This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json) Hash identifier: goJbHzlBoQ5Clrqp0Ibc4YL8u0ZRJpEIl6p8fo1X+WM= Subject key identifier: EE:D2:46:72:14:30:9A:7D:57:8C:35:A8:B3:CB:30:1F:C4:09:33:76 Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2 Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2 Certificate serial: 019B2B8AA98524C62435CF41D05822F81EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft Manifest number: 037F Signing time: Wed 17 Dec 2025 09:01:06 +0000 Manifest this update: Wed 17 Dec 2025 09:01:06 +0000 Manifest next update: Thu 18 Dec 2025 09:01:06 +0000 Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: GnsZplZdgTTeC19ZLuk6bI9Ikiwu1drjTXUokabvsS4=) 2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a9:85:24:c6:24:35:cf:41:d0:58:22:f8:1e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2 Validity Not Before: Dec 17 09:01:06 2025 GMT Not After : Dec 18 09:01:06 2025 GMT Subject: CN=eed2467214309a7d578c35a8b3cb301fc4093376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:59:f8:1c:1c:47:d5:98:86:5e:a2:8f:22: ce:14:9c:21:bc:b3:25:91:2c:8d:45:ac:dd:f5:b0: 07:1e:97:cd:bd:f7:6c:1c:43:ff:b3:5a:3d:06:6a: ce:89:0c:fc:97:93:92:ee:3e:c1:99:13:5f:a9:da: f5:1a:4a:ac:ac:ee:15:b1:5d:d7:0f:0d:03:96:3e: 9f:ac:e2:c0:53:d3:20:54:f7:c9:50:cb:3e:f0:f0: 96:11:0e:59:61:9f:76:0a:94:ac:07:3f:30:c5:60: 07:f1:7a:d8:c2:6f:91:f1:17:49:86:32:f6:b8:96: 50:42:8f:05:6a:7d:ec:2e:a4:1d:52:b2:8f:50:e1: fe:ec:ff:f5:12:02:d7:2b:12:4a:31:6b:1f:63:4e: db:35:54:e1:3e:35:17:06:3f:e6:2d:d0:6c:a6:b9: 15:b6:50:cd:24:4b:35:ef:c0:c0:d2:c2:ed:b5:7c: e6:a3:a2:f2:04:3a:28:dc:73:56:b2:9a:b6:41:2d: 78:cc:88:c3:a5:03:20:28:ce:66:cb:a2:56:26:b8: e5:ad:b4:8d:4b:73:0f:92:f1:f2:8b:32:97:3f:8c: 63:1f:16:9d:00:12:a8:18:5b:36:f9:9c:62:24:ea: c5:9b:a8:cf:ac:c1:a3:e3:1e:70:b2:73:78:f2:ba: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D2:46:72:14:30:9A:7D:57:8C:35:A8:B3:CB:30:1F:C4:09:33:76 X509v3 Authority Key Identifier: keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:eb:9d:e6:65:01:9b:57:0b:c8:3f:e4:1d:74:d8:d7:0c:68: 2b:6e:f6:4d:3c:09:b2:fd:ed:08:cb:f3:04:67:f9:81:d3:0f: ad:1d:fe:0d:9e:2d:b9:52:77:ec:3a:dd:7d:7b:cb:a0:c6:61: a9:3f:a8:67:35:a4:43:ba:67:3c:40:a9:24:d8:71:05:95:a8: 50:62:df:b8:05:a9:ef:2c:8c:20:e2:42:e5:6e:fa:30:6a:39: ab:0a:c1:2b:91:5d:cc:86:f4:83:61:89:0e:a7:1e:dd:dd:e4: 23:6f:17:82:8e:b5:6d:eb:18:83:70:d9:0e:20:76:b2:b7:99: ee:fe:7c:1d:19:8d:37:b8:f2:6d:50:64:47:98:b9:1c:49:e4: e9:a1:53:c7:9d:8a:de:1e:a3:4a:da:8b:d4:b9:28:6b:68:c4: cd:75:4f:10:f3:a8:cd:cb:51:cb:b6:6f:28:9a:0a:ab:d2:61: e9:cb:10:d7:f5:e5:fa:4f:c8:ea:f2:21:1f:f4:ae:47:55:fe: d1:18:c6:d5:2f:ce:ac:e5:9d:1a:1d:bd:b5:a6:b4:7c:19:8a: 51:93:e0:68:d2:04:88:7a:13:56:09:c9:1b:df:42:25:2d:ec: 27:9b:cb:f0:a6:9b:07:2b:75:75:d9:fc:5a:16:c5:70:06:8a: 88:7a:77:29 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsriqmFJMYkNc9B0Fgi+B7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh NzVkZTIwHhcNMjUxMjE3MDkwMTA2WhcNMjUxMjE4MDkwMTA2WjAzMTEwLwYDVQQD EyhlZWQyNDY3MjE0MzA5YTdkNTc4YzM1YThiM2NiMzAxZmM0MDkzMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTZZ+BwcR9WYhl6ijyLOFJwhvLMl kSyNRazd9bAHHpfNvfdsHEP/s1o9BmrOiQz8l5OS7j7BmRNfqdr1GkqsrO4VsV3X Dw0Dlj6frOLAU9MgVPfJUMs+8PCWEQ5ZYZ92CpSsBz8wxWAH8XrYwm+R8RdJhjL2 uJZQQo8Fan3sLqQdUrKPUOH+7P/1EgLXKxJKMWsfY07bNVThPjUXBj/mLdBsprkV tlDNJEs178DA0sLttXzmo6LyBDoo3HNWspq2QS14zIjDpQMgKM5my6JWJrjlrbSN S3MPkvHyizKXP4xjHxadABKoGFs2+ZxiJOrFm6jPrMGj4x5wsnN48rpU4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFO7SRnIUMJp9V4w1qLPLMB/ECTN2MB8GA1UdIwQY MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi LTQzMTBjMzliMWY0NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EzL2EzZmQ4Yi02ODZiLTRlNmMtOGI3Yi00MzEwYzM5YjFm NDQvMS8xLUZKZVFTeHE0ckZzckRuczhvakM0dWFuWGVJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOud 5mUBm1cLyD/kHXTY1wxoK272TTwJsv3tCMvzBGf5gdMPrR3+DZ4tuVJ37DrdfXvL oMZhqT+oZzWkQ7pnPECpJNhxBZWoUGLfuAWp7yyMIOJC5W76MGo5qwrBK5FdzIb0 g2GJDqce3d3kI28Xgo61besYg3DZDiB2sreZ7v58HRmNN7jybVBkR5i5HEnk6aFT x52K3h6jStqL1Lkoa2jEzXVPEPOozctRy7ZvKJoKq9Jh6csQ1/Xl+k/I6vIhH/Su R1X+0RjG1S/OrOWdGh29taa0fBmKUZPgaNIEiHoTVgnJG99CJS3sJ5vL8KabByt1 ddn8WhbFcAaKiHp3KQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:51 2025 by rpki-client