This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json) Hash identifier: 4Dyl0ROUAuCxDToiIV07J+c3R/rQ3ruGIbDM3DpOGBw= Subject key identifier: EA:59:4F:12:A0:F4:F2:0B:25:71:4B:01:81:0B:3E:C1:67:9B:D4:9E Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Certificate serial: 019AF352D665672ECAB78F268D7E5CC44D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft Manifest number: 0B19 Signing time: Sat 06 Dec 2025 11:01:23 +0000 Manifest this update: Sat 06 Dec 2025 11:01:23 +0000 Manifest next update: Sun 07 Dec 2025 11:01:23 +0000 Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: 4ofVhKOSytPD9pfVvX2MYo2VWd9hw0s2JrbDDextwoQ=) 2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d6:65:67:2e:ca:b7:8f:26:8d:7e:5c:c4:4d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Validity Not Before: Dec 6 11:01:23 2025 GMT Not After : Dec 7 11:01:23 2025 GMT Subject: CN=ea594f12a0f4f20b25714b01810b3ec1679bd49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:6b:73:64:b9:78:2d:e3:cd:d9:2f:aa:51: af:58:c4:8b:ed:9b:78:72:15:a0:c1:f1:11:e2:17: ba:0d:07:44:f1:6d:8f:df:fb:ae:aa:59:c2:12:ba: ce:17:92:3f:b6:47:70:0a:c5:bf:00:60:26:7c:d4: 84:47:dc:d4:62:0d:9c:8e:56:50:db:13:3c:c7:bf: 85:d1:39:2c:bf:55:c8:56:1a:68:6e:c1:98:42:01: 4c:fb:ff:eb:74:94:c6:17:9b:33:aa:c7:73:f6:f4: 11:c4:3e:bb:e8:e8:4d:2c:4d:c1:22:ee:1b:1e:d1: a7:50:9c:f1:c6:db:c9:1e:cc:f8:cb:59:b2:dc:24: ad:71:26:53:45:c1:8a:be:f9:2e:93:98:54:e5:e0: ef:c5:73:3b:bf:a4:5c:0f:9b:d4:a0:58:fd:9b:d7: f1:27:32:47:47:94:52:9f:44:34:e4:4c:c5:dc:0f: 43:2a:c0:41:de:8e:ed:f8:98:78:8a:2a:37:20:60: a4:7b:86:56:3f:dc:ab:9f:8a:cf:b3:60:da:bb:73: 53:63:c7:d0:2c:d3:1c:a7:90:2b:5a:ae:1c:e4:d6: f2:41:7e:94:ae:f1:9d:fc:97:f9:cf:ef:8a:f0:f1: 8b:23:5d:6e:13:4b:f5:60:33:7f:59:9f:86:42:08: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:4F:12:A0:F4:F2:0B:25:71:4B:01:81:0B:3E:C1:67:9B:D4:9E X509v3 Authority Key Identifier: keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1b:a5:91:65:6d:b9:c5:76:a6:04:5d:c6:1e:5e:bd:5c:fa: 6c:fc:9e:4f:e2:2a:06:40:e7:86:35:30:d7:4c:eb:af:f1:f8: 52:04:32:dc:12:4d:b8:ae:41:08:61:71:e9:74:63:91:bb:00: 64:3c:2b:01:7e:7c:b2:61:5f:26:58:07:66:d6:b9:35:3f:81: 3b:8d:64:34:21:57:ae:95:38:14:9a:fe:3d:5a:63:9b:88:0e: 20:fa:b4:4d:15:7b:0f:4f:2e:a6:d6:89:a4:d2:f9:da:6e:15: 3a:03:46:04:42:cc:e6:34:c0:2a:6a:c0:49:10:95:3e:de:e8: b2:c0:ee:ff:ab:fa:bd:51:bb:35:91:c9:7c:1d:98:ef:23:e6: 00:20:82:1c:6e:a3:aa:db:31:a9:71:0e:43:02:6e:9e:f7:02: e8:d8:56:9d:37:e9:32:b2:77:72:de:7b:70:06:5e:5e:1b:a3: 5f:94:c6:a5:4b:d8:fb:8a:18:7e:b1:f0:47:5c:a7:b7:a6:b1: 4a:3d:b8:e8:33:75:bc:06:f3:89:4d:c3:c6:1e:fe:a6:b5:56: e5:e7:77:3e:bb:8a:28:fc:d5:10:c4:a6:d5:26:00:f9:6b:25: 56:c2:e8:d7:e2:0b:dc:20:49:7d:e5:9d:85:1b:13:c1:5f:67: 0d:20:3c:23 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzUtZlZy7Kt48mjX5cxE0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5 YWFhOGYwHhcNMjUxMjA2MTEwMTIzWhcNMjUxMjA3MTEwMTIzWjAzMTEwLwYDVQQD EyhlYTU5NGYxMmEwZjRmMjBiMjU3MTRiMDE4MTBiM2VjMTY3OWJkNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktxrc2S5eC3jzdkvqlGvWMSL7Zt4 chWgwfER4he6DQdE8W2P3/uuqlnCErrOF5I/tkdwCsW/AGAmfNSER9zUYg2cjlZQ 2xM8x7+F0Tksv1XIVhpobsGYQgFM+//rdJTGF5szqsdz9vQRxD676OhNLE3BIu4b HtGnUJzxxtvJHsz4y1my3CStcSZTRcGKvvkuk5hU5eDvxXM7v6RcD5vUoFj9m9fx JzJHR5RSn0Q05EzF3A9DKsBB3o7t+Jh4iio3IGCke4ZWP9yrn4rPs2Dau3NTY8fQ LNMcp5ArWq4c5NbyQX6UrvGd/Jf5z++K8PGLI11uE0v1YDN/WZ+GQghiwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOpZTxKg9PILJXFLAYELPsFnm9SeMB8GA1UdIwQY MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2 LTE5Nzc4Yzg3ZmVkNS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ZhLzI1ZDA5Mi04MWE0LTQ3ZjMtYmRjNi0xOTc3OGM4N2Zl ZDUvMS8xLVZrWTkyc3VCTEYxRkU0anktU0tZOHlhcW84LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBul kWVtucV2pgRdxh5evVz6bPyeT+IqBkDnhjUw10zrr/H4UgQy3BJNuK5BCGFx6XRj kbsAZDwrAX58smFfJlgHZta5NT+BO41kNCFXrpU4FJr+PVpjm4gOIPq0TRV7D08u ptaJpNL52m4VOgNGBELM5jTAKmrASRCVPt7ossDu/6v6vVG7NZHJfB2Y7yPmACCC HG6jqtsxqXEOQwJunvcC6NhWnTfpMrJ3ct57cAZeXhujX5TGpUvY+4oYfrHwR1yn t6axSj246DN1vAbziU3Dxh7+prVW5ed3PruKKPzVEMSm1SYA+WslVsLo1+IL3CBJ feWdhRsTwV9nDSA8Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:55 2025 by rpki-client