This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json) Hash identifier: RtBl4pAgI5fYRmN8IyDe5zBf9h8BKWjy9wSb0p7T1/o= Subject key identifier: 90:96:57:EA:84:5B:85:AD:BA:43:A4:23:08:67:86:C2:A2:AD:EE:C0 Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143 Certificate serial: 019AF3F77A66C215A92095194AF8FA204AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft Manifest number: 0B71 Signing time: Sat 06 Dec 2025 14:01:13 +0000 Manifest this update: Sat 06 Dec 2025 14:01:13 +0000 Manifest next update: Sun 07 Dec 2025 14:01:13 +0000 Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: YOyhId6luDmOCUoE8YRirMgLiHGiTLy0Zi4uCCUnjWo=) 2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:7a:66:c2:15:a9:20:95:19:4a:f8:fa:20:4a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143 Validity Not Before: Dec 6 14:01:13 2025 GMT Not After : Dec 7 14:01:13 2025 GMT Subject: CN=909657ea845b85adba43a423086786c2a2adeec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:41:72:b1:55:03:24:ed:d6:72:54:f1:1e:4c: a5:38:dc:97:37:30:07:b0:34:36:2d:9f:58:41:04: d7:9d:f7:1b:86:de:3d:a3:1d:02:75:bb:37:07:d9: 32:03:66:e4:f6:d9:1c:78:56:1c:1d:9f:93:d0:53: d3:e9:f6:43:c3:d2:04:b7:70:e9:20:7a:f8:a0:2b: e3:c2:47:f0:89:e0:05:6f:65:b7:84:41:1c:7a:04: 67:cc:18:cc:2b:8d:e4:be:33:ec:2d:02:db:2d:2b: e1:f9:dd:dd:29:ba:c4:14:79:38:65:85:26:f7:7f: 20:79:b0:48:19:2a:85:92:5e:a4:c5:9a:31:52:24: fe:b7:4b:4a:07:4b:20:dd:af:29:d1:7c:49:ff:7c: 07:2e:4d:0d:e7:21:c2:99:73:59:c3:35:d5:1d:0f: 1e:96:1b:91:73:b0:53:31:5f:cc:c7:31:58:26:28: 10:ed:ea:99:f9:50:b8:dc:fe:bc:70:dd:d6:34:fb: d3:30:0e:e3:12:3b:42:b9:c9:5d:8b:f6:eb:08:e9: 29:68:2c:1c:e2:2a:37:ad:08:48:ee:db:84:10:f2: 3d:15:07:f9:92:60:d5:85:25:a4:44:d3:0c:4d:6d: 60:77:47:45:ef:90:a8:5d:66:e7:2f:4f:7e:96:8c: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:57:EA:84:5B:85:AD:BA:43:A4:23:08:67:86:C2:A2:AD:EE:C0 X509v3 Authority Key Identifier: keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:5d:b5:48:d3:5c:de:f4:74:38:aa:53:16:98:d8:63:ea: 4a:8b:aa:07:78:55:43:83:de:7d:8a:e5:98:d1:90:17:46:94: a0:40:c7:ce:62:4e:f2:29:aa:83:74:60:2b:ea:91:96:65:2e: 7b:a9:e9:f1:37:30:c8:64:90:e9:71:06:8a:af:75:50:cd:93: 5a:fa:15:13:18:f9:d1:af:b0:83:97:b1:14:78:fd:29:0b:10: d1:21:45:e5:69:fa:c6:a3:c7:c4:28:e3:83:09:17:9d:3f:e5: 03:2e:2a:b3:59:d3:64:c9:8a:17:01:5a:53:dc:05:6f:51:bc: 8c:d6:a3:f7:e3:41:ff:5b:88:a4:73:90:fc:94:e2:fc:79:5b: 09:f0:f6:fa:72:56:c3:3a:dd:93:54:1f:dd:44:7c:04:54:33: 0f:dd:10:c8:0b:91:72:3c:9b:fb:54:00:3c:b3:bf:44:fe:ad: a3:17:c4:f5:a4:ac:d0:54:fa:45:a9:af:73:95:4d:ec:e1:47: 37:6e:d9:e4:22:03:87:1a:f1:47:e4:57:29:35:c0:c3:6a:6a: 06:86:6a:77:1f:02:c4:39:3a:5e:20:ca:cf:94:09:89:76:98: f1:a9:9d:15:9e:f3:60:43:25:b0:f5:92:be:81:2a:90:e4:1a: 0e:63:c4:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrz93pmwhWpIJUZSvj6IEqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0 NWMxNDMwHhcNMjUxMjA2MTQwMTEzWhcNMjUxMjA3MTQwMTEzWjAzMTEwLwYDVQQD Eyg5MDk2NTdlYTg0NWI4NWFkYmE0M2E0MjMwODY3ODZjMmEyYWRlZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UFysVUDJO3WclTxHkylONyXNzAH sDQ2LZ9YQQTXnfcbht49ox0Cdbs3B9kyA2bk9tkceFYcHZ+T0FPT6fZDw9IEt3Dp IHr4oCvjwkfwieAFb2W3hEEcegRnzBjMK43kvjPsLQLbLSvh+d3dKbrEFHk4ZYUm 938gebBIGSqFkl6kxZoxUiT+t0tKB0sg3a8p0XxJ/3wHLk0N5yHCmXNZwzXVHQ8e lhuRc7BTMV/MxzFYJigQ7eqZ+VC43P68cN3WNPvTMA7jEjtCucldi/brCOkpaCwc 4io3rQhI7tuEEPI9FQf5kmDVhSWkRNMMTW1gd0dF75CoXWbnL09+loxFhwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJCWV+qEW4WtukOkIwhnhsKire7AMB8GA1UdIwQY MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4 YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFZd tUjTXN70dDiqUxaY2GPqSouqB3hVQ4PefYrlmNGQF0aUoEDHzmJO8imqg3RgK+qR lmUue6np8TcwyGSQ6XEGiq91UM2TWvoVExj50a+wg5exFHj9KQsQ0SFF5Wn6xqPH xCjjgwkXnT/lAy4qs1nTZMmKFwFaU9wFb1G8jNaj9+NB/1uIpHOQ/JTi/HlbCfD2 +nJWwzrdk1Qf3UR8BFQzD90QyAuRcjyb+1QAPLO/RP6toxfE9aSs0FT6Ramvc5VN 7OFHN27Z5CIDhxrxR+RXKTXAw2pqBoZqdx8CxDk6XiDKz5QJiXaY8amdFZ7zYEMl sPWSvoEqkOQaDmPEww== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:17 2025 by rpki-client