This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json) Hash identifier: +78Bhe3HGmY6qMjAD9iuOtEeu/KlO7p1HVUT5Bl0Bt8= Subject key identifier: 84:30:8B:53:6A:71:6F:0D:41:83:42:11:D3:9E:C3:4E:02:13:D3:A2 Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Certificate serial: 019AF352150083501964D757FBDAFD7938DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft Manifest number: 048E Signing time: Sat 06 Dec 2025 11:00:33 +0000 Manifest this update: Sat 06 Dec 2025 11:00:33 +0000 Manifest next update: Sun 07 Dec 2025 11:00:33 +0000 Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: FnU1+dosq5wPPI59be6m6AXZHqx/cKSIvcn5EmHqJKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:15:00:83:50:19:64:d7:57:fb:da:fd:79:38:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Validity Not Before: Dec 6 11:00:33 2025 GMT Not After : Dec 7 11:00:33 2025 GMT Subject: CN=84308b536a716f0d41834211d39ec34e0213d3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:b3:01:37:c7:49:ce:9f:8d:6d:7a:b2:b9: 29:22:6c:42:d6:39:74:3c:a4:b3:51:f4:65:86:6f: 00:1c:d1:8a:ae:29:39:c0:50:16:39:c7:1e:ef:19: 2e:5e:ed:92:83:06:45:8f:5b:c3:66:0b:d4:4b:1a: 44:c9:0e:1a:51:ff:d8:0a:a0:51:cb:26:55:82:94: c6:ae:28:9f:59:4a:71:70:99:12:a6:dc:f2:90:63: 07:4f:e2:69:74:d7:d0:d7:5c:8c:4b:25:2e:6b:2f: 08:75:18:b1:9a:07:02:68:52:d2:e8:5d:cf:69:34: d7:cb:40:a7:e4:7d:36:b1:1d:84:63:a8:e3:2d:b0: a4:53:12:f1:ce:41:5a:4c:a4:9d:a5:c7:8a:24:c1: d7:bd:91:c9:d3:3f:d8:b4:d5:8f:8a:f7:09:6a:1a: 9f:35:67:d2:cc:a7:72:55:aa:8a:d4:7c:f4:16:f5: 90:ce:a9:48:67:be:b0:41:b0:6b:d8:2a:84:a6:5e: 7f:1f:e6:f5:ae:9b:a7:68:ab:06:5a:52:1e:80:df: d3:43:63:62:43:0b:16:c4:35:08:d6:79:7f:0d:48: 78:a5:68:12:d0:3b:17:de:e1:68:1a:d4:48:e3:71: b1:6e:c8:4f:38:81:cc:3a:61:a6:4e:d9:c4:47:14: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:30:8B:53:6A:71:6F:0D:41:83:42:11:D3:9E:C3:4E:02:13:D3:A2 X509v3 Authority Key Identifier: keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1f:a5:18:fa:30:f3:47:a7:5b:47:aa:e2:61:32:a5:37:d9: ac:c3:0d:41:6b:2c:b7:f6:27:38:eb:90:4a:fd:56:28:07:26: f5:d3:99:3a:77:57:bf:0f:d8:96:e5:ff:ad:3e:80:b6:53:98: 03:cd:7f:60:1c:8f:43:57:8f:03:87:c3:e3:cb:1f:33:80:a7: 25:b3:ce:ca:98:a9:5e:43:4f:44:0e:f0:b5:8b:f1:b4:97:23: ad:7f:8d:73:b6:6c:12:f4:62:f7:14:cc:61:ce:aa:d8:26:b6: 9f:93:a1:fa:fa:03:54:85:d0:ff:b2:02:62:79:3d:70:e8:a0: 0d:bf:16:e6:99:97:df:69:8c:b7:5d:b0:8b:62:91:cb:c1:78: 6f:3a:38:5b:2e:5a:e8:aa:ac:21:d5:94:07:c2:16:00:8b:f6: 59:46:1b:53:79:96:b0:f0:4f:93:2a:bc:20:7e:8c:42:2d:1b: 18:44:d0:e4:3a:cc:81:00:3f:15:24:77:cc:57:21:3d:f8:5c: f4:0d:d2:81:0e:cc:3e:b9:ce:d1:0e:4d:4e:79:f2:38:8b:bf: 18:5c:14:95:f3:4e:29:5b:2e:f1:d9:b2:c0:dc:cf:8c:95:34: 9e:a4:04:ee:95:b1:b0:e0:22:e6:70:dc:8a:e8:29:1e:5c:70: f1:a7:45:a0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzUhUAg1AZZNdX+9r9eTjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzU4NWExMDVlZTgzYzY0NWUyZWVmMTNkYzA4MWUzNWNh YTJjMDQwHhcNMjUxMjA2MTEwMDMzWhcNMjUxMjA3MTEwMDMzWjAzMTEwLwYDVQQD Eyg4NDMwOGI1MzZhNzE2ZjBkNDE4MzQyMTFkMzllYzM0ZTAyMTNkM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKqzATfHSc6fjW16srkpImxC1jl0 PKSzUfRlhm8AHNGKrik5wFAWOcce7xkuXu2SgwZFj1vDZgvUSxpEyQ4aUf/YCqBR yyZVgpTGriifWUpxcJkSptzykGMHT+JpdNfQ11yMSyUuay8IdRixmgcCaFLS6F3P aTTXy0Cn5H02sR2EY6jjLbCkUxLxzkFaTKSdpceKJMHXvZHJ0z/YtNWPivcJahqf NWfSzKdyVaqK1Hz0FvWQzqlIZ76wQbBr2CqEpl5/H+b1rpunaKsGWlIegN/TQ2Ni QwsWxDUI1nl/DUh4pWgS0DsX3uFoGtRI43GxbshPOIHMOmGmTtnERxRrewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIQwi1NqcW8NQYNCEdOew04CE9OiMB8GA1UdIwQY MBaAFPo1haEF7oPGReLu8T3AgeNcqiwEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qV0ZvUVh1ZzhaRjR1N3hQY0NCNDF5cUxBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjk3YWExLTZmM2MtNGJkNS05MWQ0 LWM0YTliOTU3NjVhYy8xLzEtaldGb1FYdWc4WkY0dTd4UGNDQjQxeXFMQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y5N2FhMS02ZjNjLTRiZDUtOTFkNC1jNGE5Yjk1NzY1 YWMvMS8xLWpXRm9RWHVnOFpGNHU3eFBjQ0I0MXlxTEFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx+l GPow80enW0eq4mEypTfZrMMNQWsst/YnOOuQSv1WKAcm9dOZOndXvw/YluX/rT6A tlOYA81/YByPQ1ePA4fD48sfM4CnJbPOypipXkNPRA7wtYvxtJcjrX+Nc7ZsEvRi 9xTMYc6q2Ca2n5Oh+voDVIXQ/7ICYnk9cOigDb8W5pmX32mMt12wi2KRy8F4bzo4 Wy5a6KqsIdWUB8IWAIv2WUYbU3mWsPBPkyq8IH6MQi0bGETQ5DrMgQA/FSR3zFch Pfhc9A3SgQ7MPrnO0Q5NTnnyOIu/GFwUlfNOKVsu8dmywNzPjJU0nqQE7pWxsOAi 5nDciugpHlxw8adFoA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:52 2025 by rpki-client