This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json) Hash identifier: b8hyF3hFYfDN1YVBav/CciujeFEvZwG4J6FlZWOCytM= Subject key identifier: BD:64:8C:FD:E6:2A:57:56:9F:6A:52:55:1E:0D:43:FC:9B:83:55:96 Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a Certificate serial: 019AF0BF9AC7E1EB9D71771E6DA706AE31BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft Manifest number: 0C27 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: h0OzjXmNQwq+gWqSq/jx5o9CWTPyo2bIhm6R9F0YeJU=) 2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=) 3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9a:c7:e1:eb:9d:71:77:1e:6d:a7:06:ae:31:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=bd648cfde62a57569f6a52551e0d43fc9b835596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:fa:0c:80:b5:28:b3:4d:a9:41:49:7b:31: a8:a2:a8:96:4b:db:35:71:9a:97:31:13:69:75:a1: 38:8f:52:a8:ac:33:ce:45:6d:7e:04:40:f1:0f:de: c0:a7:57:f1:6a:13:91:5b:25:13:6b:75:54:02:51: a7:e4:79:55:30:a1:4b:3f:3a:bf:c6:47:dd:07:c3: e9:ac:31:59:0b:a6:ac:09:15:28:49:6c:2f:5b:bd: ba:32:33:18:49:5e:59:0b:c0:ed:71:ff:ae:2c:32: 11:1b:a6:e7:6b:09:5b:c2:ce:25:b3:05:5a:7b:a7: 5e:0f:42:48:21:b3:92:88:2b:03:98:e3:be:8c:ed: 28:81:8b:ca:c2:af:21:e5:9a:6c:da:81:30:6c:ea: 0c:dd:73:f4:75:9e:d8:39:ef:e7:45:47:e8:97:83: f5:33:96:42:18:0a:c2:c6:90:d2:39:25:69:28:f4: 42:90:2f:3b:9d:06:38:43:4c:17:d3:4a:ae:52:36: d0:48:a6:ac:3c:77:32:20:25:fe:77:1a:3e:11:20: 1b:aa:b7:0b:11:5f:8b:9c:3b:a4:d5:9b:2b:02:eb: a2:2a:8e:5b:c2:7e:21:19:8a:ab:32:61:43:2d:2e: d1:8b:74:39:58:5d:fa:9d:dc:a1:58:68:b9:73:24: 7d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:8C:FD:E6:2A:57:56:9F:6A:52:55:1E:0D:43:FC:9B:83:55:96 X509v3 Authority Key Identifier: keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5c:d1:c3:90:44:b3:36:d9:77:80:f2:27:86:b4:c7:d7:aa: 2e:75:4a:5c:66:72:45:e8:42:b7:18:39:6c:55:40:21:a6:e8: a8:4d:7e:da:f4:cd:9a:15:0b:ff:52:c0:8e:a3:01:17:2c:b8: 2c:1b:fb:02:20:f5:14:52:e1:f7:26:6c:cd:f6:e6:4d:b1:83: 3b:25:3c:bb:fb:34:36:80:14:e0:ba:f2:7c:34:bf:a3:60:9b: 13:30:46:3f:7b:6d:12:0d:55:69:31:97:99:96:28:d5:37:8b: c4:d6:e6:66:f1:0b:9d:99:3e:19:1b:90:a9:5d:13:c1:a0:8d: 3f:3a:c8:08:b7:c1:b2:1c:02:eb:e8:03:da:f2:dc:06:ea:81: 48:d3:11:10:76:5b:5c:a1:2d:d6:47:e0:86:c0:9c:98:d6:fc: 4c:30:75:86:27:df:e9:74:0d:1b:80:ff:17:e5:92:12:ca:55: 4b:6d:a3:ce:ff:e0:a2:56:b3:46:1e:92:b3:2a:53:7f:ea:4c: b7:3c:50:b5:16:5b:48:d9:ee:42:2b:00:1a:74:06:72:ac:48: e1:0e:2a:5f:6e:b4:7c:95:a1:da:38:f1:b5:05:4a:d4:2d:5a: 90:d4:c9:bf:08:5b:96:1b:39:00:ad:28:f7:53:e5:1b:80:3f: ba:76:64:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5rH4eudcXcebacGrjG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2 Mjg5N2EwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EyhiZDY0OGNmZGU2MmE1NzU2OWY2YTUyNTUxZTBkNDNmYzliODM1NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuub6DIC1KLNNqUFJezGooqiWS9s1 cZqXMRNpdaE4j1KorDPORW1+BEDxD97Ap1fxahORWyUTa3VUAlGn5HlVMKFLPzq/ xkfdB8PprDFZC6asCRUoSWwvW726MjMYSV5ZC8Dtcf+uLDIRG6bnawlbws4lswVa e6deD0JIIbOSiCsDmOO+jO0ogYvKwq8h5Zps2oEwbOoM3XP0dZ7YOe/nRUfol4P1 M5ZCGArCxpDSOSVpKPRCkC87nQY4Q0wX00quUjbQSKasPHcyICX+dxo+ESAbqrcL EV+LnDuk1ZsrAuuiKo5bwn4hGYqrMmFDLS7Ri3Q5WF36ndyhWGi5cyR91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1kjP3mKldWn2pSVR4NQ/ybg1WWMB8GA1UdIwQY MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3 LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1zRw5BE szbZd4DyJ4a0x9eqLnVKXGZyRehCtxg5bFVAIaboqE1+2vTNmhUL/1LAjqMBFyy4 LBv7AiD1FFLh9yZszfbmTbGDOyU8u/s0NoAU4LryfDS/o2CbEzBGP3ttEg1VaTGX mZYo1TeLxNbmZvELnZk+GRuQqV0TwaCNPzrICLfBshwC6+gD2vLcBuqBSNMREHZb XKEt1kfghsCcmNb8TDB1hiff6XQNG4D/F+WSEspVS22jzv/golazRh6SsypTf+pM tzxQtRZbSNnuQisAGnQGcqxI4Q4qX260fJWh2jjxtQVK1C1akNTJvwhblhs5AK0o 91PlG4A/unZkZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:14 2025 by rpki-client