOGMtNDJmNi05NDgz LTc3N2Y4NjE2NjIyMS8xLzEtc0NKcWMxcUEzVzY1Sm5NQnFUS293Y2JYVXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzhiLzJmYWM5Zi02MThjLTQyZjYtOTQ4My03NzdmODYxNjYy MjEvMS8xLXNDSnFjMXFBM1c2NUpuTUJxVEtvd2NiWFV3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzfY pnarcb4O8W7N9vOD5KzDyc7lZFRucDDma3gF7+cNJrtTWNCvfPEZNvqYgg4uVqbE 3e38kvjnFIDCH69tGpNukAbl0+So+lGrzjoZ6Al5eP9FgASl2J/T9xtrsqRQMTH1 JmXwVDebFczAR8SBNLiH+fRbKRPCsVmKhzp8W0Kewx+wVQmaYHdCDJ1DDnWW1Kyw vpEpF5WYVM1aE5pUyAD8Lqz6I9uf5de/OhiONWBr4zuDMS3758D8SXuYUsE/qeyv wCh7DWhc66KyYMxbl0Fce1UR7BuJyY9vtMXPcrFFQ2tHzczOnxBpAaSP4s1lx6/j 89CNEd5RU8SSZ0Mb/g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:19:26 2025 by rpki-client