This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json) Hash identifier: 4xLi2ZUWPV9Gg8ZP27WQyY2iTRL0tUFVUypz8H+ZuMs= Subject key identifier: 7B:B9:9F:24:7E:DA:C5:D9:A2:C9:02:B6:57:0D:F2:FB:1D:32:C8:A1 Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Certificate serial: 019AF2091D1A6E7C03C6DE06B3DC36786B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: sNYkAuoOPm6UuQ2eN6caOTkVmMkP/nT3rb0zWxmRjpg=) 2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=) 3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=) 4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1d:1a:6e:7c:03:c6:de:06:b3:dc:36:78:6b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=7bb99f247edac5d9a2c902b6570df2fb1d32c8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:38:33:25:84:b8:4e:aa:01:52:c3:74:b7: 67:0d:80:e5:1e:32:ea:fe:c0:91:51:f8:89:7a:cd: f5:a3:cf:51:a9:55:c2:ee:41:52:9e:1a:1f:a0:7d: 7a:0c:98:9d:96:da:49:e6:b9:b0:f3:eb:24:d6:bd: 14:db:10:66:42:9e:ef:56:18:97:62:f3:dc:ca:23: 4b:3b:c9:f2:57:2a:b8:f9:08:95:5e:7c:90:63:21: 12:cd:4b:4f:1b:5b:7f:f6:ac:51:c5:39:44:8f:25: 74:23:fc:65:a9:0d:6e:9b:3f:44:59:30:06:81:9c: d9:48:de:d3:1b:7d:33:5c:1b:26:27:62:d5:60:b7: ff:05:c3:09:69:2b:29:b6:9b:b2:44:e7:aa:76:f9: 9a:22:27:c8:1f:5c:f4:f9:ae:e5:ed:e0:5b:56:8d: ac:d5:81:0c:a0:08:f7:cf:d4:65:97:17:1a:f9:7f: 1d:0c:a1:2c:bc:5a:22:0b:bd:79:1c:30:21:f6:8e: bf:d7:0a:47:6a:a6:a4:77:5e:e5:ad:a9:e0:11:83: cd:e5:63:9f:25:1f:94:a5:1f:fb:cd:fc:d2:a2:ae: 86:25:ba:a8:c6:0b:0e:16:57:db:cc:e7:00:63:f5: b9:8a:72:1e:e0:c5:dd:46:05:25:34:fd:94:32:25: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:9F:24:7E:DA:C5:D9:A2:C9:02:B6:57:0D:F2:FB:1D:32:C8:A1 X509v3 Authority Key Identifier: keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9d:55:66:34:1c:4f:3e:d3:fe:a2:5e:6e:aa:4e:c7:8a:1d: 25:3b:b3:24:20:36:cb:10:4e:a4:14:d9:62:84:27:94:64:6d: 6f:02:99:f0:50:de:ed:da:5f:22:d6:78:95:16:0f:70:38:3b: 88:08:d2:ec:43:89:de:a8:66:c1:a1:92:a5:0a:44:58:bd:f6: 11:51:69:33:92:94:f6:18:d3:da:87:11:0f:d3:d3:ed:df:a5: b0:c7:26:e1:17:8b:42:b6:8a:c5:a6:cd:0c:c4:c7:33:d4:c3: e6:ec:4a:df:be:da:d4:3f:06:36:2f:38:be:cc:2e:02:9b:b4: 3d:61:32:db:51:1a:87:25:56:a8:05:03:91:80:fa:93:7d:8e: f8:e9:9f:68:44:5f:88:2e:3b:b9:48:90:3d:f3:27:93:80:09: 30:5e:44:1f:fd:f1:8f:94:cf:7b:1e:ce:d6:e0:65:ac:dc:dd: 03:7a:e8:c2:72:30:19:72:be:a6:c4:a9:36:24:b5:57:93:63: e5:3e:ec:66:c8:d3:2a:7e:ff:e8:75:b4:03:50:c7:be:ff:d7: 19:2b:ba:99:a9:5e:02:5d:2a:8d:cf:34:bf:3e:9a:98:16:32: da:bc:6c:e0:a1:66:a9:53:52:cc:d2:1d:86:33:65:82:ab:df: 61:5d:1e:08 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCR0abnwDxt4Gs9w2eGtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz NjJmZmMwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg3YmI5OWYyNDdlZGFjNWQ5YTJjOTAyYjY1NzBkZjJmYjFkMzJjOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23U4MyWEuE6qAVLDdLdnDYDlHjLq /sCRUfiJes31o89RqVXC7kFSnhofoH16DJidltpJ5rmw8+sk1r0U2xBmQp7vVhiX YvPcyiNLO8nyVyq4+QiVXnyQYyESzUtPG1t/9qxRxTlEjyV0I/xlqQ1umz9EWTAG gZzZSN7TG30zXBsmJ2LVYLf/BcMJaSsptpuyROeqdvmaIifIH1z0+a7l7eBbVo2s 1YEMoAj3z9Rllxca+X8dDKEsvFoiC715HDAh9o6/1wpHaqakd17lrangEYPN5WOf JR+UpR/7zfzSoq6GJbqoxgsOFlfbzOcAY/W5inIe4MXdRgUlNP2UMiXnCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHu5nyR+2sXZoskCtlcN8vsdMsihMB8GA1UdIwQY MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3 LTQwYzFhNzI3MDJlZi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1LzQ3MDdiNC0wMDMyLTRhYzctYmNjNy00MGMxYTcyNzAy ZWYvMS8xLWg2YlRvM0VtLU9ycFpkQ1d1X1lzNlUyTF93LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJ1V ZjQcTz7T/qJebqpOx4odJTuzJCA2yxBOpBTZYoQnlGRtbwKZ8FDe7dpfItZ4lRYP cDg7iAjS7EOJ3qhmwaGSpQpEWL32EVFpM5KU9hjT2ocRD9PT7d+lsMcm4ReLQraK xabNDMTHM9TD5uxK377a1D8GNi84vswuApu0PWEy21EahyVWqAUDkYD6k32O+Omf aERfiC47uUiQPfMnk4AJMF5EH/3xj5TPex7O1uBlrNzdA3rownIwGXK+psSpNiS1 V5Nj5T7sZsjTKn7/6HW0A1DHvv/XGSu6maleAl0qjc80vz6amBYy2rxs4KFmqVNS zNIdhjNlgqvfYV0eCA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:56 2025 by rpki-client