This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json) Hash identifier: tudZJvsUoGj1kl8qNiduUnq50o5BcWqLcBYt+rH9AkM= Subject key identifier: 06:CC:2A:C5:A9:D2:67:47:23:EC:33:88:62:45:A1:63:13:C5:F5:60 Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60 Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60 Certificate serial: 019AF50BADB4143B3F96CA622D31641263B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft Manifest number: 0ABD Signing time: Sat 06 Dec 2025 19:02:54 +0000 Manifest this update: Sat 06 Dec 2025 19:02:54 +0000 Manifest next update: Sun 07 Dec 2025 19:02:54 +0000 Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: B8S8A2lxyDUNWPd/WqgdSvpemblpLGSGOH08J49htXI=) 2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:ad:b4:14:3b:3f:96:ca:62:2d:31:64:12:63:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60 Validity Not Before: Dec 6 19:02:54 2025 GMT Not After : Dec 7 19:02:54 2025 GMT Subject: CN=06cc2ac5a9d2674723ec33886245a16313c5f560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:4a:09:23:15:4c:91:19:d7:78:ad:cb:6b: 35:24:56:62:e3:20:85:e7:99:c0:63:60:46:b6:95: 70:05:00:96:ad:bf:a0:2b:2c:b9:02:bc:1d:a9:7b: c5:ea:31:48:28:e0:fa:8b:c3:2d:e6:9a:e5:41:d1: 6c:a2:dc:9f:26:30:6c:07:e1:60:94:ae:7c:09:fd: f4:e8:3b:0d:25:83:61:8f:c6:f5:9a:f7:c2:29:5f: 9c:87:14:c1:8b:16:b8:c0:76:63:84:bb:6e:e8:4d: ae:61:d0:11:8b:d2:35:7e:23:af:61:f5:85:80:77: 73:02:2d:fc:97:51:03:79:4c:b8:8e:98:94:15:3d: ee:de:22:e1:af:e3:48:02:99:af:8f:d9:0b:70:81: ff:0b:0e:3d:22:5c:f7:66:af:c4:a5:72:24:5f:0b: 63:1b:97:bb:62:53:6c:19:40:af:be:2a:be:19:1e: 44:93:84:b8:3c:0e:6e:20:7b:be:af:5b:c6:85:ec: f2:9b:91:01:88:cc:77:56:ad:e2:5f:7e:72:fc:29: a0:2d:4d:27:18:fc:20:37:9a:62:e2:e2:fb:fe:4f: 9f:f7:5f:5d:42:21:4c:ed:1c:02:db:4b:d1:97:a5: a3:f9:a8:50:d0:ae:7d:d2:a4:a4:fb:14:95:c2:09: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:2A:C5:A9:D2:67:47:23:EC:33:88:62:45:A1:63:13:C5:F5:60 X509v3 Authority Key Identifier: keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:87:68:a8:a5:62:1a:bd:02:00:4b:3f:41:3a:d4:43:95:08: 6a:55:18:08:4b:6a:a6:88:73:9f:e0:ec:d1:57:47:a3:f2:f3: 11:16:04:cd:fe:e7:4e:3f:dd:d8:91:c5:cf:85:e8:0d:6a:aa: ca:2d:09:d3:5f:3a:90:d6:85:bb:3f:e7:43:1e:b4:79:e5:66: 8b:59:45:98:2f:c6:9a:17:78:07:19:06:40:8a:cf:1b:50:94: 2b:f2:4d:56:91:99:0c:76:71:e5:fd:c3:ab:50:b4:ae:5f:a7: 3a:b4:01:04:0d:7e:6c:bc:f8:86:27:10:0d:62:ae:56:7d:fc: ad:05:ff:d9:72:61:02:62:d3:68:2e:ab:da:88:97:61:9e:f3: 37:bc:44:70:3c:af:ba:f5:86:e3:47:bb:d8:76:12:99:ae:66: 3c:f7:bf:00:c3:77:f1:c1:70:c1:b6:91:d6:6a:10:0c:a7:fa: 35:90:30:49:06:5f:64:c0:53:d2:e2:01:68:16:44:bb:de:a8: 19:5c:a8:ef:3d:51:89:d1:4f:a3:62:fd:21:02:f4:e0:a4:4b: 09:0c:4c:7b:d9:20:c6:81:e5:02:71:e8:dc:74:9e:be:13:07: d9:02:69:32:ca:10:de:cd:6d:9f:38:1f:4b:9a:cd:74:2a:4c: af:24:1c:da -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1C620FDs/lspiLTFkEmO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5 N2RiNjAwHhcNMjUxMjA2MTkwMjU0WhcNMjUxMjA3MTkwMjU0WjAzMTEwLwYDVQQD EygwNmNjMmFjNWE5ZDI2NzQ3MjNlYzMzODg2MjQ1YTE2MzEzYzVmNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGJKCSMVTJEZ13ity2s1JFZi4yCF 55nAY2BGtpVwBQCWrb+gKyy5ArwdqXvF6jFIKOD6i8Mt5prlQdFsotyfJjBsB+Fg lK58Cf306DsNJYNhj8b1mvfCKV+chxTBixa4wHZjhLtu6E2uYdARi9I1fiOvYfWF gHdzAi38l1EDeUy4jpiUFT3u3iLhr+NIApmvj9kLcIH/Cw49Ilz3Zq/EpXIkXwtj G5e7YlNsGUCvviq+GR5Ek4S4PA5uIHu+r1vGhezym5EBiMx3Vq3iX35y/CmgLU0n GPwgN5pi4uL7/k+f919dQiFM7RwC20vRl6Wj+ahQ0K590qSk+xSVwgnnFwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAbMKsWp0mdHI+wziGJFoWMTxfVgMB8GA1UdIwQY MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5 LTYzZmU2YmU2MmRjOS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzllL2VmMTY5OS04YzEzLTQyMzUtYTU4OS02M2ZlNmJlNjJk YzkvMS8xLXJaUkpLNjJBNkRkWEZ6dUdncTJVaE9YMjJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4do qKViGr0CAEs/QTrUQ5UIalUYCEtqpohzn+Ds0VdHo/LzERYEzf7nTj/d2JHFz4Xo DWqqyi0J0186kNaFuz/nQx60eeVmi1lFmC/Gmhd4BxkGQIrPG1CUK/JNVpGZDHZx 5f3Dq1C0rl+nOrQBBA1+bLz4hicQDWKuVn38rQX/2XJhAmLTaC6r2oiXYZ7zN7xE cDyvuvWG40e72HYSma5mPPe/AMN38cFwwbaR1moQDKf6NZAwSQZfZMBT0uIBaBZE u96oGVyo7z1RidFPo2L9IQL04KRLCQxMe9kgxoHlAnHo3HSevhMH2QJpMsoQ3s1t nzgfS5rNdCpMryQc2g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:22:05 2025 by rpki-client