This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json) Hash identifier: y7asbk97cw+PXWZ3Prq0KZ1Clp9ZLvTpliDrw7f6CWM= Subject key identifier: B7:E3:19:45:FD:5C:F1:5C:1C:A9:6F:EE:30:5C:E7:37:70:82:E2:3B Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Certificate serial: 019AF3F7226E181ED0FDBA5C0BD07387B93E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 14:00:50 +0000 Manifest this update: Sat 06 Dec 2025 14:00:50 +0000 Manifest next update: Sun 07 Dec 2025 14:00:50 +0000 Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: 4ZisTgxgJEjlt7sD2nZh+G+EEluWguEdRzU/RWsiqXM=) 2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:22:6e:18:1e:d0:fd:ba:5c:0b:d0:73:87:b9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Validity Not Before: Dec 6 14:00:50 2025 GMT Not After : Dec 7 14:00:50 2025 GMT Subject: CN=b7e31945fd5cf15c1ca96fee305ce7377082e23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:2f:da:78:b5:07:92:59:09:7e:1a:5f:d3: ef:d0:86:15:59:0b:2c:87:f2:98:e2:30:1c:9f:50: b2:71:73:56:ac:f2:75:ea:01:ad:3b:28:5a:20:a0: 67:41:ce:91:ca:54:84:bd:8e:de:eb:ef:3d:e2:13: 5b:66:a4:82:e7:c1:e6:c9:2e:d6:f1:7b:03:30:45: 50:51:20:05:34:e5:27:ca:c6:ee:92:5b:ba:9d:6f: aa:f2:5f:67:04:5a:87:ca:49:c7:ae:8e:2a:a2:b1: 78:46:a0:cf:64:d5:43:02:a0:4d:0a:e0:92:2f:48: d5:e2:aa:6a:88:15:4c:b2:5c:26:b7:b0:ed:53:a3: df:2c:f9:bf:22:9b:df:7d:3c:33:95:de:f6:d9:be: e9:4f:c4:66:27:21:85:76:f9:a9:ef:8b:07:3b:79: 0e:c4:21:c6:44:4b:ff:00:51:28:e1:83:c0:0e:ba: 0e:fd:2d:94:8f:af:bf:8a:dd:06:e0:82:bf:92:e5: 7d:ba:68:ca:bd:03:3d:29:49:42:a3:8e:4e:d4:84: 74:93:67:af:42:2e:53:8b:af:dd:e8:2c:a1:f8:76: 1b:93:4d:7c:46:3c:15:50:b8:a4:ec:74:8b:9c:02: 23:75:f5:b9:33:cc:73:47:7b:eb:25:ce:ae:28:1f: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E3:19:45:FD:5C:F1:5C:1C:A9:6F:EE:30:5C:E7:37:70:82:E2:3B X509v3 Authority Key Identifier: keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:ec:50:f6:b8:67:52:f7:d7:14:2a:4b:9b:37:7b:da:ff: f3:5a:bc:53:b8:65:8b:a8:a8:1b:49:16:59:4d:7c:28:7e:64: 9e:16:d2:21:73:1e:53:ec:7f:a9:54:e4:34:6b:48:94:1f:c3: 8f:2c:97:f6:44:8c:95:cb:64:6b:ab:8e:de:ac:a4:ac:b5:3c: 02:c0:75:13:8a:73:4f:e2:37:2b:13:63:f6:94:46:a1:24:28: 4f:be:bb:7b:db:1d:4d:1e:47:f9:20:74:7a:ff:7c:32:06:5f: d1:b8:47:86:6c:fb:43:e6:04:d7:d0:73:8e:9d:3e:71:53:35: 30:2d:33:31:79:13:ab:f4:d6:84:c1:a0:a4:94:f9:b4:86:be: ea:c6:62:35:c6:3d:54:4c:63:9e:30:a2:f7:37:53:da:c7:79: 6f:07:15:f8:cb:b8:2c:ec:8f:ed:31:99:68:be:89:f9:7c:df: e7:f6:4a:a3:83:55:60:7f:70:f8:48:e4:00:da:fa:74:59:89: 97:b9:70:75:6e:cc:55:47:65:06:23:9b:06:a4:f1:3e:84:23: a4:ea:70:01:39:3c:83:99:99:0f:e0:bf:dd:02:82:5f:b5:1c: 78:93:53:d4:ed:8c:07:e5:fc:a3:c2:a3:c8:e9:12:36:6b:1c: 5f:6f:06:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrz9yJuGB7Q/bpcC9Bzh7k+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw ZWQ0YzcwHhcNMjUxMjA2MTQwMDUwWhcNMjUxMjA3MTQwMDUwWjAzMTEwLwYDVQQD EyhiN2UzMTk0NWZkNWNmMTVjMWNhOTZmZWUzMDVjZTczNzcwODJlMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIMv2ni1B5JZCX4aX9Pv0IYVWQss h/KY4jAcn1CycXNWrPJ16gGtOyhaIKBnQc6RylSEvY7e6+894hNbZqSC58HmyS7W 8XsDMEVQUSAFNOUnysbuklu6nW+q8l9nBFqHyknHro4qorF4RqDPZNVDAqBNCuCS L0jV4qpqiBVMslwmt7DtU6PfLPm/IpvffTwzld722b7pT8RmJyGFdvmp74sHO3kO xCHGREv/AFEo4YPADroO/S2Uj6+/it0G4IK/kuV9umjKvQM9KUlCo45O1IR0k2ev Qi5Ti6/d6Cyh+HYbk018RjwVULik7HSLnAIjdfW5M8xzR3vrJc6uKB8iCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLfjGUX9XPFcHKlv7jBc5zdwguI7MB8GA1UdIwQY MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2 LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3 YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1/s UPa4Z1L31xQqS5s3e9r/81q8U7hli6ioG0kWWU18KH5knhbSIXMeU+x/qVTkNGtI lB/DjyyX9kSMlctka6uO3qykrLU8AsB1E4pzT+I3KxNj9pRGoSQoT767e9sdTR5H +SB0ev98MgZf0bhHhmz7Q+YE19Bzjp0+cVM1MC0zMXkTq/TWhMGgpJT5tIa+6sZi NcY9VExjnjCi9zdT2sd5bwcV+Mu4LOyP7TGZaL6J+Xzf5/ZKo4NVYH9w+EjkANr6 dFmJl7lwdW7MVUdlBiObBqTxPoQjpOpwATk8g5mZD+C/3QKCX7UceJNT1O2MB+X8 o8KjyOkSNmscX28GRg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:48 2025 by rpki-client