This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json) Hash identifier: jw0VSoq3CprkwPMGaIhccUoW7oTaw3ij4UJQ2JD78mc= Subject key identifier: 42:D1:2F:D5:32:89:22:96:55:CC:FB:3E:5B:77:67:47:76:BC:28:83 Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34 Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934 Certificate serial: 019AF2770403A5D3491C5E718383A5567DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft Manifest number: 1289 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: /w8Pp7+ZChzyNhPTgSTlN7M8jseDbIkp/IKnGq/1k/c=) 2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:04:03:a5:d3:49:1c:5e:71:83:83:a5:56:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934 Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=42d12fd53289229655ccfb3e5b77674776bc2883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:a0:72:2c:72:9f:a4:40:ac:28:90:e4:32: 37:8c:8d:60:9c:d4:32:6a:85:97:cc:c6:cd:94:a0: da:5c:81:7e:93:bb:0a:4e:3b:04:2f:ec:47:c9:3a: 37:42:69:09:11:2a:14:d4:44:a6:4f:2c:61:9b:e4: ae:18:b9:c8:52:db:2e:b9:59:3a:57:45:24:19:d0: 90:1d:73:3f:eb:0f:a9:33:ff:a1:10:35:10:a9:cb: b1:fb:ba:74:22:e6:f4:a8:02:16:64:2d:b2:e5:fb: bd:b2:c3:f6:7e:62:af:cd:77:d7:15:ee:d2:88:78: b7:e6:bd:f0:4c:a4:c8:a5:11:98:99:e6:92:69:cb: 7b:2e:26:a8:df:41:6f:94:14:c1:a3:52:56:7d:9a: 10:ef:2e:e3:01:bc:90:15:ba:84:af:53:f0:71:0d: e6:38:4a:72:34:c2:42:82:f7:e2:49:02:f0:ea:66: 8a:b9:ab:7c:e9:02:54:55:ab:ab:a6:82:c2:c9:e6: 87:72:73:e1:24:68:5d:bc:e8:49:d7:05:f0:8f:cf: a1:dc:e5:18:99:ae:2e:9f:84:44:45:77:23:d2:06: a0:37:20:1e:0e:ce:46:e0:4c:a5:8f:fb:9b:84:cc: d0:f2:f9:75:47:bd:f3:15:af:b5:6a:da:c4:65:80: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:2F:D5:32:89:22:96:55:CC:FB:3E:5B:77:67:47:76:BC:28:83 X509v3 Authority Key Identifier: keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fa:47:3c:15:4e:e3:ce:c1:5d:e3:9a:5e:13:35:78:2a:b1: f6:a9:fe:29:f6:f6:cf:94:4f:fb:1b:e1:e4:c2:99:78:62:b6: 70:2c:ff:ec:87:fb:75:50:67:5c:8c:32:c1:f1:e4:d6:83:22: 62:36:1c:2a:80:8f:87:3a:de:7f:2f:74:08:f5:3d:fe:71:b5: 99:f6:71:8e:17:9e:0a:bc:65:d0:ed:78:7f:af:e3:33:7a:07: 4d:40:4f:aa:fb:cb:4c:e1:09:c1:25:c3:56:9d:43:28:5b:61: a2:45:e6:a4:f4:8b:bf:17:2b:d7:1f:d7:ef:d8:09:c3:28:63: 01:c5:f6:f6:f5:3e:b1:48:d6:01:76:2c:b9:27:95:bc:24:d7: 60:e7:3d:b2:26:f0:c6:96:c7:04:9a:51:8e:b9:24:e7:0b:a0: b8:01:d1:7c:e6:74:f4:2f:46:79:89:cf:a7:3e:20:4b:b3:d9: ce:f5:be:fd:7c:15:bc:14:e5:4c:15:1f:4c:08:31:28:20:0a: 15:c6:d7:fa:4d:43:9c:ec:e0:28:50:cc:29:34:82:a0:0f:ed: a3:02:46:f5:ad:53:90:2e:7e:cb:d2:ed:dd:96:af:9f:ae:88: c6:fb:92:12:9e:6b:6f:f6:4b:ac:02:26:30:55:cb:1b:48:74: e7:b5:e9:6d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydwQDpdNJHF5xg4OlVn3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5 YzY5MzQwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD Eyg0MmQxMmZkNTMyODkyMjk2NTVjY2ZiM2U1Yjc3Njc0Nzc2YmMyODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXagcixyn6RArCiQ5DI3jI1gnNQy aoWXzMbNlKDaXIF+k7sKTjsEL+xHyTo3QmkJESoU1ESmTyxhm+SuGLnIUtsuuVk6 V0UkGdCQHXM/6w+pM/+hEDUQqcux+7p0Iub0qAIWZC2y5fu9ssP2fmKvzXfXFe7S iHi35r3wTKTIpRGYmeaSact7Liao30FvlBTBo1JWfZoQ7y7jAbyQFbqEr1PwcQ3m OEpyNMJCgvfiSQLw6maKuat86QJUVaurpoLCyeaHcnPhJGhdvOhJ1wXwj8+h3OUY ma4un4RERXcj0gagNyAeDs5G4Eylj/ubhMzQ8vl1R73zFa+1atrEZYCFrwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFELRL9UyiSKWVcz7Plt3Z0d2vCiDMB8GA1UdIwQY MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh LWYxZTY1Zjk3Yzg5YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2NlLzkxMGY2Ny0xZmZjLTQxYzQtYTJlYS1mMWU2NWY5N2M4 OWEvMS8xLWpCNElTTU9lNmdhVFVjYVdSNTQ2bldjYVRRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfpH PBVO487BXeOaXhM1eCqx9qn+Kfb2z5RP+xvh5MKZeGK2cCz/7If7dVBnXIwywfHk 1oMiYjYcKoCPhzrefy90CPU9/nG1mfZxjheeCrxl0O14f6/jM3oHTUBPqvvLTOEJ wSXDVp1DKFthokXmpPSLvxcr1x/X79gJwyhjAcX29vU+sUjWAXYsuSeVvCTXYOc9 sibwxpbHBJpRjrkk5wuguAHRfOZ09C9GeYnPpz4gS7PZzvW+/XwVvBTlTBUfTAgx KCAKFcbX+k1DnOzgKFDMKTSCoA/towJG9a1TkC5+y9Lt3Zavn66IxvuSEp5rb/ZL rAImMFXLG0h057XpbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:25 2025 by rpki-client