This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json) Hash identifier: I/IwagzdzeECAmbIgJ1ySfhyhhebeGLa0Eidr1N0RTg= Subject key identifier: F9:3C:4F:C1:A2:F6:0D:83:04:44:DD:93:F5:AA:F5:3A:98:BE:33:D6 Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Certificate serial: 019B44A537CADB3E4043FFF2AB668475A48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft Manifest number: 09F6 Signing time: Mon 22 Dec 2025 06:00:36 +0000 Manifest this update: Mon 22 Dec 2025 06:00:36 +0000 Manifest next update: Tue 23 Dec 2025 06:00:36 +0000 Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: zEpvJGyj5FuiBuoffAq3KNfF89ilwe5OW1rhjD9/rgo=) 2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:37:ca:db:3e:40:43:ff:f2:ab:66:84:75:a4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Validity Not Before: Dec 22 06:00:36 2025 GMT Not After : Dec 23 06:00:36 2025 GMT Subject: CN=f93c4fc1a2f60d830444dd93f5aaf53a98be33d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:6a:92:d7:67:6b:74:ce:42:d7:a3:ac:3a: d0:bc:f0:7c:86:c2:71:96:a7:16:e1:09:ff:ea:46: e2:70:6e:f0:aa:27:43:b8:ed:0e:3d:bb:ec:8d:ed: e7:23:3a:48:d4:28:99:e0:6a:fd:00:88:00:9b:1d: ad:b7:08:05:8a:9b:7a:8f:a0:cc:0f:8b:51:81:3c: 68:91:2b:15:53:3d:2b:6e:35:39:ed:04:0a:cc:30: 76:6a:be:c5:f0:30:59:fa:32:19:60:d0:f9:23:eb: 6f:f4:03:59:82:f4:ba:d6:eb:e9:5f:f6:44:52:e4: 11:e5:6a:66:d5:ea:de:86:bc:fc:da:e2:be:f6:a6: e9:8f:06:01:93:88:77:ea:28:1a:b2:9f:2c:8a:9b: b0:e2:13:71:44:af:90:cb:18:2f:4f:f4:a2:10:69: d9:d9:53:ff:2f:f7:0c:2e:03:d2:e1:c8:ea:a7:bb: fa:b4:dc:3b:41:11:a8:fc:d6:10:a0:c2:0a:49:12: 2a:17:56:d0:8d:56:46:1e:fc:13:14:89:9a:ea:d8: be:9a:4e:57:f3:9f:bd:dd:0c:93:47:b3:64:15:ed: de:81:96:16:6f:73:02:e5:2a:cd:4d:89:b3:98:0d: ea:d4:70:6c:91:58:bd:a0:bf:d2:69:75:33:f2:1d: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:4F:C1:A2:F6:0D:83:04:44:DD:93:F5:AA:F5:3A:98:BE:33:D6 X509v3 Authority Key Identifier: keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:45:d9:c2:d3:b4:f8:da:b3:8c:f8:21:23:46:d9:b8:17:05: ce:e9:ec:55:84:8a:91:81:6b:10:72:b2:a7:c1:ab:0d:37:43: 67:0e:71:e0:42:17:3e:29:ed:06:a4:52:13:10:0d:09:7a:6e: b3:d4:81:5d:90:e4:f5:da:cc:43:31:d2:fc:e7:12:42:c3:c1: 08:85:3b:f2:cd:3a:ff:66:69:a1:61:d7:23:d6:44:31:99:92: 64:96:8d:4b:0d:86:ec:4b:62:5c:c5:a8:cf:38:c8:5c:12:ac: fe:c5:54:e7:2a:55:47:3c:81:48:0a:f3:71:d6:cc:87:04:e3: 4f:01:e7:32:c1:74:a9:2a:b5:7c:de:b1:53:b1:e3:bf:dc:81: b3:79:86:6c:9c:2c:fe:01:92:7b:62:a3:91:b3:32:ef:4d:85: 07:af:31:84:17:26:dd:ee:ba:3d:e3:61:c0:c2:fe:d3:74:b9: c9:be:6d:e3:5d:50:02:02:e9:31:97:64:cd:9d:77:54:6f:52: 55:a1:fd:74:fc:b5:1c:02:2e:70:5b:2d:0a:a7:e9:52:85:37: a8:0f:97:0a:4b:aa:7a:f1:a7:fb:25:01:63:6a:a1:88:8d:81: 99:15:d0:63:db:24:31:11:9d:7d:b0:74:b1:23:ab:21:c9:bd: 01:da:2c:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpTfK2z5AQ//yq2aEdaSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2 ZTJjNDAwHhcNMjUxMjIyMDYwMDM2WhcNMjUxMjIzMDYwMDM2WjAzMTEwLwYDVQQD EyhmOTNjNGZjMWEyZjYwZDgzMDQ0NGRkOTNmNWFhZjUzYTk4YmUzM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ5qktdna3TOQtejrDrQvPB8hsJx lqcW4Qn/6kbicG7wqidDuO0OPbvsje3nIzpI1CiZ4Gr9AIgAmx2ttwgFipt6j6DM D4tRgTxokSsVUz0rbjU57QQKzDB2ar7F8DBZ+jIZYND5I+tv9ANZgvS61uvpX/ZE UuQR5Wpm1erehrz82uK+9qbpjwYBk4h36igasp8sipuw4hNxRK+QyxgvT/SiEGnZ 2VP/L/cMLgPS4cjqp7v6tNw7QRGo/NYQoMIKSRIqF1bQjVZGHvwTFIma6ti+mk5X 85+93QyTR7NkFe3egZYWb3MC5SrNTYmzmA3q1HBskVi9oL/SaXUz8h0XwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk8T8Gi9g2DBETdk/Wq9TqYvjPWMB8GA1UdIwQY MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt MGU5ZDNlY2E0NGMyLzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEXZwtO0 +NqzjPghI0bZuBcFzunsVYSKkYFrEHKyp8GrDTdDZw5x4EIXPintBqRSExANCXpu s9SBXZDk9drMQzHS/OcSQsPBCIU78s06/2ZpoWHXI9ZEMZmSZJaNSw2G7EtiXMWo zzjIXBKs/sVU5ypVRzyBSArzcdbMhwTjTwHnMsF0qSq1fN6xU7Hjv9yBs3mGbJws /gGSe2KjkbMy702FB68xhBcm3e66PeNhwML+03S5yb5t411QAgLpMZdkzZ13VG9S VaH9dPy1HAIucFstCqfpUoU3qA+XCkuqevGn+yUBY2qhiI2BmRXQY9skMRGdfbB0 sSOrIcm9Ados0A== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:52 2025 by rpki-client