This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json) Hash identifier: K/1DxCMqpxJZDQN0hYLR/7uquzKpxBirtPDFTzkFBiw= Subject key identifier: 42:65:A9:CF:20:3C:35:F9:91:28:A0:2E:12:04:5F:FD:8C:7A:A3:58 Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Certificate serial: 019AF1D1CD41B52B774939C9CD5550C3D2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft Manifest number: 04B9 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: 3x0LyobFPAB7yFv/XZ8jFFqwxcZq8t0zLh0xMBYg8v8=) 2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=) 3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cd:41:b5:2b:77:49:39:c9:cd:55:50:c3:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=4265a9cf203c35f99128a02e12045ffd8c7aa358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:96:54:b1:51:19:e4:17:8a:51:b9:7f:dc: b9:25:73:46:1e:79:70:e2:27:e9:fb:b7:34:05:85: 3c:26:01:e7:64:64:1f:27:41:09:53:03:88:2d:59: cc:89:81:7e:12:da:18:fc:d5:0a:81:0b:b1:03:31: 94:f4:0b:9c:f8:0d:38:9a:8a:7d:32:ae:ed:eb:5d: 3e:5d:5b:70:c4:9a:81:6a:4a:6d:42:e1:5d:b7:dc: 40:83:aa:79:bd:88:07:a2:21:0e:b3:84:4d:18:e6: f6:9a:c8:c4:39:b3:f6:9d:19:73:09:87:14:f1:46: 04:34:e0:d5:30:3f:00:98:2b:9e:da:4f:3c:fc:68: 2f:45:0c:73:4f:22:68:6d:bc:95:27:17:1b:87:b0: e2:77:65:74:a5:4f:e2:6b:19:d0:f0:77:2d:94:0f: 02:1d:c1:da:41:10:80:d3:cb:42:d5:0a:a9:60:14: 3b:61:ea:91:a8:00:e6:ca:26:c9:32:ed:cf:b9:5f: 62:82:2c:e5:01:78:07:08:d8:db:ff:d4:a2:ca:c4: 85:94:15:ca:8d:c9:07:4f:d6:f3:49:f5:05:0b:38: 15:ab:76:aa:8a:07:c4:6c:dd:0d:4f:92:1e:86:59: 32:03:da:18:1d:57:f4:79:a4:2a:53:50:1d:43:05: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:A9:CF:20:3C:35:F9:91:28:A0:2E:12:04:5F:FD:8C:7A:A3:58 X509v3 Authority Key Identifier: keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9a:2e:55:bd:a7:e8:4b:bb:3e:8b:f7:33:ab:4d:0d:89:2e: 7c:a3:96:b2:5f:99:53:c0:fe:35:4d:35:06:db:a6:cc:86:c9: 57:93:90:63:7b:b3:37:03:d9:44:41:3f:31:01:a7:6d:9f:ea: a8:46:34:98:dd:2f:5f:dd:cf:62:ed:2a:c7:11:cc:6c:47:6c: c4:d4:4d:dd:01:6d:4f:8b:4e:7c:2c:11:c2:8a:e7:8f:71:7e: 2d:e8:e8:d8:9d:76:b2:89:84:3e:31:3e:5c:5e:b5:5c:a0:79: d5:a6:2d:42:56:5c:11:1a:76:3e:1c:c8:28:b7:57:67:53:0e: 35:61:dd:19:c9:85:f8:12:de:10:f1:74:9b:df:a8:14:15:64: 31:36:35:07:10:f9:7b:df:d6:04:70:b2:68:77:df:84:29:fa: 3f:79:b8:27:ef:b4:2b:61:55:eb:44:45:f2:0c:96:b0:57:24: 1f:39:88:90:2a:f1:ac:ef:4b:8b:45:02:aa:76:ae:ff:57:4b: b4:0f:56:9b:e2:c3:9c:f3:59:3c:08:4c:3d:05:4f:3e:4c:45: 60:e9:7c:bf:e3:77:32:e8:5a:77:7f:65:45:74:81:1a:c1:4e: 52:1d:a7:79:2c:df:54:e2:18:5e:ec:bb:be:93:8d:fb:5e:63: 6b:f1:19:ad -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0c1BtSt3STnJzVVQw9LAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4 NTVkNTQwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD Eyg0MjY1YTljZjIwM2MzNWY5OTEyOGEwMmUxMjA0NWZmZDhjN2FhMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNmWVLFRGeQXilG5f9y5JXNGHnlw 4ifp+7c0BYU8JgHnZGQfJ0EJUwOILVnMiYF+EtoY/NUKgQuxAzGU9Auc+A04mop9 Mq7t610+XVtwxJqBakptQuFdt9xAg6p5vYgHoiEOs4RNGOb2msjEObP2nRlzCYcU 8UYENODVMD8AmCue2k88/GgvRQxzTyJobbyVJxcbh7Did2V0pU/iaxnQ8HctlA8C HcHaQRCA08tC1QqpYBQ7YeqRqADmyibJMu3PuV9igizlAXgHCNjb/9SiysSFlBXK jckHT9bzSfUFCzgVq3aqigfEbN0NT5IehlkyA9oYHVf0eaQqU1AdQwV18wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEJlqc8gPDX5kSigLhIEX/2MeqNYMB8GA1UdIwQY MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZou Vb2n6Eu7Pov3M6tNDYkufKOWsl+ZU8D+NU01BtumzIbJV5OQY3uzNwPZREE/MQGn bZ/qqEY0mN0vX93PYu0qxxHMbEdsxNRN3QFtT4tOfCwRwornj3F+Lejo2J12somE PjE+XF61XKB51aYtQlZcERp2PhzIKLdXZ1MONWHdGcmF+BLeEPF0m9+oFBVkMTY1 BxD5e9/WBHCyaHffhCn6P3m4J++0K2FV60RF8gyWsFckHzmIkCrxrO9Li0UCqnau /1dLtA9Wm+LDnPNZPAhMPQVPPkxFYOl8v+N3Muhad39lRXSBGsFOUh2neSzfVOIY Xuy7vpON+15ja/EZrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:21 2025 by rpki-client