This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json) Hash identifier: xOhdjlzv5PBMmkIOajZeV+hHvdmUUhoKY8VkRZFHrGY= Subject key identifier: 64:8B:68:CD:7E:9E:0D:4E:29:74:9C:6D:DC:07:CA:28:09:14:89:AC Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019AF208F7C57F33C0F4ADA27AF612DBAE97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: 9QqsdSoL8HkQ7nzYa7iDmXA/6o/7pH/7UynEYgh1uwo=) 2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=) 3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=) 4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f7:c5:7f:33:c0:f4:ad:a2:7a:f6:12:db:ae:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=648b68cd7e9e0d4e29749c6ddc07ca28091489ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:00:50:61:5b:b0:ea:c3:b4:67:2d:a3:1a: c6:3d:49:ef:3e:6d:24:04:82:19:42:d9:86:2f:e1: 89:dc:00:a3:77:cf:76:5b:07:b5:12:3e:2c:d7:9c: fe:dc:97:eb:92:1a:ea:9a:96:3c:ed:29:f1:68:52: 67:cb:3a:65:e4:ec:2c:47:0d:43:08:81:c0:ae:45: ab:b6:c5:51:ed:38:4e:9d:34:1a:70:8a:f4:17:26: de:5f:ca:46:90:4e:ad:f5:83:63:9b:f8:52:53:da: b0:4a:d8:26:ca:e4:49:f7:59:81:47:46:84:d3:c5: 0a:05:71:4a:f7:b9:85:60:1f:d7:3f:3c:d7:9a:c3: 7f:aa:f3:ef:f7:63:b5:bd:fd:6e:3e:8d:57:fa:e0: ea:1d:1c:40:ae:3e:c9:f6:06:c1:0b:5c:26:20:ce: 4b:93:19:00:71:07:de:43:61:8d:e4:d2:59:12:85: 30:f5:e5:61:72:33:c7:bf:5a:fd:fd:4a:48:b0:da: a6:9f:f5:f8:b6:be:3e:a8:4c:ac:e7:38:f0:66:36: 60:b3:70:0e:bb:b2:21:07:23:7a:3e:36:c7:ea:73: de:cc:83:77:51:96:cf:61:e5:0a:57:d8:51:27:c5: 97:a8:40:f9:61:9e:93:b8:47:6b:c6:f3:27:91:f8: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8B:68:CD:7E:9E:0D:4E:29:74:9C:6D:DC:07:CA:28:09:14:89:AC X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:60:a2:b3:ac:fa:ce:96:67:48:5e:83:66:e3:1d:42:d3:47: 0f:2d:50:f2:b4:22:b9:2f:8a:1c:dc:62:19:dc:0d:a9:e2:1e: ce:37:4b:12:0d:c4:1c:ec:53:ad:fd:1e:88:70:28:4a:2f:db: b9:5b:61:01:f9:d0:83:fc:3d:d3:e8:2c:02:82:02:2b:53:79: 8f:bd:68:49:7c:57:1b:97:f2:30:2a:bf:a3:95:5c:34:99:e7: 0b:82:09:32:3e:a9:19:9e:d5:2e:4b:cd:6b:8d:9a:6c:63:f1: ca:29:f7:9f:31:0a:70:a6:5d:e8:74:89:89:ca:2e:4f:94:30: 7e:2e:05:0b:dc:bc:93:82:66:a5:33:22:01:11:57:a7:f6:01: 35:3c:5e:c4:84:c1:16:e6:66:82:4f:43:87:7e:c1:dc:79:36: 95:d4:f0:e5:a8:a8:ac:2c:11:c9:2f:6a:74:f7:61:e0:a4:b5: aa:b4:9d:37:fc:3e:e5:91:33:9c:c7:3d:60:1d:55:9c:a7:9e: 92:9d:08:4e:78:70:28:31:ca:fa:51:ec:f0:10:40:e5:db:30: b5:06:15:e1:15:7c:39:5b:bd:dc:d6:a6:ec:04:3c:38:f0:70: 15:7f:c6:71:4c:45:dc:01:ae:d8:69:d6:59:e9:b1:81:27:62: 0f:e3:d0:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPfFfzPA9K2ievYS266XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD Eyg2NDhiNjhjZDdlOWUwZDRlMjk3NDljNmRkYzA3Y2EyODA5MTQ4OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj4AUGFbsOrDtGctoxrGPUnvPm0k BIIZQtmGL+GJ3ACjd892Wwe1Ej4s15z+3JfrkhrqmpY87SnxaFJnyzpl5OwsRw1D CIHArkWrtsVR7ThOnTQacIr0FybeX8pGkE6t9YNjm/hSU9qwStgmyuRJ91mBR0aE 08UKBXFK97mFYB/XPzzXmsN/qvPv92O1vf1uPo1X+uDqHRxArj7J9gbBC1wmIM5L kxkAcQfeQ2GN5NJZEoUw9eVhcjPHv1r9/UpIsNqmn/X4tr4+qEys5zjwZjZgs3AO u7IhByN6PjbH6nPezIN3UZbPYeUKV9hRJ8WXqED5YZ6TuEdrxvMnkfj2zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSLaM1+ng1OKXScbdwHyigJFImsMB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2Cis6z6 zpZnSF6DZuMdQtNHDy1Q8rQiuS+KHNxiGdwNqeIezjdLEg3EHOxTrf0eiHAoSi/b uVthAfnQg/w90+gsAoICK1N5j71oSXxXG5fyMCq/o5VcNJnnC4IJMj6pGZ7VLkvN a42abGPxyin3nzEKcKZd6HSJicouT5Qwfi4FC9y8k4JmpTMiARFXp/YBNTxexITB FuZmgk9Dh37B3Hk2ldTw5aiorCwRyS9qdPdh4KS1qrSdN/w+5ZEznMc9YB1VnKee kp0ITnhwKDHK+lHs8BBA5dswtQYV4RV8OVu93Nam7AQ8OPBwFX/GcUxF3AGu2GnW WemxgSdiD+PQVA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:36 2025 by rpki-client