This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json) Hash identifier: urDnQk5U9hJNXXxSgXUlmIUXhBrjMc+Pi4P/5s8I5jQ= Subject key identifier: 89:99:55:F4:01:19:22:6D:33:64:1B:44:C4:82:2D:1A:5D:2B:CF:5D Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Certificate serial: 019B33B275417381C956307E73E3FD194DDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft Manifest number: 07E5 Signing time: Thu 18 Dec 2025 23:01:31 +0000 Manifest this update: Thu 18 Dec 2025 23:01:31 +0000 Manifest next update: Fri 19 Dec 2025 23:01:31 +0000 Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: RmSO7oACchn00Z0CZ4J6fKa1nPqx1sATgSqciDkmyJ4=) 2: wSUCaZlDq8tA-HMBau3EJ93tyfU.roa (hash: yMgrf3IwtSaiP9aq+f/a8xegEvYBFlBB7iCkJrEJ6kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:75:41:73:81:c9:56:30:7e:73:e3:fd:19:4d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Validity Not Before: Dec 18 23:01:31 2025 GMT Not After : Dec 19 23:01:31 2025 GMT Subject: CN=899955f40119226d33641b44c4822d1a5d2bcf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:86:d0:b9:10:23:6a:3d:80:70:cd:af:00: 0a:f3:10:70:ec:be:f7:6e:0e:28:aa:99:9a:7c:8a: 3a:1c:e1:8b:24:84:e8:e9:c1:1e:09:e4:08:3b:ec: 19:33:a3:fa:a3:7a:c7:8d:f6:db:30:09:c2:eb:fd: c0:65:c2:0f:3e:6e:d0:6d:9c:97:61:01:91:2c:ae: fd:f9:7f:3a:85:c5:1a:0d:11:e0:bb:aa:8c:fe:9c: 83:37:26:65:5e:12:79:1a:6e:03:b2:b4:2a:64:4f: b0:15:53:cf:7b:0b:c0:6b:12:2d:58:91:d3:b9:cb: bb:18:bd:0a:20:45:11:47:46:13:a6:f8:37:ef:18: ef:61:d2:95:0a:44:1c:ed:42:9a:4e:3e:b2:5f:d7: ad:f9:7c:bf:18:4b:f5:97:3d:21:6e:ea:91:4d:ec: e4:66:bd:eb:f6:5e:d0:c2:25:34:03:88:0d:4f:aa: cf:d7:ea:c9:7b:9d:15:3a:9d:40:f2:b1:72:f9:3e: a6:87:0d:0c:2e:27:c3:b9:c2:12:8b:3c:d0:1a:db: 4a:23:1d:e3:d4:1e:1f:63:4f:ad:bc:70:88:73:fd: 35:f6:c2:b2:a9:1e:9a:34:20:a7:d2:0c:23:47:0d: ef:d4:0e:6f:6f:e9:2e:f0:8b:bd:bf:95:0d:ff:be: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:55:F4:01:19:22:6D:33:64:1B:44:C4:82:2D:1A:5D:2B:CF:5D X509v3 Authority Key Identifier: keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cc:d3:c3:00:1b:ef:bf:a1:2b:cf:83:e1:ce:8a:90:e9:57: 0c:db:69:e8:60:14:3d:3f:ea:ce:99:92:f2:6b:4e:46:fb:8d: 01:d2:6d:30:27:13:b8:15:09:12:7d:e5:a4:05:5c:a7:11:dc: 09:d8:f1:63:2e:a7:11:76:8c:3f:9f:c4:86:27:26:76:49:e9: 3b:4c:22:c5:2a:a9:d9:95:de:4d:c4:13:10:6b:26:16:7e:f9: 62:14:dd:84:b5:46:b5:81:41:f1:55:39:0a:53:0f:c3:aa:11: 61:0d:72:81:b9:9d:ea:e6:0d:9f:18:83:82:cb:dc:7f:c8:05: 79:14:3b:87:5f:b5:d7:87:e9:3d:c9:0a:d7:36:0c:75:5e:6d: 5b:b6:ea:90:29:7a:b3:cb:14:9b:2e:c7:48:56:4d:00:f2:1f: 3e:6d:44:58:51:9f:a4:e1:75:9f:dc:48:36:a2:92:1f:e0:c6: 73:59:f2:f0:2d:79:5a:1f:7e:18:77:1f:06:d9:81:ce:78:64: eb:d5:f4:a5:d0:13:ae:02:50:98:59:56:98:9b:f9:76:ac:78: 94:70:79:41:21:47:55:11:a4:42:3d:04:da:b5:4c:29:2f:21: 08:98:f9:e0:17:ce:ca:1e:02:38:ad:53:89:3c:b6:19:69:05: e4:79:17:ff -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZszsnVBc4HJVjB+c+P9GU3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh Mjg5YjQwHhcNMjUxMjE4MjMwMTMxWhcNMjUxMjE5MjMwMTMxWjAzMTEwLwYDVQQD Eyg4OTk5NTVmNDAxMTkyMjZkMzM2NDFiNDRjNDgyMmQxYTVkMmJjZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1qG0LkQI2o9gHDNrwAK8xBw7L73 bg4oqpmafIo6HOGLJITo6cEeCeQIO+wZM6P6o3rHjfbbMAnC6/3AZcIPPm7QbZyX YQGRLK79+X86hcUaDRHgu6qM/pyDNyZlXhJ5Gm4DsrQqZE+wFVPPewvAaxItWJHT ucu7GL0KIEURR0YTpvg37xjvYdKVCkQc7UKaTj6yX9et+Xy/GEv1lz0hbuqRTezk Zr3r9l7QwiU0A4gNT6rP1+rJe50VOp1A8rFy+T6mhw0MLifDucISizzQGttKIx3j 1B4fY0+tvHCIc/019sKyqR6aNCCn0gwjRw3v1A5vb+ku8Iu9v5UN/77vewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFImZVfQBGSJtM2QbRMSCLRpdK89dMB8GA1UdIwQY MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1 LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUczT wwAb77+hK8+D4c6KkOlXDNtp6GAUPT/qzpmS8mtORvuNAdJtMCcTuBUJEn3lpAVc pxHcCdjxYy6nEXaMP5/EhicmdknpO0wixSqp2ZXeTcQTEGsmFn75YhTdhLVGtYFB 8VU5ClMPw6oRYQ1ygbmd6uYNnxiDgsvcf8gFeRQ7h1+114fpPckK1zYMdV5tW7bq kCl6s8sUmy7HSFZNAPIfPm1EWFGfpOF1n9xINqKSH+DGc1ny8C15Wh9+GHcfBtmB znhk69X0pdATrgJQmFlWmJv5dqx4lHB5QSFHVRGkQj0E2rVMKS8hCJj54BfOyh4C OK1TiTy2GWkF5HkX/w== -----END CERTIFICATE-----Generated at Fri Dec 19 05:39:00 2025 by rpki-client