This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft File: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json) Hash identifier: DLgtH06u3jBRRrG9BBaZ5MZGuNo1tEUrOE5VR272CP4= Subject key identifier: 9B:5F:CA:D1:35:73:AF:C7:C9:F5:83:B9:32:35:01:C0:FC:49:D9:79 Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f Certificate serial: 019B53ABCD207EC1A5B2E7D03F60879867C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft Manifest number: 1720 Signing time: Thu 25 Dec 2025 04:02:06 +0000 Manifest this update: Thu 25 Dec 2025 04:02:06 +0000 Manifest next update: Fri 26 Dec 2025 04:02:06 +0000 Files and hashes: 1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: dzlUaHismLTVvZlG+B42BR24fpfCG9UM0eslhSSR1zE=) 2: 8MrJou4jHWMvbrgNdX-4pxWfc90.roa (hash: WNU23R3SY6kHyJmbcKZj6sAJrT/H2apTu6VsmiUGadk=) 3: I2TVT7DNE2G9XXNPIvC7ssj4vy0.roa (hash: 5m+YSBm5ZTcuXSiyQRLawLxfa0qfeuRlBCs8VexXa7Q=) 4: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (hash: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=) 5: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (hash: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=) 6: w4zzq3GKAiXTtkaxwc19NwVaitc.roa (hash: J/2FTFkZfxRTxJNhlHUgf8n7TYgo+AXQ4IVYmjTCUKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:cd:20:7e:c1:a5:b2:e7:d0:3f:60:87:98:67:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f Validity Not Before: Dec 25 04:02:06 2025 GMT Not After : Dec 26 04:02:06 2025 GMT Subject: CN=9b5fcad13573afc7c9f583b9323501c0fc49d979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:42:8b:f2:0f:00:62:9e:b3:6c:b1:20:1c: 0d:5f:e6:2c:0e:03:bd:28:2d:6c:85:92:b7:c8:4f: d3:59:d0:8c:c4:e8:b5:77:56:b7:b5:f3:86:aa:ba: 10:26:63:73:d4:64:3f:b9:f2:68:11:76:d0:aa:d6: a4:96:d8:e9:67:1e:75:5e:1c:ba:b9:f4:af:21:8b: 0e:ef:80:84:db:d3:4b:fa:24:4b:ea:89:2e:3d:f8: 39:b0:4e:cd:da:eb:26:36:77:05:12:bb:c6:db:28: 49:ea:b2:5c:ce:60:09:62:c4:80:6e:79:d6:85:02: 48:d0:79:df:09:36:cc:c6:1c:41:9e:13:80:fa:39: 34:cb:fe:56:79:e3:ae:89:ff:43:78:0d:a3:98:59: dc:01:c6:ed:89:30:5c:44:d9:73:32:3e:4f:15:97: b8:15:82:f6:4c:19:e6:e0:72:3e:6e:4e:3d:d0:13: 04:02:72:c3:6c:6a:4a:52:8b:65:1b:0a:21:22:0f: 2d:f4:bd:ca:6d:a3:1d:30:54:90:dd:ee:11:fb:97: 10:b3:19:9c:52:29:f8:66:11:bf:e5:f5:1c:bd:fd: 64:bd:2f:8e:8d:de:1a:72:2d:72:f4:0f:bc:66:21: 23:7c:2d:fd:fe:d8:2f:77:34:66:80:5e:6e:f1:d7: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5F:CA:D1:35:73:AF:C7:C9:F5:83:B9:32:35:01:C0:FC:49:D9:79 X509v3 Authority Key Identifier: keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b0:47:0e:d3:5a:99:fa:bc:bb:ae:9e:d6:1c:c4:68:67:c8: d5:5c:59:5a:0b:31:a4:08:ac:71:4e:fd:b3:6d:f4:37:3c:46: af:cc:27:c5:a9:99:5e:34:59:04:ff:a1:06:b1:91:6e:ab:1a: 2d:87:4a:03:d2:48:88:ea:ae:ef:2e:e1:2b:21:6f:ca:28:f2: ab:d4:7b:ac:d8:6f:0e:d1:1b:95:89:87:65:5e:4f:fc:25:f4: a4:62:2a:ea:d6:15:7b:94:9a:9c:a4:2d:8a:b0:3e:bf:34:24: b5:76:9d:e8:43:3a:28:d4:77:a2:58:d6:e9:94:12:21:9a:b3: 21:36:63:95:3f:c4:03:0c:a8:be:5c:50:f7:4f:86:0d:c2:3b: 95:9a:de:e8:55:a1:dc:8e:84:49:ea:6c:15:cd:c2:6b:ac:24: 8d:15:23:01:d5:ca:dc:7c:f4:e6:1e:14:d1:70:c8:2a:62:b8: 24:0d:01:8f:8c:43:71:49:b5:65:31:e0:d8:8a:9d:2e:e8:75: 48:b1:e4:f2:f5:17:44:8c:4e:40:67:1d:15:24:65:f5:a0:1f: 10:c2:8d:e1:f9:4c:e6:63:62:10:31:91:86:e9:09:9e:58:59: 64:be:f7:e5:e2:18:04:42:69:fa:d9:4d:19:ab:6d:e0:31:d3: cf:6b:e4:31 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtTq80gfsGlsufQP2CHmGfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYWM1MGYxOWQ5OTMwYWVlYzA5Y2QyN2Y1MDhmYzUwMmVh MTRkMWYwHhcNMjUxMjI1MDQwMjA2WhcNMjUxMjI2MDQwMjA2WjAzMTEwLwYDVQQD Eyg5YjVmY2FkMTM1NzNhZmM3YzlmNTgzYjkzMjM1MDFjMGZjNDlkOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyhCi/IPAGKes2yxIBwNX+YsDgO9 KC1shZK3yE/TWdCMxOi1d1a3tfOGqroQJmNz1GQ/ufJoEXbQqtakltjpZx51Xhy6 ufSvIYsO74CE29NL+iRL6okuPfg5sE7N2usmNncFErvG2yhJ6rJczmAJYsSAbnnW hQJI0HnfCTbMxhxBnhOA+jk0y/5WeeOuif9DeA2jmFncAcbtiTBcRNlzMj5PFZe4 FYL2TBnm4HI+bk490BMEAnLDbGpKUotlGwohIg8t9L3KbaMdMFSQ3e4R+5cQsxmc Uin4ZhG/5fUcvf1kvS+Ojd4aci1y9A+8ZiEjfC39/tgvdzRmgF5u8deYQQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJtfytE1c6/HyfWDuTI1AcD8Sdl5MB8GA1UdIwQY MBaAFPusUPGdmTCu7AnNJ/UI/FAuoU0fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02eFE4WjJaTUs3c0NjMG45UWo4VUM2aFRSOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04Yjkx LWQ2MmU0NTRiZjM3Zi8xLzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYz N2YvMS8xLTZ4UThaMlpNSzdzQ2MwbjlRajhVQzZoVFI4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLBH DtNamfq8u66e1hzEaGfI1VxZWgsxpAiscU79s230NzxGr8wnxamZXjRZBP+hBrGR bqsaLYdKA9JIiOqu7y7hKyFvyijyq9R7rNhvDtEblYmHZV5P/CX0pGIq6tYVe5Sa nKQtirA+vzQktXad6EM6KNR3oljW6ZQSIZqzITZjlT/EAwyovlxQ90+GDcI7lZre 6FWh3I6ESepsFc3Ca6wkjRUjAdXK3Hz05h4U0XDIKmK4JA0Bj4xDcUm1ZTHg2Iqd Luh1SLHk8vUXRIxOQGcdFSRl9aAfEMKN4flM5mNiEDGRhukJnlhZZL735eIYBEJp +tlNGatt4DHTz2vkMQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:08 2025 by rpki-client