This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json) Hash identifier: e+fwZVjyPTMspgpGWebfnOsHhqARpE3aNNLvSAbjmHo= Subject key identifier: C5:F6:8D:36:EC:69:B4:3D:8D:19:C4:7A:08:59:B6:82:E1:EE:1B:14 Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Certificate serial: 019B620AD6128DB99BA91C5F2AF93C1AEBB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 23:00:35 +0000 Manifest this update: Sat 27 Dec 2025 23:00:35 +0000 Manifest next update: Sun 28 Dec 2025 23:00:35 +0000 Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: +HyDOUifUSCpwHwwpLJ8jo39wqCwT3Lzq6NL0+ZqMeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:d6:12:8d:b9:9b:a9:1c:5f:2a:f9:3c:1a:eb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Validity Not Before: Dec 27 23:00:35 2025 GMT Not After : Dec 28 23:00:35 2025 GMT Subject: CN=c5f68d36ec69b43d8d19c47a0859b682e1ee1b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:a1:a0:51:47:36:ba:73:b9:70:a1:25:85: 55:e9:53:94:83:20:1f:85:4b:22:43:32:eb:1e:78: 6e:2d:d7:53:96:b5:be:43:43:28:a2:58:c7:57:48: 80:10:a3:ad:69:84:0c:0d:db:74:34:58:5b:62:25: 9b:f1:25:94:43:96:13:e9:36:78:e9:54:75:c6:bb: 20:1d:73:bb:1b:16:88:e7:60:04:29:58:b7:3d:18: 11:3e:ac:ae:21:2e:a1:ce:ce:28:76:7b:99:4a:47: 0b:46:6b:59:67:8e:b3:c3:4a:ae:cb:58:f4:ef:92: ed:ee:76:6a:df:9e:bf:0d:73:4c:51:5b:2d:e1:81: 3d:52:30:32:80:65:97:08:a6:fb:61:bf:cb:92:43: d2:a0:a7:dc:60:d6:c6:19:7b:a4:ff:73:d5:72:c0: 10:fe:bc:db:cc:c0:a5:1e:fc:b4:a4:d6:fa:d7:2f: 95:dc:03:72:7c:02:5b:20:ff:31:7e:81:c5:12:fd: 79:6b:92:79:1f:ba:89:d4:04:88:4c:08:f4:91:32: 57:cd:5a:1e:92:ee:3d:2f:a5:e0:09:dd:fb:c3:b2: 32:ea:b7:0b:cd:64:06:43:4e:2b:19:0a:3a:3a:47: 78:86:ba:bb:39:a0:1f:02:d7:a5:8a:e1:ae:9e:f6: f5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:8D:36:EC:69:B4:3D:8D:19:C4:7A:08:59:B6:82:E1:EE:1B:14 X509v3 Authority Key Identifier: keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5b:2a:64:42:79:8d:b5:db:00:0e:cb:d4:f3:43:e4:d7:d9: eb:90:ea:fb:cf:f6:74:33:e7:25:af:99:ed:2c:6d:96:76:be: 68:90:c8:eb:5f:d1:fd:82:15:e0:8d:f0:73:32:34:18:b9:44: c0:39:db:40:0f:f4:c1:90:45:4d:c4:0c:fa:9b:ee:14:66:bd: a7:85:9b:4c:88:56:1b:c2:2a:44:50:c2:8d:69:7b:d5:9c:79: a7:d3:84:ad:ce:8a:c1:a0:d7:85:dc:42:0e:2e:bf:f1:66:48: 10:6d:26:cb:77:b7:d7:6f:cd:19:8b:aa:38:4a:f3:0b:74:be: 91:27:ca:7e:a1:4f:e7:62:13:be:8e:28:ff:c8:13:52:d5:1e: 3b:16:a0:da:a3:ba:8d:b9:13:80:80:17:ed:ab:17:46:63:78: 3b:f4:00:7b:c1:1b:c2:55:0e:2d:c4:99:da:cc:79:08:ed:48: 2b:68:23:92:fb:36:91:74:e6:ed:4f:89:78:a1:16:10:52:4d: 82:ea:ac:f0:05:d3:99:c2:06:67:57:07:26:26:a5:b8:ac:e3: ad:07:02:0b:89:41:73:ac:3d:f5:b5:70:e9:c5:f1:0c:7a:0b: 3d:be:66:71:7b:64:6b:df:7a:53:de:2a:5c:f8:8f:da:47:48: db:33:f3:1a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtiCtYSjbmbqRxfKvk8Guu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGE1YWFhNmM5OTQ2MmZlYjE1OWY1NmIxYzBhZjJkZDNm NDYyNWIwHhcNMjUxMjI3MjMwMDM1WhcNMjUxMjI4MjMwMDM1WjAzMTEwLwYDVQQD EyhjNWY2OGQzNmVjNjliNDNkOGQxOWM0N2EwODU5YjY4MmUxZWUxYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ShoFFHNrpzuXChJYVV6VOUgyAf hUsiQzLrHnhuLddTlrW+Q0MooljHV0iAEKOtaYQMDdt0NFhbYiWb8SWUQ5YT6TZ4 6VR1xrsgHXO7GxaI52AEKVi3PRgRPqyuIS6hzs4odnuZSkcLRmtZZ46zw0quy1j0 75Lt7nZq356/DXNMUVst4YE9UjAygGWXCKb7Yb/LkkPSoKfcYNbGGXuk/3PVcsAQ /rzbzMClHvy0pNb61y+V3ANyfAJbIP8xfoHFEv15a5J5H7qJ1ASITAj0kTJXzVoe ku49L6XgCd37w7Iy6rcLzWQGQ04rGQo6Okd4hrq7OaAfAteliuGunvb18QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMX2jTbsabQ9jRnEeghZtoLh7hsUMB8GA1UdIwQY MBaAFPraWqpsmUYv6xWfVrHAry3T9GJbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10cGFxbXlaUmlfckZaOVdzY0N2TGRQMFlscy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2LWVkZjAtNDhkNy1iZTdk LTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlXc2NDdkxkUDBZbHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FjLzA2MTUwNi1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2 ZTIvMS8xLXRwYXFteVpSaV9yRlo5V3NjQ3ZMZFAwWWxzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplsq ZEJ5jbXbAA7L1PND5NfZ65Dq+8/2dDPnJa+Z7Sxtlna+aJDI61/R/YIV4I3wczI0 GLlEwDnbQA/0wZBFTcQM+pvuFGa9p4WbTIhWG8IqRFDCjWl71Zx5p9OErc6KwaDX hdxCDi6/8WZIEG0my3e312/NGYuqOErzC3S+kSfKfqFP52ITvo4o/8gTUtUeOxag 2qO6jbkTgIAX7asXRmN4O/QAe8EbwlUOLcSZ2sx5CO1IK2gjkvs2kXTm7U+JeKEW EFJNguqs8AXTmcIGZ1cHJialuKzjrQcCC4lBc6w99bVw6cXxDHoLPb5mcXtka996 U94qXPiP2kdI2zPzGg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:33:54 2025 by rpki-client