This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json) Hash identifier: WOlRqdkpqIVI3LYHwd5aCLwSuURg5gb/DXmd9IkeDew= Subject key identifier: 3A:9D:8A:D7:94:4D:E3:24:C8:C1:C8:A4:2E:0B:34:FB:77:FF:E9:F1 Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0 Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0 Certificate serial: 019AF19B906DEE407A1B9C421EA88C7D2AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: 6WsbZLCL3idgLF41i0YxBfZEFC/tc7kFCGfhgGIi1ks=) 2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=) 3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:90:6d:ee:40:7a:1b:9c:42:1e:a8:8c:7d:2a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0 Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=3a9d8ad7944de324c8c1c8a42e0b34fb77ffe9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:01:92:53:ad:0d:9e:47:72:2e:7b:bb:33: 2b:58:c0:01:63:0a:eb:de:19:41:b6:27:d5:48:4a: 4d:49:bf:d7:49:9b:a0:13:39:95:89:1c:46:17:d3: 4c:16:c7:97:9c:23:e0:57:c1:69:0f:9a:ed:95:fa: c4:25:1e:ac:49:80:1e:8e:8e:04:af:3e:29:72:77: f2:a6:ad:99:d1:4b:5a:5d:a3:ab:2d:c6:ea:07:4b: cc:5f:ce:1f:44:71:9e:3e:e0:2a:36:4f:09:e8:1e: 11:37:3d:fa:01:b2:fb:7a:5f:2c:4b:4f:89:26:3b: 66:3b:0d:44:eb:74:c8:fb:19:1b:16:26:a5:ed:34: 70:66:11:19:98:18:a1:e8:e2:34:aa:04:4e:7c:d0: 6b:93:6c:a8:99:82:84:84:9b:23:08:14:2c:f8:31: 39:d8:55:42:fe:fa:d2:53:0a:66:12:b4:b8:c8:f8: ce:32:dc:bd:c0:ff:00:5f:bb:22:a2:e9:d1:16:80: 0d:eb:40:9c:aa:05:90:1a:7f:f0:98:09:6c:3e:ad: 2c:51:18:8b:8d:40:c7:71:df:16:7c:ad:b2:63:eb: 3e:2c:e7:8a:2d:b8:e5:d3:c2:ab:a5:a2:d8:a9:d7: c4:61:71:fb:f0:a9:59:65:42:c9:9d:4a:b5:00:a8: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:8A:D7:94:4D:E3:24:C8:C1:C8:A4:2E:0B:34:FB:77:FF:E9:F1 X509v3 Authority Key Identifier: keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b2:f2:f1:81:02:5f:6f:80:a1:c7:5f:3f:a3:d0:f7:01:91: f2:24:84:01:d4:55:9a:50:35:f3:06:2c:1f:1d:38:8b:ad:25: c2:ac:86:59:28:3a:50:c5:da:16:dc:a7:4c:44:29:0f:cd:80: c9:57:bd:b2:24:ae:7e:dd:75:bd:84:16:08:ce:ca:0f:55:93: 45:57:b4:f6:aa:ce:c9:73:de:00:bd:74:5e:64:60:00:54:00: db:fc:b4:3c:c3:b5:46:ad:b3:66:4b:97:24:2e:08:fb:fd:32: 06:74:55:31:77:34:c2:88:9e:d5:54:86:40:87:b7:47:49:67: ed:1e:1d:4c:02:4b:e9:91:f7:4e:cf:dc:62:c6:15:96:1d:88: d6:95:b6:eb:db:71:3f:f1:31:b8:12:9c:92:02:7d:9a:6a:06: c8:16:b9:2c:6c:b5:96:11:a4:c4:2c:89:73:d6:52:55:cd:90: 83:c5:5a:21:7b:f4:44:72:61:b9:5c:71:dc:d4:17:8b:2a:63: c8:26:cd:40:a0:b4:b8:c2:63:14:1e:16:52:7f:1a:0a:f4:1c: ec:d0:7a:cc:81:9f:a2:ee:cf:95:30:5a:4d:1c:39:92:04:35: 83:04:77:e5:b7:fb:4a:7a:9d:0e:30:e7:67:64:53:db:a4:40: 7d:7c:13:ba -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxm5Bt7kB6G5xCHqiMfSrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk MDM5YjAwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD EygzYTlkOGFkNzk0NGRlMzI0YzhjMWM4YTQyZTBiMzRmYjc3ZmZlOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVYBklOtDZ5Hci57uzMrWMABYwrr 3hlBtifVSEpNSb/XSZugEzmViRxGF9NMFseXnCPgV8FpD5rtlfrEJR6sSYAejo4E rz4pcnfypq2Z0UtaXaOrLcbqB0vMX84fRHGePuAqNk8J6B4RNz36AbL7el8sS0+J JjtmOw1E63TI+xkbFial7TRwZhEZmBih6OI0qgROfNBrk2yomYKEhJsjCBQs+DE5 2FVC/vrSUwpmErS4yPjOMty9wP8AX7siounRFoAN60CcqgWQGn/wmAlsPq0sURiL jUDHcd8WfK2yY+s+LOeKLbjl08KrpaLYqdfEYXH78KlZZULJnUq1AKiiSQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDqditeUTeMkyMHIpC4LNPt3/+nxMB8GA1UdIwQY MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbLy 8YECX2+AocdfP6PQ9wGR8iSEAdRVmlA18wYsHx04i60lwqyGWSg6UMXaFtynTEQp D82AyVe9siSuft11vYQWCM7KD1WTRVe09qrOyXPeAL10XmRgAFQA2/y0PMO1Rq2z ZkuXJC4I+/0yBnRVMXc0woie1VSGQIe3R0ln7R4dTAJL6ZH3Ts/cYsYVlh2I1pW2 69txP/ExuBKckgJ9mmoGyBa5LGy1lhGkxCyJc9ZSVc2Qg8VaIXv0RHJhuVxx3NQX iypjyCbNQKC0uMJjFB4WUn8aCvQc7NB6zIGfou7PlTBaTRw5kgQ1gwR35bf7Snqd DjDnZ2RT26RAfXwTug== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:35 2025 by rpki-client