This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json) Hash identifier: nIuIn/M8Cabfnbm9FuZBxwcZjdCrwIBm+0UR9aL+8kA= Subject key identifier: 5E:8D:D6:10:53:66:BD:BF:13:56:28:7E:77:C0:B4:E6:B5:C1:F5:E3 Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Certificate serial: 019AF19B227376FC12B063D4D916DE3F34D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: dNsYmrxDe15AGQQxGJ+NyKh+9zWv8IPmqy9S0jmBOAA=) 2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:22:73:76:fc:12:b0:63:d4:d9:16:de:3f:34:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=5e8dd6105366bdbf1356287e77c0b4e6b5c1f5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:40:f2:ed:e1:8f:c7:4f:a1:39:7d:4f:a5: 5b:d5:d1:f2:b2:15:07:b7:39:e4:17:f3:6b:ed:66: e6:bc:bc:8d:0b:30:17:4a:65:3e:65:0c:79:c9:6e: ba:c2:77:e2:6d:0b:6a:50:ca:18:04:fe:6e:40:67: 50:ef:3a:2f:c4:a0:4c:cc:61:bc:1a:30:b1:b0:ae: a4:0c:9d:2a:70:44:e4:b3:b3:cf:b5:72:88:bc:14: f4:3f:42:7b:89:48:84:18:3e:24:fe:56:2d:60:ae: c5:65:4b:8c:d4:8c:5c:a7:de:b2:b7:57:7b:1a:9c: 23:05:08:b5:d7:45:ad:90:c7:99:32:3c:0b:62:8e: 0d:db:9c:fa:67:af:67:d1:31:5f:13:ef:0f:19:33: d0:44:98:af:d5:48:c1:78:ea:76:ee:ed:16:36:b5: 38:b5:8a:21:a5:d2:55:b3:69:e2:cd:26:c1:fc:55: d0:62:d5:63:36:f2:66:1a:3c:7b:c9:90:a2:98:4d: 9a:4f:02:ee:f6:85:be:6c:9e:d3:09:92:9f:67:77: c1:26:0c:43:8f:17:21:fa:31:06:bc:79:a3:3a:37: 30:66:56:61:0a:f7:75:53:d2:9e:54:25:6c:c7:c1: bf:77:55:2f:96:6c:94:fa:cd:f2:7c:8f:f6:9d:c6: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:D6:10:53:66:BD:BF:13:56:28:7E:77:C0:B4:E6:B5:C1:F5:E3 X509v3 Authority Key Identifier: keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:37:62:f4:a7:57:08:fb:16:53:0b:76:72:db:cc:9b:92:b8: 91:8b:16:3a:66:e6:fc:06:c3:34:de:21:9a:a1:1d:79:90:7c: df:07:cf:98:72:43:7e:1a:e9:fe:dd:78:fe:7f:a2:c4:b7:c8: 62:08:51:19:5e:e6:e7:5d:af:0f:9d:cd:59:e3:3e:32:08:62: 69:0b:4b:cf:b6:0b:38:d1:da:16:b8:3f:f9:f8:fc:07:0e:40: 5b:1d:1c:3c:a3:df:10:3a:33:4e:fa:1d:0a:70:74:90:0a:f0: dd:4f:06:ce:e2:57:b5:82:bc:6a:9d:a9:ca:53:ad:21:1b:a6: 50:2c:1e:0b:d7:54:76:44:6d:70:ce:33:af:30:20:25:fb:d1: 91:1a:fc:fa:06:b3:a3:d5:74:9b:cd:fd:dd:12:ab:26:f7:4f: 70:61:b8:b1:45:30:82:04:83:47:d3:b0:a6:75:1b:bc:4f:9f: cb:5e:00:b5:d1:87:66:26:b7:35:38:ba:5d:35:49:08:20:ad: 95:28:2e:11:29:5c:75:99:ab:0d:50:7f:25:4d:55:c9:4d:ab: b3:28:a7:39:8b:4c:54:6e:70:f7:57:fa:88:3c:1a:b4:97:e9: b8:11:a5:44:20:8e:23:99:79:f1:cb:89:bb:61:13:85:fb:6c: c2:e9:09:97 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmyJzdvwSsGPU2RbePzTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3 NGJlZDIwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD Eyg1ZThkZDYxMDUzNjZiZGJmMTM1NjI4N2U3N2MwYjRlNmI1YzFmNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJA8u3hj8dPoTl9T6Vb1dHyshUH tznkF/Nr7WbmvLyNCzAXSmU+ZQx5yW66wnfibQtqUMoYBP5uQGdQ7zovxKBMzGG8 GjCxsK6kDJ0qcETks7PPtXKIvBT0P0J7iUiEGD4k/lYtYK7FZUuM1Ixcp96yt1d7 GpwjBQi110WtkMeZMjwLYo4N25z6Z69n0TFfE+8PGTPQRJiv1UjBeOp27u0WNrU4 tYohpdJVs2nizSbB/FXQYtVjNvJmGjx7yZCimE2aTwLu9oW+bJ7TCZKfZ3fBJgxD jxch+jEGvHmjOjcwZlZhCvd1U9KeVCVsx8G/d1UvlmyU+s3yfI/2ncZsGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF6N1hBTZr2/E1YofnfAtOa1wfXjMB8GA1UdIwQY MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0 ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTdi 9KdXCPsWUwt2ctvMm5K4kYsWOmbm/AbDNN4hmqEdeZB83wfPmHJDfhrp/t14/n+i xLfIYghRGV7m512vD53NWeM+MghiaQtLz7YLONHaFrg/+fj8Bw5AWx0cPKPfEDoz TvodCnB0kArw3U8GzuJXtYK8ap2pylOtIRumUCweC9dUdkRtcM4zrzAgJfvRkRr8 +gazo9V0m8393RKrJvdPcGG4sUUwggSDR9OwpnUbvE+fy14AtdGHZia3NTi6XTVJ CCCtlSguESlcdZmrDVB/JU1VyU2rsyinOYtMVG5w91f6iDwatJfpuBGlRCCOI5l5 8cuJu2EThftswukJlw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:47 2025 by rpki-client