This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json) Hash identifier: M3ESf0epVaYun+V21Kl/IWuIG8TR0qmYqSvgp21xdws= Subject key identifier: F9:2C:7F:8B:B5:CA:2B:1E:7F:1E:C7:FE:74:8F:CF:D2:E3:94:18:11 Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Certificate serial: 019B6354878F0848C1CD1FDC7F92C9E05220 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft Manifest number: 04C8 Signing time: Sun 28 Dec 2025 05:00:42 +0000 Manifest this update: Sun 28 Dec 2025 05:00:42 +0000 Manifest next update: Mon 29 Dec 2025 05:00:42 +0000 Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: DViVZa5HAZMIshTyrm0EdOHk0uQxFj98u5kMPouw+wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:87:8f:08:48:c1:cd:1f:dc:7f:92:c9:e0:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Validity Not Before: Dec 28 05:00:42 2025 GMT Not After : Dec 29 05:00:42 2025 GMT Subject: CN=f92c7f8bb5ca2b1e7f1ec7fe748fcfd2e3941811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:a8:90:6e:49:18:a3:f5:63:b3:ed:01:75: f4:50:c9:0a:4d:68:cb:d6:82:8e:05:01:64:35:f7: 67:77:77:30:9f:42:28:e6:81:14:06:25:45:17:33: f7:5f:07:9e:b4:04:2a:4a:d9:15:6f:ad:48:b5:36: da:aa:70:13:6b:a8:73:c1:a2:b1:e6:af:0f:b9:f9: 3e:65:f2:7c:fb:3e:f7:8e:30:53:52:c2:90:36:7b: 4b:20:17:9c:78:81:28:8a:33:d3:48:24:14:34:6e: 36:ce:95:1e:ba:20:2d:45:6e:3e:fc:1d:56:3a:e7: 06:bd:54:db:c5:37:05:77:11:95:5f:1a:18:15:57: 51:da:95:05:4c:e4:ee:e9:ce:79:68:aa:d5:c3:1b: 5d:62:d3:02:26:84:fa:6a:a9:0e:7f:1c:2f:99:ef: 6d:66:ac:98:ae:b0:fe:01:7a:bb:b5:24:e5:67:29: 7b:88:5c:7e:4e:79:f8:bb:4d:61:43:14:35:bd:f3: 1f:9f:b2:6e:87:f8:e5:e6:1a:b0:96:b3:3e:7e:ab: 3c:c5:e5:58:8c:a8:0f:bd:d1:bd:b4:bc:5e:db:82: 76:20:97:c6:f0:f6:ea:fd:06:15:3f:a2:e1:6c:83: 51:fc:8d:7d:4d:a3:01:d9:68:05:ee:42:f0:3a:c4: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:7F:8B:B5:CA:2B:1E:7F:1E:C7:FE:74:8F:CF:D2:E3:94:18:11 X509v3 Authority Key Identifier: keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:23:d6:90:de:55:42:19:93:e8:b9:0c:ab:9a:11:07:3c:03: 66:14:c1:02:0f:c6:6f:01:d4:d6:ab:ba:26:3e:b1:71:67:6e: 70:b4:07:c4:8d:30:1e:c0:b5:43:d1:66:ae:ab:b0:8e:3a:71: c3:a6:54:72:8b:d6:60:49:b8:57:20:95:23:89:78:30:64:bd: e8:63:19:b9:27:0e:eb:00:52:84:c7:5f:7b:c0:01:c0:bd:2f: bd:8e:ef:38:5c:45:47:45:d2:62:ff:7d:84:0d:02:ce:96:06: 7f:af:df:c5:b8:bb:5e:02:76:f5:08:85:40:18:0c:55:a9:a0: 91:b2:2c:55:85:b3:de:af:9f:e5:5e:df:38:b3:c0:54:89:1a: b8:74:be:d3:b3:82:6c:ad:f6:67:7c:10:32:df:62:2b:18:75: fb:2c:24:f1:bc:d9:88:8f:23:37:3b:ae:fa:9c:1c:41:81:0c: c5:84:79:ce:ec:99:f7:cb:a5:56:43:a1:c5:6d:a6:12:93:85: 85:04:5d:31:3f:06:69:bc:b3:39:40:84:fa:1a:5a:7d:e5:a3: 78:30:93:b6:f7:b1:9c:12:35:de:bb:81:34:2c:25:ad:02:2e: 6d:ea:60:9c:27:93:11:90:28:8b:74:69:ca:8b:64:ab:c1:0a: e7:b9:28:11 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtjVIePCEjBzR/cf5LJ4FIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzU4NWExMDVlZTgzYzY0NWUyZWVmMTNkYzA4MWUzNWNh YTJjMDQwHhcNMjUxMjI4MDUwMDQyWhcNMjUxMjI5MDUwMDQyWjAzMTEwLwYDVQQD EyhmOTJjN2Y4YmI1Y2EyYjFlN2YxZWM3ZmU3NDhmY2ZkMmUzOTQxODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpSokG5JGKP1Y7PtAXX0UMkKTWjL 1oKOBQFkNfdnd3cwn0Io5oEUBiVFFzP3XweetAQqStkVb61ItTbaqnATa6hzwaKx 5q8Pufk+ZfJ8+z73jjBTUsKQNntLIBeceIEoijPTSCQUNG42zpUeuiAtRW4+/B1W OucGvVTbxTcFdxGVXxoYFVdR2pUFTOTu6c55aKrVwxtdYtMCJoT6aqkOfxwvme9t ZqyYrrD+AXq7tSTlZyl7iFx+Tnn4u01hQxQ1vfMfn7Juh/jl5hqwlrM+fqs8xeVY jKgPvdG9tLxe24J2IJfG8Pbq/QYVP6LhbINR/I19TaMB2WgF7kLwOsRUWwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPksf4u1yisefx7H/nSPz9LjlBgRMB8GA1UdIwQY MBaAFPo1haEF7oPGReLu8T3AgeNcqiwEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qV0ZvUVh1ZzhaRjR1N3hQY0NCNDF5cUxBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjk3YWExLTZmM2MtNGJkNS05MWQ0 LWM0YTliOTU3NjVhYy8xLzEtaldGb1FYdWc4WkY0dTd4UGNDQjQxeXFMQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y5N2FhMS02ZjNjLTRiZDUtOTFkNC1jNGE5Yjk1NzY1 YWMvMS8xLWpXRm9RWHVnOFpGNHU3eFBjQ0I0MXlxTEFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyPW kN5VQhmT6LkMq5oRBzwDZhTBAg/GbwHU1qu6Jj6xcWducLQHxI0wHsC1Q9Fmrquw jjpxw6ZUcovWYEm4VyCVI4l4MGS96GMZuScO6wBShMdfe8ABwL0vvY7vOFxFR0XS Yv99hA0CzpYGf6/fxbi7XgJ29QiFQBgMVamgkbIsVYWz3q+f5V7fOLPAVIkauHS+ 07OCbK32Z3wQMt9iKxh1+ywk8bzZiI8jNzuu+pwcQYEMxYR5zuyZ98ulVkOhxW2m EpOFhQRdMT8GabyzOUCE+hpafeWjeDCTtvexnBI13ruBNCwlrQIubepgnCeTEZAo i3Rpyotkq8EK57koEQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:28 2025 by rpki-client