This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json) Hash identifier: LkuRHMxFQH6UoQInUA8uaoDM9GN3F/jP/kFhEfy+Mao= Subject key identifier: A2:F9:C9:23:EB:65:8D:3B:C0:DE:10:B3:A6:4F:E2:D0:44:6C:08:E0 Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2 Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2 Certificate serial: 019B4FCEF2336941F19A18EB69F774966725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 10:02:00 +0000 Manifest this update: Wed 24 Dec 2025 10:02:00 +0000 Manifest next update: Thu 25 Dec 2025 10:02:00 +0000 Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: ROMbLLj9GbHYEiyDByihi4DEp9oEBU9HHhgQ/byJHUc=) 2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:f2:33:69:41:f1:9a:18:eb:69:f7:74:96:67:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2 Validity Not Before: Dec 24 10:02:00 2025 GMT Not After : Dec 25 10:02:00 2025 GMT Subject: CN=a2f9c923eb658d3bc0de10b3a64fe2d0446c08e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:9c:31:d6:15:26:fa:ab:ab:8c:1f:61:34: 84:3e:fc:c5:10:e5:80:c7:f7:01:b1:a2:60:7a:1b: c6:ae:04:82:d2:96:c4:15:b9:3b:c2:cc:56:04:f6: 52:4d:e9:14:51:df:14:83:95:7f:6b:b0:69:64:8c: 8e:6a:17:d5:aa:f0:1f:c3:d4:ff:06:7a:1b:e2:39: 42:8a:e3:84:f5:cd:10:c8:fb:f0:c1:16:e3:2e:80: a0:6f:25:a8:1c:85:4a:99:49:71:1d:09:03:b9:43: da:ff:95:fb:b6:a4:b4:7d:04:cf:3e:b1:a2:30:56: 42:5a:cd:b2:9d:8f:2a:89:b8:64:7a:4d:63:c5:f5: cb:27:32:a3:84:ab:3c:af:06:84:51:18:fe:c1:bb: d9:c9:75:0c:f5:d3:17:3c:ef:cc:80:4c:4b:c2:07: 2d:24:c6:c3:94:50:c7:fb:61:f7:f4:f2:58:31:79: 37:21:79:6d:24:fb:59:59:a5:91:10:09:03:d2:0d: 5b:19:6a:7a:0b:83:78:d8:05:d4:19:21:ce:b5:af: a3:e7:cf:7c:63:bf:6f:b5:cf:9c:47:ba:b9:23:48: 37:f1:7d:67:5d:a1:61:49:d7:7c:67:05:8e:4f:9e: b7:70:b5:c5:b7:18:51:76:c5:84:51:15:41:98:0e: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F9:C9:23:EB:65:8D:3B:C0:DE:10:B3:A6:4F:E2:D0:44:6C:08:E0 X509v3 Authority Key Identifier: keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7e:98:4d:3a:40:bf:49:81:f6:6d:8a:59:8b:fa:5b:c1:f8: 7e:10:37:65:2c:56:9f:45:27:5f:ab:7e:e6:80:c5:96:6a:38: c5:1e:ad:fa:d5:0c:42:8f:65:7f:fc:de:53:18:d4:13:6a:48: 86:70:5d:6e:ce:aa:44:6b:d2:3d:32:44:bf:5f:89:8b:25:af: e8:01:3d:7c:7f:4c:87:b8:da:e2:3a:76:0b:52:3f:f7:44:4f: 32:d2:d7:75:47:12:d4:f8:73:6a:21:a5:b7:f5:08:87:f6:3d: ce:0e:36:37:28:80:fd:90:04:bd:70:07:a2:a5:e1:03:f6:bc: ec:65:d9:1f:e8:7e:22:fd:2b:32:d3:cc:70:a8:e7:62:72:e7: a5:eb:e6:3a:79:fa:1f:0c:91:9b:a3:a9:db:e9:c5:f4:f7:87: 42:93:f2:5c:ef:1d:13:67:35:fc:69:98:69:6f:64:49:8a:37: 1d:1c:b4:2f:1a:8d:f3:7a:7b:f8:ac:be:b1:74:62:9d:ff:59: e8:d8:40:ea:36:d2:1d:3b:cb:d6:2d:4f:a8:41:82:9f:ac:3d: ae:e2:8b:56:7a:f6:b9:4b:fb:ca:16:79:12:60:06:07:c7:82: 8c:35:c6:57:67:79:8b:48:a6:06:66:3b:ea:79:a5:30:68:b0: 6c:82:0e:c9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtPzvIzaUHxmhjrafd0lmclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5 M2U2YTIwHhcNMjUxMjI0MTAwMjAwWhcNMjUxMjI1MTAwMjAwWjAzMTEwLwYDVQQD EyhhMmY5YzkyM2ViNjU4ZDNiYzBkZTEwYjNhNjRmZTJkMDQ0NmMwOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksicMdYVJvqrq4wfYTSEPvzFEOWA x/cBsaJgehvGrgSC0pbEFbk7wsxWBPZSTekUUd8Ug5V/a7BpZIyOahfVqvAfw9T/ Bnob4jlCiuOE9c0QyPvwwRbjLoCgbyWoHIVKmUlxHQkDuUPa/5X7tqS0fQTPPrGi MFZCWs2ynY8qibhkek1jxfXLJzKjhKs8rwaEURj+wbvZyXUM9dMXPO/MgExLwgct JMbDlFDH+2H39PJYMXk3IXltJPtZWaWREAkD0g1bGWp6C4N42AXUGSHOta+j5898 Y79vtc+cR7q5I0g38X1nXaFhSdd8ZwWOT563cLXFtxhRdsWEURVBmA4rdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKL5ySPrZY07wN4Qs6ZP4tBEbAjgMB8GA1UdIwQY MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0 LWY5NTg1NWYxMDc2My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU0LzliM2Y2Zi05NzU0LTQ1OGYtYjViNC1mOTU4NTVmMTA3 NjMvMS8xLV9RQTVqeXlZc0lBRGdjYzZRcW5MdmFUNXFJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX6Y TTpAv0mB9m2KWYv6W8H4fhA3ZSxWn0UnX6t+5oDFlmo4xR6t+tUMQo9lf/zeUxjU E2pIhnBdbs6qRGvSPTJEv1+JiyWv6AE9fH9Mh7ja4jp2C1I/90RPMtLXdUcS1Phz aiGlt/UIh/Y9zg42NyiA/ZAEvXAHoqXhA/a87GXZH+h+Iv0rMtPMcKjnYnLnpevm Onn6HwyRm6Op2+nF9PeHQpPyXO8dE2c1/GmYaW9kSYo3HRy0LxqN83p7+Ky+sXRi nf9Z6NhA6jbSHTvL1i1PqEGCn6w9ruKLVnr2uUv7yhZ5EmAGB8eCjDXGV2d5i0im BmY76nmlMGiwbIIOyQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:13:56 2025 by rpki-client