This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json) Hash identifier: MyBIqxLccah0KoIzAydqPikmsx+VDg5py9VZo/3CFc4= Subject key identifier: 9E:B2:DB:7B:21:1F:59:20:A8:C0:5E:19:FE:68:83:0F:F1:2F:DE:B6 Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10 Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710 Certificate serial: 019B650CB5940CAB62EB9ECF1F04C3CACD57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 13:01:30 +0000 Manifest this update: Sun 28 Dec 2025 13:01:30 +0000 Manifest next update: Mon 29 Dec 2025 13:01:30 +0000 Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: f04vEGn+w8VGWz/4GHgI207GuCOMaN8kdYdef8XAM2U=) 2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:b5:94:0c:ab:62:eb:9e:cf:1f:04:c3:ca:cd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710 Validity Not Before: Dec 28 13:01:30 2025 GMT Not After : Dec 29 13:01:30 2025 GMT Subject: CN=9eb2db7b211f5920a8c05e19fe68830ff12fdeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:34:78:d4:3a:39:7e:29:97:5d:0b:ea:21: f0:f1:a0:cf:a0:7e:c7:f2:06:1a:31:73:d6:73:58: 7d:4f:2e:0a:7b:82:66:ff:78:32:49:44:78:59:f7: 3e:17:2f:29:ac:23:5b:a4:dd:3d:1c:d8:1f:58:27: 42:30:97:31:e9:a8:86:97:b7:0f:dc:0e:ad:77:37: 46:10:49:40:53:ab:fe:02:64:4f:26:99:56:b0:47: ee:77:1b:7a:af:89:9d:85:f6:84:b9:f0:a3:67:57: 8a:2e:c3:cb:e0:1e:89:c8:67:c4:be:9a:1b:27:16: c1:5a:88:91:2c:a1:1a:f7:8c:cf:70:98:2b:32:94: 59:d4:99:81:2d:7b:37:7b:9c:ac:3c:dd:b5:3c:51: f5:ec:09:b2:09:b4:67:e2:52:5f:4b:5c:e6:e8:07: b9:c2:3d:be:c4:65:fa:00:44:60:22:35:1d:30:5d: 8d:a4:98:9c:45:14:1d:f5:0e:18:35:6c:c8:ed:49: 09:5c:89:44:d9:b5:6a:df:7a:b0:23:ad:a3:12:15: 3a:87:4a:3f:4e:f5:de:ae:be:54:93:7f:c2:48:f8: 26:b6:f6:49:5c:71:0b:77:d9:57:34:64:2a:ff:ab: 91:d5:4a:57:ce:d5:56:b7:72:7a:38:b7:90:9c:22: 02:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:DB:7B:21:1F:59:20:A8:C0:5E:19:FE:68:83:0F:F1:2F:DE:B6 X509v3 Authority Key Identifier: keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a8:f9:74:cc:b4:44:8e:2d:15:50:e1:db:42:90:aa:2a:45: 80:9c:2f:ba:fe:d0:38:b2:2b:30:bf:ad:55:75:f1:dd:92:21: c1:b2:e1:18:98:e2:a4:5d:cf:30:59:40:aa:93:85:83:4f:dd: 74:7b:87:8f:6f:0c:03:a8:f4:48:da:c0:bc:4b:d6:3a:0e:8f: a9:97:17:dd:17:fe:93:68:ab:7d:24:bd:85:ad:f1:98:5a:6a: fc:83:bf:8a:c2:18:2b:e4:54:95:2c:80:28:a0:32:f3:d0:d6: 38:73:3f:f4:78:86:d5:90:d0:46:ac:91:23:4f:a4:60:57:f3: f2:16:34:e1:eb:7c:61:0f:71:c1:f0:d1:39:72:2a:fe:09:ea: ec:0c:fe:f6:10:d1:33:d1:db:06:67:39:f0:f4:93:70:f4:66: 83:1c:9a:89:26:12:a9:1b:e7:47:dd:f2:80:b9:04:06:80:fd: 7e:a3:46:7a:c4:0d:26:f7:79:e3:c9:0d:48:e1:a7:04:07:d8: cb:a3:03:7b:28:34:5d:72:a6:6d:ee:6a:bc:5c:dd:b0:c6:ba: ec:bf:dc:10:b7:f6:a2:5f:6e:8e:1c:32:5d:30:5d:12:58:d5: 42:79:78:99:ea:c8:50:b9:a4:cb:29:56:7d:79:83:82:53:b1: 61:be:5d:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtlDLWUDKti657PHwTDys1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1 ZTg3MTAwHhcNMjUxMjI4MTMwMTMwWhcNMjUxMjI5MTMwMTMwWjAzMTEwLwYDVQQD Eyg5ZWIyZGI3YjIxMWY1OTIwYThjMDVlMTlmZTY4ODMwZmYxMmZkZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIg0eNQ6OX4pl10L6iHw8aDPoH7H 8gYaMXPWc1h9Ty4Ke4Jm/3gySUR4Wfc+Fy8prCNbpN09HNgfWCdCMJcx6aiGl7cP 3A6tdzdGEElAU6v+AmRPJplWsEfudxt6r4mdhfaEufCjZ1eKLsPL4B6JyGfEvpob JxbBWoiRLKEa94zPcJgrMpRZ1JmBLXs3e5ysPN21PFH17AmyCbRn4lJfS1zm6Ae5 wj2+xGX6AERgIjUdMF2NpJicRRQd9Q4YNWzI7UkJXIlE2bVq33qwI62jEhU6h0o/ TvXerr5Uk3/CSPgmtvZJXHELd9lXNGQq/6uR1UpXztVWt3J6OLeQnCICdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJ6y23shH1kgqMBeGf5ogw/xL962MB8GA1UdIwQY MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1 LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqj5 dMy0RI4tFVDh20KQqipFgJwvuv7QOLIrML+tVXXx3ZIhwbLhGJjipF3PMFlAqpOF g0/ddHuHj28MA6j0SNrAvEvWOg6PqZcX3Rf+k2irfSS9ha3xmFpq/IO/isIYK+RU lSyAKKAy89DWOHM/9HiG1ZDQRqyRI0+kYFfz8hY04et8YQ9xwfDROXIq/gnq7Az+ 9hDRM9HbBmc58PSTcPRmgxyaiSYSqRvnR93ygLkEBoD9fqNGesQNJvd548kNSOGn BAfYy6MDeyg0XXKmbe5qvFzdsMa67L/cELf2ol9ujhwyXTBdEljVQnl4merIULmk yylWfXmDglOxYb5d4g== -----END CERTIFICATE-----Generated at Sun Dec 28 21:58:32 2025 by rpki-client