This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json) Hash identifier: Mrb+cwxRAoO/5SgGe4YqfdJqprQYZF+eqvT1bLFVLOI= Subject key identifier: CE:B7:8B:09:EE:F8:D2:DE:55:EE:A6:2D:CF:A2:7A:A3:08:94:D4:89 Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2 Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2 Certificate serial: 019AF19B0ECEEE225B93FBBFF8946CB10282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft Manifest number: 0361 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: YU2si19ai+6IMxxpy82tRs7gLVd/RxaJ0q7k80aHwNQ=) 2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0e:ce:ee:22:5b:93:fb:bf:f8:94:6c:b1:02:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=ceb78b09eef8d2de55eea62dcfa27aa30894d489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:b5:cc:5a:ab:f7:06:cb:3e:df:06:cc:8a: e1:8b:cd:cb:ad:b3:86:5d:8a:f9:e8:e3:86:bc:bc: ce:53:4e:98:8f:90:23:31:d0:b9:63:46:db:80:f3: 08:c0:d7:cc:7e:be:73:bd:bf:b1:5b:d9:5b:fa:9a: d7:78:ea:d3:cf:b1:03:a2:ee:d0:8c:f6:01:07:ad: 49:29:ca:14:65:93:67:c0:af:6a:8c:a1:b5:a5:ce: 83:fe:91:c4:01:57:6a:ad:22:84:41:49:b7:49:9b: 3c:55:c8:10:00:af:d6:9a:58:8e:2e:ce:2d:7d:15: 32:1d:d1:30:97:3c:87:ae:31:85:b9:6f:45:02:a0: 57:23:c4:dc:da:94:0b:5f:91:50:e0:1f:11:ae:64: 77:cf:ec:5a:84:e1:98:f6:d1:22:e0:fe:40:03:22: 5e:fb:52:86:48:15:4e:f3:de:d1:98:99:cd:36:cb: 5f:5f:ff:2b:0e:89:95:1c:9d:52:9a:62:2d:af:33: 2d:b3:a4:a9:9a:0a:72:a7:28:d5:33:bc:df:67:9b: b2:73:81:c8:9a:7d:eb:8b:34:b1:57:83:d6:55:54: bd:01:59:a1:e1:cf:8b:f8:fd:fb:7e:be:a3:6d:4b: 1c:a9:85:5b:6b:15:c5:3c:23:39:da:19:b5:81:a4: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B7:8B:09:EE:F8:D2:DE:55:EE:A6:2D:CF:A2:7A:A3:08:94:D4:89 X509v3 Authority Key Identifier: keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:78:12:2f:4b:28:7f:ff:04:0d:93:cf:30:cb:91:8d:9f:66: 50:90:e6:9b:5c:87:39:43:74:9d:f0:10:94:d6:c8:cd:4b:a6: ef:ea:bf:c7:1b:ee:7e:28:db:f9:a6:93:80:08:3f:94:65:62: 41:11:50:65:69:04:48:24:84:5b:e0:50:ef:09:c5:93:31:bd: 2d:a4:6c:ab:0d:20:2b:00:1a:d3:42:18:7e:8b:25:85:ec:cd: 1e:a8:b9:4c:a7:53:43:7e:45:3d:dc:e8:4e:8a:f8:2e:b9:09: 97:b8:cd:96:dc:b5:37:ad:a7:41:16:62:22:70:4f:9b:30:b5: 97:a5:bf:20:6b:37:f1:a7:b4:79:e2:89:bb:c2:be:73:47:38: 72:a2:98:9d:a0:80:06:2f:67:79:61:91:23:35:4a:7e:ec:f8: b4:b6:61:20:24:b9:1b:91:01:d9:7a:af:e0:be:31:a9:29:e8: 73:d3:c7:24:8f:02:4c:6c:6b:a9:ca:4a:46:86:05:57:83:a3: e3:e4:1f:55:a5:d5:7a:df:33:1b:fd:e7:13:a1:09:6c:92:85: d4:77:f8:f0:08:56:80:78:f9:38:67:25:88:d0:46:37:40:b4: a2:27:62:ff:33:0f:6f:18:0b:86:a9:7d:da:78:75:d7:2b:42: 84:52:a6:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmw7O7iJbk/u/+JRssQKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh NzVkZTIwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EyhjZWI3OGIwOWVlZjhkMmRlNTVlZWE2MmRjZmEyN2FhMzA4OTRkNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYW1zFqr9wbLPt8GzIrhi83LrbOG XYr56OOGvLzOU06Yj5AjMdC5Y0bbgPMIwNfMfr5zvb+xW9lb+prXeOrTz7EDou7Q jPYBB61JKcoUZZNnwK9qjKG1pc6D/pHEAVdqrSKEQUm3SZs8VcgQAK/WmliOLs4t fRUyHdEwlzyHrjGFuW9FAqBXI8Tc2pQLX5FQ4B8RrmR3z+xahOGY9tEi4P5AAyJe +1KGSBVO897RmJnNNstfX/8rDomVHJ1SmmItrzMts6SpmgpypyjVM7zfZ5uyc4HI mn3rizSxV4PWVVS9AVmh4c+L+P37fr6jbUscqYVbaxXFPCM52hm1gaTIlwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM63iwnu+NLeVe6mLc+ieqMIlNSJMB8GA1UdIwQY MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi LTQzMTBjMzliMWY0NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EzL2EzZmQ4Yi02ODZiLTRlNmMtOGI3Yi00MzEwYzM5YjFm NDQvMS8xLUZKZVFTeHE0ckZzckRuczhvakM0dWFuWGVJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXgS L0sof/8EDZPPMMuRjZ9mUJDmm1yHOUN0nfAQlNbIzUum7+q/xxvufijb+aaTgAg/ lGViQRFQZWkESCSEW+BQ7wnFkzG9LaRsqw0gKwAa00IYfoslhezNHqi5TKdTQ35F PdzoTor4LrkJl7jNlty1N62nQRZiInBPmzC1l6W/IGs38ae0eeKJu8K+c0c4cqKY naCABi9neWGRIzVKfuz4tLZhICS5G5EB2Xqv4L4xqSnoc9PHJI8CTGxrqcpKRoYF V4Oj4+QfVaXVet8zG/3nE6EJbJKF1Hf48AhWgHj5OGcliNBGN0C0oidi/zMPbxgL hql92nh11ytChFKmRg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:50 2025 by rpki-client