This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json) Hash identifier: bvAFPDpPvtcf9q4B6e+FVDfEh22P4sPn2zsOHJ3/Sw8= Subject key identifier: FD:9B:AE:60:EA:E9:57:EA:17:03:D0:E2:47:F9:ED:4D:10:5D:1E:0B Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019AF5407CE0F12F79D3372A77B3CF759BEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft Manifest number: 1792 Signing time: Sat 06 Dec 2025 20:00:35 +0000 Manifest this update: Sat 06 Dec 2025 20:00:35 +0000 Manifest next update: Sun 07 Dec 2025 20:00:35 +0000 Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: fIvaQTsxPAUY9b1fZQMSyquzcLNxylDqlG+TUoNdzSo=) 2: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=) 3: KOSFefQ82yRsHMP6xQC1amzxZ5A.roa (hash: PbOvMYy+aS17nQQCkPtiW0Swv+8ZrIMSdL3ZQAHYmIQ=) 4: U4B8gIRkl6vMFpf6uf4FiRg-PGU.roa (hash: xjlWzszBjbkzgZlr1n6anraY55j54PVbdFl2R0E6OSc=) 5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:7c:e0:f1:2f:79:d3:37:2a:77:b3:cf:75:9b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Dec 6 20:00:35 2025 GMT Not After : Dec 7 20:00:35 2025 GMT Subject: CN=fd9bae60eae957ea1703d0e247f9ed4d105d1e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:4a:ed:e0:0c:9c:32:2a:87:34:f1:16:d6: 04:57:4b:7d:89:7e:5d:f9:80:f1:50:79:d5:b3:34: f7:0a:2c:92:4c:1d:ab:84:e1:40:51:4f:80:e4:0d: 26:55:e7:05:86:26:d5:16:9f:9b:ef:c3:f8:bb:fe: c3:b1:d3:1c:f4:9e:d0:cd:6d:76:46:df:53:57:93: ee:e9:d3:34:ac:d3:88:f8:4f:46:94:56:24:f1:67: 25:1e:ba:15:05:bf:35:54:57:6c:97:67:81:85:31: a1:0b:e4:e6:55:e5:92:5f:d7:6c:af:32:96:5b:ac: 79:e1:56:06:fb:3b:5f:d0:f2:37:0d:cd:36:3f:a1: 30:70:4c:bc:71:43:8f:a4:c5:79:0d:01:e3:fa:54: eb:ed:3a:ea:da:05:2d:6f:4d:26:47:96:2b:4f:2e: 8f:01:cb:5a:2f:04:db:89:2b:b4:17:b9:dd:e9:f9: ba:16:11:5a:f8:98:40:00:be:62:89:17:df:65:1d: 82:00:a3:78:6a:a6:cf:13:2f:9b:89:20:ac:ab:50: 54:ff:cc:d9:c2:22:5d:f9:eb:1f:19:88:db:b2:b2: 1d:df:d0:41:e0:d7:9e:81:75:f9:d2:fc:45:35:ff: a0:83:e0:2e:e5:ff:53:98:00:e5:66:07:46:b5:6d: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9B:AE:60:EA:E9:57:EA:17:03:D0:E2:47:F9:ED:4D:10:5D:1E:0B X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cd:03:5c:c6:09:6c:12:75:e3:ff:5e:0c:d7:7a:26:3f:2d: 95:0b:f7:56:f8:54:9c:bd:c7:71:5c:24:9e:58:03:74:ae:11: d4:9a:fb:d9:e0:87:48:2f:63:0b:4f:fe:d9:5e:ca:5d:8d:3d: eb:1a:6a:dc:a2:74:76:ca:54:cb:e9:f7:f7:19:ae:28:ba:a4: d8:7e:f4:43:88:a8:6e:76:e7:de:3f:67:bb:5f:76:da:88:f0: d2:93:33:ad:13:91:6d:b9:12:48:54:31:04:f1:c7:5f:68:db: af:26:cc:9b:a4:03:73:4b:97:3d:10:52:81:f6:d8:03:b1:fe: ce:bb:aa:9d:32:0f:db:74:2b:09:44:f4:8c:42:36:96:b8:cf: d9:30:16:5c:0b:d4:dc:7f:58:26:5e:49:2e:66:5e:c2:89:c3: 44:2b:ca:54:4e:67:e6:69:4d:b2:b2:b9:1e:e1:7d:44:25:a9: 1d:7d:1b:24:c3:16:3d:da:bf:7a:bf:cd:c2:86:12:e6:24:63: bd:e0:9b:a5:de:df:93:c7:03:85:03:15:10:18:79:37:89:a5: ff:8f:54:6b:27:ce:6b:94:34:32:70:a6:df:2e:c4:01:77:c5: 5a:64:b8:92:d7:eb:91:a1:7f:80:76:a6:e3:e2:eb:7f:1f:59: e5:ec:24:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1QHzg8S950zcqd7PPdZvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjUxMjA2MjAwMDM1WhcNMjUxMjA3MjAwMDM1WjAzMTEwLwYDVQQD EyhmZDliYWU2MGVhZTk1N2VhMTcwM2QwZTI0N2Y5ZWQ0ZDEwNWQxZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3BK7eAMnDIqhzTxFtYEV0t9iX5d +YDxUHnVszT3CiySTB2rhOFAUU+A5A0mVecFhibVFp+b78P4u/7DsdMc9J7QzW12 Rt9TV5Pu6dM0rNOI+E9GlFYk8WclHroVBb81VFdsl2eBhTGhC+TmVeWSX9dsrzKW W6x54VYG+ztf0PI3Dc02P6EwcEy8cUOPpMV5DQHj+lTr7Trq2gUtb00mR5YrTy6P ActaLwTbiSu0F7nd6fm6FhFa+JhAAL5iiRffZR2CAKN4aqbPEy+biSCsq1BU/8zZ wiJd+esfGYjbsrId39BB4NeegXX50vxFNf+gg+Au5f9TmADlZgdGtW2X9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP2brmDq6VfqFwPQ4kf57U0QXR4LMB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM0D XMYJbBJ14/9eDNd6Jj8tlQv3VvhUnL3HcVwknlgDdK4R1Jr72eCHSC9jC0/+2V7K XY096xpq3KJ0dspUy+n39xmuKLqk2H70Q4iobnbn3j9nu1922ojw0pMzrRORbbkS SFQxBPHHX2jbrybMm6QDc0uXPRBSgfbYA7H+zruqnTIP23QrCUT0jEI2lrjP2TAW XAvU3H9YJl5JLmZewonDRCvKVE5n5mlNsrK5HuF9RCWpHX0bJMMWPdq/er/NwoYS 5iRjveCbpd7fk8cDhQMVEBh5N4ml/49UayfOa5Q0MnCm3y7EAXfFWmS4ktfrkaF/ gHam4+Lrfx9Z5ewkcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:16 2025 by rpki-client