This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json) Hash identifier: kpFyF1wdCQUevjVQx1HNqc3oXBRlK7QHUZqzWAsjZq0= Subject key identifier: 5A:6A:C2:75:9D:12:49:71:BB:20:4C:D1:D8:9C:6B:AC:92:71:3C:BC Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Certificate serial: 019B454AAD822BDAE4CB17FFAC47C6E71430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft Manifest number: 1505 Signing time: Mon 22 Dec 2025 09:01:20 +0000 Manifest this update: Mon 22 Dec 2025 09:01:20 +0000 Manifest next update: Tue 23 Dec 2025 09:01:20 +0000 Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 0Xhc8mZXv3GMYJAbLfct9k66wQNUlLle7rB341hnnj0=) 2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:ad:82:2b:da:e4:cb:17:ff:ac:47:c6:e7:14:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Validity Not Before: Dec 22 09:01:20 2025 GMT Not After : Dec 23 09:01:20 2025 GMT Subject: CN=5a6ac2759d124971bb204cd1d89c6bac92713cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:96:a6:5d:48:09:42:84:f1:e6:b2:67:0d: 56:39:0d:2c:18:bb:4d:56:37:26:a7:14:0e:5e:db: 38:e3:c7:94:26:ff:7d:02:0b:6e:88:24:a6:26:d5: 70:82:db:03:5a:d3:29:72:93:34:28:e4:45:42:5b: ef:ef:f2:af:47:18:ed:83:16:1e:16:6a:79:f9:12: 1b:37:d7:b4:e3:4c:b9:82:e4:f0:3e:83:7d:b0:4f: ad:04:8f:2f:49:f4:dc:4b:6b:90:0f:ee:f1:b2:82: 41:6b:37:4d:cf:2f:0f:b1:a2:f7:ba:8f:9c:74:cb: fd:50:5d:d0:da:3f:0f:70:d5:9a:2d:fe:1e:ec:08: 09:cd:60:87:ac:fa:2d:84:dc:37:3c:38:70:a3:b1: 9d:a6:08:35:9b:08:55:ca:63:f2:d7:6c:bd:9b:a3: d2:f1:90:5e:cf:d8:64:15:4f:59:9c:24:22:93:a6: a3:5c:98:a3:42:40:ee:5e:85:9c:d8:89:b8:d9:85: ea:e1:b9:a7:2c:80:6e:4b:bd:bb:4f:4c:25:7d:0c: 6a:23:9f:88:80:89:52:2d:a0:ac:81:4e:6b:2c:67: d9:2a:11:cc:8d:1d:2b:be:6e:0f:b8:e6:37:10:46: 56:41:46:97:32:10:da:1c:a1:0f:b4:48:e4:53:ab: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:C2:75:9D:12:49:71:BB:20:4C:D1:D8:9C:6B:AC:92:71:3C:BC X509v3 Authority Key Identifier: keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7e:d3:74:80:90:69:de:a3:43:15:d0:53:e2:e2:9d:2e:01: 1a:ab:d8:81:cc:79:c9:36:d7:8e:aa:5f:5b:2d:2f:cd:a1:32: 30:6a:8f:ce:70:9c:d6:eb:4c:7d:ed:2c:dd:02:c8:3e:86:89: 50:81:cf:a3:d4:0e:4e:98:1f:ee:90:71:fe:17:fb:ad:75:17: d1:8b:4b:48:b8:af:02:af:be:a9:82:ff:c6:90:c4:1d:32:8a: 66:87:aa:a2:c4:10:63:9e:dd:94:d4:c4:2f:cf:5e:f8:29:58: ac:43:43:e0:ba:85:4e:61:12:25:c7:9c:73:23:e9:97:f7:60: bb:95:c0:33:4d:77:8c:80:d5:8c:c7:32:57:c3:29:a1:43:57: 96:45:83:27:6c:d6:e3:ff:8c:e3:89:2b:39:b3:5b:fd:56:27: c2:f7:fb:40:0d:f8:28:e7:57:ed:c1:3e:6f:7b:fd:91:90:b2: 2e:e6:9b:a9:2f:fc:d3:76:17:fa:85:6c:3a:b4:33:fa:71:b9: 13:57:87:16:f3:9a:f7:58:f9:86:aa:e8:1d:92:10:59:8d:81: 57:9e:9e:3c:e3:7c:aa:fa:8c:9e:d0:c8:fb:47:6e:db:0e:4a: f7:6d:ac:50:ad:2a:9f:4f:1e:4b:b3:97:7d:4c:e4:9c:32:51: 80:e6:01:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSq2CK9rkyxf/rEfG5xQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2 Y2U0NzkwHhcNMjUxMjIyMDkwMTIwWhcNMjUxMjIzMDkwMTIwWjAzMTEwLwYDVQQD Eyg1YTZhYzI3NTlkMTI0OTcxYmIyMDRjZDFkODljNmJhYzkyNzEzY2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qOWpl1ICUKE8eayZw1WOQ0sGLtN VjcmpxQOXts448eUJv99AgtuiCSmJtVwgtsDWtMpcpM0KORFQlvv7/KvRxjtgxYe Fmp5+RIbN9e040y5guTwPoN9sE+tBI8vSfTcS2uQD+7xsoJBazdNzy8PsaL3uo+c dMv9UF3Q2j8PcNWaLf4e7AgJzWCHrPothNw3PDhwo7Gdpgg1mwhVymPy12y9m6PS 8ZBez9hkFU9ZnCQik6ajXJijQkDuXoWc2Im42YXq4bmnLIBuS727T0wlfQxqI5+I gIlSLaCsgU5rLGfZKhHMjR0rvm4PuOY3EEZWQUaXMhDaHKEPtEjkU6sS/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpqwnWdEklxuyBM0dica6yScTy8MB8GA1UdIwQY MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4 LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi37TdICQ ad6jQxXQU+LinS4BGqvYgcx5yTbXjqpfWy0vzaEyMGqPznCc1utMfe0s3QLIPoaJ UIHPo9QOTpgf7pBx/hf7rXUX0YtLSLivAq++qYL/xpDEHTKKZoeqosQQY57dlNTE L89e+ClYrEND4LqFTmESJceccyPpl/dgu5XAM013jIDVjMcyV8MpoUNXlkWDJ2zW 4/+M44krObNb/VYnwvf7QA34KOdX7cE+b3v9kZCyLuabqS/803YX+oVsOrQz+nG5 E1eHFvOa91j5hqroHZIQWY2BV56ePON8qvqMntDI+0du2w5K922sUK0qn08eS7OX fUzknDJRgOYBdQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:36:31 2025 by rpki-client