This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json) Hash identifier: 1XAH5XuvxSWPAL4NNuRVsyXvXyfXb8a4U707uAzitno= Subject key identifier: A7:87:5D:6D:8F:6D:C7:84:EB:17:42:40:1F:F5:ED:1E:36:AA:A0:C5 Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Certificate serial: 019AF49BC8AD155B11CD3E4EA6A1747AAB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft Manifest number: 1122 Signing time: Sat 06 Dec 2025 17:00:41 +0000 Manifest this update: Sat 06 Dec 2025 17:00:41 +0000 Manifest next update: Sun 07 Dec 2025 17:00:41 +0000 Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: ujAfnhD/qX8DRxGGORyQf3cSV6u7sMCluhNZGPbCR1k=) 2: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (hash: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c8:ad:15:5b:11:cd:3e:4e:a6:a1:74:7a:ab:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Validity Not Before: Dec 6 17:00:41 2025 GMT Not After : Dec 7 17:00:41 2025 GMT Subject: CN=a7875d6d8f6dc784eb1742401ff5ed1e36aaa0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:bb:dc:70:34:15:10:bb:3b:9a:0a:08:5e: 0b:5e:de:72:f9:98:e2:94:a6:9d:ae:2d:ec:9c:16: 85:20:8e:bb:0e:c4:af:b1:8d:cb:05:5d:f8:c7:e4: 74:b3:1d:a9:21:5c:e6:bc:b8:8e:a2:1e:a7:91:7a: ab:f2:a3:21:39:fc:37:96:64:69:a5:1c:7c:e4:8a: 88:d8:c6:1f:61:58:fc:d4:1d:74:4e:03:89:d1:75: f2:b5:04:6e:67:e3:f3:85:ee:58:c6:58:c6:9d:48: 90:28:08:a9:4d:19:d9:14:57:29:ef:93:48:b6:b8: 45:90:d7:8f:f1:ff:67:e9:93:2a:da:52:06:09:5c: 20:4e:74:9e:59:31:75:bd:38:28:eb:fa:fd:ce:f9: 2e:e4:bc:23:1b:29:e3:03:e7:63:2b:36:3a:02:cf: 55:11:7b:97:de:82:35:32:ab:51:9d:cd:38:78:61: 43:2c:12:c5:91:48:b7:5a:34:d1:41:74:c0:b9:93: 07:ca:71:2a:0a:a9:7d:9b:a0:ea:a8:2e:b0:f8:c3: 37:09:6d:de:4a:03:9f:49:b5:40:c9:a1:6a:90:c2: b8:c8:fc:d1:e6:1e:ad:7b:bb:69:75:ac:d2:98:44: a3:e5:af:ed:b6:75:1a:ad:c5:06:af:40:6a:7e:4a: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:5D:6D:8F:6D:C7:84:EB:17:42:40:1F:F5:ED:1E:36:AA:A0:C5 X509v3 Authority Key Identifier: keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:55:a7:2b:da:74:6b:21:40:15:22:bb:ef:91:dd:1c:c2:0c: bd:89:8c:7d:66:b1:d2:86:92:49:1f:0c:2f:a3:52:72:1b:15: eb:1c:18:66:93:39:37:f3:0b:80:f4:d7:07:27:80:9a:f4:5a: 00:a6:dd:32:5a:f1:44:6a:18:a1:f7:82:89:79:d6:a1:7e:62: 4c:37:27:9d:75:6b:45:01:6b:5f:ab:d9:7c:35:1c:a7:b3:d2: 0e:0c:5d:eb:42:4d:73:5e:3d:e1:6a:5b:62:c7:63:48:2d:07: 3e:4d:51:d7:4d:19:1b:3a:b2:52:ed:12:ef:6d:7d:5d:0f:8e: 91:bc:a3:72:e6:ce:57:30:51:c2:a9:72:35:98:33:06:9e:66: 19:75:a8:c7:ca:cf:7b:fe:57:c3:13:69:17:67:65:1a:23:97: 93:9e:38:bb:9d:3a:61:cc:3e:fa:1e:b1:47:28:4f:bf:7e:44: d7:54:b9:f7:dd:48:47:c0:97:eb:7b:0c:30:61:d3:ad:3f:40: 32:c9:37:ef:fb:49:d9:7e:5c:ae:84:4f:7d:d3:10:20:9d:2a: e9:62:41:6f:9f:71:81:20:1b:ac:a7:6b:6f:42:cd:5b:4d:73: c7:8c:73:49:ed:6a:06:fd:1c:07:5b:7c:52:3d:33:9a:5a:7d: d3:8b:10:27 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0m8itFVsRzT5OpqF0eqswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTAzODkzZmMzMWU5ZDk0ZDI2NWFiYTkwY2M3ZGQ1N2Jj MjM3NjcwHhcNMjUxMjA2MTcwMDQxWhcNMjUxMjA3MTcwMDQxWjAzMTEwLwYDVQQD EyhhNzg3NWQ2ZDhmNmRjNzg0ZWIxNzQyNDAxZmY1ZWQxZTM2YWFhMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+i73HA0FRC7O5oKCF4LXt5y+Zji lKadri3snBaFII67DsSvsY3LBV34x+R0sx2pIVzmvLiOoh6nkXqr8qMhOfw3lmRp pRx85IqI2MYfYVj81B10TgOJ0XXytQRuZ+Pzhe5YxljGnUiQKAipTRnZFFcp75NI trhFkNeP8f9n6ZMq2lIGCVwgTnSeWTF1vTgo6/r9zvku5LwjGynjA+djKzY6As9V EXuX3oI1MqtRnc04eGFDLBLFkUi3WjTRQXTAuZMHynEqCql9m6DqqC6w+MM3CW3e SgOfSbVAyaFqkMK4yPzR5h6te7tpdazSmESj5a/ttnUarcUGr0BqfkplSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKeHXW2PbceE6xdCQB/17R42qqDFMB8GA1UdIwQY MBaAFPkQOJP8MenZTSZaupDMfdV7wjdnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQTRrX3d4NmRsTkpscTZrTXg5MVh2Q04yYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RjOTk1LTlhOTEtNGVjMS1hZWRl LWY2ZTBmN2QxNzQ0MC8xLzEtUkE0a193eDZkbE5KbHE2a014OTFYdkNOMmMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2NkYzk5NS05YTkxLTRlYzEtYWVkZS1mNmUwZjdkMTc0 NDAvMS8xLVJBNGtfd3g2ZGxOSmxxNmtNeDkxWHZDTjJjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFWn K9p0ayFAFSK775HdHMIMvYmMfWax0oaSSR8ML6NSchsV6xwYZpM5N/MLgPTXByeA mvRaAKbdMlrxRGoYofeCiXnWoX5iTDcnnXVrRQFrX6vZfDUcp7PSDgxd60JNc149 4WpbYsdjSC0HPk1R100ZGzqyUu0S7219XQ+OkbyjcubOVzBRwqlyNZgzBp5mGXWo x8rPe/5XwxNpF2dlGiOXk544u506Ycw++h6xRyhPv35E11S5991IR8CX63sMMGHT rT9AMsk37/tJ2X5croRPfdMQIJ0q6WJBb59xgSAbrKdrb0LNW01zx4xzSe1qBv0c B1t8Uj0zmlp904sQJw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:08 2025 by rpki-client