This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json) Hash identifier: cIBN4L1BXH+ETbNtTO1TVXVrHavrKpvwsfLrMWz92nA= Subject key identifier: 95:42:D8:9D:28:F2:FF:0F:47:D9:17:BB:CC:96:11:F3:73:FF:BB:89 Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Certificate serial: 019B4EF25104A17E3A3C2D11E06276D28DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft Manifest number: 09F7 Signing time: Wed 24 Dec 2025 06:01:01 +0000 Manifest this update: Wed 24 Dec 2025 06:01:01 +0000 Manifest next update: Thu 25 Dec 2025 06:01:01 +0000 Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: ofKa+mJWGeuHXZ7KfzrlpGF5ia1jjertl7ej3Wd5qFk=) 2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:51:04:a1:7e:3a:3c:2d:11:e0:62:76:d2:8d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623 Validity Not Before: Dec 24 06:01:01 2025 GMT Not After : Dec 25 06:01:01 2025 GMT Subject: CN=9542d89d28f2ff0f47d917bbcc9611f373ffbb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:00:83:81:83:c9:e6:8c:b5:78:b5:c3:24: 27:c8:7a:1d:3d:3e:4d:dc:c3:50:3b:fd:93:1a:f5: fe:5a:07:f7:ce:62:3e:e4:11:e6:05:4a:b8:f0:dd: 15:94:80:10:f6:9f:74:70:ee:f7:d5:9c:2d:9d:ec: f0:cb:0e:e5:e7:31:14:04:b3:f0:e2:bb:60:2a:8f: 81:ac:5e:3e:6a:27:9a:bc:ce:03:6e:da:48:4a:3e: e1:2a:99:12:2a:63:49:32:35:4a:82:d4:65:a5:e6: 37:72:48:c4:1a:82:7c:3a:56:62:e4:75:0b:56:f3: 51:8a:b4:7c:02:89:13:8a:62:c8:d5:47:a2:df:db: 90:eb:af:f7:bc:79:0c:f1:71:42:5e:bb:7d:09:81: 07:78:86:2d:d9:df:f0:6c:63:03:54:0d:a7:66:ef: 34:cf:14:9c:17:cf:13:44:ab:86:22:b6:02:8a:ba: 38:15:3d:ad:65:53:db:8b:1c:79:e3:6b:01:3f:b4: 66:2c:4f:43:f6:ee:ef:81:7d:d3:8a:13:05:b1:e3: a5:6b:1b:5b:cc:d1:a8:11:66:28:c4:33:83:32:bb: 07:1e:e4:bd:d8:76:85:a6:18:79:a2:f4:9b:98:d5: 1c:44:cb:bb:e3:af:d9:8a:73:57:fd:1c:41:32:b1: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:42:D8:9D:28:F2:FF:0F:47:D9:17:BB:CC:96:11:F3:73:FF:BB:89 X509v3 Authority Key Identifier: keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:59:84:66:b6:60:cc:7e:7f:9f:ef:dd:17:76:46:1b:48:98: d4:b1:79:dd:fb:69:83:65:62:a8:73:8c:55:be:b0:7d:0d:e0: 52:3a:f1:5d:09:4d:fd:b4:96:7f:8d:c6:e5:d1:ed:b6:34:3e: a5:4e:d6:b4:3f:8d:81:11:e2:97:19:e5:08:e4:ea:f1:15:cf: 55:5e:a9:cc:6b:05:fc:4e:17:0a:f7:62:e0:c2:d4:4e:21:1c: 66:98:d1:f1:cd:da:2e:ac:3a:f5:d2:80:56:55:fc:48:11:ac: d7:d5:fc:18:b9:1a:10:66:f0:cc:26:e4:e9:44:d9:c2:e6:59: 6d:59:2a:55:11:07:8e:63:00:33:ee:09:83:a6:55:f7:41:83: 96:9b:a7:b3:13:80:1c:83:de:3b:fe:81:43:7a:eb:08:f7:95: b2:72:44:d4:12:9b:34:49:aa:00:c6:7d:92:cb:89:52:c6:68: a0:c5:d5:42:5e:cb:2c:71:37:42:a9:2d:80:8e:bd:f0:56:44: 77:4a:f0:30:72:27:34:fc:b7:bd:65:55:8a:58:0c:9b:70:9c: 05:1c:b3:2b:a9:61:de:c8:51:4d:c7:6c:be:71:02:81:21:5e: c1:d5:48:dc:61:38:a2:32:f3:82:4f:63:32:b6:56:3f:d7:49: e3:b1:0f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8lEEoX46PC0R4GJ20o2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj YzY2MjMwHhcNMjUxMjI0MDYwMTAxWhcNMjUxMjI1MDYwMTAxWjAzMTEwLwYDVQQD Eyg5NTQyZDg5ZDI4ZjJmZjBmNDdkOTE3YmJjYzk2MTFmMzczZmZiYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzsAg4GDyeaMtXi1wyQnyHodPT5N 3MNQO/2TGvX+Wgf3zmI+5BHmBUq48N0VlIAQ9p90cO731Zwtnezwyw7l5zEUBLPw 4rtgKo+BrF4+aieavM4DbtpISj7hKpkSKmNJMjVKgtRlpeY3ckjEGoJ8OlZi5HUL VvNRirR8AokTimLI1Uei39uQ66/3vHkM8XFCXrt9CYEHeIYt2d/wbGMDVA2nZu80 zxScF88TRKuGIrYCiro4FT2tZVPbixx542sBP7RmLE9D9u7vgX3TihMFseOlaxtb zNGoEWYoxDODMrsHHuS92HaFphh5ovSbmNUcRMu746/ZinNX/RxBMrFCrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVC2J0o8v8PR9kXu8yWEfNz/7uJMB8GA1UdIwQY MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2 LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1mEZrZg zH5/n+/dF3ZGG0iY1LF53ftpg2ViqHOMVb6wfQ3gUjrxXQlN/bSWf43G5dHttjQ+ pU7WtD+NgRHilxnlCOTq8RXPVV6pzGsF/E4XCvdi4MLUTiEcZpjR8c3aLqw69dKA VlX8SBGs19X8GLkaEGbwzCbk6UTZwuZZbVkqVREHjmMAM+4Jg6ZV90GDlpunsxOA HIPeO/6BQ3rrCPeVsnJE1BKbNEmqAMZ9ksuJUsZooMXVQl7LLHE3QqktgI698FZE d0rwMHInNPy3vWVVilgMm3CcBRyzK6lh3shRTcdsvnECgSFewdVI3GE4ojLzgk9j MrZWP9dJ47EPNw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:07 2025 by rpki-client