This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json) Hash identifier: oec5yPXMVyhVL7F72O6F6tQcKvlHA5YAO/gUzeuPe9s= Subject key identifier: 50:58:B1:09:39:A1:59:B9:13:06:D2:24:16:0A:7A:3B:4A:FB:EE:47 Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Certificate serial: 019B3CEC1A226336EB59CA2AC7B37AF0F077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:04 +0000 Manifest this update: Sat 20 Dec 2025 18:01:04 +0000 Manifest next update: Sun 21 Dec 2025 18:01:04 +0000 Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: Hr8sFKg6uK3l/2aLp0wzxUeqr6kV9vOr+X/yNEoKbfk=) 2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:1a:22:63:36:eb:59:ca:2a:c7:b3:7a:f0:f0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Validity Not Before: Dec 20 18:01:04 2025 GMT Not After : Dec 21 18:01:04 2025 GMT Subject: CN=5058b10939a159b91306d224160a7a3b4afbee47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:c4:a6:21:54:ea:29:b4:b3:80:cd:50:0d: 43:e8:56:f6:cd:d4:1a:37:2e:ef:55:0f:cb:d1:de: 35:c5:10:02:db:66:55:4a:85:1e:d1:89:bd:4d:0b: 3e:9c:9f:23:c5:e5:d7:86:54:61:b7:a0:da:70:95: e1:95:db:c6:c8:e7:9c:9a:df:84:1b:26:ef:66:83: 3b:fa:38:e2:c0:9c:1c:38:b8:58:7e:c8:94:e2:6c: ed:92:36:cd:43:11:ad:2a:08:de:0c:13:56:17:e9: 7b:be:ee:ba:e6:79:31:ac:be:b9:3d:fa:ab:c6:c8: 30:fa:86:90:ef:2c:bb:6c:aa:b8:a7:1a:ab:6a:65: 99:25:ec:62:66:72:f1:42:77:b6:50:b5:02:11:70: e5:00:dd:d7:20:14:a2:a2:54:29:19:52:02:23:ae: 67:fa:c1:a8:a3:7d:aa:5d:df:50:73:e6:5d:02:50: 29:da:b8:9a:de:c4:24:4a:7d:4e:b6:fd:1d:01:17: 41:6b:41:3a:16:47:1e:02:3a:11:93:f2:f7:4e:b7: 4d:7d:30:db:35:b7:dc:d3:5d:be:2f:4c:be:a7:4d: a7:c2:a8:2f:19:5c:82:0a:11:46:49:32:8b:2d:ae: 02:16:87:1d:d5:fd:97:26:30:79:f0:2e:63:4b:f8: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:58:B1:09:39:A1:59:B9:13:06:D2:24:16:0A:7A:3B:4A:FB:EE:47 X509v3 Authority Key Identifier: keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:12:46:10:5a:fe:2d:fd:4c:28:11:6f:6c:36:b7:21:92:1c: 0b:4a:60:ce:ce:aa:d7:75:ef:7c:74:4b:3a:91:b8:64:eb:e7: 9c:d9:19:c8:a9:0e:d9:d6:da:29:a0:f5:29:20:66:8f:0d:65: 0e:88:f7:17:b4:e1:b7:19:5b:6c:9f:67:04:dd:83:5f:1f:3f: e5:4d:66:a2:5c:a4:b3:5d:54:fa:d5:07:4d:d8:18:3e:e7:43: bd:43:25:ba:6b:51:93:a0:62:4a:03:da:aa:fd:c6:a4:92:21: 0d:fa:1e:0b:62:53:eb:11:6f:fa:a9:8d:fe:0b:18:80:ee:6e: 6e:99:86:1c:60:68:88:44:fc:e1:0f:e2:11:b6:41:e9:57:36: 8d:9b:2d:42:18:db:2b:36:08:2c:54:ef:6d:c0:25:68:f4:ba: c3:39:30:7a:21:46:e3:d4:bd:4a:53:29:07:f1:56:22:18:4f: 77:16:c0:3c:71:f2:c3:56:60:66:54:f5:0b:9d:7c:28:d1:d2: 5f:1e:7e:15:48:0b:5f:90:67:3f:7c:63:e0:fe:b1:58:17:4e: fd:24:ac:70:6e:c3:bc:30:a5:3b:22:bc:8b:55:dd:70:df:9a: ef:d3:ad:73:fd:07:42:66:a2:38:f5:e9:a5:41:9c:ad:20:6a: ca:0f:a1:73 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs87BoiYzbrWcoqx7N68PB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3 NGJlZDIwHhcNMjUxMjIwMTgwMTA0WhcNMjUxMjIxMTgwMTA0WjAzMTEwLwYDVQQD Eyg1MDU4YjEwOTM5YTE1OWI5MTMwNmQyMjQxNjBhN2EzYjRhZmJlZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxTEpiFU6im0s4DNUA1D6Fb2zdQa Ny7vVQ/L0d41xRAC22ZVSoUe0Ym9TQs+nJ8jxeXXhlRht6DacJXhldvGyOecmt+E GybvZoM7+jjiwJwcOLhYfsiU4mztkjbNQxGtKgjeDBNWF+l7vu665nkxrL65Pfqr xsgw+oaQ7yy7bKq4pxqramWZJexiZnLxQne2ULUCEXDlAN3XIBSiolQpGVICI65n +sGoo32qXd9Qc+ZdAlAp2ria3sQkSn1Otv0dARdBa0E6FkceAjoRk/L3TrdNfTDb Nbfc012+L0y+p02nwqgvGVyCChFGSTKLLa4CFocd1f2XJjB58C5jS/g1fwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFBYsQk5oVm5EwbSJBYKejtK++5HMB8GA1UdIwQY MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0 ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBJG EFr+Lf1MKBFvbDa3IZIcC0pgzs6q13XvfHRLOpG4ZOvnnNkZyKkO2dbaKaD1KSBm jw1lDoj3F7ThtxlbbJ9nBN2DXx8/5U1molyks11U+tUHTdgYPudDvUMlumtRk6Bi SgPaqv3GpJIhDfoeC2JT6xFv+qmN/gsYgO5ubpmGHGBoiET84Q/iEbZB6Vc2jZst QhjbKzYILFTvbcAlaPS6wzkweiFG49S9SlMpB/FWIhhPdxbAPHHyw1ZgZlT1C518 KNHSXx5+FUgLX5BnP3xj4P6xWBdO/SSscG7DvDClOyK8i1XdcN+a79Otc/0HQmai OPXppUGcrSBqyg+hcw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:08:11 2025 by rpki-client