This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json) Hash identifier: sTQLLnRKHT7Dulm4DkdziZZtRUzbL+6Qafz7vv/04Ms= Subject key identifier: 1B:63:77:91:4B:4A:4D:63:F3:74:39:0D:29:70:CD:D5:71:D9:0A:31 Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Certificate serial: 019AF12D2FF3ED4FFFB9B6AA07A65C2048DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft Manifest number: 0365 Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: Qd4SHlg0GV6jJnikJj4YdmANGaWuOG5ycxEhus+x00U=) 2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2f:f3:ed:4f:ff:b9:b6:aa:07:a6:5c:20:48:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=1b6377914b4a4d63f374390d2970cdd571d90a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:83:87:8d:ae:30:83:45:35:10:e9:c5:03: 0a:23:38:73:9a:d1:a2:7d:dd:ce:6f:d8:98:bd:d0: 3f:93:86:9b:22:56:70:11:14:f8:00:42:96:5a:0e: 8e:45:0c:f8:d2:c3:73:0d:26:42:07:e0:82:71:ab: 25:90:db:45:07:87:cc:7c:b2:2b:0d:a0:33:c0:88: d2:cb:32:7b:08:41:aa:52:29:2a:c8:a8:56:72:a4: 5d:f0:02:c5:bf:1c:7b:39:13:cb:d2:5a:56:3d:6b: 4e:0c:c5:09:d1:18:71:64:30:34:79:23:07:ac:e3: 72:3c:4d:0d:5f:73:32:63:73:2d:ea:95:80:cc:dc: a0:67:9b:fc:88:d0:3d:81:ac:73:1c:4b:50:75:17: 4e:30:50:ef:ba:b9:df:1c:d0:bf:d5:fd:b4:70:4c: 50:45:c9:04:5b:46:9f:b4:5e:b1:ac:e5:f2:38:87: d9:2b:42:3f:20:04:c5:99:70:4a:33:a1:2c:c7:f3: ed:44:f0:9f:3d:a0:36:72:98:f5:21:ff:82:5e:c8: c6:3a:cc:d7:ff:6f:5b:c5:3c:d4:82:95:b5:d0:d8: f9:9e:b3:99:6d:32:80:94:9a:fd:1d:9c:11:65:92: 34:8d:e8:b8:3c:a5:de:d9:5c:29:58:f0:c2:88:ad: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:63:77:91:4B:4A:4D:63:F3:74:39:0D:29:70:CD:D5:71:D9:0A:31 X509v3 Authority Key Identifier: keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:f9:98:e9:09:a8:ab:29:8e:fe:ab:6f:0f:73:7f:aa:1e:43: 8f:78:2d:c4:08:40:c3:e4:13:f8:f4:58:a4:8e:05:99:22:ba: dc:91:7d:e6:bc:48:34:1c:54:61:01:b6:64:86:b5:d5:ce:a8: ee:46:7a:51:f9:af:57:d6:5a:47:a7:75:a6:90:02:9d:37:54: d7:67:9d:a7:13:c9:3f:ef:f3:84:fb:3b:88:98:6c:28:b2:25: 91:1c:fa:cb:44:17:b8:87:98:1b:e8:aa:78:72:10:ef:c6:dc: 60:7d:fe:91:f7:8f:e9:03:ae:03:4f:7e:7d:ec:5e:a4:0a:62: 9a:41:3b:68:24:4f:81:8a:ac:f3:62:7d:cd:34:6c:6e:c1:e0: 47:90:20:39:86:1b:fd:62:8a:55:b8:9b:51:ac:d3:3e:b6:1a: d9:06:b5:9b:05:20:9b:3d:c4:1f:dc:42:93:d1:1e:d1:2b:4a: 3c:9f:3a:a7:2c:7c:9d:f5:d6:90:9d:d7:59:4d:90:67:d2:92: 8d:ec:44:13:13:a0:d1:1f:14:c8:f6:1f:45:8b:65:1b:81:5c: a8:aa:4d:f0:01:3a:c7:5b:cf:92:36:21:a9:f7:ec:ba:9b:f6: e4:d0:e6:9e:1c:9f:34:02:02:48:40:1e:11:15:c7:ce:56:62: dc:31:63:42 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLS/z7U//ubaqB6ZcIEjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjQ2YTYzMjNiM2Q2ZmMzNGFlNDlkOGJlODg4NGY3Mjky YmRiZjQwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD EygxYjYzNzc5MTRiNGE0ZDYzZjM3NDM5MGQyOTcwY2RkNTcxZDkwYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOmDh42uMINFNRDpxQMKIzhzmtGi fd3Ob9iYvdA/k4abIlZwERT4AEKWWg6ORQz40sNzDSZCB+CCcaslkNtFB4fMfLIr DaAzwIjSyzJ7CEGqUikqyKhWcqRd8ALFvxx7ORPL0lpWPWtODMUJ0RhxZDA0eSMH rONyPE0NX3MyY3Mt6pWAzNygZ5v8iNA9gaxzHEtQdRdOMFDvurnfHNC/1f20cExQ RckEW0aftF6xrOXyOIfZK0I/IATFmXBKM6Esx/PtRPCfPaA2cpj1If+CXsjGOszX /29bxTzUgpW10Nj5nrOZbTKAlJr9HZwRZZI0jei4PKXe2VwpWPDCiK3qfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBtjd5FLSk1j83Q5DSlwzdVx2QoxMB8GA1UdIwQY MBaAFPpkamMjs9b8NK5J2L6IhPcpK9v0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tUnFZeU96MXZ3MHJrbll2b2lFOXlrcjJfUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3 LTU5ZTE5MzI2MmNlNC8xLzEtbVJxWXlPejF2dzBya25Zdm9pRTl5a3IyX1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YyLzZiZjU0Yy1kODA2LTQ2M2EtYWYzNy01OWUxOTMyNjJj ZTQvMS8xLW1ScVl5T3oxdncwcmtuWXZvaUU5eWtyMl9RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzvmY 6QmoqymO/qtvD3N/qh5Dj3gtxAhAw+QT+PRYpI4FmSK63JF95rxINBxUYQG2ZIa1 1c6o7kZ6UfmvV9ZaR6d1ppACnTdU12edpxPJP+/zhPs7iJhsKLIlkRz6y0QXuIeY G+iqeHIQ78bcYH3+kfeP6QOuA09+fexepApimkE7aCRPgYqs82J9zTRsbsHgR5Ag OYYb/WKKVbibUazTPrYa2Qa1mwUgmz3EH9xCk9Ee0StKPJ86pyx8nfXWkJ3XWU2Q Z9KSjexEExOg0R8UyPYfRYtlG4FcqKpN8AE6x1vPkjYhqffsupv25NDmnhyfNAIC SEAeERXHzlZi3DFjQg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:58 2025 by rpki-client