This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json) Hash identifier: Wjh+eu6xq+12whdmsJQpmWd2dQJh9Lzj5VkjoG2irvg= Subject key identifier: 20:96:8C:4F:4D:D3:EB:03:E2:6E:3D:E7:BC:4C:78:43:15:9F:99:DF Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Certificate serial: 019AF12DCBD7E575DFAB64842384B0306287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft Manifest number: 08AC Signing time: Sat 06 Dec 2025 01:01:41 +0000 Manifest this update: Sat 06 Dec 2025 01:01:41 +0000 Manifest next update: Sun 07 Dec 2025 01:01:41 +0000 Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: 957hg6DhYiwoBeeTmSge6tUXOs+22203R7l9mMO5lfI=) 2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=) 3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cb:d7:e5:75:df:ab:64:84:23:84:b0:30:62:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Validity Not Before: Dec 6 01:01:41 2025 GMT Not After : Dec 7 01:01:41 2025 GMT Subject: CN=20968c4f4dd3eb03e26e3de7bc4c7843159f99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:9e:db:38:2a:37:17:6f:82:0b:d9:cb:ac: 9d:ad:48:f7:1a:9c:bf:6a:4f:1c:15:26:b1:02:95: f9:b5:d9:e9:c5:4d:ff:8d:b4:c0:7e:b5:48:0c:da: cd:94:5f:bb:5b:e2:1f:20:6f:71:22:2b:94:9f:dc: 91:90:a2:ea:68:f2:65:ff:2d:cd:23:70:e4:42:7e: c5:67:17:8b:c9:31:7f:96:e6:50:6b:3d:2a:0b:c5: 85:82:c1:b3:ae:56:14:58:31:0f:ac:81:3b:a1:2c: 9a:ea:f5:d6:1d:84:3d:47:23:52:30:b3:4e:90:92: f6:55:d0:3d:f7:76:17:88:8a:d5:2d:3e:f2:95:b1: cd:80:7c:08:45:c6:f9:89:5f:f4:56:f3:3a:ec:9a: 6b:b2:85:2e:ce:b6:05:36:eb:a6:3e:06:a7:90:28: c6:cd:ad:0d:ae:34:ef:ec:09:7c:d9:57:05:af:01: 68:6a:68:4c:3a:c2:73:b8:2d:d5:cf:19:30:50:2b: d3:4e:1f:cc:da:98:bc:67:10:0b:e6:61:aa:ad:28: 42:58:f5:c3:52:27:05:b4:a8:4f:32:cb:1d:30:f8: ad:fd:3d:1c:f5:94:4e:cb:9c:44:a6:92:12:ae:74: a5:24:97:dd:e2:1d:2c:06:07:38:a9:11:27:cc:39: d2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:8C:4F:4D:D3:EB:03:E2:6E:3D:E7:BC:4C:78:43:15:9F:99:DF X509v3 Authority Key Identifier: keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5d:90:fe:fb:34:d9:d5:f0:f5:48:66:4b:58:24:f9:cc:99: 96:2c:9b:31:86:ea:f0:a9:80:d2:bf:8a:07:f0:c5:a6:da:2e: 66:cd:bc:93:36:a2:8f:da:22:a2:45:62:97:f8:e8:17:e3:91: b7:8c:df:5e:b1:ea:95:99:0b:6d:cc:f3:a9:98:e1:cb:13:f0: 39:a3:26:03:15:5e:69:ea:ae:3f:05:15:2a:83:28:16:ac:8c: 3c:2f:c1:f8:aa:3e:b9:3b:e8:31:cf:6c:a8:8a:4e:19:85:b5: 37:5d:33:e2:b3:32:c8:35:c8:0f:36:3b:67:b6:f3:f5:e0:cd: bf:24:5d:a7:5e:23:8e:fa:1f:03:bf:48:1a:40:02:19:8b:c5: 2c:7b:b2:bf:aa:bd:48:98:dc:7f:cb:7e:62:94:cf:21:51:35: aa:14:33:f7:dc:9d:79:6e:29:e0:b3:11:97:56:7d:bf:86:2b: 42:60:7e:1a:d9:36:08:cc:45:70:0c:83:86:9f:d3:be:ac:80: 90:dd:30:7e:91:43:8d:82:92:34:2f:b7:6b:0e:25:eb:9c:6f: 59:e7:5f:e3:84:73:3b:0b:b3:c2:a1:d6:b9:a0:d9:6e:66:75: 57:17:51:62:94:f2:1e:39:e0:6e:1c:1d:6f:08:3c:42:08:b9: 7a:b4:1c:77 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLcvX5XXfq2SEI4SwMGKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1 Y2IzNmYwHhcNMjUxMjA2MDEwMTQxWhcNMjUxMjA3MDEwMTQxWjAzMTEwLwYDVQQD EygyMDk2OGM0ZjRkZDNlYjAzZTI2ZTNkZTdiYzRjNzg0MzE1OWY5OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fae2zgqNxdvggvZy6ydrUj3Gpy/ ak8cFSaxApX5tdnpxU3/jbTAfrVIDNrNlF+7W+IfIG9xIiuUn9yRkKLqaPJl/y3N I3DkQn7FZxeLyTF/luZQaz0qC8WFgsGzrlYUWDEPrIE7oSya6vXWHYQ9RyNSMLNO kJL2VdA993YXiIrVLT7ylbHNgHwIRcb5iV/0VvM67JprsoUuzrYFNuumPgankCjG za0NrjTv7Al82VcFrwFoamhMOsJzuC3VzxkwUCvTTh/M2pi8ZxAL5mGqrShCWPXD UicFtKhPMssdMPit/T0c9ZROy5xEppISrnSlJJfd4h0sBgc4qREnzDnSlwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCCWjE9N0+sD4m4957xMeEMVn5nfMB8GA1UdIwQY MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2 LWVlMDU3Y2Y5YzE2MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YxL2Q5ZTdlZC0zYzBmLTRhOTItODcxNi1lZTA1N2NmOWMx NjEvMS8xLXlxbHJQeWJzUDVya1I4ZXl0UHJWTlJjczI4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYF2Q /vs02dXw9UhmS1gk+cyZliybMYbq8KmA0r+KB/DFptouZs28kzaij9oiokVil/jo F+ORt4zfXrHqlZkLbczzqZjhyxPwOaMmAxVeaequPwUVKoMoFqyMPC/B+Ko+uTvo Mc9sqIpOGYW1N10z4rMyyDXIDzY7Z7bz9eDNvyRdp14jjvofA79IGkACGYvFLHuy v6q9SJjcf8t+YpTPIVE1qhQz99ydeW4p4LMRl1Z9v4YrQmB+Gtk2CMxFcAyDhp/T vqyAkN0wfpFDjYKSNC+3aw4l65xvWedf44RzOwuzwqHWuaDZbmZ1VxdRYpTyHjng bhwdbwg8Qgi5erQcdw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:14 2025 by rpki-client