This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json) Hash identifier: 52/YeZP/P5B/phU3g7GgzJBnYE4yjMcCoa9nyRIEQnI= Subject key identifier: 70:14:4B:E3:09:57:74:BD:EE:34:C5:06:95:00:E9:75:A3:A7:E5:34 Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Certificate serial: 019B44A5C3DF58780B4B1A5EFBC53C88A278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft Manifest number: 0927 Signing time: Mon 22 Dec 2025 06:01:12 +0000 Manifest this update: Mon 22 Dec 2025 06:01:12 +0000 Manifest next update: Tue 23 Dec 2025 06:01:12 +0000 Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: 82z8fepL5qb8Y/2r92p9lhINm63imq/dek+MAvfKb7s=) 2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:c3:df:58:78:0b:4b:1a:5e:fb:c5:3c:88:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Validity Not Before: Dec 22 06:01:12 2025 GMT Not After : Dec 23 06:01:12 2025 GMT Subject: CN=70144be3095774bdee34c5069500e975a3a7e534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:f0:e4:ff:9e:46:84:4a:ef:1d:46:fd:71: fb:08:25:ac:59:4c:60:09:db:ef:62:ef:52:3c:cc: 9c:55:33:5a:3d:01:2b:fa:4d:52:92:50:54:35:aa: 53:22:d2:b4:e6:06:4b:36:e8:45:bf:33:37:8c:36: 90:8d:67:7a:36:8a:a6:66:2e:a0:e5:9f:98:8e:87: ab:d3:16:96:4f:c3:66:39:7d:b3:83:4a:b5:c2:f1: 48:dd:cb:b2:78:1f:2a:f9:de:d0:78:73:5b:33:30: cc:53:81:30:44:95:9e:9c:96:b2:9e:5e:f7:f8:f6: ec:1d:ea:eb:04:bd:bf:62:db:ff:a9:84:69:49:69: 6f:f4:51:39:5d:7c:bc:b8:ff:61:be:e4:02:36:44: 72:62:e1:b0:eb:9b:4c:8d:ff:6e:dd:de:2f:41:06: 1d:c0:6f:40:70:d0:57:51:8a:1f:11:8b:db:4e:39: f6:61:c4:01:2b:01:83:7d:5b:f9:39:22:f8:08:56: ec:3c:2e:6f:ec:11:7b:0a:1d:8b:fa:61:ed:71:32: d5:e8:6e:cc:e0:fe:ff:8e:92:75:fd:29:2b:28:4e: 43:37:ef:ca:d2:96:27:e5:de:10:60:34:7c:24:10: ae:07:5e:6a:0b:86:a6:0e:4d:19:7d:74:08:64:08: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:14:4B:E3:09:57:74:BD:EE:34:C5:06:95:00:E9:75:A3:A7:E5:34 X509v3 Authority Key Identifier: keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:b5:09:64:3b:3f:1a:f1:03:8c:37:e1:c4:00:35:b8:92:e9: f0:00:76:35:1e:e8:07:1b:0b:97:d4:98:95:9e:91:5b:c7:18: c4:20:c9:91:63:2a:da:03:da:d5:5c:71:c1:7c:14:f3:6c:26: d4:cf:a6:c2:94:29:8a:5b:8c:18:5f:ff:5f:ad:11:33:fc:d5: 8b:2e:ca:5b:d0:75:42:25:ad:95:da:33:95:7a:09:1f:f0:cd: f2:af:55:57:9a:60:33:b9:eb:b3:26:5f:65:f4:2a:d4:2e:07: f0:95:3e:e4:39:17:56:b9:90:07:20:f0:21:d5:94:88:41:42: 27:dc:11:e3:8e:d0:cc:00:8c:e1:73:94:69:2e:a3:a2:78:d2: af:1f:c0:63:a2:83:0f:35:78:76:33:99:f5:af:c1:48:ba:7c: a1:c2:98:08:09:04:14:fb:c1:47:05:f7:b0:2c:dd:0b:bd:b7: df:9a:07:e1:a1:97:74:4f:4a:e5:c8:09:4c:a6:29:c2:ab:0f: 2f:87:e5:bc:19:37:31:a5:ec:a4:e5:83:49:20:bb:08:36:f2: ce:e4:11:75:5b:0d:12:e7:ff:33:87:c6:6b:5f:8c:c9:9a:98: 1d:d3:59:92:c8:72:b9:b1:cc:72:9d:9a:e9:be:13:4b:79:0a: 4b:73:4e:a1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEpcPfWHgLSxpe+8U8iKJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj ZDNlNzMwHhcNMjUxMjIyMDYwMTEyWhcNMjUxMjIzMDYwMTEyWjAzMTEwLwYDVQQD Eyg3MDE0NGJlMzA5NTc3NGJkZWUzNGM1MDY5NTAwZTk3NWEzYTdlNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1vw5P+eRoRK7x1G/XH7CCWsWUxg CdvvYu9SPMycVTNaPQEr+k1SklBUNapTItK05gZLNuhFvzM3jDaQjWd6NoqmZi6g 5Z+Yjoer0xaWT8NmOX2zg0q1wvFI3cuyeB8q+d7QeHNbMzDMU4EwRJWenJaynl73 +PbsHerrBL2/Ytv/qYRpSWlv9FE5XXy8uP9hvuQCNkRyYuGw65tMjf9u3d4vQQYd wG9AcNBXUYofEYvbTjn2YcQBKwGDfVv5OSL4CFbsPC5v7BF7Ch2L+mHtcTLV6G7M 4P7/jpJ1/SkrKE5DN+/K0pYn5d4QYDR8JBCuB15qC4amDk0ZfXQIZAhxUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHAUS+MJV3S97jTFBpUA6XWjp+U0MB8GA1UdIwQY MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5 ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzrUJ ZDs/GvEDjDfhxAA1uJLp8AB2NR7oBxsLl9SYlZ6RW8cYxCDJkWMq2gPa1VxxwXwU 82wm1M+mwpQpiluMGF//X60RM/zViy7KW9B1QiWtldozlXoJH/DN8q9VV5pgM7nr syZfZfQq1C4H8JU+5DkXVrmQByDwIdWUiEFCJ9wR447QzACM4XOUaS6jonjSrx/A Y6KDDzV4djOZ9a/BSLp8ocKYCAkEFPvBRwX3sCzdC72335oH4aGXdE9K5cgJTKYp wqsPL4flvBk3MaXspOWDSSC7CDbyzuQRdVsNEuf/M4fGa1+MyZqYHdNZkshyubHM cp2a6b4TS3kKS3NOoQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:21 2025 by rpki-client