This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json) Hash identifier: h4Pxx7R3Nyp6uzb77xMEMhH1j+rmiPpwt+t552QBTos= Subject key identifier: 18:8B:D6:9A:CC:0C:0E:0F:D5:DE:0C:4A:4A:B5:7B:D2:C3:2A:CE:4F Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54 Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454 Certificate serial: 019AF2ADC03F37D97BE9FD7573CD30662280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: nDNCqAJTYcYcNbyV2Bj6EPcVC7hLhv01np/UjfxTMfU=) 2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c0:3f:37:d9:7b:e9:fd:75:73:cd:30:66:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=188bd69acc0c0e0fd5de0c4a4ab57bd2c32ace4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:9b:43:73:55:4d:b3:7e:09:d3:13:2b:37: 74:66:97:2a:91:35:ed:9d:89:c3:97:db:5d:c7:bd: a4:b3:89:b4:f4:18:9e:bc:77:1a:47:6b:f2:d7:3c: 9b:06:95:c0:ac:49:7c:aa:5d:3e:31:b6:2d:e7:8b: b1:94:ff:4b:6e:47:69:f4:c3:ee:47:7b:3c:82:90: 6d:ec:19:50:7c:2c:83:52:9d:24:a8:91:41:a8:30: 5b:0e:75:36:f7:36:e9:74:78:be:1a:18:8e:d5:13: 6d:ba:68:be:8f:1a:ab:18:82:6c:3f:a5:ac:8f:5c: c1:f4:66:95:60:9e:cc:2a:2e:fb:cb:0a:ba:d0:6d: 5f:85:62:ff:fd:b9:77:a6:69:4b:d0:9d:ca:c4:53: 1b:5e:51:07:d3:e0:3f:66:8c:ee:0a:ae:44:71:98: 43:01:85:30:24:8b:b2:92:0f:d9:4f:5f:f6:e2:ad: 07:b8:e2:0d:cf:7a:d7:68:52:04:42:16:0a:00:5a: 59:e3:d6:de:ec:a5:01:c9:06:76:78:db:c2:cf:cc: a9:04:eb:b6:62:08:99:d0:60:55:d9:cc:e7:77:9d: 60:f9:24:68:2e:98:d3:31:ea:bf:75:3b:2e:60:8c: c1:58:a4:a8:9e:02:ff:66:6e:d0:5f:0f:c2:1e:af: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:D6:9A:CC:0C:0E:0F:D5:DE:0C:4A:4A:B5:7B:D2:C3:2A:CE:4F X509v3 Authority Key Identifier: keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c4:b2:25:32:31:dd:35:cb:6e:1f:65:62:84:ab:48:37:82: 52:ff:9f:24:c9:a9:43:1c:34:de:e2:8a:d6:7f:51:33:ef:e8: fb:e5:f2:78:11:17:1c:ce:25:9f:89:4d:8e:55:d8:0a:af:9c: bc:14:77:dd:44:8f:04:73:60:f3:12:50:c0:52:b8:94:f1:ec: 69:69:dd:4f:6d:e4:f9:55:1f:8e:ad:17:a5:6a:2f:2f:05:a1: 74:77:57:5c:47:1a:b9:a5:9f:45:6c:e4:3f:ae:28:cf:9d:8a: c2:59:2f:ba:20:e1:65:ca:d1:54:77:6d:1e:6a:37:50:25:79: cf:35:87:b3:b4:90:2b:df:6f:57:17:b3:4d:93:27:73:18:27: 56:e1:e8:4f:37:9c:90:23:b6:9b:c5:87:9b:81:79:7f:ef:23: 0d:de:79:ff:09:11:3f:82:6a:12:30:d3:5f:42:19:3c:00:c2: 1f:9c:3c:cc:a4:f8:28:27:65:95:71:c8:f9:71:d1:9f:8a:10: 7f:c3:7f:4a:6c:a9:75:af:00:aa:79:91:1c:b8:0c:46:cf:a0: e1:75:ec:bf:35:47:b1:65:51:2a:b9:26:db:34:fc:55:32:e0: f2:58:71:2d:ed:83:c6:30:ca:5b:ef:6f:e5:1f:05:b2:b9:d9: 7b:6f:a8:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrcA/N9l76f11c80wZiKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4 M2I0NTQwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD EygxODhiZDY5YWNjMGMwZTBmZDVkZTBjNGE0YWI1N2JkMmMzMmFjZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP6bQ3NVTbN+CdMTKzd0ZpcqkTXt nYnDl9tdx72ks4m09BievHcaR2vy1zybBpXArEl8ql0+MbYt54uxlP9Lbkdp9MPu R3s8gpBt7BlQfCyDUp0kqJFBqDBbDnU29zbpdHi+GhiO1RNtumi+jxqrGIJsP6Ws j1zB9GaVYJ7MKi77ywq60G1fhWL//bl3pmlL0J3KxFMbXlEH0+A/ZozuCq5EcZhD AYUwJIuykg/ZT1/24q0HuOINz3rXaFIEQhYKAFpZ49be7KUByQZ2eNvCz8ypBOu2 YgiZ0GBV2cznd51g+SRoLpjTMeq/dTsuYIzBWKSongL/Zm7QXw/CHq+6OQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBiL1prMDA4P1d4MSkq1e9LDKs5PMB8GA1UdIwQY MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5 LTgyNWQzZmYxZGRlOC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U5LzE0NjcxZS04NmQyLTQyZmMtODBkOS04MjVkM2ZmMWRk ZTgvMS8xLXFZZUtjRm12d1kxeU03LWphZ2hCS2VEdEZRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccSy JTIx3TXLbh9lYoSrSDeCUv+fJMmpQxw03uKK1n9RM+/o++XyeBEXHM4ln4lNjlXY Cq+cvBR33USPBHNg8xJQwFK4lPHsaWndT23k+VUfjq0XpWovLwWhdHdXXEcauaWf RWzkP64oz52KwlkvuiDhZcrRVHdtHmo3UCV5zzWHs7SQK99vVxezTZMncxgnVuHo TzeckCO2m8WHm4F5f+8jDd55/wkRP4JqEjDTX0IZPADCH5w8zKT4KCdllXHI+XHR n4oQf8N/Smypda8AqnmRHLgMRs+g4XXsvzVHsWVRKrkm2zT8VTLg8lhxLe2DxjDK W+9v5R8FsrnZe2+oFw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:02 2025 by rpki-client