This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json) Hash identifier: QehCppb9rJ4SGB/ORltW3H4gVNJ9nKqm8x/22CW8EjU= Subject key identifier: C8:C2:76:BF:A4:32:AC:BD:8E:F4:BC:C9:6D:DF:3A:F7:D2:C5:03:00 Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Certificate serial: 019AF42E86C2D44EE7A67ED9F2B3F4495B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft Manifest number: 1635 Signing time: Sat 06 Dec 2025 15:01:21 +0000 Manifest this update: Sat 06 Dec 2025 15:01:21 +0000 Manifest next update: Sun 07 Dec 2025 15:01:21 +0000 Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: gzwq2CSgbAU8XFVVwRVTypSF4r6YeiLu3/6Az5b1XCo=) 2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=) 3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:86:c2:d4:4e:e7:a6:7e:d9:f2:b3:f4:49:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Validity Not Before: Dec 6 15:01:21 2025 GMT Not After : Dec 7 15:01:21 2025 GMT Subject: CN=c8c276bfa432acbd8ef4bcc96ddf3af7d2c50300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:01:b3:74:2f:fe:31:e8:00:69:a6:df:70: 15:40:37:2d:f5:aa:31:2a:26:a4:f4:f9:da:d4:64: 08:98:2a:de:e8:6c:cf:5b:0f:66:15:23:47:f5:8b: 34:c9:a1:75:8f:7c:e0:ad:c1:3a:83:b5:dc:c7:62: 96:f2:14:a3:d8:91:48:6b:c3:2e:45:10:26:f3:70: a2:b2:47:e3:47:dc:c5:e8:e9:2b:34:25:77:26:bf: b3:63:17:8d:9d:72:2f:9b:80:b3:ff:ab:fe:69:87: b9:91:da:e8:0b:0c:08:43:a9:0f:f1:4c:ea:c2:6f: f9:53:74:61:17:31:fe:75:00:0c:32:b5:ce:24:5a: dc:cb:f9:e5:28:e3:7a:47:68:7b:ce:d2:52:a1:3e: a7:23:19:d0:8e:23:af:6a:fd:b3:86:cf:6f:94:e1: d0:2a:83:46:34:26:cf:f0:ab:ee:8d:4c:63:01:c0: 1c:b5:17:38:e6:96:70:dd:2b:ee:b2:15:14:a9:50: c4:9d:2c:24:f0:02:19:63:67:39:b1:03:ad:de:70: 72:0e:66:cc:bb:35:df:b5:f0:7c:ee:ce:df:a7:d5: 53:94:46:d3:ca:67:64:dd:e9:dd:a9:6b:5b:f7:f1: 27:22:a1:bf:3a:c1:d8:58:01:c8:3c:21:f0:14:44: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:76:BF:A4:32:AC:BD:8E:F4:BC:C9:6D:DF:3A:F7:D2:C5:03:00 X509v3 Authority Key Identifier: keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7c:d8:75:b9:f7:2d:09:93:4d:88:91:c1:ad:7e:34:20:2f: ea:a5:a0:ab:e6:e8:3b:2a:6f:d0:24:96:a5:27:eb:8a:5a:93: 42:7c:5a:91:1b:60:bd:18:0f:00:3f:c1:14:05:3b:57:67:30: c5:bc:64:2d:a3:47:eb:12:ec:ec:64:36:24:cc:14:83:bf:4c: 07:0b:e3:a3:74:d0:ac:66:e2:14:cf:f9:ba:71:3e:19:51:24: 97:3f:ac:48:b3:7b:96:22:f9:03:eb:77:c3:d2:6c:e8:42:16: 55:fa:f1:af:c3:2b:1c:a2:3a:25:aa:81:f7:fc:85:ff:61:04: 22:1d:95:fb:92:eb:e8:88:00:2d:7d:07:41:c8:a8:e9:2d:6d: ed:05:ab:03:51:43:9d:50:a6:be:ed:c8:4f:01:48:4b:ac:ca: c8:29:25:51:2c:03:36:fc:d6:e6:cd:38:5d:d5:19:62:30:09: c1:bb:d2:d9:39:13:90:9f:05:ba:ec:22:91:52:f6:71:d0:2f: b7:d9:e6:dc:a4:b3:5a:9e:9e:be:58:f0:18:0d:35:a9:1b:be: af:9e:89:72:8d:00:e1:2f:0d:de:47:2b:e1:73:f5:c8:fa:01: 29:fc:ba:66:19:b0:de:2b:cb:d5:09:58:da:07:9b:9f:58:79: 59:c1:93:c2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0LobC1E7npn7Z8rP0SVtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy YTdiZGUwHhcNMjUxMjA2MTUwMTIxWhcNMjUxMjA3MTUwMTIxWjAzMTEwLwYDVQQD EyhjOGMyNzZiZmE0MzJhY2JkOGVmNGJjYzk2ZGRmM2FmN2QyYzUwMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU8Bs3Qv/jHoAGmm33AVQDct9aox Kiak9Pna1GQImCre6GzPWw9mFSNH9Ys0yaF1j3zgrcE6g7Xcx2KW8hSj2JFIa8Mu RRAm83CiskfjR9zF6OkrNCV3Jr+zYxeNnXIvm4Cz/6v+aYe5kdroCwwIQ6kP8Uzq wm/5U3RhFzH+dQAMMrXOJFrcy/nlKON6R2h7ztJSoT6nIxnQjiOvav2zhs9vlOHQ KoNGNCbP8KvujUxjAcActRc45pZw3SvushUUqVDEnSwk8AIZY2c5sQOt3nByDmbM uzXftfB87s7fp9VTlEbTymdk3endqWtb9/EnIqG/OsHYWAHIPCHwFER4XQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMjCdr+kMqy9jvS8yW3fOvfSxQMAMB8GA1UdIwQY MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHzY dbn3LQmTTYiRwa1+NCAv6qWgq+boOypv0CSWpSfrilqTQnxakRtgvRgPAD/BFAU7 V2cwxbxkLaNH6xLs7GQ2JMwUg79MBwvjo3TQrGbiFM/5unE+GVEklz+sSLN7liL5 A+t3w9Js6EIWVfrxr8MrHKI6JaqB9/yF/2EEIh2V+5Lr6IgALX0HQcio6S1t7QWr A1FDnVCmvu3ITwFIS6zKyCklUSwDNvzW5s04XdUZYjAJwbvS2TkTkJ8FuuwikVL2 cdAvt9nm3KSzWp6evljwGA01qRu+r56Jco0A4S8N3kcr4XP1yPoBKfy6Zhmw3ivL 1QlY2gebn1h5WcGTwg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:44 2025 by rpki-client