This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json) Hash identifier: kwJ8veRjkVkE+B9MZorg+SAoLeDXXU/qKiMXekeL9mY= Subject key identifier: F7:91:19:49:7A:95:E8:9E:83:00:6A:E4:FC:0C:F9:76:CB:F4:D6:94 Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Certificate serial: 019B3A223F97C73272F650212F3E1C1B0329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:01:21 +0000 Manifest this update: Sat 20 Dec 2025 05:01:21 +0000 Manifest next update: Sun 21 Dec 2025 05:01:21 +0000 Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: Nq+9dXj/BW2F6Q1a07Uq6Sm0tNjU0RhJg/jCBLMAIBA=) 2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:3f:97:c7:32:72:f6:50:21:2f:3e:1c:1b:03:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Validity Not Before: Dec 20 05:01:21 2025 GMT Not After : Dec 21 05:01:21 2025 GMT Subject: CN=f79119497a95e89e83006ae4fc0cf976cbf4d694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:29:8b:5e:e4:e9:0d:0b:b3:cd:b9:6b:49: f4:62:04:bf:ae:51:3b:ba:aa:a7:bc:d5:bb:99:b6: a8:28:a9:7b:79:ce:45:59:0b:2f:ee:7c:a5:d5:e2: e4:09:99:90:77:98:96:ad:3b:21:e1:1a:c0:9d:90: 9a:f4:f4:e4:81:cd:36:76:d6:9e:36:9c:9e:b0:1c: 08:9a:2f:ef:77:2c:c0:aa:a7:d3:5b:b1:a2:9a:88: ec:ea:1a:43:bb:c9:fe:ff:9a:7b:64:00:6b:9c:6d: 5e:2f:e2:97:7a:11:80:37:b5:f6:2e:39:ea:da:8b: cb:e6:b4:14:cf:71:65:08:75:2b:c8:ce:f2:a1:fe: 22:15:6b:d0:82:12:f5:e1:0c:8a:a5:73:bc:47:fb: e9:ab:dc:b9:5f:fe:ea:02:35:15:cd:a2:86:a0:bb: 40:65:36:b8:d2:1a:57:c5:ea:90:3b:2f:a7:87:28: 84:86:42:6c:6a:8e:d0:e3:a5:f3:93:4e:24:04:bc: 84:b9:be:6a:ca:b9:59:94:fd:f8:a6:4a:c0:97:fb: 2d:50:37:eb:83:b6:1d:90:18:a7:22:46:6b:0a:a6: c4:4c:12:7e:ec:8d:f4:ff:5e:51:3b:ff:70:84:eb: 82:72:b1:d2:5b:0b:b5:5b:5a:c2:56:f8:d7:b5:eb: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:91:19:49:7A:95:E8:9E:83:00:6A:E4:FC:0C:F9:76:CB:F4:D6:94 X509v3 Authority Key Identifier: keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:6e:42:c5:a1:db:01:fb:d2:84:b7:bb:8e:5b:9c:5f:55:25: 58:74:00:4b:b3:67:56:c3:9d:a6:6d:1e:55:fe:07:89:55:cc: 10:d6:53:c7:2e:d8:c4:03:54:75:dc:f1:cb:d7:60:6f:25:36: fa:04:95:3a:d4:70:9e:2f:f6:17:f9:30:11:6c:ee:77:f0:5c: ac:63:47:ff:21:46:98:a1:fd:6d:63:61:53:c9:2b:70:1e:ce: 6b:5d:7e:20:b9:e9:96:cf:fb:00:15:62:18:cf:b4:08:cb:b4: 5c:bd:50:35:e6:98:8f:69:98:e2:ba:53:ea:c6:98:5a:55:43: c8:a7:d2:0d:30:53:8f:06:91:0a:3a:a8:37:d8:e8:75:b6:eb: b9:9f:0f:e1:a0:c6:c0:3b:f6:fa:57:aa:47:dc:ab:8c:25:0d: cd:25:2d:88:e3:e2:87:7d:91:e6:d4:33:94:36:d7:22:01:1e: 1d:30:a0:d7:95:06:5f:f9:9f:07:b5:13:49:07:39:26:52:a9: bf:f4:4d:60:37:94:66:e7:e5:1a:7c:b7:c8:c0:8f:83:55:ea: 23:24:89:66:f3:c6:61:3a:e8:9b:b3:70:51:96:ac:8f:55:0d: e9:4c:09:e6:1f:96:36:04:4d:f1:0b:e3:5f:57:aa:35:22:25: f5:e6:25:e9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6Ij+XxzJy9lAhLz4cGwMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi NzZmMDAwHhcNMjUxMjIwMDUwMTIxWhcNMjUxMjIxMDUwMTIxWjAzMTEwLwYDVQQD EyhmNzkxMTk0OTdhOTVlODllODMwMDZhZTRmYzBjZjk3NmNiZjRkNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxEpi17k6Q0Ls825a0n0YgS/rlE7 uqqnvNW7mbaoKKl7ec5FWQsv7nyl1eLkCZmQd5iWrTsh4RrAnZCa9PTkgc02dtae NpyesBwImi/vdyzAqqfTW7Gimojs6hpDu8n+/5p7ZABrnG1eL+KXehGAN7X2Ljnq 2ovL5rQUz3FlCHUryM7yof4iFWvQghL14QyKpXO8R/vpq9y5X/7qAjUVzaKGoLtA ZTa40hpXxeqQOy+nhyiEhkJsao7Q46Xzk04kBLyEub5qyrlZlP34pkrAl/stUDfr g7YdkBinIkZrCqbETBJ+7I30/15RO/9whOuCcrHSWwu1W1rCVvjXteuOnwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPeRGUl6leiegwBq5PwM+XbL9NaUMB8GA1UdIwQY MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1 LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4m5C xaHbAfvShLe7jlucX1UlWHQAS7NnVsOdpm0eVf4HiVXMENZTxy7YxANUddzxy9dg byU2+gSVOtRwni/2F/kwEWzud/BcrGNH/yFGmKH9bWNhU8krcB7Oa11+ILnpls/7 ABViGM+0CMu0XL1QNeaYj2mY4rpT6saYWlVDyKfSDTBTjwaRCjqoN9jodbbruZ8P 4aDGwDv2+leqR9yrjCUNzSUtiOPih32R5tQzlDbXIgEeHTCg15UGX/mfB7UTSQc5 JlKpv/RNYDeUZuflGny3yMCPg1XqIySJZvPGYTrom7NwUZasj1UN6UwJ5h+WNgRN 8QvjX1eqNSIl9eYl6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 10:25:42 2025 by rpki-client