This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json) Hash identifier: KBw91vUO3QJDVCECZCnv2+Zsb+xjD1yz0pVHeYR3D0w= Subject key identifier: E8:49:FE:24:44:7C:5E:C8:33:0B:B7:57:15:1D:29:75:C6:37:AA:71 Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e Certificate serial: 019AF208A2609B1C787316F8C991DA18563D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft Manifest number: 1720 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: EXaInDnaG0zV4djw7l9S3VmINs+vGA1WPZmqAMBYsZY=) 2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a2:60:9b:1c:78:73:16:f8:c9:91:da:18:56:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=e849fe24447c5ec8330bb757151d2975c637aa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:77:09:5d:a9:5e:7d:60:99:68:0f:48:83: d3:b6:1e:4f:86:b6:f3:83:70:0d:a9:c3:02:ec:e8: 78:ca:5d:dc:3a:b1:46:65:2c:94:36:9c:ec:8c:ac: 10:e2:f3:f8:c3:33:38:54:18:1e:7d:2f:14:6e:29: 98:72:91:c5:39:13:a3:4f:c1:45:29:60:2f:bf:8d: 43:44:c9:92:09:dd:8d:0d:81:cf:75:46:87:b7:b7: a9:86:58:6e:0a:25:e1:04:98:f0:b3:10:54:d4:60: 29:82:6b:25:93:bd:07:b0:50:7c:9f:f8:54:c5:d3: b6:ea:ed:32:f2:24:c5:73:35:f7:0a:c2:a2:c1:d3: 99:14:76:e0:d8:67:55:9e:c5:0f:e8:16:60:c5:5d: 6b:d9:d5:e7:af:32:14:df:a1:8a:bb:0c:3a:95:f4: be:90:cf:b1:d9:81:01:af:b2:e4:e4:81:7d:5b:55: 93:23:17:61:67:21:5d:12:e6:1e:f3:35:fa:24:bd: 7e:74:80:33:a1:66:29:d4:1b:c0:a1:92:fd:fa:b4: 12:b6:4b:3a:ce:65:9f:35:2a:67:14:da:a9:3c:a1: 2c:46:8f:5c:04:d0:e9:c3:3e:24:66:14:da:81:fc: 35:0e:31:a0:fb:e7:29:54:80:30:15:7d:28:91:44: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:49:FE:24:44:7C:5E:C8:33:0B:B7:57:15:1D:29:75:C6:37:AA:71 X509v3 Authority Key Identifier: keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c0:ef:3b:a7:35:c0:18:c1:2b:28:88:a6:91:9e:c0:30:87: 8f:7f:d2:a6:df:e1:12:4b:54:c4:aa:4c:0a:58:d9:01:43:a8: f9:9d:b0:25:6e:54:ec:22:08:06:bd:ed:7f:e5:f3:3d:e8:d8: 49:3c:8a:90:82:62:3f:b2:75:5b:f3:9c:6c:05:52:c5:c8:b7: 5d:bc:fa:c4:36:48:f9:f4:4f:fa:ee:11:34:21:3f:15:75:ed: bc:b6:ee:fa:97:cc:73:05:ba:ba:ad:01:98:27:69:23:ee:73: de:8f:7a:69:be:75:3e:53:cb:fc:d6:1e:de:e7:60:1b:d0:cb: a3:d0:28:20:dd:e5:50:f2:82:e6:7e:d9:52:94:21:d7:89:61: 38:59:c9:3d:04:22:0b:62:35:cf:26:c9:60:3b:ec:7c:e3:28: cb:aa:fe:02:ce:39:aa:06:ce:40:dc:b4:e6:4b:b1:ee:39:a2: 98:84:fa:a6:1c:c3:05:96:f5:e5:10:a8:ad:bf:d2:7a:16:27: c8:ec:f7:8d:ea:b0:90:f9:1c:4a:e0:aa:55:15:81:6a:73:15: d7:ed:84:3d:4b:3b:6f:ac:a6:64:c2:1a:87:6e:7c:52:1e:ba: 57:3c:d9:41:84:4d:4e:74:0f:08:a3:c7:b8:df:20:d9:30:5e: 37:84:c5:62 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCKJgmxx4cxb4yZHaGFY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl MjQyM2UwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhlODQ5ZmUyNDQ0N2M1ZWM4MzMwYmI3NTcxNTFkMjk3NWM2MzdhYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bh3CV2pXn1gmWgPSIPTth5Phrbz g3ANqcMC7Oh4yl3cOrFGZSyUNpzsjKwQ4vP4wzM4VBgefS8UbimYcpHFOROjT8FF KWAvv41DRMmSCd2NDYHPdUaHt7ephlhuCiXhBJjwsxBU1GApgmslk70HsFB8n/hU xdO26u0y8iTFczX3CsKiwdOZFHbg2GdVnsUP6BZgxV1r2dXnrzIU36GKuww6lfS+ kM+x2YEBr7Lk5IF9W1WTIxdhZyFdEuYe8zX6JL1+dIAzoWYp1BvAoZL9+rQStks6 zmWfNSpnFNqpPKEsRo9cBNDpwz4kZhTagfw1DjGg++cpVIAwFX0okUTUbwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOhJ/iREfF7IMwu3VxUdKXXGN6pxMB8GA1UdIwQY MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8Dv O6c1wBjBKyiIppGewDCHj3/Spt/hEktUxKpMCljZAUOo+Z2wJW5U7CIIBr3tf+Xz PejYSTyKkIJiP7J1W/OcbAVSxci3Xbz6xDZI+fRP+u4RNCE/FXXtvLbu+pfMcwW6 uq0BmCdpI+5z3o96ab51PlPL/NYe3udgG9DLo9AoIN3lUPKC5n7ZUpQh14lhOFnJ PQQiC2I1zybJYDvsfOMoy6r+As45qgbOQNy05kux7jmimIT6phzDBZb15RCorb/S ehYnyOz3jeqwkPkcSuCqVRWBanMV1+2EPUs7b6ymZMIah258Uh66VzzZQYRNTnQP CKPHuN8g2TBeN4TFYg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:23 2025 by rpki-client