This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json) Hash identifier: t2eb8uxe8P8lBRtqwHLCufrmNCfP6GJMC8dyxxQA0/I= Subject key identifier: D9:FC:C4:9F:A3:E6:3F:0E:C3:31:04:7D:7E:6E:75:1D:72:C5:0B:9F Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Certificate serial: 019AF49C0BE550E544EA10F95C6DE0C6DFB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft Manifest number: 1290 Signing time: Sat 06 Dec 2025 17:00:58 +0000 Manifest this update: Sat 06 Dec 2025 17:00:58 +0000 Manifest next update: Sun 07 Dec 2025 17:00:58 +0000 Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: nAskCrDOyIM6JR1BvIRUAe9iggQiMGqDK13lG2YK5cA=) 2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0b:e5:50:e5:44:ea:10:f9:5c:6d:e0:c6:df:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Validity Not Before: Dec 6 17:00:58 2025 GMT Not After : Dec 7 17:00:58 2025 GMT Subject: CN=d9fcc49fa3e63f0ec331047d7e6e751d72c50b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:aa:ca:25:aa:f6:08:9b:41:5e:ce:8b:c3: 38:a7:0b:0a:06:e0:d3:44:f7:0b:fb:e3:d6:dc:96: e3:9c:9a:e7:d4:23:9b:77:9b:ef:3c:0e:40:55:d7: 1c:4a:07:57:0a:06:a3:d4:75:81:05:1d:8f:ef:05: c9:1b:05:e1:d3:61:7d:ce:aa:51:d9:c7:3a:4e:33: 07:33:5d:46:f5:cf:07:78:ba:49:e1:21:d1:6b:46: 56:8c:6d:0a:06:af:08:12:72:25:d7:d2:b7:48:a8: e8:8f:11:2e:cd:52:e7:5f:ce:cf:cd:63:90:79:74: 3e:fc:ec:2c:9a:c5:1e:92:7d:e1:6b:0e:d3:23:03: 4a:b0:2c:13:14:bb:a1:3e:73:40:03:03:98:7a:18: fb:16:3d:97:e2:e4:2c:e4:28:06:4a:a7:55:4a:af: 7f:1a:0e:92:68:8a:c7:60:02:12:94:2c:d9:a9:9d: 2f:b3:3f:1a:25:88:53:78:7c:ee:65:ae:32:b0:79: 09:1c:6b:36:4b:2c:0e:05:30:37:6a:7c:26:6d:7b: bd:ab:8f:56:f2:bc:d1:e4:29:fb:c8:76:da:96:46: ce:71:05:85:8c:d7:aa:ea:fe:a5:b3:a6:d5:82:91: 65:d9:9a:24:11:f1:50:aa:44:e7:54:83:b3:69:5c: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:C4:9F:A3:E6:3F:0E:C3:31:04:7D:7E:6E:75:1D:72:C5:0B:9F X509v3 Authority Key Identifier: keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:11:ab:1d:31:0a:84:ee:a7:e5:d9:d2:99:69:72:25:d2:13: b7:31:34:0f:30:09:7a:5b:a6:6b:ba:d2:ad:92:a7:d9:92:bd: f6:a6:91:18:4c:fa:1f:72:58:42:5e:47:54:e9:71:75:2d:11: 37:14:1e:41:dd:89:eb:cc:b2:a1:a1:20:1f:f2:89:97:93:4e: 9b:9c:4e:c1:ed:ff:28:ad:d5:6d:4e:9e:97:cc:91:0c:47:d3: 44:40:62:bf:44:48:d5:5e:8c:28:1b:6e:6f:de:d5:81:e9:4b: ec:1e:6e:a6:82:0f:61:e6:ad:7f:be:e5:70:19:7c:29:e7:23: 9d:68:8a:44:b4:44:8d:d4:c8:74:9a:e7:8d:24:89:1a:ae:dd: 1f:53:85:d0:c7:6a:ca:7e:a0:31:6e:fc:1d:61:eb:94:4d:44: ac:f0:1c:2c:d7:b0:c3:03:d6:f8:73:17:f6:4c:5b:e0:b9:ad: 40:67:51:2c:7b:ab:6a:4a:36:6d:4a:38:93:3a:64:1d:3c:07: a2:6d:1d:7f:08:d8:90:44:ec:61:bf:b3:b8:d8:64:0b:ed:66: 76:97:a9:a6:bf:ef:08:82:68:4e:dd:86:04:99:1b:bf:21:4a: b4:d2:48:e0:8e:b5:9f:b4:94:fa:a6:3b:1b:d9:d2:70:25:36: 8f:93:2a:19 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0nAvlUOVE6hD5XG3gxt+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm MWUxMzEwHhcNMjUxMjA2MTcwMDU4WhcNMjUxMjA3MTcwMDU4WjAzMTEwLwYDVQQD EyhkOWZjYzQ5ZmEzZTYzZjBlYzMzMTA0N2Q3ZTZlNzUxZDcyYzUwYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLmqyiWq9gibQV7Oi8M4pwsKBuDT RPcL++PW3JbjnJrn1CObd5vvPA5AVdccSgdXCgaj1HWBBR2P7wXJGwXh02F9zqpR 2cc6TjMHM11G9c8HeLpJ4SHRa0ZWjG0KBq8IEnIl19K3SKjojxEuzVLnX87PzWOQ eXQ+/OwsmsUekn3haw7TIwNKsCwTFLuhPnNAAwOYehj7Fj2X4uQs5CgGSqdVSq9/ Gg6SaIrHYAISlCzZqZ0vsz8aJYhTeHzuZa4ysHkJHGs2SywOBTA3anwmbXu9q49W 8rzR5Cn7yHbalkbOcQWFjNeq6v6ls6bVgpFl2ZokEfFQqkTnVIOzaVwsYQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNn8xJ+j5j8OwzEEfX5udR1yxQufMB8GA1UdIwQY MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4 LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y5L2I1NWMwNC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIy MTkvMS8xLXFXc1hTS3RrSGluTGhOcGxpaHlSLW54NFRFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghGr HTEKhO6n5dnSmWlyJdITtzE0DzAJeluma7rSrZKn2ZK99qaRGEz6H3JYQl5HVOlx dS0RNxQeQd2J68yyoaEgH/KJl5NOm5xOwe3/KK3VbU6el8yRDEfTREBiv0RI1V6M KBtub97VgelL7B5upoIPYeatf77lcBl8KecjnWiKRLREjdTIdJrnjSSJGq7dH1OF 0Mdqyn6gMW78HWHrlE1ErPAcLNewwwPW+HMX9kxb4LmtQGdRLHurako2bUo4kzpk HTwHom0dfwjYkETsYb+zuNhkC+1mdpeppr/vCIJoTt2GBJkbvyFKtNJI4I61n7SU +qY7G9nScCU2j5MqGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:39 2025 by rpki-client