This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json) Hash identifier: C6FJK5G/WFUow3MbuqXUSd1zzEUiY5Uzt/1nte5i1w8= Subject key identifier: CB:30:98:A6:35:60:3F:96:C2:FA:D4:B9:EA:13:E9:4D:98:3B:D2:85 Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60 Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60 Certificate serial: 019B405BDE398C725E5F24CDFFCAF27D2F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft Manifest number: 0AE4 Signing time: Sun 21 Dec 2025 10:02:00 +0000 Manifest this update: Sun 21 Dec 2025 10:02:00 +0000 Manifest next update: Mon 22 Dec 2025 10:02:00 +0000 Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: 2Utp8wwImak6ny5Ws4JkIokGEjn3LxDgSeCagSrEGI0=) 2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:de:39:8c:72:5e:5f:24:cd:ff:ca:f2:7d:2f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60 Validity Not Before: Dec 21 10:02:00 2025 GMT Not After : Dec 22 10:02:00 2025 GMT Subject: CN=cb3098a635603f96c2fad4b9ea13e94d983bd285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:4a:2c:54:76:25:64:cf:0e:6f:02:0a:6f: 7f:05:cf:1f:32:c3:03:92:bf:6c:90:91:38:10:3a: d4:03:3b:5f:a3:30:ce:29:7b:c7:98:8b:cd:45:bb: 2e:a4:5c:66:82:32:8b:a6:7d:7c:5b:a7:2f:0c:3c: 38:29:82:21:8a:a2:fc:9e:af:8d:be:f1:6f:0e:f7: 46:df:ac:21:6c:18:53:e0:95:d8:ea:6c:2b:50:26: fd:97:11:33:92:ed:c8:0e:b7:d9:6c:db:a3:d9:48: 1f:2e:55:a2:65:f8:79:be:d0:89:cf:39:da:46:cd: 44:84:77:97:87:7e:ce:a9:62:a5:ed:5c:6d:e9:4c: 8b:e5:86:d9:12:d3:a3:46:97:61:58:f1:2e:03:ca: 82:fd:b7:b3:64:ee:5e:59:54:1e:13:83:aa:e3:98: c1:65:64:60:bf:1f:29:84:d7:b0:29:2f:6d:18:55: 0e:dc:f1:8d:af:a8:1c:96:9a:0d:71:a9:4f:96:4c: 77:d6:e4:6a:49:86:d5:ec:bd:8c:e4:00:3e:7a:ff: cb:56:a5:42:4b:bd:af:c6:b1:c0:ff:29:0c:91:16: ef:58:fc:4b:3a:f5:cf:b5:70:83:35:6d:11:67:57: 4b:43:3e:23:bf:0f:b4:4c:62:69:cf:96:3e:87:52: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:98:A6:35:60:3F:96:C2:FA:D4:B9:EA:13:E9:4D:98:3B:D2:85 X509v3 Authority Key Identifier: keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2c:de:30:a8:7f:a0:ba:a9:fa:43:1d:8b:30:68:c0:36:0c: 0d:4f:07:3e:07:ac:b6:a6:fe:e0:fa:89:78:aa:a2:23:88:81: a3:c9:55:b3:e4:5c:a1:07:82:b5:c5:99:90:b6:0d:df:0e:30: 6b:d5:d3:b2:e3:8e:6d:98:a0:0a:de:fc:d5:7a:ba:b6:15:1c: 22:e4:71:68:cd:bf:ee:64:60:76:0a:f1:4f:65:58:d4:cb:87: 5f:70:b8:5f:14:5c:56:70:09:e0:72:53:e9:f7:95:c4:29:d3: c3:3b:42:3a:46:8a:e1:f1:b8:54:f2:5c:5d:77:59:c9:03:20: c8:08:40:9b:2d:37:d2:29:fc:03:9f:7d:ac:52:ef:16:29:7e: ca:7a:18:f2:d9:c7:b5:98:e5:ad:69:ef:60:47:26:d8:9e:d0: 02:39:27:6a:6e:84:58:1b:39:b6:06:0d:69:b7:4a:b9:7b:ba: 00:01:53:7f:c2:0b:77:58:ac:1e:5e:10:d9:52:f1:97:29:27: 9d:8e:a7:36:e0:ba:b2:74:6e:0c:8e:71:e4:a0:76:bf:73:81: 36:8f:68:62:0e:29:e4:1c:70:dd:ba:49:da:fe:e7:6e:0d:93: 26:7b:d4:af:6d:b9:24:7a:e6:51:44:3e:ec:fb:93:69:ae:a5: db:23:21:6f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAW945jHJeXyTN/8ryfS8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5 N2RiNjAwHhcNMjUxMjIxMTAwMjAwWhcNMjUxMjIyMTAwMjAwWjAzMTEwLwYDVQQD EyhjYjMwOThhNjM1NjAzZjk2YzJmYWQ0YjllYTEzZTk0ZDk4M2JkMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H5KLFR2JWTPDm8CCm9/Bc8fMsMD kr9skJE4EDrUAztfozDOKXvHmIvNRbsupFxmgjKLpn18W6cvDDw4KYIhiqL8nq+N vvFvDvdG36whbBhT4JXY6mwrUCb9lxEzku3IDrfZbNuj2UgfLlWiZfh5vtCJzzna Rs1EhHeXh37OqWKl7Vxt6UyL5YbZEtOjRpdhWPEuA8qC/bezZO5eWVQeE4Oq45jB ZWRgvx8phNewKS9tGFUO3PGNr6gclpoNcalPlkx31uRqSYbV7L2M5AA+ev/LVqVC S72vxrHA/ykMkRbvWPxLOvXPtXCDNW0RZ1dLQz4jvw+0TGJpz5Y+h1I6tQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMswmKY1YD+WwvrUueoT6U2YO9KFMB8GA1UdIwQY MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5 LTYzZmU2YmU2MmRjOS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzllL2VmMTY5OS04YzEzLTQyMzUtYTU4OS02M2ZlNmJlNjJk YzkvMS8xLXJaUkpLNjJBNkRkWEZ6dUdncTJVaE9YMjJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCze MKh/oLqp+kMdizBowDYMDU8HPgestqb+4PqJeKqiI4iBo8lVs+RcoQeCtcWZkLYN 3w4wa9XTsuOObZigCt781Xq6thUcIuRxaM2/7mRgdgrxT2VY1MuHX3C4XxRcVnAJ 4HJT6feVxCnTwztCOkaK4fG4VPJcXXdZyQMgyAhAmy030in8A599rFLvFil+ynoY 8tnHtZjlrWnvYEcm2J7QAjknam6EWBs5tgYNabdKuXu6AAFTf8ILd1isHl4Q2VLx lyknnY6nNuC6snRuDI5x5KB2v3OBNo9oYg4p5Bxw3bpJ2v7nbg2TJnvUr225JHrm UUQ+7PuTaa6l2yMhbw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:21:20 2025 by rpki-client