This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json) Hash identifier: urhe4RXgBlYt8Cbrg+pObVY2x0deSTGuYWOLPYwin48= Subject key identifier: 80:08:5C:88:A3:CF:42:7B:DD:6A:E3:23:19:31:77:18:11:17:67:1A Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Certificate serial: 019B54183B1F0C70571C859BE2223105B055 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft Manifest number: 0295 Signing time: Thu 25 Dec 2025 06:00:32 +0000 Manifest this update: Thu 25 Dec 2025 06:00:32 +0000 Manifest next update: Fri 26 Dec 2025 06:00:32 +0000 Files and hashes: 1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: D9w3TwmsisBsGjDbj86nsfpGbMOO/XdlqnOJ6DDEYb8=) 2: EOs1OcIjU7QpGNyQW0WAVHDhwZk.roa (hash: GhAzKLkw2PqF2q1j22FlhKv8LsjLpt0qx1W6/h0p4Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:3b:1f:0c:70:57:1c:85:9b:e2:22:31:05:b0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Validity Not Before: Dec 25 06:00:32 2025 GMT Not After : Dec 26 06:00:32 2025 GMT Subject: CN=80085c88a3cf427bdd6ae323193177181117671a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:bf:10:93:7c:d7:7c:b8:74:78:1f:1d:58: 25:0a:8a:fb:db:c4:0e:a3:83:ba:6a:f9:f7:48:95: 08:9e:8c:45:f5:d7:55:8e:51:7f:8c:43:4e:cf:0b: 8d:90:da:d5:82:9b:ec:b4:7c:15:3d:0b:ca:62:d5: fe:27:12:73:ab:1f:32:46:d9:73:fa:75:66:c3:f8: 37:bf:55:c0:b4:5f:42:64:92:1e:14:32:98:23:e9: 97:8e:3e:03:70:11:12:b1:67:f9:95:cc:76:49:69: 8d:5a:89:ab:2c:29:6f:11:cb:5b:ce:90:47:b7:ef: cf:f8:27:7b:d0:c6:f5:88:06:cf:4e:d5:37:f3:bc: e9:de:2a:48:e5:8e:a6:1b:a8:57:1c:55:35:0b:02: 49:e0:ec:53:28:58:2a:7a:2a:46:f3:2e:a6:3c:de: 5f:8e:99:cc:9c:e0:43:3b:6d:fe:70:54:14:56:46: cc:31:bd:66:04:35:e7:69:d6:98:9e:18:70:18:8a: 15:0b:11:ea:e2:dc:2a:e5:c6:de:87:ba:03:50:90: 64:f6:d0:a6:66:94:b6:ec:18:f3:e1:93:58:3f:ba: 90:b4:e8:ca:47:58:ff:37:8d:5a:f5:42:d3:bf:dd: 26:a2:71:f2:b2:22:d1:3a:e5:ce:25:13:f8:bd:f8: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:08:5C:88:A3:CF:42:7B:DD:6A:E3:23:19:31:77:18:11:17:67:1A X509v3 Authority Key Identifier: keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ad:d5:29:d9:51:1e:85:a0:1e:c7:10:f1:4f:3e:9e:92:29: d2:67:fc:6f:2e:70:71:f0:5c:7d:36:d0:65:27:6b:76:d4:5a: 93:b2:01:03:9c:c9:7a:cc:02:57:d9:a7:3b:00:a1:c5:76:95: a5:a2:db:e6:ce:09:9e:fb:87:c7:91:79:a4:44:fc:09:f2:f4: 31:c9:e8:8b:c5:10:7e:b4:c7:28:89:2f:ee:2a:5f:db:e5:bb: 01:55:ba:b3:95:b2:00:11:d0:33:47:b7:93:45:2d:23:58:f2: 95:51:67:8f:48:74:7c:19:00:40:52:92:d9:a0:5f:f7:e9:07: 3d:aa:cb:d4:f7:cd:98:98:6c:cf:ab:01:6c:d1:d6:d5:a7:4a: 80:bf:ce:22:6e:6d:1b:b0:f3:50:ce:cf:ba:3b:93:5d:d8:d5: 29:51:7e:25:dd:f5:31:45:d9:d2:57:ad:b1:cc:c7:de:06:59: 04:dc:8a:0d:e3:65:1e:6d:55:71:80:de:aa:07:eb:f0:f4:b6: 91:09:61:cb:ba:4f:66:d8:2f:68:d6:49:2c:e2:c2:f1:39:50: 12:19:35:e6:a9:89:d3:88:92:2b:0f:f4:9c:d0:2a:9b:d9:9b: ac:4e:cd:c9:b2:c1:35:95:a7:6e:61:6a:4e:24:79:e8:aa:5f: cb:1e:c3:78 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtUGDsfDHBXHIWb4iIxBbBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhN2NmYWM2YWYxMDg2NjBkOTRlMmZjZWQ2MWU2MWZmMjE5 YzBhNTYwHhcNMjUxMjI1MDYwMDMyWhcNMjUxMjI2MDYwMDMyWjAzMTEwLwYDVQQD Eyg4MDA4NWM4OGEzY2Y0MjdiZGQ2YWUzMjMxOTMxNzcxODExMTc2NzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWi/EJN813y4dHgfHVglCor728QO o4O6avn3SJUInoxF9ddVjlF/jENOzwuNkNrVgpvstHwVPQvKYtX+JxJzqx8yRtlz +nVmw/g3v1XAtF9CZJIeFDKYI+mXjj4DcBESsWf5lcx2SWmNWomrLClvEctbzpBH t+/P+Cd70Mb1iAbPTtU387zp3ipI5Y6mG6hXHFU1CwJJ4OxTKFgqeipG8y6mPN5f jpnMnOBDO23+cFQUVkbMMb1mBDXnadaYnhhwGIoVCxHq4twq5cbeh7oDUJBk9tCm ZpS27Bjz4ZNYP7qQtOjKR1j/N41a9ULTv90monHysiLROuXOJRP4vfjnRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIAIXIijz0J73WrjIxkxdxgRF2caMB8GA1UdIwQY MBaAFPp8+savEIZg2U4vztYeYf8hnApWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uejZ4cThRaG1EWlRpX08xaDVoX3lHY0NsWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjgyMjMwLWI0Y2QtNDU5NS1iZDFl LTMyYTQxYmEzZTNjNS8xLzEtbno2eHE4UWhtRFpUaV9PMWg1aF95R2NDbFkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZkLzY4MjIzMC1iNGNkLTQ1OTUtYmQxZS0zMmE0MWJhM2Uz YzUvMS8xLW56NnhxOFFobURaVGlfTzFoNWhfeUdjQ2xZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM63V KdlRHoWgHscQ8U8+npIp0mf8by5wcfBcfTbQZSdrdtRak7IBA5zJeswCV9mnOwCh xXaVpaLb5s4JnvuHx5F5pET8CfL0Mcnoi8UQfrTHKIkv7ipf2+W7AVW6s5WyABHQ M0e3k0UtI1jylVFnj0h0fBkAQFKS2aBf9+kHParL1PfNmJhsz6sBbNHW1adKgL/O Im5tG7DzUM7PujuTXdjVKVF+Jd31MUXZ0letsczH3gZZBNyKDeNlHm1VcYDeqgfr 8PS2kQlhy7pPZtgvaNZJLOLC8TlQEhk15qmJ04iSKw/0nNAqm9mbrE7NybLBNZWn bmFqTiR56Kpfyx7DeA== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:52 2025 by rpki-client