This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json) Hash identifier: +X7TqWPDgZJ3D5iQaUkIFvtsHgu0TqLOy9GpiVY0Szk= Subject key identifier: 11:3F:15:56:2C:1B:5C:87:2C:4E:57:AA:40:F1:68:C9:3F:70:19:FB Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf Certificate serial: 019AF464F94F4B79575A3EBAE77D9331FCC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 16:00:49 +0000 Manifest this update: Sat 06 Dec 2025 16:00:49 +0000 Manifest next update: Sun 07 Dec 2025 16:00:49 +0000 Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: P5VJWPLgM79NDyMq+2b5qzTI5wByKaWV73+qOtucD4w=) 2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=) 3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f9:4f:4b:79:57:5a:3e:ba:e7:7d:93:31:fc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf Validity Not Before: Dec 6 16:00:49 2025 GMT Not After : Dec 7 16:00:49 2025 GMT Subject: CN=113f15562c1b5c872c4e57aa40f168c93f7019fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ab:26:22:1d:ab:fe:ad:7f:1b:84:10:0d:f6: 42:1a:af:00:ea:70:16:8a:11:61:1c:7e:41:d6:59: d3:f4:11:4c:e7:3a:b8:cb:5b:19:9f:4b:4f:8c:cb: 6b:ea:57:db:dd:65:94:ef:09:ea:15:ec:b7:2f:95: 3c:5c:c7:27:46:a7:52:cd:93:20:bc:9c:b7:cb:1d: 9f:b2:01:f9:5e:9a:3a:ad:63:88:d0:cc:f8:37:3d: 00:5f:30:b9:3b:61:4d:a2:9d:df:8e:87:73:95:d1: 56:7f:0e:d0:1d:b0:6e:38:9d:37:23:63:3e:54:b2: fd:2f:9d:ba:88:1c:fd:8c:22:a3:c3:44:cf:a8:ec: d8:f5:fb:ec:8a:fd:a7:74:5e:5d:1b:88:9b:a7:da: 00:4c:3a:a5:ef:96:2e:38:21:81:68:40:3b:5c:72: 8d:65:e1:a3:24:f2:a9:7c:37:c7:d9:dc:15:93:6f: 6f:13:17:35:dd:58:36:fe:84:db:e8:22:5e:3e:b5: 50:1e:8a:f7:38:93:d6:ba:4f:b7:9b:bf:69:26:d0: e2:70:a7:80:b8:48:94:8f:4d:7c:51:1b:98:8c:89: bf:db:04:48:57:a8:dc:a7:43:68:3d:96:2a:1b:ae: 39:c1:b0:d8:a8:51:77:45:ca:69:f7:f3:5e:55:a1: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:15:56:2C:1B:5C:87:2C:4E:57:AA:40:F1:68:C9:3F:70:19:FB X509v3 Authority Key Identifier: keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:29:9f:d2:6d:e3:b6:66:12:be:01:f1:73:89:86:d7:3f:e0: 2a:59:03:5a:4a:f8:50:2d:be:14:da:58:4d:fc:db:0e:aa:c0: 8a:8e:ad:58:55:3f:a1:77:3a:55:bc:d0:a3:82:6a:44:6f:a9: 2c:04:9c:3c:cf:33:47:7c:3d:73:c2:20:65:6e:72:d4:33:e2: 06:a4:43:37:f0:83:67:81:5e:af:b6:6e:b1:2f:0c:c4:1c:01: 71:07:2b:75:37:96:59:84:e5:38:a0:86:cf:d2:3b:84:0b:a1: d1:89:f8:38:bb:60:3f:d1:ef:a3:86:61:40:65:df:c7:6c:40: 66:72:5a:2b:d1:bb:9e:66:61:55:00:0a:aa:5e:31:ac:c2:54: f8:b3:8e:b2:8e:7a:51:e9:8e:4c:67:72:70:e4:ac:17:01:e8: c9:61:1b:23:e8:cb:a5:83:6f:72:38:cd:c0:d5:e2:aa:d2:1e: 15:94:05:19:9a:9d:fc:c6:29:20:2d:4b:02:00:b4:64:b7:0c: 05:3e:3e:1a:d6:40:93:73:52:1e:e1:97:8c:21:fe:ac:56:91: d5:76:5c:da:43:d5:5b:13:db:4b:87:18:3a:65:aa:81:68:c5: b5:32:ad:e6:b9:e6:e6:ca:e7:b8:b3:7f:2c:fa:6b:1c:8c:1a: 2f:ca:f5:07 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0ZPlPS3lXWj66532TMfzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw MGViY2YwHhcNMjUxMjA2MTYwMDQ5WhcNMjUxMjA3MTYwMDQ5WjAzMTEwLwYDVQQD EygxMTNmMTU1NjJjMWI1Yzg3MmM0ZTU3YWE0MGYxNjhjOTNmNzAxOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26smIh2r/q1/G4QQDfZCGq8A6nAW ihFhHH5B1lnT9BFM5zq4y1sZn0tPjMtr6lfb3WWU7wnqFey3L5U8XMcnRqdSzZMg vJy3yx2fsgH5Xpo6rWOI0Mz4Nz0AXzC5O2FNop3fjodzldFWfw7QHbBuOJ03I2M+ VLL9L526iBz9jCKjw0TPqOzY9fvsiv2ndF5dG4ibp9oATDql75YuOCGBaEA7XHKN ZeGjJPKpfDfH2dwVk29vExc13Vg2/oTb6CJePrVQHor3OJPWuk+3m79pJtDicKeA uEiUj018URuYjIm/2wRIV6jcp0NoPZYqG645wbDYqFF3Rcpp9/NeVaHH4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBE/FVYsG1yHLE5XqkDxaMk/cBn7MB8GA1UdIwQY MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1 NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeimf 0m3jtmYSvgHxc4mG1z/gKlkDWkr4UC2+FNpYTfzbDqrAio6tWFU/oXc6VbzQo4Jq RG+pLAScPM8zR3w9c8IgZW5y1DPiBqRDN/CDZ4Fer7ZusS8MxBwBcQcrdTeWWYTl OKCGz9I7hAuh0Yn4OLtgP9Hvo4ZhQGXfx2xAZnJaK9G7nmZhVQAKql4xrMJU+LOO so56UemOTGdycOSsFwHoyWEbI+jLpYNvcjjNwNXiqtIeFZQFGZqd/MYpIC1LAgC0 ZLcMBT4+GtZAk3NSHuGXjCH+rFaR1XZc2kPVWxPbS4cYOmWqgWjFtTKt5rnm5srn uLN/LPprHIwaL8r1Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:59:47 2025 by rpki-client