This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft File: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json) Hash identifier: v/uKVCpQHmgXuDDyDzdzc60x7IRLOwH0DAk/MWKTH84= Subject key identifier: B5:3F:8A:7C:43:F2:8E:8C:8C:50:B7:81:11:94:F5:64:8F:3A:33:50 Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56 Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556 Certificate serial: 019AF2ADCEBC308FB9015E15916A89A05BD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft Manifest number: 0F82 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: AtkpDkZr0nD8p+tD9VAlGu3ydWijak4RfPDs6ILtrbo=) 2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ce:bc:30:8f:b9:01:5e:15:91:6a:89:a0:5b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556 Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=b53f8a7c43f28e8c8c50b7811194f5648f3a3350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:a6:c3:2a:bb:c6:86:2c:da:a7:3c:4a:d7: db:c3:fc:20:81:dd:df:46:f9:26:e2:1e:6d:5d:e8: 0c:b6:34:25:ac:e0:79:f2:2d:f4:82:fd:eb:90:ac: a5:36:31:9d:d2:9d:c9:a7:04:c5:e7:96:26:f7:3c: 7a:14:48:a4:6e:50:c0:ef:7f:40:fa:f4:a3:ca:a3: 30:02:9f:8e:e2:ff:e4:b9:96:f9:24:c5:0b:0d:1c: 04:23:70:1e:3f:74:f4:7d:05:b1:bf:d3:c6:dc:aa: 7d:07:df:17:71:ee:45:6d:fb:6c:ee:33:f0:5b:8c: 45:96:11:99:8d:b3:36:ce:fd:91:86:4a:38:db:42: 27:87:1a:a9:6c:b0:de:fe:dc:08:e5:b5:85:8c:5e: 44:2b:3f:25:82:69:73:4d:35:87:0f:46:96:5a:bb: 07:fe:97:27:9d:9d:7c:5b:86:e7:ff:63:9e:6a:fe: bd:c8:18:be:11:da:5e:0d:e9:76:04:1f:11:4e:83: 21:12:fd:38:9f:7e:a7:ea:a2:41:ed:24:89:53:08: ca:e2:3b:90:da:c5:d1:62:b9:9b:00:71:a3:0c:27: f8:9f:53:60:cd:7e:bd:99:4e:91:80:0c:ce:af:f1: 31:af:9b:59:d8:37:ef:45:fb:25:ed:35:4d:ba:46: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3F:8A:7C:43:F2:8E:8C:8C:50:B7:81:11:94:F5:64:8F:3A:33:50 X509v3 Authority Key Identifier: keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6d:02:bc:51:ae:cb:dc:f3:45:03:07:e3:a0:06:e3:0e:5f: 1c:b7:50:25:ad:54:00:a0:4c:ed:e1:55:af:72:db:82:51:a3: d1:b7:93:74:f8:9e:c0:3b:fb:a5:c6:a9:56:a5:ae:e7:17:0d: 79:d2:ad:4d:b4:2f:20:10:01:52:96:bf:b5:6c:35:19:d3:c4: f4:43:55:30:db:7b:dc:52:77:df:e0:2d:a1:1e:a2:a6:d2:03: 14:39:53:db:40:be:5d:ff:40:fc:d8:52:df:a6:d0:8d:8b:f8: 22:58:37:10:5e:9e:d2:37:7c:e9:cb:f5:1c:ac:43:3e:ac:dd: 51:ae:d6:dc:ef:42:74:98:59:6f:74:dc:bf:d0:c6:28:bd:45: 3a:3c:55:8a:89:df:98:f9:b7:ed:37:26:31:86:d1:69:28:a3: 7b:bc:2e:f5:f7:30:86:79:5a:4f:e9:ff:2f:36:0c:4f:40:70: db:6b:f7:96:67:e4:f3:fa:5b:1e:00:4b:12:74:8a:3e:c5:45: 5f:02:36:40:c9:89:9f:e7:70:10:ae:28:5e:63:15:74:fc:fe: bd:b6:77:9a:4d:c2:fa:76:14:f6:5b:82:8f:d2:29:af:b5:32: 1d:a6:18:3e:27:34:b4:c0:23:f9:bc:0b:e2:81:20:f8:d2:28: 82:c7:4a:37 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrc68MI+5AV4VkWqJoFvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OTUxYmE1NjMyOTMyM2I0YzYwZjYyMGQ2YTczOTFlNzA3 YjU1NTYwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD EyhiNTNmOGE3YzQzZjI4ZThjOGM1MGI3ODExMTk0ZjU2NDhmM2EzMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl+mwyq7xoYs2qc8Stfbw/wggd3f Rvkm4h5tXegMtjQlrOB58i30gv3rkKylNjGd0p3JpwTF55Ym9zx6FEikblDA739A +vSjyqMwAp+O4v/kuZb5JMULDRwEI3AeP3T0fQWxv9PG3Kp9B98Xce5Fbfts7jPw W4xFlhGZjbM2zv2Rhko420InhxqpbLDe/twI5bWFjF5EKz8lgmlzTTWHD0aWWrsH /pcnnZ18W4bn/2Oeav69yBi+EdpeDel2BB8RToMhEv04n36n6qJB7SSJUwjK4juQ 2sXRYrmbAHGjDCf4n1NgzX69mU6RgAzOr/Exr5tZ2DfvRfsl7TVNukZi0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLU/inxD8o6MjFC3gRGU9WSPOjNQMB8GA1UdIwQY MBaAFPmVG6VjKTI7TGD2INanOR5we1VWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aVWJwV01wTWp0TVlQWWcxcWM1SG5CN1ZWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJm LTQ3NDVkN2NkOTNmMS8xLzEtWlVicFdNcE1qdE1ZUFlnMXFjNUhuQjdWVlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VkLzhmNWNiZC1mNTM5LTRmZmYtYjQyZi00NzQ1ZDdjZDkz ZjEvMS8xLVpVYnBXTXBNanRNWVBZZzFxYzVIbkI3VlZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam0C vFGuy9zzRQMH46AG4w5fHLdQJa1UAKBM7eFVr3LbglGj0beTdPiewDv7pcapVqWu 5xcNedKtTbQvIBABUpa/tWw1GdPE9ENVMNt73FJ33+AtoR6iptIDFDlT20C+Xf9A /NhS36bQjYv4Ilg3EF6e0jd86cv1HKxDPqzdUa7W3O9CdJhZb3Tcv9DGKL1FOjxV ionfmPm37TcmMYbRaSije7wu9fcwhnlaT+n/LzYMT0Bw22v3lmfk8/pbHgBLEnSK PsVFXwI2QMmJn+dwEK4oXmMVdPz+vbZ3mk3C+nYU9luCj9Ipr7UyHaYYPic0tMAj +bwL4oEg+NIogsdKNw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:09 2025 by rpki-client