This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json) Hash identifier: Rd6wiv7q0ro2xWIXvQrG38CBbHNYL8WDiPGtV8xtzGE= Subject key identifier: 1F:89:D1:8A:71:7E:7A:2A:74:09:EE:78:A7:2A:A5:61:45:29:E8:51 Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2 Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2 Certificate serial: 019B35327436574BE41AB5FD4370CC24A831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft Manifest number: 0384 Signing time: Fri 19 Dec 2025 06:00:57 +0000 Manifest this update: Fri 19 Dec 2025 06:00:57 +0000 Manifest next update: Sat 20 Dec 2025 06:00:57 +0000 Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: DxRmWKV5D4wztGcRLp3WVQBPx+FkR3DmnzFnChvq6cI=) 2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:74:36:57:4b:e4:1a:b5:fd:43:70:cc:24:a8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2 Validity Not Before: Dec 19 06:00:57 2025 GMT Not After : Dec 20 06:00:57 2025 GMT Subject: CN=1f89d18a717e7a2a7409ee78a72aa5614529e851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:7b:5e:45:6f:ab:83:ef:16:f5:0e:0d:2b: 2c:23:c6:2e:95:ea:5f:a8:a0:ee:c4:0a:0c:16:cf: a1:5e:2f:22:e4:ad:5a:bc:b8:6e:a0:ed:fa:ed:f6: f2:e1:9f:ea:ab:0c:f0:c6:a1:b9:e5:6d:ad:ae:20: 5b:00:1d:dc:eb:dd:d4:54:a9:87:97:3a:e9:e2:c3: fc:cf:ab:1b:7c:95:51:07:c8:9a:9e:88:23:76:c5: 59:ae:12:aa:f4:50:67:e0:0b:64:d9:15:53:84:64: 97:8a:c2:c5:b2:f9:e6:30:d9:ff:d2:5f:f9:a8:ea: 3a:79:51:69:47:a8:2a:fe:f1:eb:94:90:0a:2b:52: 19:7c:b2:55:85:73:20:07:79:a5:b9:b8:60:f7:08: da:22:ae:65:25:6b:92:5d:f2:75:72:da:66:60:20: 45:7e:e4:d7:78:3f:f0:e2:1e:6f:75:64:79:b8:8c: 6f:f6:2a:7d:8e:8e:78:c8:1a:6d:a2:81:71:95:03: 32:7a:2c:1f:46:eb:ca:70:ad:d2:6e:dd:b9:9a:29: ea:2d:48:cf:32:f6:af:7e:83:16:18:22:f8:e0:a4: a0:45:df:45:0c:e3:c7:d9:48:2e:dd:ec:bb:24:ae: 2c:5c:40:e8:a0:fb:05:b9:cc:08:f7:1d:6c:71:80: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:89:D1:8A:71:7E:7A:2A:74:09:EE:78:A7:2A:A5:61:45:29:E8:51 X509v3 Authority Key Identifier: keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:22:ac:3d:76:d3:42:16:5f:ea:fc:3d:83:2d:b5:83:56:29: a1:0b:7d:3b:5f:9b:a6:d6:70:2e:fb:25:f9:76:44:f1:0c:33: e7:f7:ad:bc:c6:2f:44:a8:01:de:40:0c:10:1b:1f:6a:e2:7e: 03:b9:96:77:94:36:1d:bc:c0:bc:24:95:da:15:4c:41:94:2a: a6:13:27:e3:74:e4:68:f9:8a:21:a4:13:19:23:5c:47:3f:06: f6:e2:01:46:fc:6e:ea:65:03:07:dd:93:db:ba:31:80:61:15: 9b:43:d4:a4:b2:10:29:8e:12:63:7e:13:d6:58:72:8e:1e:7d: a8:f6:cd:2b:1d:09:a2:f4:d5:af:03:17:2f:64:29:47:f3:18: 23:74:a2:96:cf:3d:d5:55:a1:87:bd:26:d4:ed:b1:d9:83:8f: e8:32:6d:08:ae:c4:2e:75:57:3b:1d:81:2b:ba:e7:b6:a7:f5: d5:50:37:32:b1:c0:ca:2c:4e:60:51:93:87:cf:30:7b:38:bc: 7a:47:e1:3b:b4:9d:0f:5c:2d:a6:5d:3c:6a:c7:2a:16:a4:7d: f1:69:b8:45:6f:23:7d:ca:3f:0b:75:a1:bd:bf:e0:70:7e:bc: 8d:a4:fd:51:b7:53:4c:5b:27:4e:49:47:73:18:92:c6:b3:db: e1:2c:a5:eb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs1MnQ2V0vkGrX9Q3DMJKgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh NzVkZTIwHhcNMjUxMjE5MDYwMDU3WhcNMjUxMjIwMDYwMDU3WjAzMTEwLwYDVQQD EygxZjg5ZDE4YTcxN2U3YTJhNzQwOWVlNzhhNzJhYTU2MTQ1MjllODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31F7XkVvq4PvFvUODSssI8Yulepf qKDuxAoMFs+hXi8i5K1avLhuoO367fby4Z/qqwzwxqG55W2triBbAB3c693UVKmH lzrp4sP8z6sbfJVRB8ianogjdsVZrhKq9FBn4Atk2RVThGSXisLFsvnmMNn/0l/5 qOo6eVFpR6gq/vHrlJAKK1IZfLJVhXMgB3mlubhg9wjaIq5lJWuSXfJ1ctpmYCBF fuTXeD/w4h5vdWR5uIxv9ip9jo54yBptooFxlQMyeiwfRuvKcK3Sbt25minqLUjP MvavfoMWGCL44KSgRd9FDOPH2Ugu3ey7JK4sXEDooPsFucwI9x1scYAeHwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB+J0YpxfnoqdAnueKcqpWFFKehRMB8GA1UdIwQY MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi LTQzMTBjMzliMWY0NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EzL2EzZmQ4Yi02ODZiLTRlNmMtOGI3Yi00MzEwYzM5YjFm NDQvMS8xLUZKZVFTeHE0ckZzckRuczhvakM0dWFuWGVJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyKs PXbTQhZf6vw9gy21g1YpoQt9O1+bptZwLvsl+XZE8Qwz5/etvMYvRKgB3kAMEBsf auJ+A7mWd5Q2HbzAvCSV2hVMQZQqphMn43TkaPmKIaQTGSNcRz8G9uIBRvxu6mUD B92T27oxgGEVm0PUpLIQKY4SY34T1lhyjh59qPbNKx0JovTVrwMXL2QpR/MYI3Si ls891VWhh70m1O2x2YOP6DJtCK7ELnVXOx2BK7rntqf11VA3MrHAyixOYFGTh88w ezi8ekfhO7SdD1wtpl08ascqFqR98Wm4RW8jfco/C3Whvb/gcH68jaT9UbdTTFsn TklHcxiSxrPb4Syl6w== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:35 2025 by rpki-client