This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json) Hash identifier: I7vF0VrqyQaCKzupKvBT2CW0JDJlu9Yr5dtXM5eqzJo= Subject key identifier: 06:22:35:BE:BF:AC:A8:8A:8B:F9:12:FD:69:11:8D:94:2E:4C:4B:A8 Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Certificate serial: 019AF2096B72CB779E1311C90A6F8EE47F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft Manifest number: 07C3 Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: b+GUK3PCdKzfLb/6ZwWV6Y1hB1WyV2Z1WiY8YimWkRY=) 2: wSUCaZlDq8tA-HMBau3EJ93tyfU.roa (hash: yMgrf3IwtSaiP9aq+f/a8xegEvYBFlBB7iCkJrEJ6kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6b:72:cb:77:9e:13:11:c9:0a:6f:8e:e4:7f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=062235bebfaca88a8bf912fd69118d942e4c4ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:5f:62:27:77:26:bd:1c:fe:2e:bf:5a:9e: c8:df:3d:50:a8:cb:f8:74:d5:04:3e:eb:6e:89:ea: 72:bb:d4:4d:15:28:c3:37:b2:d6:dd:e1:ae:c8:77: 98:c2:b5:a6:de:ab:8d:46:8d:d4:43:dd:db:f9:1b: c5:b5:0d:6a:b8:f9:da:46:ba:f7:ff:e5:52:fb:d7: e2:21:85:72:aa:0b:76:b9:cc:3b:ee:de:12:43:12: a8:79:ac:68:05:e4:da:87:61:e3:c7:b4:22:74:99: d3:fc:a3:e8:92:8c:78:6b:a5:11:17:a2:61:41:c2: f4:9f:d4:7a:ac:39:f2:3c:29:b8:49:dc:99:52:f5: ba:c5:ee:ab:bb:05:37:82:42:01:c5:40:26:23:96: ec:c3:71:ff:f5:0c:8d:0f:f4:8e:35:84:b6:89:9d: 45:73:99:37:e3:cb:ef:05:53:7a:e3:ff:c7:15:b7: db:38:2b:5a:db:b9:1c:3c:e2:e4:e7:32:11:e7:22: 99:ae:ee:b5:ba:41:36:60:ba:d6:2c:09:e4:97:f6: c1:d5:45:25:77:4d:5e:8a:43:6d:db:b0:34:e3:b5: f6:56:de:e5:31:0c:39:a2:54:5e:90:c2:4c:58:c5: a8:61:65:9a:21:96:53:a7:fb:73:e4:56:33:dc:1b: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:22:35:BE:BF:AC:A8:8A:8B:F9:12:FD:69:11:8D:94:2E:4C:4B:A8 X509v3 Authority Key Identifier: keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:8f:85:d5:b3:67:55:bc:dc:7a:44:c0:cb:a3:51:26:33: c3:c6:61:89:d7:a4:61:d8:89:95:9a:e7:4f:6e:4b:ae:d7:18: ea:b1:8e:84:59:41:3b:eb:d8:76:58:66:51:2b:f8:d2:d1:28: 79:93:03:b4:56:0b:ba:d3:a3:eb:e9:b3:f7:27:37:72:a1:d4: 54:e3:20:b4:75:e8:0e:64:c0:a4:b4:ee:ec:dc:55:35:ec:2a: e9:7e:8c:25:e8:91:e4:d8:29:5e:8b:80:c3:9a:18:1c:a5:ed: d3:1d:e2:e6:eb:a5:b4:ef:45:82:e2:4f:d2:48:de:9d:f7:b0: 5a:b9:7f:d0:53:64:c2:93:48:78:bd:92:9d:9c:18:3e:45:a1: 5d:fb:10:88:6a:5d:13:0d:a4:f3:d8:f3:3e:2b:81:9d:81:e6: 62:a9:ac:e3:d8:2b:7a:2b:6e:e4:af:72:39:5f:55:97:b2:d8: 10:f0:2e:51:77:ea:d0:42:ce:f3:a2:18:2e:50:88:98:e4:4a: 01:fc:dc:f6:29:4b:0f:a8:d0:46:29:e0:87:48:3a:e2:14:4d: cd:01:7f:02:17:c2:e4:52:40:a0:92:01:f8:31:06:c1:df:8c: 77:38:76:5c:5e:87:b7:ef:ff:f4:b2:33:1c:9f:10:73:1c:10: d3:7e:64:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCWtyy3eeExHJCm+O5H81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh Mjg5YjQwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EygwNjIyMzViZWJmYWNhODhhOGJmOTEyZmQ2OTExOGQ5NDJlNGM0YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApglfYid3Jr0c/i6/Wp7I3z1QqMv4 dNUEPutuiepyu9RNFSjDN7LW3eGuyHeYwrWm3quNRo3UQ93b+RvFtQ1quPnaRrr3 /+VS+9fiIYVyqgt2ucw77t4SQxKoeaxoBeTah2Hjx7QidJnT/KPokox4a6URF6Jh QcL0n9R6rDnyPCm4SdyZUvW6xe6ruwU3gkIBxUAmI5bsw3H/9QyND/SONYS2iZ1F c5k348vvBVN64//HFbfbOCta27kcPOLk5zIR5yKZru61ukE2YLrWLAnkl/bB1UUl d01eikNt27A047X2Vt7lMQw5olRekMJMWMWoYWWaIZZTp/tz5FYz3BtDjwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAYiNb6/rKiKi/kS/WkRjZQuTEuoMB8GA1UdIwQY MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1 LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY2P hdWzZ1W83HpEwMujUSYzw8ZhidekYdiJlZrnT25LrtcY6rGOhFlBO+vYdlhmUSv4 0tEoeZMDtFYLutOj6+mz9yc3cqHUVOMgtHXoDmTApLTu7NxVNewq6X6MJeiR5Ngp XouAw5oYHKXt0x3i5uultO9FguJP0kjenfewWrl/0FNkwpNIeL2SnZwYPkWhXfsQ iGpdEw2k89jzPiuBnYHmYqms49greitu5K9yOV9Vl7LYEPAuUXfq0ELO86IYLlCI mORKAfzc9ilLD6jQRingh0g64hRNzQF/AhfC5FJAoJIB+DEGwd+Mdzh2XF6Ht+// 9LIzHJ8QcxwQ035k+A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:00 2025 by rpki-client