This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json) Hash identifier: m9/vgD/fmSJeU8qhx3rhLMqPXYj9qpBJ1mLrHNW4A0k= Subject key identifier: F0:7B:9E:5D:3C:EB:11:FF:00:5A:AE:DC:B2:A1:BF:8F:13:3C:3A:0E Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Certificate serial: 019AF540D25A4BD400F33D4C61FF3DB08CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft Manifest number: 0B1A Signing time: Sat 06 Dec 2025 20:00:57 +0000 Manifest this update: Sat 06 Dec 2025 20:00:57 +0000 Manifest next update: Sun 07 Dec 2025 20:00:57 +0000 Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: hf/iGrHlRNF3NEJZQu4RjVoKLn1TY5a78fAveNCFmJ4=) 2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d2:5a:4b:d4:00:f3:3d:4c:61:ff:3d:b0:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Validity Not Before: Dec 6 20:00:57 2025 GMT Not After : Dec 7 20:00:57 2025 GMT Subject: CN=f07b9e5d3ceb11ff005aaedcb2a1bf8f133c3a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:88:a3:86:a5:26:f0:1d:89:dd:05:8f:0f: 9c:7d:4a:27:6e:94:28:7f:1b:4a:8b:aa:8e:db:b0: e8:09:8e:c9:5f:ca:28:d7:7b:bd:88:9e:89:5f:ca: f5:65:e3:0b:76:cd:e8:14:80:87:b7:12:a0:13:10: 7f:33:a0:24:89:2f:45:a5:d0:2c:28:67:67:22:67: 4c:63:6b:59:5d:10:ad:a3:1c:83:bd:20:0b:af:c1: d0:30:4b:14:ac:d2:34:37:16:b1:04:1b:f2:da:19: 88:b2:5c:1d:0c:52:28:d1:80:4b:37:2f:9b:4e:d3: 1b:f0:53:3b:fe:bc:e8:59:c6:f2:51:0d:38:1e:63: 32:64:4b:3b:06:15:69:95:b7:b6:13:02:ff:98:09: a5:02:5a:4b:53:89:99:99:97:b1:fd:46:f2:c8:8c: a9:ab:cc:c0:b9:0c:57:c2:e8:e7:09:35:ee:6e:fa: 99:1c:d6:c3:44:f3:08:98:0c:cf:fd:1f:ec:d1:73: 84:09:b3:fa:a1:4d:04:82:e9:f8:4b:c9:ff:15:96: 04:65:06:39:23:d1:61:ef:72:1e:c3:3a:c8:76:18: 2f:f3:9c:ea:3c:97:ba:62:51:ef:9b:35:4d:47:f9: b9:73:ca:b7:68:37:0f:af:aa:62:b6:dc:3e:54:92: 99:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:9E:5D:3C:EB:11:FF:00:5A:AE:DC:B2:A1:BF:8F:13:3C:3A:0E X509v3 Authority Key Identifier: keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d8:1d:78:83:ed:d5:3d:2f:42:65:69:13:69:65:44:f6:83: 0d:60:50:9a:59:9b:c2:73:bb:7e:ee:9a:d2:62:5b:d9:14:43: 7d:8b:65:68:ce:e0:d2:11:5a:c0:80:54:f6:d5:0c:69:69:66: 62:99:d3:ab:e8:cc:68:7d:f0:ee:b0:50:fd:6f:5a:8b:9e:aa: 6e:a8:93:d0:48:10:b1:f7:e1:2a:55:dc:01:93:7c:80:d5:cf: 70:ce:36:0d:4e:e9:de:60:cf:59:2d:b6:4d:64:11:02:ff:7c: 5b:28:6f:3a:a6:37:b7:71:35:69:f0:b1:08:96:04:65:ea:c0: 40:2b:43:00:5b:3f:4d:25:e3:43:ef:1f:15:2a:16:89:8a:da: 15:b1:4c:91:01:52:3e:13:ae:ff:fa:04:97:cc:fc:0f:09:fe: 89:e0:cb:7b:3d:c0:9d:67:93:36:9d:a0:24:f4:d6:7b:47:54: df:2c:6c:90:1e:03:dc:2f:63:46:a1:d8:0c:09:17:78:ba:9e: 3a:4c:2f:de:20:db:a6:78:07:a6:35:82:ef:82:14:bd:44:c0: f1:42:8d:1e:fa:dc:8f:ed:ce:d1:0f:44:a0:00:9c:17:fa:f8: ad:fd:c5:9e:e7:cb:ac:40:b7:81:2f:55:9a:fb:da:d3:ff:47: 10:f9:75:c4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1QNJaS9QA8z1MYf89sIzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5 YWFhOGYwHhcNMjUxMjA2MjAwMDU3WhcNMjUxMjA3MjAwMDU3WjAzMTEwLwYDVQQD EyhmMDdiOWU1ZDNjZWIxMWZmMDA1YWFlZGNiMmExYmY4ZjEzM2MzYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+OIo4alJvAdid0Fjw+cfUonbpQo fxtKi6qO27DoCY7JX8oo13u9iJ6JX8r1ZeMLds3oFICHtxKgExB/M6AkiS9FpdAs KGdnImdMY2tZXRCtoxyDvSALr8HQMEsUrNI0NxaxBBvy2hmIslwdDFIo0YBLNy+b TtMb8FM7/rzoWcbyUQ04HmMyZEs7BhVplbe2EwL/mAmlAlpLU4mZmZex/UbyyIyp q8zAuQxXwujnCTXubvqZHNbDRPMImAzP/R/s0XOECbP6oU0Egun4S8n/FZYEZQY5 I9Fh73IewzrIdhgv85zqPJe6YlHvmzVNR/m5c8q3aDcPr6pittw+VJKZTQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPB7nl086xH/AFqu3LKhv48TPDoOMB8GA1UdIwQY MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2 LTE5Nzc4Yzg3ZmVkNS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ZhLzI1ZDA5Mi04MWE0LTQ3ZjMtYmRjNi0xOTc3OGM4N2Zl ZDUvMS8xLVZrWTkyc3VCTEYxRkU0anktU0tZOHlhcW84LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNgd eIPt1T0vQmVpE2llRPaDDWBQmlmbwnO7fu6a0mJb2RRDfYtlaM7g0hFawIBU9tUM aWlmYpnTq+jMaH3w7rBQ/W9ai56qbqiT0EgQsffhKlXcAZN8gNXPcM42DU7p3mDP WS22TWQRAv98WyhvOqY3t3E1afCxCJYEZerAQCtDAFs/TSXjQ+8fFSoWiYraFbFM kQFSPhOu//oEl8z8Dwn+ieDLez3AnWeTNp2gJPTWe0dU3yxskB4D3C9jRqHYDAkX eLqeOkwv3iDbpngHpjWC74IUvUTA8UKNHvrcj+3O0Q9EoACcF/r4rf3FnufLrEC3 gS9Vmvva0/9HEPl1xA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:02 2025 by rpki-client