This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json) Hash identifier: S8kIiimY4HADG3TPSbWcjXxXXUA61qSeNTxU8V01JVo= Subject key identifier: 34:43:29:74:AF:46:B5:F2:63:18:03:AE:3D:D2:2C:6D:04:39:64:A8 Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Certificate serial: 019B3AFD9E67AA0F2270B365C6FA0FBBD6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft Manifest number: 0939 Signing time: Sat 20 Dec 2025 09:00:58 +0000 Manifest this update: Sat 20 Dec 2025 09:00:58 +0000 Manifest next update: Sun 21 Dec 2025 09:00:58 +0000 Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: 0Wg71vKFqCK+Or1tjNe3Dt6LBXH7BMsisQNfoSIBljs=) 2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=) 3: oaQDmcPYSkml0RRQKrO-Em73IK4.roa (hash: bHgFTubSxlxLmOgCBCM51N98J0JO+nt18DnWZQ7MMJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:9e:67:aa:0f:22:70:b3:65:c6:fa:0f:bb:d6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Validity Not Before: Dec 20 09:00:58 2025 GMT Not After : Dec 21 09:00:58 2025 GMT Subject: CN=34432974af46b5f2631803ae3dd22c6d043964a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:87:50:90:11:db:78:d8:57:fd:e0:5c:49: 71:dc:94:ce:a4:a4:8a:50:d6:31:68:fc:ed:c7:dd: 2f:95:01:b3:35:13:c8:7a:0f:9c:0f:7d:1a:b0:84: e1:27:a4:9c:61:ba:14:c4:53:02:58:e8:28:d6:cc: aa:d7:f4:bf:ff:ba:da:05:94:d7:97:cb:18:e6:9d: 3a:f9:f6:3f:66:66:e4:02:da:51:13:3b:72:92:b3: ff:cc:17:ce:79:66:fb:72:69:18:f0:62:46:88:46: 70:59:e8:ae:14:db:16:2a:ad:c4:0c:7f:67:fe:fe: 28:01:3c:80:4e:2a:9f:c9:bc:7f:bf:5c:dd:19:18: df:b7:b1:81:c8:34:b1:a9:82:52:6c:aa:fe:ed:47: 26:d8:87:e9:bc:b3:57:bb:46:93:11:e1:fb:49:91: a8:43:f4:6d:85:ad:c7:1e:9f:a0:e1:f0:c3:c2:16: 1f:2f:09:04:9d:f8:09:e2:f7:28:ca:3d:87:34:6f: 66:dc:d9:23:4a:e1:34:6c:ef:35:5e:43:f3:96:bd: 83:2c:18:e0:6e:2b:46:ae:48:1e:86:70:7e:9c:c6: 36:03:dc:d3:40:f7:b7:86:1e:05:a8:af:74:ff:57: 22:9f:50:46:05:c0:c6:56:cf:f2:53:fa:b4:49:15: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:43:29:74:AF:46:B5:F2:63:18:03:AE:3D:D2:2C:6D:04:39:64:A8 X509v3 Authority Key Identifier: keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:0c:72:0e:4d:e0:c0:dc:e8:99:1e:66:c8:d4:10:ee:1e:b8: 82:44:53:77:15:00:27:93:52:06:ae:e4:40:8b:2d:be:43:41: 87:d2:67:9b:32:97:3e:ea:30:6e:a9:be:6f:37:a4:d0:3c:0c: e3:c6:ec:ac:9f:19:69:6f:9f:8e:72:28:29:a3:e6:60:a0:25: f0:d4:84:35:3d:92:03:2d:77:b4:85:20:b1:d2:5a:56:21:d6: c8:c2:5b:07:03:95:35:2b:ba:a4:22:c0:a4:ea:2a:91:61:d7: 6e:a8:eb:ef:cb:e1:15:0f:8f:35:17:06:4b:45:b8:2a:7d:cd: 83:d4:69:c3:80:c5:f3:c0:c6:1d:d9:ff:fc:ae:a2:30:54:5a: b2:74:f9:a9:fc:4b:4e:3b:45:d5:f9:f2:cd:24:2f:af:63:60: 8e:3b:30:80:f4:01:17:b0:36:e9:71:74:1a:4b:11:18:31:b7: 5e:3f:56:3a:9d:f4:f9:8b:85:f0:8d:14:1e:7d:09:b6:ac:70: f5:cb:4f:78:c8:a8:9c:86:6b:b7:56:15:70:de:92:a3:f9:56: 39:82:cf:89:56:70:7e:a2:44:4a:8f:64:6b:74:4f:9e:be:3c: 7a:ea:d4:89:d1:7a:1b:16:ef:bc:01:57:f8:cc:a0:24:bd:72: 22:e0:67:6d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6/Z5nqg8icLNlxvoPu9bmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk NjlhODMwHhcNMjUxMjIwMDkwMDU4WhcNMjUxMjIxMDkwMDU4WjAzMTEwLwYDVQQD EygzNDQzMjk3NGFmNDZiNWYyNjMxODAzYWUzZGQyMmM2ZDA0Mzk2NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmOHUJAR23jYV/3gXElx3JTOpKSK UNYxaPztx90vlQGzNRPIeg+cD30asIThJ6ScYboUxFMCWOgo1syq1/S//7raBZTX l8sY5p06+fY/ZmbkAtpREztykrP/zBfOeWb7cmkY8GJGiEZwWeiuFNsWKq3EDH9n /v4oATyATiqfybx/v1zdGRjft7GByDSxqYJSbKr+7Ucm2IfpvLNXu0aTEeH7SZGo Q/Rtha3HHp+g4fDDwhYfLwkEnfgJ4vcoyj2HNG9m3NkjSuE0bO81XkPzlr2DLBjg bitGrkgehnB+nMY2A9zTQPe3hh4FqK90/1cin1BGBcDGVs/yU/q0SRVYJwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDRDKXSvRrXyYxgDrj3SLG0EOWSoMB8GA1UdIwQY MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw LTA4Mjc5NDU1Zjk0MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzAwL2MwNGQ5OS1kZTQ0LTQwYWItYTJjMC0wODI3OTQ1NWY5 NDEvMS8xLXFibDZHQWp5Yk1VN21VU2tmci1qRzNXbW9NLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Axy Dk3gwNzomR5myNQQ7h64gkRTdxUAJ5NSBq7kQIstvkNBh9JnmzKXPuowbqm+bzek 0DwM48bsrJ8ZaW+fjnIoKaPmYKAl8NSENT2SAy13tIUgsdJaViHWyMJbBwOVNSu6 pCLApOoqkWHXbqjr78vhFQ+PNRcGS0W4Kn3Ng9Rpw4DF88DGHdn//K6iMFRasnT5 qfxLTjtF1fnyzSQvr2NgjjswgPQBF7A26XF0GksRGDG3Xj9WOp30+YuF8I0UHn0J tqxw9ctPeMionIZrt1YVcN6So/lWOYLPiVZwfqJESo9ka3RPnr48eurUidF6Gxbv vAFX+MygJL1yIuBnbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:51:40 2025 by rpki-client