This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json) Hash identifier: iAwXHgM5LQjGpT1vRpFNrQwnjr5FYdcj9hWPHie0iO8= Subject key identifier: 20:38:46:4B:41:46:3E:26:E6:ED:E8:64:61:6E:D4:1D:E6:B8:21:C5 Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Certificate serial: 019AF6538E1FFB85F7042A1BD181F3D7C687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft Manifest number: 0BBC Signing time: Sun 07 Dec 2025 01:01:02 +0000 Manifest this update: Sun 07 Dec 2025 01:01:02 +0000 Manifest next update: Mon 08 Dec 2025 01:01:02 +0000 Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: eA2l0IY3kePHDgKTg0y5/qfK7EwRMMDo3UnoN7JXGSg=) 2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:8e:1f:fb:85:f7:04:2a:1b:d1:81:f3:d7:c6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Validity Not Before: Dec 7 01:01:02 2025 GMT Not After : Dec 8 01:01:02 2025 GMT Subject: CN=2038464b41463e26e6ede864616ed41de6b821c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:e1:f4:e9:33:5b:b5:b3:a5:b9:f4:11:f2: 60:c4:87:c1:54:b0:e8:63:ea:de:19:68:55:44:bb: c3:ca:a5:38:4c:87:7f:50:b1:cc:28:14:d9:41:d8: f9:82:b4:36:31:d6:0f:0d:b4:45:d3:21:43:72:a4: c6:0a:e7:a5:d1:ad:a7:0c:f7:cc:a3:71:e9:22:91: 7b:ed:6c:cc:8a:7e:d8:74:58:3d:aa:d1:6a:b2:7c: c0:f6:6d:c8:50:1b:1a:f1:86:23:12:c4:76:38:e3: 27:3a:0b:e3:22:ac:91:7e:0e:88:13:bd:ad:41:e7: 09:35:5c:66:8c:9b:d8:8d:a7:3a:85:73:2e:88:ae: 55:19:74:f9:09:cf:04:f4:4f:6b:8e:b3:b8:8d:18: 0a:4a:27:c8:25:9e:b1:19:16:31:68:22:cc:0d:1d: 0e:b2:0e:bb:b3:bb:43:3e:ee:38:9d:9b:47:08:32: eb:20:e0:91:0a:c5:b6:15:70:95:bb:8a:50:76:2e: 0f:0c:00:36:d5:04:e9:00:7b:d9:8a:48:da:06:ce: 2d:e2:9a:6d:a7:10:50:52:4a:ea:09:17:2c:6b:61: 66:3c:a7:f7:7a:c2:37:65:3f:ee:19:f6:ce:3b:4c: de:49:e1:d5:d0:e7:0f:59:80:53:3a:a8:90:08:d3: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:46:4B:41:46:3E:26:E6:ED:E8:64:61:6E:D4:1D:E6:B8:21:C5 X509v3 Authority Key Identifier: keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cd:35:91:30:cb:4f:65:42:3d:08:4f:fe:81:7a:5c:ef:f1: 41:a2:14:93:3e:41:02:d4:ba:95:57:97:93:85:60:42:ee:d1: 50:ea:94:05:50:85:8e:35:7b:c7:97:b9:45:c0:2c:05:38:ea: 9b:60:ac:33:dd:e4:8f:60:c8:54:9c:77:b6:ec:22:41:08:71: 0f:df:55:da:7b:a9:79:0f:0d:3d:8b:db:f6:2c:28:bb:dc:92: 5d:f8:f8:4a:74:d6:2c:e7:f0:5f:69:31:04:1a:15:cd:e7:f8: 3a:e9:e3:65:00:d4:ae:c0:50:db:a6:2e:9a:e3:72:b1:82:f1: 05:67:8d:69:76:d2:ce:ff:7c:01:63:bb:dc:8e:79:8e:39:6f: 9d:d4:4a:69:51:bf:f3:99:fb:07:7f:5f:3b:eb:53:f5:44:93: 36:e8:36:0d:5d:16:73:c0:df:64:d8:6c:a5:71:2a:bb:a9:23: 27:e8:06:a2:96:8f:eb:be:02:fa:37:d1:bc:0b:69:14:b1:3a: a0:8d:75:0d:77:15:ff:6f:15:c7:31:3c:05:8c:0d:96:11:14: a9:02:4c:38:fa:bd:9b:fe:3c:26:91:17:b2:38:80:f3:b4:cd: 97:a9:7c:72:9f:86:45:7d:6b:a6:26:a3:ec:1a:2d:9b:f4:08: 33:e5:a5:9f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr2U44f+4X3BCob0YHz18aHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0 ZmQ1MDgwHhcNMjUxMjA3MDEwMTAyWhcNMjUxMjA4MDEwMTAyWjAzMTEwLwYDVQQD EygyMDM4NDY0YjQxNDYzZTI2ZTZlZGU4NjQ2MTZlZDQxZGU2YjgyMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurHh9OkzW7Wzpbn0EfJgxIfBVLDo Y+reGWhVRLvDyqU4TId/ULHMKBTZQdj5grQ2MdYPDbRF0yFDcqTGCuel0a2nDPfM o3HpIpF77WzMin7YdFg9qtFqsnzA9m3IUBsa8YYjEsR2OOMnOgvjIqyRfg6IE72t QecJNVxmjJvYjac6hXMuiK5VGXT5Cc8E9E9rjrO4jRgKSifIJZ6xGRYxaCLMDR0O sg67s7tDPu44nZtHCDLrIOCRCsW2FXCVu4pQdi4PDAA21QTpAHvZikjaBs4t4ppt pxBQUkrqCRcsa2FmPKf3esI3ZT/uGfbOO0zeSeHV0OcPWYBTOqiQCNOOnwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCA4RktBRj4m5u3oZGFu1B3muCHFMB8GA1UdIwQY MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM01 kTDLT2VCPQhP/oF6XO/xQaIUkz5BAtS6lVeXk4VgQu7RUOqUBVCFjjV7x5e5RcAs BTjqm2CsM93kj2DIVJx3tuwiQQhxD99V2nupeQ8NPYvb9iwou9ySXfj4SnTWLOfw X2kxBBoVzef4OunjZQDUrsBQ26YumuNysYLxBWeNaXbSzv98AWO73I55jjlvndRK aVG/85n7B39fO+tT9USTNug2DV0Wc8DfZNhspXEqu6kjJ+gGopaP674C+jfRvAtp FLE6oI11DXcV/28VxzE8BYwNlhEUqQJMOPq9m/48JpEXsjiA87TNl6l8cp+GRX1r piaj7Botm/QIM+Wlnw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:23 2025 by rpki-client