This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json) Hash identifier: fUiGN4262Njok3ho1szKzOQJm0nit8w3/6jag/s57io= Subject key identifier: 79:C9:0D:90:B2:2F:2D:C8:A4:88:0A:75:66:83:EC:E8:CC:05:BC:C3 Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Certificate serial: 019AF5AECDF543E83C7DBF2D465A00DB80A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft Manifest number: 11FB Signing time: Sat 06 Dec 2025 22:01:05 +0000 Manifest this update: Sat 06 Dec 2025 22:01:05 +0000 Manifest next update: Sun 07 Dec 2025 22:01:05 +0000 Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: 0U0Il64liAyKATybg3IAncy9dyD331sRDOadq/1C1F8=) 2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:cd:f5:43:e8:3c:7d:bf:2d:46:5a:00:db:80:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Validity Not Before: Dec 6 22:01:05 2025 GMT Not After : Dec 7 22:01:05 2025 GMT Subject: CN=79c90d90b22f2dc8a4880a756683ece8cc05bcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:de:53:8f:62:9f:3e:9e:3e:1d:5d:0b:76: 4e:6d:ab:e0:96:db:dc:16:0c:be:51:d9:c3:e0:e8: 57:4b:58:d4:de:2c:d2:c2:12:82:17:74:c2:98:89: f1:d3:68:8e:36:e7:58:1d:58:19:ba:2f:74:77:6b: 54:64:6b:d4:1a:88:5e:42:25:db:d9:cf:31:94:0a: 94:57:e8:19:06:e5:fb:10:f9:d4:c4:22:2a:2b:f7: 0a:3b:70:6e:e8:cc:15:59:ee:a8:c2:8d:1a:a9:43: c8:fb:8f:8a:6f:ab:b5:57:12:72:af:99:7f:87:10: a1:91:ae:75:12:77:3f:2c:f6:45:39:94:5b:67:92: 52:05:d2:8f:d0:ff:78:13:e3:fe:5f:e6:8c:0f:58: ec:b9:ef:db:d7:d4:7b:7a:fe:45:ad:2a:b0:7a:96: 1b:5c:90:af:f4:4c:f3:7b:32:01:d7:02:18:62:2c: 41:b3:7f:55:4c:ac:21:99:9a:43:c6:9b:51:a5:df: f5:fe:91:75:2b:89:f2:f2:2f:64:2c:22:be:52:ea: 14:c0:75:d4:0b:6a:26:4b:62:8e:57:d9:66:d4:44: d3:c6:f4:f1:62:60:a8:51:5e:93:7a:5f:9d:c3:d8: 18:c9:bd:56:20:75:30:0d:5f:e4:ec:05:57:c6:3a: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C9:0D:90:B2:2F:2D:C8:A4:88:0A:75:66:83:EC:E8:CC:05:BC:C3 X509v3 Authority Key Identifier: keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c2:e9:50:e6:18:02:c3:a5:49:d1:98:1d:b1:22:6f:9a:2c: 1e:93:93:78:24:e1:7b:69:c2:17:ce:82:c1:96:4e:fe:dc:ac: f7:06:65:cb:8a:f9:67:9e:a2:e0:8b:4e:9e:a4:b7:5e:df:1a: 90:cb:85:64:fb:3f:84:67:50:75:55:af:7b:bf:52:fe:56:ec: f0:e3:1a:af:8b:2e:ac:d4:b9:f1:c6:2d:c6:74:db:d7:91:b7: 67:89:c4:fb:fa:24:ae:20:89:4d:10:86:ce:78:16:7b:e5:2c: 86:30:43:50:91:f6:71:c3:fd:db:41:ec:30:dc:f4:2d:59:3d: c2:8d:ee:ba:98:42:82:09:75:48:19:74:01:2e:05:ad:86:37: d7:cd:9a:31:37:04:d1:50:a1:b7:81:fc:81:e4:a0:16:f2:cd: 94:b2:8a:eb:da:ef:6a:b5:2d:80:8b:32:e4:4e:04:e5:b0:83: bb:8f:b8:a5:ee:91:2b:e7:e3:7c:97:d7:96:b1:5a:14:84:08: be:fa:7d:19:9f:da:4c:d4:8a:24:c4:93:7b:d9:2d:e8:55:ec: c6:7a:e0:1f:8e:3a:53:a5:1e:36:a7:c4:dc:9c:85:84:9c:68: 62:67:4c:20:7c:53:ce:91:47:20:27:05:db:bf:d7:13:6b:0f: 18:fe:37:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1rs31Q+g8fb8tRloA24ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj OGQ0MDQwHhcNMjUxMjA2MjIwMTA1WhcNMjUxMjA3MjIwMTA1WjAzMTEwLwYDVQQD Eyg3OWM5MGQ5MGIyMmYyZGM4YTQ4ODBhNzU2NjgzZWNlOGNjMDViY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbDeU49inz6ePh1dC3ZObavgltvc Fgy+UdnD4OhXS1jU3izSwhKCF3TCmInx02iONudYHVgZui90d2tUZGvUGoheQiXb 2c8xlAqUV+gZBuX7EPnUxCIqK/cKO3Bu6MwVWe6owo0aqUPI+4+Kb6u1VxJyr5l/ hxChka51Enc/LPZFOZRbZ5JSBdKP0P94E+P+X+aMD1jsue/b19R7ev5FrSqwepYb XJCv9EzzezIB1wIYYixBs39VTKwhmZpDxptRpd/1/pF1K4ny8i9kLCK+UuoUwHXU C2omS2KOV9lm1ETTxvTxYmCoUV6Tel+dw9gYyb1WIHUwDV/k7AVXxjolMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHnJDZCyLy3IpIgKdWaD7OjMBbzDMB8GA1UdIwQY MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecLp UOYYAsOlSdGYHbEib5osHpOTeCThe2nCF86CwZZO/tys9wZly4r5Z56i4ItOnqS3 Xt8akMuFZPs/hGdQdVWve79S/lbs8OMar4surNS58cYtxnTb15G3Z4nE+/okriCJ TRCGzngWe+UshjBDUJH2ccP920HsMNz0LVk9wo3uuphCggl1SBl0AS4FrYY3182a MTcE0VCht4H8geSgFvLNlLKK69rvarUtgIsy5E4E5bCDu4+4pe6RK+fjfJfXlrFa FIQIvvp9GZ/aTNSKJMSTe9kt6FXsxnrgH446U6UeNqfE3JyFhJxoYmdMIHxTzpFH ICcF27/XE2sPGP43Fw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:05 2025 by rpki-client