This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json) Hash identifier: cncL2SAVxvZQiNjeol3bKJ1U3UsMQo+kkj1Ran34mbI= Subject key identifier: FF:21:A1:7A:60:84:7C:13:70:D1:9F:32:17:63:10:82:34:CA:E4:55 Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3 Certificate serial: 019B67312CBFA721D7DF03F41E8F50D2753F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft Manifest number: 1732 Signing time: Sun 28 Dec 2025 23:00:34 +0000 Manifest this update: Sun 28 Dec 2025 23:00:34 +0000 Manifest next update: Mon 29 Dec 2025 23:00:34 +0000 Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: EvClLuuxrekY2R8vSD+k0RcHOCLFUW2w1ws7wgFjjVQ=) 2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:2c:bf:a7:21:d7:df:03:f4:1e:8f:50:d2:75:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3 Validity Not Before: Dec 28 23:00:34 2025 GMT Not After : Dec 29 23:00:34 2025 GMT Subject: CN=ff21a17a60847c1370d19f321763108234cae455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:2b:d1:9f:74:b6:12:8a:c3:d7:c5:1f:62: e9:cc:66:f1:6d:5c:eb:61:c5:fe:9b:7c:fa:bf:39: ad:66:7d:13:b3:06:ee:cd:97:78:fc:ca:37:63:0a: 41:26:f7:94:13:1c:32:84:31:bf:7f:07:25:70:3c: fa:93:c0:87:e0:19:17:24:9e:d6:79:d3:96:b4:fe: 0c:06:c8:28:44:34:46:ef:bd:9a:ad:0f:49:cd:1b: cd:17:c3:3f:97:19:f6:40:dc:f9:db:eb:c2:f7:9a: a7:73:4b:a1:d0:1d:7e:19:eb:f7:7a:da:ad:9f:4e: 84:2a:24:85:b8:b2:f1:42:98:e0:a0:e5:f0:41:90: 26:6d:a5:e3:1c:23:01:90:bb:c4:ba:6b:b2:fa:34: 1e:95:7b:e6:0d:d9:1d:b8:07:96:26:79:3f:59:1e: 23:56:a7:18:a4:b7:d5:1d:a5:b8:b0:6e:a1:34:de: 51:e5:e2:1d:82:7c:c9:23:06:60:37:3c:86:ff:3e: 5f:d8:a9:78:d3:39:52:bd:2e:e3:0d:11:e6:50:f1: 0c:40:9b:71:f8:7a:a3:03:31:6c:72:ba:67:b1:de: b6:34:21:40:d6:bb:80:12:ec:53:d3:05:ed:8a:a3: ee:5b:6a:6a:b6:70:b0:eb:3b:2e:62:6b:9c:88:79: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:21:A1:7A:60:84:7C:13:70:D1:9F:32:17:63:10:82:34:CA:E4:55 X509v3 Authority Key Identifier: keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:db:8d:7e:31:b0:d8:aa:f5:9e:52:90:e4:55:09:f2:52:3d: f0:f5:89:e7:fd:9a:8a:1f:66:48:a9:f4:1a:b5:18:c2:68:41: 01:e4:03:9d:e4:35:59:a3:23:49:72:38:57:6a:3d:03:f3:16: 96:c6:f0:57:79:9b:bd:de:68:2f:ec:f1:c4:90:06:42:c1:7d: 5e:e3:05:7c:9e:c8:1e:a3:8b:8c:0f:ca:80:39:28:f4:c8:02: 25:91:7c:98:d6:c7:07:48:56:a6:2c:13:48:57:d2:98:71:6c: 6e:3d:7b:07:f9:81:39:5d:ad:68:03:85:a6:fb:c8:98:58:b7: 70:ea:09:80:a4:7a:60:2b:3a:0d:2a:86:fd:f8:56:30:59:c0: 9a:eb:1f:fb:2f:b3:dd:63:2f:5b:65:be:8d:89:49:30:83:92: be:10:22:74:e0:46:7c:ab:42:8a:04:24:21:46:ba:61:36:25: 07:52:0b:ca:e2:83:f9:14:37:5c:66:0d:dc:75:77:50:9c:63: 3f:bc:78:af:c0:a6:18:d4:1a:8c:60:a2:c4:1d:24:32:e5:c5: cf:4c:40:44:49:ee:8e:fd:36:28:6b:a1:fd:cc:e3:b4:6b:53: 67:ac:10:4b:52:f8:64:fb:a7:d1:f6:e1:8b:78:dc:16:f9:d5: 0c:98:ba:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtnMSy/pyHX3wP0Ho9Q0nU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz MTIyYjMwHhcNMjUxMjI4MjMwMDM0WhcNMjUxMjI5MjMwMDM0WjAzMTEwLwYDVQQD EyhmZjIxYTE3YTYwODQ3YzEzNzBkMTlmMzIxNzYzMTA4MjM0Y2FlNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i8r0Z90thKKw9fFH2LpzGbxbVzr YcX+m3z6vzmtZn0TswbuzZd4/Mo3YwpBJveUExwyhDG/fwclcDz6k8CH4BkXJJ7W edOWtP4MBsgoRDRG772arQ9JzRvNF8M/lxn2QNz52+vC95qnc0uh0B1+Gev3etqt n06EKiSFuLLxQpjgoOXwQZAmbaXjHCMBkLvEumuy+jQelXvmDdkduAeWJnk/WR4j VqcYpLfVHaW4sG6hNN5R5eIdgnzJIwZgNzyG/z5f2Kl40zlSvS7jDRHmUPEMQJtx +HqjAzFscrpnsd62NCFA1ruAEuxT0wXtiqPuW2pqtnCw6zsuYmuciHmiDQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP8hoXpghHwTcNGfMhdjEII0yuRVMB8GA1UdIwQY MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4 LTkyMGI1MmE5ZjZhNS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQyLzA0NjZmOC0zMzBkLTRhYzktYWMxOC05MjBiNTJhOWY2 YTUvMS8xLXFGcENjcE5vNWsxNnJtdkE0dFlwU014SXJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZduN fjGw2Kr1nlKQ5FUJ8lI98PWJ5/2aih9mSKn0GrUYwmhBAeQDneQ1WaMjSXI4V2o9 A/MWlsbwV3mbvd5oL+zxxJAGQsF9XuMFfJ7IHqOLjA/KgDko9MgCJZF8mNbHB0hW piwTSFfSmHFsbj17B/mBOV2taAOFpvvImFi3cOoJgKR6YCs6DSqG/fhWMFnAmusf +y+z3WMvW2W+jYlJMIOSvhAidOBGfKtCigQkIUa6YTYlB1ILyuKD+RQ3XGYN3HV3 UJxjP7x4r8CmGNQajGCixB0kMuXFz0xAREnujv02KGuh/czjtGtTZ6wQS1L4ZPun 0fbhi3jcFvnVDJi6Lg== -----END CERTIFICATE-----Generated at Mon Dec 29 07:08:09 2025 by rpki-client