This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json) Hash identifier: v1KxRuYOutaFYemq97xwKaU/viB++Jr8HM8MZPrlkcI= Subject key identifier: 60:9B:4F:F5:FA:3C:C9:E8:04:89:06:95:DD:E2:EB:E9:C3:38:83:68 Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84 Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84 Certificate serial: 019AF2767FB1B70F67F4F0028F4E72148BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft Manifest number: 0ED3 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: MxcAEg/5Cwr+LZXkF2NSnDlQpKJnCDMjxWPhoEuPpik=) 2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:b1:b7:0f:67:f4:f0:02:8f:4e:72:14:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=609b4ff5fa3cc9e804890695dde2ebe9c3388368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:ab:d3:27:04:53:d7:d8:ea:24:f2:2f:72: ef:41:f9:2e:45:b0:64:4b:b4:d9:4b:aa:0a:35:42: 9e:8d:b7:4b:9b:00:56:0b:d9:ff:57:2d:f8:ee:58: 1d:ab:a6:21:f6:b8:94:79:a4:d9:50:f7:1d:f4:a4: 70:60:26:a9:31:91:49:00:72:59:a6:39:f8:7d:44: 24:d8:be:8e:da:2a:fc:e3:4c:40:5b:43:5d:ec:0d: e7:42:40:4d:95:37:e2:57:8b:bc:38:8c:4d:7a:da: 08:9e:a5:6a:51:35:52:b4:6f:cc:b7:10:45:60:53: 0b:c7:82:c4:52:27:54:8c:bc:95:85:0c:0f:a5:fe: 80:3e:db:50:ee:c1:06:b7:e5:d6:7d:13:f3:6f:a3: 5b:2c:0c:97:2b:ad:08:63:bc:fe:1d:58:1f:6a:5b: f6:76:bb:d3:40:1f:1c:92:98:17:76:6e:09:2e:d5: 22:e5:3e:30:58:3c:a8:1a:fc:13:1f:55:93:86:88: d2:81:9f:53:45:46:84:45:18:a5:07:0b:e7:07:22: 87:10:c4:98:61:4e:6a:86:0a:04:bf:0b:2d:7c:7f: 95:e0:ee:51:99:98:83:60:c1:7d:37:22:0a:4c:db: 4e:64:6b:ab:e5:39:89:0f:a5:f0:90:59:3c:9c:3d: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9B:4F:F5:FA:3C:C9:E8:04:89:06:95:DD:E2:EB:E9:C3:38:83:68 X509v3 Authority Key Identifier: keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d4:ba:3a:3d:f5:57:db:47:82:13:1f:a8:a2:65:e0:34:92: a5:aa:13:f2:bc:60:4c:0d:85:c7:8d:a9:91:a4:d5:45:8a:82: aa:64:b5:ee:ca:08:61:ae:32:6b:86:26:c2:b8:24:22:9f:a8: 2f:8d:4e:f1:d6:99:06:32:e2:ea:af:6b:65:4a:a0:21:cf:ff: 4a:50:16:23:f1:52:c3:92:30:35:ff:ad:b4:3d:60:81:84:ce: 61:54:e3:b6:a8:13:f0:39:f6:59:d6:4c:31:05:c0:60:bc:8a: 77:a7:d0:cf:6a:9b:9a:9a:7d:14:c3:46:01:25:39:d7:5c:9d: 0d:14:21:bb:1e:1d:e7:ba:b6:08:b1:38:39:2c:ab:41:13:7a: 26:98:33:06:7a:92:aa:17:1f:81:ad:45:a8:24:33:2b:f7:b9: 97:96:0c:3c:23:a3:5b:d3:cd:0b:0a:c9:50:f6:3c:32:10:17: 73:e7:f0:a8:8d:21:05:63:f6:5e:db:a7:7a:27:dc:1e:40:75: 69:9f:37:cb:1c:79:a2:56:39:c3:3b:4c:8c:e9:73:71:2c:0d: 93:5e:9f:0f:00:1c:94:30:e8:ed:c2:4c:7e:de:8d:df:f1:24: d7:42:29:68:12:30:df:7c:9e:4d:30:62:90:63:1d:25:6b:bb: 6d:d0:7a:47 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydn+xtw9n9PACj05yFIuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWRlMzdiYmM2YzA2NDIwZGE2MjZjMGJiNGQ3MjMyMzFl OTNlODQwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD Eyg2MDliNGZmNWZhM2NjOWU4MDQ4OTA2OTVkZGUyZWJlOWMzMzg4MzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJyr0ycEU9fY6iTyL3LvQfkuRbBk S7TZS6oKNUKejbdLmwBWC9n/Vy347lgdq6Yh9riUeaTZUPcd9KRwYCapMZFJAHJZ pjn4fUQk2L6O2ir840xAW0Nd7A3nQkBNlTfiV4u8OIxNetoInqVqUTVStG/MtxBF YFMLx4LEUidUjLyVhQwPpf6APttQ7sEGt+XWfRPzb6NbLAyXK60IY7z+HVgfalv2 drvTQB8ckpgXdm4JLtUi5T4wWDyoGvwTH1WThojSgZ9TRUaERRilBwvnByKHEMSY YU5qhgoEvwstfH+V4O5RmZiDYMF9NyIKTNtOZGur5TmJD6XwkFk8nD3hqQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGCbT/X6PMnoBIkGld3i6+nDOINoMB8GA1UdIwQY MBaAFPod43u8bAZCDaYmwLtNcjIx6T6EMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oM2plN3hzQmtJTnBpYkF1MDF5TWpIcFBvUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjA4ZjZkLThjZDEtNDk5ZS1hNTE4 LTVmMTU5MzllNzY4MC8xLzEtaDNqZTd4c0JrSU5waWJBdTAxeU1qSHBQb1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FjLzYwOGY2ZC04Y2QxLTQ5OWUtYTUxOC01ZjE1OTM5ZTc2 ODAvMS8xLWgzamU3eHNCa0lOcGliQXUwMXlNakhwUG9RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadS6 Oj31V9tHghMfqKJl4DSSpaoT8rxgTA2Fx42pkaTVRYqCqmS17soIYa4ya4Ymwrgk Ip+oL41O8daZBjLi6q9rZUqgIc//SlAWI/FSw5IwNf+ttD1ggYTOYVTjtqgT8Dn2 WdZMMQXAYLyKd6fQz2qbmpp9FMNGASU511ydDRQhux4d57q2CLE4OSyrQRN6Jpgz BnqSqhcfga1FqCQzK/e5l5YMPCOjW9PNCwrJUPY8MhAXc+fwqI0hBWP2Xtuneifc HkB1aZ83yxx5olY5wztMjOlzcSwNk16fDwAclDDo7cJMft6N3/Ek10IpaBIw33ye TTBikGMdJWu7bdB6Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:03 2025 by rpki-client