This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json) Hash identifier: 5zT9765E4QPQRLE4zpGBVPtCCHsN5IoMBK9Bn/GUT6Y= Subject key identifier: 2D:BC:92:51:D3:22:83:38:05:18:1F:D2:95:CF:60:76:7B:44:B7:00 Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13 Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13 Certificate serial: 019AF0BF7AC3B5F297B6A7CA20648B9F878C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft Manifest number: 0EFB Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: I1sKOgHBJ26/5cmY8fGzH/spGQqAH2NJxLl7r4/BxGM=) 2: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7a:c3:b5:f2:97:b6:a7:ca:20:64:8b:9f:87:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13 Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=2dbc9251d322833805181fd295cf60767b44b700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:00:91:ef:70:57:80:e7:04:a2:08:8e:36: 33:2c:07:c3:db:73:b7:8d:26:dd:03:37:14:3d:bd: 01:cf:28:2c:b3:32:ba:33:10:02:60:ac:dc:f4:07: 7f:4a:31:86:9e:42:c5:55:77:d5:be:5a:1c:40:4e: c2:91:b2:e4:ba:c0:e0:2f:97:bb:01:e8:79:84:52: ab:5b:08:3e:15:0a:d3:0d:1b:7b:61:cd:cc:93:9a: fd:af:86:30:5d:4d:7a:bd:97:81:8f:47:68:c6:c5: c3:0b:b8:33:e5:04:95:fe:72:be:ba:ab:9b:f6:39: 6e:9d:69:73:8e:b7:22:5c:8d:67:bc:0b:cd:54:5c: d2:a9:66:fc:be:40:64:c3:f7:7d:8e:1f:5b:cb:72: 17:7d:cd:8b:db:77:d8:15:e7:86:f7:56:01:67:d5: c5:9b:d7:e9:e7:e5:e6:92:42:d0:92:eb:0e:0f:7a: c0:5b:ba:1b:9d:db:a4:66:16:8e:5d:a0:6a:9e:fd: 28:a4:a6:87:38:4c:bb:c7:32:38:5b:a1:6f:4e:58: 3c:e6:11:09:43:19:2c:f9:2f:88:2c:6b:f3:97:b9: 14:f4:95:22:ba:24:dd:a1:bf:e2:8b:44:5c:c1:36: 2b:4c:73:e8:a7:ac:0e:89:88:05:24:0c:1f:2d:96: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BC:92:51:D3:22:83:38:05:18:1F:D2:95:CF:60:76:7B:44:B7:00 X509v3 Authority Key Identifier: keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:16:7f:b5:fd:4c:de:6c:97:94:c5:4a:6e:cd:4c:dd:b3:4b: 60:a9:a2:51:dd:81:77:15:af:55:26:1a:c1:ba:96:9c:cf:9b: 43:75:92:94:ae:4b:46:e9:73:a9:a6:6e:7c:27:3e:9d:fa:fa: fe:c3:63:68:e2:94:e6:47:9f:2a:c0:97:4c:ec:cc:c8:05:84: 27:8d:ca:4d:ac:78:01:3e:e5:07:7a:3c:4a:3f:1f:b9:47:ae: 43:ac:e8:18:9f:2b:e9:dd:c9:d3:55:f1:a1:2c:d3:94:8e:db: c7:67:7a:50:73:c8:36:c3:55:78:51:83:69:84:54:a1:c8:36: e8:c5:b0:5b:4f:28:fe:c8:97:34:cc:98:5e:89:37:db:c9:e8: 3b:3f:0f:c8:f3:4e:3d:2f:bd:12:5d:52:58:2a:44:54:bf:d4: cf:3d:75:e2:18:8d:d6:33:f7:4a:2f:e6:35:ce:c2:ee:70:16: c4:31:65:b5:b2:11:60:19:10:d8:96:21:4c:f6:17:79:62:2f: 7c:71:48:b7:83:49:66:eb:7e:75:dc:4b:c2:a9:a7:3b:ad:fa: c0:21:93:8d:1a:8d:27:13:2a:b1:9d:ae:b6:a7:ad:6e:6f:bb: ba:29:56:47:99:0b:12:fd:df:a5:aa:18:d1:76:49:6f:c3:b2: f3:2c:96:33 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwv3rDtfKXtqfKIGSLn4eMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0 YjZlMTMwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EygyZGJjOTI1MWQzMjI4MzM4MDUxODFmZDI5NWNmNjA3NjdiNDRiNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07YAke9wV4DnBKIIjjYzLAfD23O3 jSbdAzcUPb0BzygsszK6MxACYKzc9Ad/SjGGnkLFVXfVvlocQE7CkbLkusDgL5e7 Aeh5hFKrWwg+FQrTDRt7Yc3Mk5r9r4YwXU16vZeBj0doxsXDC7gz5QSV/nK+uqub 9jlunWlzjrciXI1nvAvNVFzSqWb8vkBkw/d9jh9by3IXfc2L23fYFeeG91YBZ9XF m9fp5+XmkkLQkusOD3rAW7obndukZhaOXaBqnv0opKaHOEy7xzI4W6FvTlg85hEJ Qxks+S+ILGvzl7kU9JUiuiTdob/ii0RcwTYrTHPop6wOiYgFJAwfLZYtCQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC28klHTIoM4BRgf0pXPYHZ7RLcAMB8GA1UdIwQY MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh LTZiOWRjYTljNGVjZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhLzllNjdmNS1lNTgwLTQ2ODYtYjgyYS02YjlkY2E5YzRl Y2UvMS8xLXRwQmQwZGxwTTJ3VU5ncThSdW4wdFZMYmhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBZ/ tf1M3myXlMVKbs1M3bNLYKmiUd2BdxWvVSYawbqWnM+bQ3WSlK5LRulzqaZufCc+ nfr6/sNjaOKU5kefKsCXTOzMyAWEJ43KTax4AT7lB3o8Sj8fuUeuQ6zoGJ8r6d3J 01XxoSzTlI7bx2d6UHPINsNVeFGDaYRUocg26MWwW08o/siXNMyYXok328noOz8P yPNOPS+9El1SWCpEVL/Uzz114hiN1jP3Si/mNc7C7nAWxDFltbIRYBkQ2JYhTPYX eWIvfHFIt4NJZut+ddxLwqmnO636wCGTjRqNJxMqsZ2utqetbm+7uilWR5kLEv3f paoY0XZJb8Oy8yyWMw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:34 2025 by rpki-client