This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json) Hash identifier: Rnkma162Mg0zIqsXPS+FUins/+UjRnqIQY5g5/jncG0= Subject key identifier: D2:99:9A:BA:84:30:29:34:42:3E:E4:07:F3:0A:61:C2:1D:22:EB:DB Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Certificate serial: 019B39EB0AC164E586C2C95417DCAB62116C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 04:01:03 +0000 Manifest this update: Sat 20 Dec 2025 04:01:03 +0000 Manifest next update: Sun 21 Dec 2025 04:01:03 +0000 Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: q+8LnVcGoAlV6ACGYSGTXadb2yoyqoWCzNqFdA73qhM=) 2: x8LYnH5C-2yoYzHnpykE4OWasxo.roa (hash: NSrIlOVo8G3//8ZqRuyTqHM3vssNSeuuZzf6AApNyCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:0a:c1:64:e5:86:c2:c9:54:17:dc:ab:62:11:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Validity Not Before: Dec 20 04:01:03 2025 GMT Not After : Dec 21 04:01:03 2025 GMT Subject: CN=d2999aba84302934423ee407f30a61c21d22ebdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:a7:95:81:90:ff:0e:87:fd:c0:09:ca:af: 16:74:24:bb:da:d3:5b:1d:f5:33:7d:f4:18:23:ef: 4d:8b:59:ad:48:ce:94:ab:39:98:e2:9f:dd:9b:42: 0f:11:aa:8f:c7:1f:0a:f6:f7:5f:25:9a:0d:d4:2f: db:d3:6c:b1:2b:63:48:1e:4c:df:20:89:a6:de:06: e9:a9:2e:e5:2d:2c:84:fe:4c:c7:67:2a:d6:82:6d: 33:c9:2b:71:07:08:14:a3:5d:82:85:f3:ca:8e:f4: fd:b5:f6:1b:7a:37:f1:68:1c:7a:e1:ef:34:42:3d: c6:a0:79:49:b7:6f:2e:a2:8a:94:85:49:aa:da:05: ad:01:b6:46:32:ef:15:e4:c4:6e:3c:0a:08:71:db: bd:40:8e:4a:3d:2a:35:b4:bb:18:13:cb:48:6b:f3: 89:ee:78:4d:e2:6a:8c:2e:d3:63:a0:c1:0a:b1:11: f9:f6:60:75:d5:7b:58:60:a5:ba:2e:af:fb:90:5a: 9a:33:fe:0d:48:3f:6c:47:c5:6f:b5:ce:e2:57:a5: a5:40:2d:11:55:fa:b8:99:da:39:60:e5:47:68:fd: d6:38:ea:9c:15:b9:83:bc:64:9b:35:fa:a1:f4:d8: b7:66:12:fe:10:ac:03:75:ba:78:94:01:f6:da:2a: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:99:9A:BA:84:30:29:34:42:3E:E4:07:F3:0A:61:C2:1D:22:EB:DB X509v3 Authority Key Identifier: keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:43:0d:74:0b:12:bf:12:72:b7:f9:02:ea:bb:46:de:d6:19: 39:da:06:78:2f:14:dd:63:bc:16:a5:57:0e:59:49:7d:91:48: 2c:a4:c5:c2:12:3e:33:ca:62:23:22:f0:f8:68:3d:1c:1f:db: 1c:71:e5:e0:9c:28:ce:26:a6:11:d4:7a:b0:4b:71:53:4f:8e: 41:bc:9e:59:a9:d8:8f:e1:0e:fd:29:3f:74:45:93:65:d5:93: 66:9a:e5:aa:ba:fa:69:6c:5d:21:e4:26:18:d0:34:2b:80:1e: 87:19:04:e8:05:06:74:0c:35:3d:82:d3:67:40:18:70:14:17: 75:56:d0:35:a9:12:d6:79:2b:93:db:25:a3:37:d1:f0:ed:7c: dc:7d:8b:e8:85:9e:81:4d:40:88:c9:af:12:82:dd:bf:b1:c4: 46:b8:78:df:45:c8:0b:31:da:ff:35:38:2e:1d:a7:f4:b5:f2: 25:f5:a9:a6:af:d1:20:fb:17:77:c3:8a:eb:f9:7a:f7:0c:9c: d8:ef:e7:87:be:41:c2:1d:55:ee:38:81:2f:c0:d8:f2:fa:e9: e6:00:d0:b0:1f:e4:61:b3:87:7a:4a:1e:2d:c8:04:2e:fd:47: 45:48:b7:cb:6a:6f:f2:fb:69:a7:11:71:99:3d:88:f0:eb:d4: 7d:86:a4:50 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs56wrBZOWGwslUF9yrYhFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj OGJkNTYwHhcNMjUxMjIwMDQwMTAzWhcNMjUxMjIxMDQwMTAzWjAzMTEwLwYDVQQD EyhkMjk5OWFiYTg0MzAyOTM0NDIzZWU0MDdmMzBhNjFjMjFkMjJlYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ynlYGQ/w6H/cAJyq8WdCS72tNb HfUzffQYI+9Ni1mtSM6UqzmY4p/dm0IPEaqPxx8K9vdfJZoN1C/b02yxK2NIHkzf IImm3gbpqS7lLSyE/kzHZyrWgm0zyStxBwgUo12ChfPKjvT9tfYbejfxaBx64e80 Qj3GoHlJt28uooqUhUmq2gWtAbZGMu8V5MRuPAoIcdu9QI5KPSo1tLsYE8tIa/OJ 7nhN4mqMLtNjoMEKsRH59mB11XtYYKW6Lq/7kFqaM/4NSD9sR8Vvtc7iV6WlQC0R Vfq4mdo5YOVHaP3WOOqcFbmDvGSbNfqh9Ni3ZhL+EKwDdbp4lAH22ir/iQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNKZmrqEMCk0Qj7kB/MKYcIdIuvbMB8GA1UdIwQY MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5 LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykMN dAsSvxJyt/kC6rtG3tYZOdoGeC8U3WO8FqVXDllJfZFILKTFwhI+M8piIyLw+Gg9 HB/bHHHl4JwoziamEdR6sEtxU0+OQbyeWanYj+EO/Sk/dEWTZdWTZprlqrr6aWxd IeQmGNA0K4AehxkE6AUGdAw1PYLTZ0AYcBQXdVbQNakS1nkrk9slozfR8O183H2L 6IWegU1AiMmvEoLdv7HERrh430XICzHa/zU4Lh2n9LXyJfWppq/RIPsXd8OK6/l6 9wyc2O/nh75Bwh1V7jiBL8DY8vrp5gDQsB/kYbOHekoeLcgELv1HRUi3y2pv8vtp pxFxmT2I8OvUfYakUA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:51 2025 by rpki-client