This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json) Hash identifier: MdNIbo6xWeop7fJOnok3bd8/+pqarn3wosaFJ2OFe90= Subject key identifier: EE:24:00:AE:78:97:9F:71:31:01:D8:C4:CF:75:D3:9A:FC:13:2B:9A Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Certificate serial: 019B6F58CC9DE53075777F22F935EB89CDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft Manifest number: 17A6 Signing time: Tue 30 Dec 2025 13:00:49 +0000 Manifest this update: Tue 30 Dec 2025 13:00:49 +0000 Manifest next update: Wed 31 Dec 2025 13:00:49 +0000 Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: a1sxiHsrrB1i7zy7655/+kUxXD1B37oNC6/DG7mVDAU=) 2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=) 3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:cc:9d:e5:30:75:77:7f:22:f9:35:eb:89:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Validity Not Before: Dec 30 13:00:49 2025 GMT Not After : Dec 31 13:00:49 2025 GMT Subject: CN=ee2400ae78979f713101d8c4cf75d39afc132b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:8a:f3:57:38:d5:5c:62:eb:58:28:b2:10: 2e:06:fb:7a:ea:69:8f:98:b2:6f:36:54:71:6b:e1: 85:21:d0:57:0f:0c:7e:69:3b:37:aa:a5:07:26:90: 69:55:ae:08:c5:89:7d:52:c2:64:1b:8f:e6:b8:b5: 90:b8:9d:22:35:74:4c:22:e7:39:2d:ad:77:77:32: ed:f8:0b:93:bd:44:0b:f5:f0:30:d2:a3:6d:79:fc: cb:98:c8:6c:6c:87:54:7a:31:1c:2c:70:1a:a3:aa: 74:07:e0:2c:37:7f:bf:58:85:9f:64:d6:ad:2b:0d: a8:02:c4:a1:82:cd:01:aa:9c:e8:95:d2:49:82:49: 36:00:e3:b8:cf:ee:a9:f3:aa:d5:cb:1a:66:69:5c: 3c:0c:9d:9e:b6:e5:6f:93:a7:8e:2f:e5:2b:1d:95: ae:09:d7:49:a6:da:59:91:04:a7:31:e2:60:a3:36: c2:f7:5d:67:c0:b6:4e:66:ff:3b:cd:23:7a:84:24: 43:6a:2c:d1:93:5a:bb:cc:8a:70:e4:47:ed:81:64: bd:d1:27:64:8f:11:07:9f:d7:3d:87:b0:81:5e:b7: dc:d5:54:83:4b:9c:2d:3d:92:8b:d6:17:ba:f8:a1: 35:fa:11:53:4c:56:df:e5:20:79:b4:33:b0:93:1c: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:00:AE:78:97:9F:71:31:01:D8:C4:CF:75:D3:9A:FC:13:2B:9A X509v3 Authority Key Identifier: keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:06:8c:a9:76:cf:d0:6a:d9:40:db:e5:9e:3e:70:12:8d:af: f4:2e:65:94:4b:25:1e:97:2b:51:d8:3f:35:ae:18:06:83:6d: b3:af:01:63:71:fb:47:53:39:05:3a:df:bf:93:5f:4f:10:7d: 14:d5:6d:c0:05:9d:0d:ba:4c:77:69:71:69:6e:71:de:b6:4c: 40:69:67:9f:f1:b5:bf:a8:bd:b5:eb:c7:5f:e2:5a:79:2c:3f: 28:33:75:bd:57:42:be:65:bd:08:17:2c:fa:19:73:04:c3:3b: 75:2b:07:f2:a7:5e:12:83:c5:8a:3d:5f:f3:d9:6d:79:77:5f: c9:22:91:99:c0:7b:e0:8a:b1:5c:98:3f:43:f8:39:28:3e:b4: f7:e6:ab:c3:c1:67:f7:76:06:9d:21:07:ca:88:5f:43:5c:e2: 85:c7:28:c9:30:83:ba:09:b0:68:56:89:28:ae:a4:f0:e2:16: 8f:1f:29:f1:3b:ac:eb:70:e9:8b:dd:44:86:5e:30:31:a6:64: dd:f4:f6:d1:1a:1f:f2:42:19:21:9d:d6:3c:b5:8d:9a:c1:6d: 7a:c4:c4:df:ed:4c:fd:5a:57:d9:56:b4:7e:c1:f2:25:f6:b3: e6:a7:4e:c1:ec:de:59:7f:ca:cd:e1:94:9d:cd:8d:31:2a:8d: 6c:dc:25:29 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtvWMyd5TB1d38i+TXric2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk YTExMjYwHhcNMjUxMjMwMTMwMDQ5WhcNMjUxMjMxMTMwMDQ5WjAzMTEwLwYDVQQD EyhlZTI0MDBhZTc4OTc5ZjcxMzEwMWQ4YzRjZjc1ZDM5YWZjMTMyYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA6K81c41Vxi61goshAuBvt66mmP mLJvNlRxa+GFIdBXDwx+aTs3qqUHJpBpVa4IxYl9UsJkG4/muLWQuJ0iNXRMIuc5 La13dzLt+AuTvUQL9fAw0qNtefzLmMhsbIdUejEcLHAao6p0B+AsN3+/WIWfZNat Kw2oAsShgs0BqpzoldJJgkk2AOO4z+6p86rVyxpmaVw8DJ2etuVvk6eOL+UrHZWu CddJptpZkQSnMeJgozbC911nwLZOZv87zSN6hCRDaizRk1q7zIpw5EftgWS90Sdk jxEHn9c9h7CBXrfc1VSDS5wtPZKL1he6+KE1+hFTTFbf5SB5tDOwkxwx6QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFO4kAK54l59xMQHYxM9105r8EyuaMB8GA1UdIwQY MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4 OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgaM qXbP0GrZQNvlnj5wEo2v9C5llEslHpcrUdg/Na4YBoNts68BY3H7R1M5BTrfv5Nf TxB9FNVtwAWdDbpMd2lxaW5x3rZMQGlnn/G1v6i9tevHX+JaeSw/KDN1vVdCvmW9 CBcs+hlzBMM7dSsH8qdeEoPFij1f89lteXdfySKRmcB74IqxXJg/Q/g5KD609+ar w8Fn93YGnSEHyohfQ1zihccoyTCDugmwaFaJKK6k8OIWjx8p8Tus63Dpi91Ehl4w MaZk3fT20Rof8kIZIZ3WPLWNmsFtesTE3+1M/VpX2Va0fsHyJfaz5qdOwezeWX/K zeGUnc2NMSqNbNwlKQ== -----END CERTIFICATE-----Generated at Tue Dec 30 22:01:39 2025 by rpki-client