This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json) Hash identifier: IU6r+oV+h5oLvU2JIugLFnt5amQ8f22KoU8NVKbwUnY= Subject key identifier: 77:96:D4:89:BA:EF:19:CF:D9:07:DE:6C:93:0A:23:D5:23:97:DD:E6 Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Certificate serial: 019B40FFB910A2A55FF94C7CB18647E4D8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft Manifest number: 1222 Signing time: Sun 21 Dec 2025 13:00:59 +0000 Manifest this update: Sun 21 Dec 2025 13:00:59 +0000 Manifest next update: Mon 22 Dec 2025 13:00:59 +0000 Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: 6Jk5kYgdhhS4WVTCUeSsc1AlwDJw3GjNcaRZz27ngQg=) 2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:b9:10:a2:a5:5f:f9:4c:7c:b1:86:47:e4:d8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Validity Not Before: Dec 21 13:00:59 2025 GMT Not After : Dec 22 13:00:59 2025 GMT Subject: CN=7796d489baef19cfd907de6c930a23d52397dde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:0f:d0:86:a5:9b:3e:68:37:bf:e2:25:c9: 39:a9:07:54:a1:c1:a4:a8:b9:02:ce:6a:fd:f7:ba: fe:bf:03:dd:06:e8:fb:cb:81:06:d2:39:3d:f3:a3: 4f:7b:0c:21:21:f0:21:bd:da:57:36:c1:d0:59:a9: e1:fe:b7:85:05:cf:1a:64:0e:bb:b9:a3:ba:7e:1b: 67:e2:69:2f:77:23:54:cc:5d:2b:7c:f5:8b:1f:ac: 75:ad:0f:30:e6:a6:86:73:cd:ea:58:41:da:52:79: 84:09:25:5e:a3:66:0a:34:74:dc:22:2d:39:92:68: 78:5a:e7:cd:3e:88:b6:1d:c9:24:4a:7e:2a:2e:86: ff:16:ff:e2:03:94:f6:c6:10:cf:4a:a3:cd:f3:c0: 63:b3:a2:95:ee:c9:0e:2e:41:06:e8:b1:b5:18:b5: 35:94:e0:d5:88:db:f6:aa:44:50:2b:d2:53:aa:50: c9:12:8d:21:69:2b:a5:c7:c1:ca:1b:1b:53:bc:8a: 4d:15:14:ce:dd:f1:22:cf:2f:b8:35:7a:a6:7a:49: 72:fb:b9:20:92:da:56:30:fb:c9:a8:a9:e0:6b:fa: f8:ad:2b:ba:b9:23:f1:02:12:da:71:08:8e:fc:6b: 3b:92:70:7a:4e:22:51:31:f7:36:a3:4c:ec:69:10: 78:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:D4:89:BA:EF:19:CF:D9:07:DE:6C:93:0A:23:D5:23:97:DD:E6 X509v3 Authority Key Identifier: keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:19:18:29:8e:35:ae:88:da:d4:e6:86:7f:af:03:2d:f4:c2: e8:8e:89:9c:bf:ba:b3:e0:1d:32:25:6a:4f:40:6c:57:eb:29: 1b:0f:78:db:f2:80:a4:5c:f1:1d:e7:1e:a3:60:79:6b:fb:80: d3:58:67:e9:c6:0e:af:03:16:77:d5:31:dd:0b:e1:76:bb:09: 86:14:be:6a:7e:08:37:8c:cd:06:40:eb:97:b0:64:0e:95:f9: 1e:df:26:04:34:80:ae:f6:71:38:66:63:22:5a:70:9f:cd:d4: a4:f7:ff:b0:4e:5c:35:cf:64:52:61:a7:d6:8c:0c:d2:d4:bd: 20:04:d5:24:69:f9:24:51:56:ae:a3:2c:80:e6:e6:81:5b:c5: ca:9b:d7:e2:c1:52:de:fc:bc:37:87:f4:db:5b:6e:3f:5d:f7: c8:b9:3e:35:9e:47:b1:65:4d:f9:33:c0:4b:80:75:ab:c8:2a: a7:de:37:dc:c0:e1:87:0a:6a:63:ad:94:4f:a4:a0:40:9c:11: c1:b0:0b:c9:aa:69:24:d7:ec:b5:3a:75:13:25:c3:cf:d5:71: aa:1d:7b:fa:7d:0c:86:bf:a9:42:69:03:0b:32:fd:8a:6c:78: b3:09:06:02:1d:3f:9c:c4:80:36:4c:5f:ff:a6:2f:b7:02:17: 18:db:e4:67 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtA/7kQoqVf+Ux8sYZH5NjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj OGQ0MDQwHhcNMjUxMjIxMTMwMDU5WhcNMjUxMjIyMTMwMDU5WjAzMTEwLwYDVQQD Eyg3Nzk2ZDQ4OWJhZWYxOWNmZDkwN2RlNmM5MzBhMjNkNTIzOTdkZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0P0Ialmz5oN7/iJck5qQdUocGk qLkCzmr997r+vwPdBuj7y4EG0jk986NPewwhIfAhvdpXNsHQWanh/reFBc8aZA67 uaO6fhtn4mkvdyNUzF0rfPWLH6x1rQ8w5qaGc83qWEHaUnmECSVeo2YKNHTcIi05 kmh4WufNPoi2HckkSn4qLob/Fv/iA5T2xhDPSqPN88Bjs6KV7skOLkEG6LG1GLU1 lODViNv2qkRQK9JTqlDJEo0haSulx8HKGxtTvIpNFRTO3fEizy+4NXqmekly+7kg ktpWMPvJqKnga/r4rSu6uSPxAhLacQiO/Gs7knB6TiJRMfc2o0zsaRB4wQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHeW1Im67xnP2QfebJMKI9Ujl93mMB8GA1UdIwQY MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhkY KY41roja1OaGf68DLfTC6I6JnL+6s+AdMiVqT0BsV+spGw942/KApFzxHeceo2B5 a/uA01hn6cYOrwMWd9Ux3QvhdrsJhhS+an4IN4zNBkDrl7BkDpX5Ht8mBDSArvZx OGZjIlpwn83UpPf/sE5cNc9kUmGn1owM0tS9IATVJGn5JFFWrqMsgObmgVvFypvX 4sFS3vy8N4f021tuP133yLk+NZ5HsWVN+TPAS4B1q8gqp9433MDhhwpqY62UT6Sg QJwRwbALyappJNfstTp1EyXDz9Vxqh17+n0Mhr+pQmkDCzL9imx4swkGAh0/nMSA Nkxf/6YvtwIXGNvkZw== -----END CERTIFICATE-----Generated at Sun Dec 21 23:14:07 2025 by rpki-client