This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json) Hash identifier: ydRfSymXjgicbV2uaNFh9PiFtsEoL8onp0G8TBvHNzc= Subject key identifier: 74:88:B4:42:79:A8:98:33:37:2F:4B:AB:00:E8:27:03:58:DE:C1:16 Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Certificate serial: 019AF38A000390E99377E19450F8020D718A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft Manifest number: 1256 Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 9ky9L5C44N+3b17nBssLXlb4WncNc6g1HUT8myFR4GY=) 2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=) 3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=) 4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:00:03:90:e9:93:77:e1:94:50:f8:02:0d:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=7488b44279a89833372f4bab00e8270358dec116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:24:1f:76:87:b3:64:1d:ae:37:4a:33:3d: c7:31:78:81:f5:52:d2:c0:98:3d:39:98:42:53:9f: a3:54:7a:1d:d9:50:3d:42:54:a2:20:0a:57:23:a0: 9e:b1:8c:d9:5d:1f:f1:15:6a:c8:b5:96:8d:c2:3d: c8:a1:12:1b:37:cc:c0:d9:27:68:3e:31:88:0a:61: ff:1c:a9:94:19:33:7f:0d:61:a6:91:15:3c:62:0e: 74:b9:be:66:40:77:a9:9b:68:6c:2a:71:fd:69:da: 33:8e:4c:14:c4:d8:38:e7:9a:50:8c:7e:f3:7b:65: 85:dd:06:93:d8:9e:85:54:05:b2:85:2b:fc:7a:38: 51:e7:f9:78:53:2d:f7:ea:30:e6:14:09:f3:4a:60: 5b:5b:07:16:44:83:46:ab:57:36:7d:d2:05:3d:d9: 3a:d8:ef:10:2b:bb:d6:20:bf:7b:5f:75:51:cd:07: 13:58:70:b2:55:6f:d8:e1:ea:19:ff:4a:45:ba:ac: 19:f4:c2:91:34:77:91:c3:c0:39:58:92:e3:23:ad: be:28:5b:4d:d4:05:4f:fe:66:25:67:3b:82:06:e0: 9b:1d:af:8e:12:95:d3:c9:d1:58:8c:a8:63:2a:72: ae:81:b6:88:85:9b:bf:28:b7:50:87:f8:52:53:b8: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:B4:42:79:A8:98:33:37:2F:4B:AB:00:E8:27:03:58:DE:C1:16 X509v3 Authority Key Identifier: keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:34:52:bc:4d:73:3d:8f:9a:78:d8:c2:70:90:cb:81:cc:a8: 6b:be:ad:75:b3:d5:50:0d:ac:7c:9d:b9:1a:44:38:38:c3:5c: 73:f1:5e:7e:40:4f:06:8f:2f:a5:a4:0f:7b:5b:ca:77:d1:bf: 93:a0:a8:56:f4:a4:5d:36:e3:c5:c9:b9:44:ce:c4:12:87:60: 95:fe:8c:ff:46:d6:63:ab:20:e2:36:04:eb:f2:8c:26:19:1d: b8:6d:a3:62:fe:d0:ee:71:40:b1:30:59:42:7b:1c:0d:76:06: db:da:1d:d3:29:90:d9:10:2a:6e:56:04:91:ea:77:0a:c6:62: a3:15:ec:44:5a:20:95:d5:da:e5:26:60:cd:4d:68:dd:e4:35: 71:18:c0:c4:b9:f6:f6:ff:a5:f6:04:86:9e:a0:af:98:8a:36: de:46:be:a6:b6:3a:3f:f1:71:a9:c0:08:b7:75:0a:b4:7f:d0: fd:80:b2:bf:df:83:12:3a:e9:21:16:23:23:ad:70:50:39:69: 58:03:53:7f:09:80:f6:4c:51:15:ff:5e:66:26:b7:be:83:84: 0e:f3:68:5a:a1:b7:ed:f2:e8:28:d1:e6:32:46:c1:e2:03:0a: 0a:98:60:52:53:e2:31:3d:f7:f8:8b:98:56:5a:62:b1:7b:cb: eb:a5:e1:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigADkOmTd+GUUPgCDXGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy ZDY1MDEwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD Eyg3NDg4YjQ0Mjc5YTg5ODMzMzcyZjRiYWIwMGU4MjcwMzU4ZGVjMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyAkH3aHs2QdrjdKMz3HMXiB9VLS wJg9OZhCU5+jVHod2VA9QlSiIApXI6CesYzZXR/xFWrItZaNwj3IoRIbN8zA2Sdo PjGICmH/HKmUGTN/DWGmkRU8Yg50ub5mQHepm2hsKnH9adozjkwUxNg455pQjH7z e2WF3QaT2J6FVAWyhSv8ejhR5/l4Uy336jDmFAnzSmBbWwcWRINGq1c2fdIFPdk6 2O8QK7vWIL97X3VRzQcTWHCyVW/Y4eoZ/0pFuqwZ9MKRNHeRw8A5WJLjI62+KFtN 1AVP/mYlZzuCBuCbHa+OEpXTydFYjKhjKnKugbaIhZu/KLdQh/hSU7hcyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSItEJ5qJgzNy9LqwDoJwNY3sEWMB8GA1UdIwQY MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTRSvE1z PY+aeNjCcJDLgcyoa76tdbPVUA2sfJ25GkQ4OMNcc/FefkBPBo8vpaQPe1vKd9G/ k6CoVvSkXTbjxcm5RM7EEodglf6M/0bWY6sg4jYE6/KMJhkduG2jYv7Q7nFAsTBZ QnscDXYG29od0ymQ2RAqblYEkep3CsZioxXsRFogldXa5SZgzU1o3eQ1cRjAxLn2 9v+l9gSGnqCvmIo23ka+prY6P/FxqcAIt3UKtH/Q/YCyv9+DEjrpIRYjI61wUDlp WANTfwmA9kxRFf9eZia3voOEDvNoWqG37fLoKNHmMkbB4gMKCphgUlPiMT33+IuY VlpisXvL66Xh9g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:59 2025 by rpki-client