This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json) Hash identifier: bS+BwY53wEhf3z0u+U3GWQnIO9QVVUQcNvJdf4mW64A= Subject key identifier: 6A:44:0F:6C:21:25:31:DC:AC:BC:1C:9D:7F:D0:C6:7D:DE:DF:31:09 Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Certificate serial: 019AF12D64ACAFFBCABF6C328F1AFE9FDC01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: XFmQFwqqphOW1cQdx1st/8v/UwfrHMy0yi7Ke/HgYjA=) 2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:64:ac:af:fb:ca:bf:6c:32:8f:1a:fe:9f:dc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=6a440f6c212531dcacbc1c9d7fd0c67ddedf3109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:71:1e:2e:50:2a:47:67:4c:c1:4c:0b:33: b3:e8:ee:4e:2c:0c:59:ea:ca:bd:19:5c:a5:07:1d: e0:df:d3:1a:d6:e6:cb:93:0a:6d:1e:d4:9d:27:48: f2:96:dc:2d:bf:7a:77:d6:fb:85:ef:9c:38:22:e8: d3:bd:38:23:21:c8:96:91:77:a8:8f:7d:48:bc:47: 92:f9:dc:d6:9a:46:a0:29:29:f4:18:f1:02:57:82: 93:fe:83:ea:d4:59:bc:6a:54:ad:a8:77:de:21:d6: 65:72:17:81:26:6a:fc:e9:6b:51:1b:35:f1:de:e1: 15:01:ca:f6:47:85:1f:d1:8a:c6:33:d4:57:3f:ce: d4:22:c0:fb:c7:1e:86:4f:22:a7:d4:04:fa:06:1a: 4c:6c:da:53:86:80:d8:65:6b:bf:24:18:39:f4:fb: 64:bd:ee:24:b6:57:a8:60:7a:ee:14:f3:b3:01:0d: 1b:a4:f2:a5:8e:f2:65:3f:44:de:18:d9:40:e4:5f: 8f:f6:cd:4c:69:e6:8a:ca:02:0c:0f:37:1f:92:75: a1:3c:28:f8:43:f1:18:21:f5:97:e9:37:62:5c:62: a3:b7:34:ef:3f:91:61:e2:a0:4f:71:1e:9c:40:45: 1b:a1:34:ec:87:82:f0:6c:cc:78:21:6e:75:82:41: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:44:0F:6C:21:25:31:DC:AC:BC:1C:9D:7F:D0:C6:7D:DE:DF:31:09 X509v3 Authority Key Identifier: keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b3:24:86:11:65:38:4c:f9:e3:b0:c3:78:a6:60:2d:9b:e2: 21:b6:c0:4c:6f:18:5c:89:9a:38:03:28:62:30:ae:7f:71:ad: 89:c7:04:93:5d:18:1a:a3:b2:42:0b:a8:34:63:2b:cb:65:d0: 22:5d:9d:1a:96:09:19:32:dc:b2:94:8e:29:73:a5:ad:aa:33: e4:d2:3d:0f:3f:30:0b:8e:c9:d0:4f:d2:ba:e7:99:07:fa:dd: 24:90:a7:aa:b0:d9:ab:9b:da:f2:3e:69:0d:4d:4b:10:6a:44: 17:5f:b2:83:7a:60:19:cc:6e:39:9b:b3:25:25:60:97:f5:84: 88:bb:e0:65:79:8b:31:ba:25:67:70:9d:6f:69:eb:05:da:25: 3a:f4:58:74:06:6b:ec:b5:05:69:01:69:71:93:1d:08:de:b9: 03:b9:e2:27:66:48:17:46:9e:1c:a1:23:57:c9:bb:82:b2:58: b7:44:28:68:e1:0e:3c:a9:35:d6:29:5f:b2:0f:c6:25:42:52: 32:c5:ec:69:ae:b5:80:c3:2e:81:74:14:5b:00:4b:d0:58:d1: 88:20:a8:8c:e9:00:c1:be:c4:fb:d6:56:ae:67:90:e8:c3:fd: 8f:b0:e2:44:29:2a:08:98:52:7e:64:a6:41:fc:47:df:10:e0: b8:5f:fd:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLWSsr/vKv2wyjxr+n9wBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm YTBjZWIwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD Eyg2YTQ0MGY2YzIxMjUzMWRjYWNiYzFjOWQ3ZmQwYzY3ZGRlZGYzMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYBxHi5QKkdnTMFMCzOz6O5OLAxZ 6sq9GVylBx3g39Ma1ubLkwptHtSdJ0jyltwtv3p31vuF75w4IujTvTgjIciWkXeo j31IvEeS+dzWmkagKSn0GPECV4KT/oPq1Fm8alStqHfeIdZlcheBJmr86WtRGzXx 3uEVAcr2R4Uf0YrGM9RXP87UIsD7xx6GTyKn1AT6BhpMbNpThoDYZWu/JBg59Ptk ve4ktleoYHruFPOzAQ0bpPKljvJlP0TeGNlA5F+P9s1MaeaKygIMDzcfknWhPCj4 Q/EYIfWX6TdiXGKjtzTvP5Fh4qBPcR6cQEUboTTsh4LwbMx4IW51gkGlfQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGpED2whJTHcrLwcnX/Qxn3e3zEJMB8GA1UdIwQY MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLMk hhFlOEz547DDeKZgLZviIbbATG8YXImaOAMoYjCuf3GticcEk10YGqOyQguoNGMr y2XQIl2dGpYJGTLcspSOKXOlraoz5NI9Dz8wC47J0E/SuueZB/rdJJCnqrDZq5va 8j5pDU1LEGpEF1+yg3pgGcxuOZuzJSVgl/WEiLvgZXmLMbolZ3Cdb2nrBdolOvRY dAZr7LUFaQFpcZMdCN65A7niJ2ZIF0aeHKEjV8m7grJYt0QoaOEOPKk11ilfsg/G JUJSMsXsaa61gMMugXQUWwBL0FjRiCCojOkAwb7E+9ZWrmeQ6MP9j7DiRCkqCJhS fmSmQfxH3xDguF/9zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:19 2025 by rpki-client