This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft File: 1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json) Hash identifier: tWmfVwMpxp9TT674DmnEgP+kMFTUa0hqYdY5qdkDp4w= Subject key identifier: 40:FA:0E:5E:55:FD:03:B1:BF:93:00:A8:5A:69:CD:8D:B5:4C:6F:1C Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40 Certificate issuer: /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540 Certificate serial: 019AF088B904BD9E54AA13B9188D61A3213D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft Manifest number: 07DB Signing time: Fri 05 Dec 2025 22:01:23 +0000 Manifest this update: Fri 05 Dec 2025 22:01:23 +0000 Manifest next update: Sat 06 Dec 2025 22:01:23 +0000 Files and hashes: 1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: aJR7oCW5EVlnbTa6QDvvp29EiQhZpTNM39/YIrevyM0=) 2: 3nfIx05AjEYVNh0f8uhQsoNdvl0.roa (hash: kNmQ6q+KoIWrsskhw+6QTieUtnc2+n6TEwJFoX3Do3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b9:04:bd:9e:54:aa:13:b9:18:8d:61:a3:21:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540 Validity Not Before: Dec 5 22:01:23 2025 GMT Not After : Dec 6 22:01:23 2025 GMT Subject: CN=40fa0e5e55fd03b1bf9300a85a69cd8db54c6f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:85:7b:cf:65:a3:53:5a:3d:1f:2a:8f:db: b0:67:f0:7c:bd:c0:00:3d:38:bf:20:f4:54:5a:3e: 4d:f4:2f:e9:f0:2b:b3:4c:be:43:32:85:f6:f9:ca: 31:c9:bf:34:9b:32:4f:3c:a6:94:46:b6:60:c7:11: 46:62:bf:d3:65:16:21:25:87:0b:07:cd:61:7e:98: 0c:24:4a:36:58:19:19:75:02:e7:81:97:36:12:f7: 22:81:34:68:57:2b:a9:c7:04:58:ec:04:20:06:97: 86:00:ba:21:04:cc:82:fc:8c:e1:79:e0:ca:c3:e5: 01:4c:6b:7d:0d:af:1a:c7:5d:0b:29:d8:c7:f7:59: 0f:49:e2:9e:aa:70:4a:f8:69:2f:35:e5:ea:ca:10: 39:14:78:38:6d:76:47:92:35:dc:7d:9e:de:40:8d: f8:7e:54:a7:b1:23:3a:39:e5:b8:83:69:a7:02:72: e1:1a:e1:57:39:45:99:27:fb:c0:d9:6b:30:7e:2b: c5:a2:7a:98:9a:92:cb:88:48:d4:e1:67:7c:6b:0b: 60:dc:51:d6:d9:a0:68:e8:0a:f8:d3:e0:ab:64:27: b5:c1:9b:9a:4c:4e:6c:c9:25:18:ae:c2:ff:6a:2d: cd:cd:40:59:0d:54:0b:0a:63:42:37:be:62:eb:05: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FA:0E:5E:55:FD:03:B1:BF:93:00:A8:5A:69:CD:8D:B5:4C:6F:1C X509v3 Authority Key Identifier: keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:38:d2:b4:61:7a:89:86:62:d9:c5:ab:2f:5a:1c:19:2a:27: 67:6e:fe:ac:cd:2e:48:7d:3d:b0:ef:04:6e:7c:32:8e:43:9e: 0c:e6:68:0e:b1:bf:ed:4d:c6:b6:72:6d:1f:28:a0:bc:76:a9: d2:56:a6:72:a9:1b:2b:91:db:1c:10:b8:2a:3e:32:05:e6:f1: 5e:93:64:31:ee:10:3d:f5:f6:5c:0a:59:ba:1a:ea:aa:6f:64: 62:43:de:29:49:f5:69:40:53:41:00:4b:90:2e:41:9c:d8:8a: 57:af:c2:2b:37:1e:c8:37:4b:8d:ac:30:4f:3f:63:7e:7c:c0: 4a:ea:00:f1:7d:a4:73:92:81:29:d9:8a:a8:60:19:58:c9:2d: 03:ce:85:58:5d:ee:21:c2:e0:c6:92:d0:fa:b9:92:04:b6:a0: 87:7e:c2:09:71:f4:ac:c1:33:71:58:c1:56:ec:c5:3c:8b:9f: 0a:37:53:e8:3e:da:89:50:61:b4:b7:51:79:48:c6:8a:70:35: ba:79:a7:22:3f:e9:09:6a:4f:de:66:a6:8c:0e:13:3e:2d:a2: 1e:fd:0c:71:07:d7:5a:17:a4:71:ff:78:30:e9:35:66:0c:82: 01:0e:0e:7f:39:71:80:ca:67:34:46:eb:57:c0:44:82:40:39: bb:b4:a6:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwiLkEvZ5UqhO5GI1hoyE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NmEwOTAyYmM5ODUzYjc1ZWQyZGIxOTY4M2VlMmYzYTIy NjE1NDAwHhcNMjUxMjA1MjIwMTIzWhcNMjUxMjA2MjIwMTIzWjAzMTEwLwYDVQQD Eyg0MGZhMGU1ZTU1ZmQwM2IxYmY5MzAwYTg1YTY5Y2Q4ZGI1NGM2ZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonmFe89lo1NaPR8qj9uwZ/B8vcAA PTi/IPRUWj5N9C/p8CuzTL5DMoX2+coxyb80mzJPPKaURrZgxxFGYr/TZRYhJYcL B81hfpgMJEo2WBkZdQLngZc2EvcigTRoVyupxwRY7AQgBpeGALohBMyC/IzheeDK w+UBTGt9Da8ax10LKdjH91kPSeKeqnBK+GkvNeXqyhA5FHg4bXZHkjXcfZ7eQI34 flSnsSM6OeW4g2mnAnLhGuFXOUWZJ/vA2WswfivFonqYmpLLiEjU4Wd8awtg3FHW 2aBo6Ar40+CrZCe1wZuaTE5sySUYrsL/ai3NzUBZDVQLCmNCN75i6wW8swIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFED6Dl5V/QOxv5MAqFppzY21TG8cMB8GA1UdIwQY MBaAFPlqCQK8mFO3XtLbGWg+4vOiJhVAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Xb0pBcnlZVTdkZTB0c1phRDdpODZJbUZVQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZWI2ODY2LWJiNjAtNGM2Zi1hMDBk LWM0YTc3YzE5MmFmMC8xLzEtV29KQXJ5WVU3ZGUwdHNaYUQ3aTg2SW1GVUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ZlL2ViNjg2Ni1iYjYwLTRjNmYtYTAwZC1jNGE3N2MxOTJh ZjAvMS8xLVdvSkFyeVlVN2RlMHRzWmFEN2k4NkltRlVBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDjS tGF6iYZi2cWrL1ocGSonZ27+rM0uSH09sO8EbnwyjkOeDOZoDrG/7U3GtnJtHyig vHap0lamcqkbK5HbHBC4Kj4yBebxXpNkMe4QPfX2XApZuhrqqm9kYkPeKUn1aUBT QQBLkC5BnNiKV6/CKzceyDdLjawwTz9jfnzASuoA8X2kc5KBKdmKqGAZWMktA86F WF3uIcLgxpLQ+rmSBLagh37CCXH0rMEzcVjBVuzFPIufCjdT6D7aiVBhtLdReUjG inA1unmnIj/pCWpP3mamjA4TPi2iHv0McQfXWhekcf94MOk1ZgyCAQ4OfzlxgMpn NEbrV8BEgkA5u7SmFw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:52 2025 by rpki-client