This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json) Hash identifier: SlvFRaSR8KA43QKLbuacmWJ96f0h+ZANNejokvRPnTg= Subject key identifier: 05:C4:A8:32:C5:E0:C4:0A:02:CF:09:0A:A6:5D:17:D1:5D:C8:D0:0F Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Certificate serial: 019AF2401BEEFE4C85FB61F33FAFCFA289B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft Manifest number: 09C7 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: FRW60SD+kT7953GarZRYP3imL0y1Zz9XK2JsqCKpG3s=) 2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1b:ee:fe:4c:85:fb:61:f3:3f:af:cf:a2:89:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=05c4a832c5e0c40a02cf090aa65d17d15dc8d00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:1f:ce:1e:34:c7:81:57:de:e2:d6:14:60: e1:7b:c3:e3:6c:89:51:ab:2d:14:4b:5e:ea:1b:ce: f1:a1:12:3c:fc:32:64:e9:a8:79:40:6a:3f:36:71: d1:92:e3:76:85:92:8f:67:0d:31:05:ec:ff:5f:39: 87:c1:c7:87:d4:4c:92:33:4a:a3:60:8d:fc:ea:e9: 35:77:ab:a8:2c:2f:ea:05:50:69:11:42:4b:33:78: f9:0c:fe:d1:58:ef:c9:70:a4:2a:45:91:72:3f:b3: 7a:62:f5:f0:9c:5f:e8:8d:72:68:cf:1a:7e:fb:82: 25:95:78:62:b3:e2:27:de:63:8f:bc:00:db:4b:ba: 2c:40:06:99:52:a4:54:16:14:30:69:41:aa:3e:53: 91:ac:31:77:33:3e:57:14:38:f5:67:8a:bb:ef:0f: 73:70:70:d9:ab:f1:97:19:ce:a3:22:aa:d5:c7:f0: f5:4d:17:0b:27:6f:15:b0:2b:a3:35:5b:66:1f:72: e5:e7:46:30:ac:aa:ae:69:cf:0c:79:f1:88:27:31: fb:cf:45:06:19:fb:69:61:57:4a:ac:e5:7c:98:e1: 94:02:76:52:74:3c:0d:02:fb:9f:cc:0d:56:38:73: d4:b3:a7:17:2e:d8:b9:0d:39:69:55:19:3e:8f:59: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:A8:32:C5:E0:C4:0A:02:CF:09:0A:A6:5D:17:D1:5D:C8:D0:0F X509v3 Authority Key Identifier: keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a4:ae:33:72:1c:be:70:3e:48:aa:9b:d4:93:be:8c:e2:94: 97:9e:c8:44:4d:11:04:85:d1:bf:8b:d5:0c:84:b2:37:db:3b: 31:3f:f1:b3:a0:e3:a4:a5:b7:c5:c4:41:c1:43:27:1d:aa:bd: ed:82:15:95:d3:4f:f1:1f:69:e9:15:52:6a:f6:e5:de:ce:ad: 1c:2c:0a:9a:46:de:35:eb:2c:30:ac:8f:d0:70:8c:d7:7d:fc: ba:f6:bd:50:e5:6a:dc:20:a1:ec:3f:b9:fd:a6:ac:8b:81:16: 1c:59:91:5c:9a:42:88:4d:56:85:4b:34:11:f5:27:18:1d:e8: 59:a3:32:13:03:75:b2:dd:1c:2e:18:be:56:63:9f:d9:c6:c2: 21:41:f0:9c:f0:82:99:bc:d5:55:38:a1:fc:a0:01:4e:86:07: d3:b7:28:40:0e:a4:65:a0:67:fe:32:d2:06:29:e7:e9:42:f7: 0d:a7:49:cc:c4:d6:6f:dc:1d:6a:14:3e:ab:63:d9:94:49:25: 52:56:e7:09:a4:0e:33:92:c7:5e:c2:97:e7:1d:80:ea:cb:68: 19:00:91:a2:ca:b2:1c:aa:92:4a:f4:2d:48:2d:ce:a1:f7:28: 8c:2f:97:ff:f2:65:7d:54:c1:1a:66:9b:a5:b4:e3:95:7a:e3: 93:af:5e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBvu/kyF+2HzP6/Poom5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj YzY2MjMwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EygwNWM0YTgzMmM1ZTBjNDBhMDJjZjA5MGFhNjVkMTdkMTVkYzhkMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zofzh40x4FX3uLWFGDhe8PjbIlR qy0US17qG87xoRI8/DJk6ah5QGo/NnHRkuN2hZKPZw0xBez/XzmHwceH1EySM0qj YI386uk1d6uoLC/qBVBpEUJLM3j5DP7RWO/JcKQqRZFyP7N6YvXwnF/ojXJozxp+ +4IllXhis+In3mOPvADbS7osQAaZUqRUFhQwaUGqPlORrDF3Mz5XFDj1Z4q77w9z cHDZq/GXGc6jIqrVx/D1TRcLJ28VsCujNVtmH3Ll50YwrKquac8MefGIJzH7z0UG GftpYVdKrOV8mOGUAnZSdDwNAvufzA1WOHPUs6cXLti5DTlpVRk+j1lotwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXEqDLF4MQKAs8JCqZdF9FdyNAPMB8GA1UdIwQY MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2 LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6SuM3Ic vnA+SKqb1JO+jOKUl57IRE0RBIXRv4vVDISyN9s7MT/xs6DjpKW3xcRBwUMnHaq9 7YIVldNP8R9p6RVSavbl3s6tHCwKmkbeNessMKyP0HCM1338uva9UOVq3CCh7D+5 /aasi4EWHFmRXJpCiE1WhUs0EfUnGB3oWaMyEwN1st0cLhi+VmOf2cbCIUHwnPCC mbzVVTih/KABToYH07coQA6kZaBn/jLSBinn6UL3DadJzMTWb9wdahQ+q2PZlEkl UlbnCaQOM5LHXsKX5x2A6stoGQCRosqyHKqSSvQtSC3OofcojC+X//JlfVTBGmab pbTjlXrjk69eQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:30 2025 by rpki-client