This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft File: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json) Hash identifier: PVr5MSF8QdvsFOnWehmU/d6sNHo2KLCtiICsE8yXUBA= Subject key identifier: E2:C8:65:85:69:F9:B6:12:B5:78:24:17:A9:98:7A:17:6C:54:01:98 Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA Certificate issuer: /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa Certificate serial: 019AFCC496EC3167365183D0DE39FC8BDBD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft Manifest number: 1768 Signing time: Mon 08 Dec 2025 07:02:13 +0000 Manifest this update: Mon 08 Dec 2025 07:02:13 +0000 Manifest next update: Tue 09 Dec 2025 07:02:13 +0000 Files and hashes: 1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: /O0bBtnDsrfprSx/wkiT3EzKzYglOr/iJBO0aiSN8As=) 2: ptFjcgajS63JCcLXGOq-ydjfdTY.roa (hash: PYlnAX532RPi2NIssqwdJJhvieut4a5rLSlCnoPYE14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:96:ec:31:67:36:51:83:d0:de:39:fc:8b:db:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa Validity Not Before: Dec 8 07:02:13 2025 GMT Not After : Dec 9 07:02:13 2025 GMT Subject: CN=e2c8658569f9b612b5782417a9987a176c540198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:24:b2:f4:f7:d4:5e:49:e8:27:99:00:64: 26:db:e7:38:94:ea:a9:ab:e1:6d:fc:51:3f:12:4e: c1:91:35:45:21:e0:3c:8c:bd:ed:7f:84:83:91:10: 8b:3b:ef:1f:5f:7f:8e:23:74:e7:00:02:a1:b4:c3: fa:c7:54:e0:17:67:54:08:16:db:5c:33:a6:e8:47: b0:41:df:df:66:76:e8:13:47:3d:49:78:0c:c4:30: 23:87:bd:17:d2:9b:f9:b1:20:7a:57:3f:89:6b:86: 7d:ad:04:a7:af:bd:48:f0:a0:c4:63:2b:de:0b:99: d1:04:e2:56:b5:54:7a:7e:4e:f8:4f:43:20:0a:30: 2b:b3:56:24:5d:0c:1a:de:58:7c:96:3d:e3:4e:64: 8c:cb:5b:cf:e2:f8:67:0c:51:ed:4a:0c:f4:aa:20: 13:ad:b9:dd:39:44:4c:40:b3:d5:02:9e:d1:81:ad: ef:3a:63:5c:eb:dc:4d:c9:f5:a6:86:12:dc:6a:28: f2:21:27:49:c4:b7:f3:05:f8:00:2f:73:df:b5:01: 1a:d2:a1:41:e0:20:d9:38:6e:28:de:1c:ba:6b:75: 83:a2:10:ab:9f:15:c3:38:35:a5:83:48:60:88:45: 3a:6d:a7:f3:eb:aa:2a:f6:9d:ab:70:d0:fd:24:58: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C8:65:85:69:F9:B6:12:B5:78:24:17:A9:98:7A:17:6C:54:01:98 X509v3 Authority Key Identifier: keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:50:3e:3f:9f:71:68:77:de:a9:0f:8b:9a:63:c6:e9:5d:f6: 9e:38:88:3f:d5:8d:de:bf:4d:1b:4c:15:88:72:af:b7:e1:2b: 15:c2:b4:a5:89:a6:f0:16:02:54:97:63:59:aa:4c:1c:d1:23: ac:96:3b:d7:f5:91:59:4b:b9:e6:e1:d6:6e:bc:3f:df:a4:1a: 2c:7b:4e:69:48:5c:40:d9:cf:ed:e9:d6:51:49:3c:e3:51:9f: 21:00:de:76:8d:94:a3:82:10:0e:5b:7d:32:34:60:a3:16:12: f1:7b:ae:1f:3e:95:3e:16:78:41:41:3b:6d:29:fe:d3:ca:4a: f1:38:73:98:cc:1f:ec:5b:9e:a3:f2:43:30:d3:b3:7e:8c:64: b8:23:ea:a2:b5:b8:13:94:96:5f:96:ba:5e:64:31:82:d0:8b: 6c:b0:02:5e:b3:72:a2:9c:e4:19:97:b1:77:72:c4:59:3f:eb: 04:d2:0a:96:b9:a9:90:76:cb:49:0c:a8:da:70:98:98:f9:6d: 8b:13:b6:96:49:73:57:86:1b:f6:76:9e:2b:d1:bc:53:4f:ad: 61:dc:09:74:c2:ba:d3:3e:19:be:48:03:3f:74:2b:3d:8e:68: 23:ae:a7:86:eb:f7:d6:7e:58:d9:84:99:eb:0b:4d:d7:ed:d5: 78:e8:c9:23 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr8xJbsMWc2UYPQ3jn8i9vSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDgwYzczMzU0MzA1Y2M0MGY4ZmFiYTllNTQwMmVmMzdk ZTJlYWEwHhcNMjUxMjA4MDcwMjEzWhcNMjUxMjA5MDcwMjEzWjAzMTEwLwYDVQQD EyhlMmM4NjU4NTY5ZjliNjEyYjU3ODI0MTdhOTk4N2ExNzZjNTQwMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYksvT31F5J6CeZAGQm2+c4lOqp q+Ft/FE/Ek7BkTVFIeA8jL3tf4SDkRCLO+8fX3+OI3TnAAKhtMP6x1TgF2dUCBbb XDOm6EewQd/fZnboE0c9SXgMxDAjh70X0pv5sSB6Vz+Ja4Z9rQSnr71I8KDEYyve C5nRBOJWtVR6fk74T0MgCjArs1YkXQwa3lh8lj3jTmSMy1vP4vhnDFHtSgz0qiAT rbndOURMQLPVAp7Rga3vOmNc69xNyfWmhhLcaijyISdJxLfzBfgAL3PftQEa0qFB 4CDZOG4o3hy6a3WDohCrnxXDODWlg0hgiEU6bafz66oq9p2rcND9JFirvQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOLIZYVp+bYStXgkF6mYehdsVAGYMB8GA1UdIwQY MBaAFPtIDHM1QwXMQPj6up5UAu833i6qMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wZ01jelZEQmN4QS1QcTZubFFDN3pmZUxxby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGRjNDg5LWUwMjgtNGYzNy1hOTcy LTUwOWY0NGU5MjAyMi8xLzEtMGdNY3pWREJjeEEtUHE2bmxRQzd6ZmVMcW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1LzBkYzQ4OS1lMDI4LTRmMzctYTk3Mi01MDlmNDRlOTIw MjIvMS8xLTBnTWN6VkRCY3hBLVBxNm5sUUM3emZlTHFvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1A+ P59xaHfeqQ+LmmPG6V32njiIP9WN3r9NG0wViHKvt+ErFcK0pYmm8BYCVJdjWapM HNEjrJY71/WRWUu55uHWbrw/36QaLHtOaUhcQNnP7enWUUk841GfIQDedo2Uo4IQ Dlt9MjRgoxYS8XuuHz6VPhZ4QUE7bSn+08pK8ThzmMwf7Fueo/JDMNOzfoxkuCPq orW4E5SWX5a6XmQxgtCLbLACXrNyopzkGZexd3LEWT/rBNIKlrmpkHbLSQyo2nCY mPltixO2lklzV4Yb9naeK9G8U0+tYdwJdMK60z4ZvkgDP3QrPY5oI66nhuv31n5Y 2YSZ6wtN1+3VeOjJIw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:35:58 2025 by rpki-client