This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json) Hash identifier: P5LAVJfIt7Y3pswuHhb5fJMKVP22pSKPGg0A7oML9nM= Subject key identifier: A1:BD:53:D4:D6:6A:1B:5A:A8:06:8A:6A:32:C6:75:C0:DB:3D:B9:45 Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Certificate serial: 019AF49C681D7F451AA265E4F124AEFA73EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft Manifest number: 03F6 Signing time: Sat 06 Dec 2025 17:01:22 +0000 Manifest this update: Sat 06 Dec 2025 17:01:22 +0000 Manifest next update: Sun 07 Dec 2025 17:01:22 +0000 Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: LjKVKovKUvlFkOQ8VIViIuP1k1Fx73mvOc3Z+DfLlE4=) 2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:68:1d:7f:45:1a:a2:65:e4:f1:24:ae:fa:73:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Validity Not Before: Dec 6 17:01:22 2025 GMT Not After : Dec 7 17:01:22 2025 GMT Subject: CN=a1bd53d4d66a1b5aa8068a6a32c675c0db3db945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:9f:6b:68:7d:dc:99:5d:ab:84:8c:45:1c: 1a:77:8c:81:40:1b:43:40:08:42:8e:9b:ba:0b:66: 6b:bd:e5:c6:cf:03:04:a5:aa:50:c7:88:18:30:48: e9:d8:53:28:76:7b:38:2f:d4:78:a9:21:75:1e:b4: 71:8c:b8:c4:7d:b3:d4:26:71:9a:9c:f1:5b:7e:bb: 2c:fe:27:38:44:3a:f9:c4:d0:3b:a7:fa:9a:fa:fc: fa:ad:ef:63:14:08:84:f0:1d:4a:3e:44:8f:9b:70: 09:57:b4:6c:b9:40:e6:5c:38:fc:51:ca:b9:62:ef: 49:60:e6:79:7e:6e:ab:de:b7:ca:55:00:b0:9a:99: 02:ef:9d:a7:39:70:f1:f3:40:9b:9b:fd:b4:71:96: 7c:67:33:e2:48:aa:3c:0b:a7:ea:fe:ea:ee:77:1c: 1e:37:19:03:ba:16:0b:e5:c5:0a:22:4d:3b:ee:2d: 4f:36:68:f9:18:05:49:b2:1f:08:4b:e7:42:33:20: 0e:0c:9c:ad:ec:e9:65:9f:ab:6b:fb:9e:91:e3:93: a0:ee:b4:37:10:a3:87:86:51:42:eb:5a:2f:1e:57: ca:81:af:70:ee:b1:28:d2:b9:05:c9:4e:2d:a1:ad: 6d:06:a4:95:8c:c3:dc:e9:f1:8d:74:69:e9:6e:44: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BD:53:D4:D6:6A:1B:5A:A8:06:8A:6A:32:C6:75:C0:DB:3D:B9:45 X509v3 Authority Key Identifier: keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:5b:5d:6c:b1:22:ef:2b:0d:b9:c9:75:2d:97:c1:5c:c9:3b: a4:ac:54:1d:2c:4e:2d:eb:c8:31:da:75:c8:f4:93:d7:04:99: dd:b7:ba:7a:ff:c9:47:65:f0:c8:ac:92:74:20:f5:93:b2:c0: 49:9c:2d:ce:d7:cd:64:3f:ce:ab:ce:fd:92:2d:56:94:06:be: c1:e6:9e:fa:a3:1e:d0:1b:6c:11:82:0a:7f:78:83:c1:ea:70: ce:fa:a6:56:7c:2f:b1:5e:58:ec:d3:59:78:b2:53:c2:c8:8b: 2c:3d:57:43:fe:12:e3:a5:5c:fb:d3:da:f4:63:fa:f8:40:bb: 46:d4:9f:94:5d:14:fc:b7:1a:ce:fb:42:0b:c7:f1:2f:c9:e7: 4c:f3:72:a6:f8:11:8d:6e:20:e6:60:2d:0e:30:97:b5:90:1d: 4e:83:46:f5:db:2a:18:57:d7:cc:85:c5:06:09:ec:93:91:e5: 1f:02:2f:6c:d1:9b:35:f9:79:df:16:86:60:bb:00:32:bf:bd: 64:82:55:d7:22:76:60:d3:90:b4:6f:0a:b4:ec:0d:3b:17:99: 37:d3:fd:86:9b:19:de:ff:6b:28:8d:fd:60:72:a8:99:01:4b: 55:e8:d4:52:e4:56:fe:d0:e2:37:8e:a9:2d:fc:c4:41:dd:c3: 77:1e:99:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGgdf0UaomXk8SSu+nPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5 NTU0NmQwHhcNMjUxMjA2MTcwMTIyWhcNMjUxMjA3MTcwMTIyWjAzMTEwLwYDVQQD EyhhMWJkNTNkNGQ2NmExYjVhYTgwNjhhNmEzMmM2NzVjMGRiM2RiOTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofmfa2h93Jldq4SMRRwad4yBQBtD QAhCjpu6C2ZrveXGzwMEpapQx4gYMEjp2FModns4L9R4qSF1HrRxjLjEfbPUJnGa nPFbfrss/ic4RDr5xNA7p/qa+vz6re9jFAiE8B1KPkSPm3AJV7RsuUDmXDj8Ucq5 Yu9JYOZ5fm6r3rfKVQCwmpkC752nOXDx80Cbm/20cZZ8ZzPiSKo8C6fq/urudxwe NxkDuhYL5cUKIk077i1PNmj5GAVJsh8IS+dCMyAODJyt7Olln6tr+56R45Og7rQ3 EKOHhlFC61ovHlfKga9w7rEo0rkFyU4toa1tBqSVjMPc6fGNdGnpbkRC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG9U9TWahtaqAaKajLGdcDbPblFMB8GA1UdIwQY MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1tdbLEi 7ysNucl1LZfBXMk7pKxUHSxOLevIMdp1yPST1wSZ3be6ev/JR2XwyKySdCD1k7LA SZwtztfNZD/Oq879ki1WlAa+weae+qMe0BtsEYIKf3iDwepwzvqmVnwvsV5Y7NNZ eLJTwsiLLD1XQ/4S46Vc+9Pa9GP6+EC7RtSflF0U/LcazvtCC8fxL8nnTPNypvgR jW4g5mAtDjCXtZAdToNG9dsqGFfXzIXFBgnsk5HlHwIvbNGbNfl53xaGYLsAMr+9 ZIJV1yJ2YNOQtG8KtOwNOxeZN9P9hpsZ3v9rKI39YHKomQFLVejUUuRW/tDiN46p LfzEQd3Ddx6ZCQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:56 2025 by rpki-client