This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json) Hash identifier: e4b1R3zo9CPe5693pvTD7Adki55Jz+EnxekcWS0Q9+I= Subject key identifier: 38:27:34:C4:8C:50:C4:48:96:33:D2:AD:B2:79:3E:2C:E5:D4:25:08 Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01 Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901 Certificate serial: 019B4738E6C4E48E6735389A7BAD49C7C9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft Manifest number: 052E Signing time: Mon 22 Dec 2025 18:01:09 +0000 Manifest this update: Mon 22 Dec 2025 18:01:09 +0000 Manifest next update: Tue 23 Dec 2025 18:01:09 +0000 Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: bEWYEGd/m6TqBxh2BJG2RFEo1F+R3WmX4E4fdyaZPLQ=) 2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:e6:c4:e4:8e:67:35:38:9a:7b:ad:49:c7:c9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901 Validity Not Before: Dec 22 18:01:09 2025 GMT Not After : Dec 23 18:01:09 2025 GMT Subject: CN=382734c48c50c4489633d2adb2793e2ce5d42508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:2d:cf:7c:91:87:b8:a4:76:87:7d:ab:47: 65:ee:31:ca:6d:91:3a:42:e3:70:0c:18:f3:59:e0: 41:cb:c1:42:d7:f8:e4:39:c5:ef:74:96:fd:f8:f6: 0e:81:b0:53:e2:06:ff:50:77:61:5f:5a:14:07:20: 4c:e2:14:ea:86:30:38:db:5c:e2:8f:b8:41:06:bc: 1e:ec:0c:5f:c8:5d:b6:18:19:fa:a6:6a:d8:5f:31: 1a:59:75:d2:80:d1:73:ee:62:99:c9:b6:34:fb:8e: 53:e9:bb:f9:0a:aa:22:78:49:25:42:48:8c:cc:e1: 4c:fd:a7:04:9a:43:f0:58:89:ce:d8:8c:aa:f4:f2: 1c:86:18:61:5d:40:5c:48:ad:57:4c:31:a9:7d:f3: b8:7a:5f:6c:ab:ea:cf:7f:47:35:c8:76:4a:16:5b: 47:72:f8:a4:b1:5c:d8:7c:c0:48:e5:a9:74:fe:28: 10:ff:ba:30:be:f3:d3:bd:df:19:85:58:86:78:4a: f1:16:ca:6a:76:8b:80:c5:03:15:02:8e:e7:18:36: a2:e8:a3:2f:b0:72:73:4b:ed:1d:9d:22:d5:41:be: 77:7c:35:d4:dd:8d:2f:1c:16:7b:b0:cb:d2:41:4d: 21:07:bc:ad:8e:48:12:b4:9e:1c:74:1d:e0:3e:4d: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:34:C4:8C:50:C4:48:96:33:D2:AD:B2:79:3E:2C:E5:D4:25:08 X509v3 Authority Key Identifier: keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f3:2b:96:29:ad:96:14:63:bd:83:e8:a0:a0:23:92:9e:9d: 6a:7c:57:ec:6a:a5:69:18:ca:3c:49:3b:1a:19:99:9a:83:86: 37:dc:a5:dc:a6:2b:1c:c3:2f:d4:dd:52:d6:b1:c0:27:0e:4a: cc:3b:e7:6c:7e:5b:b9:64:27:40:c2:5a:56:4d:f1:8c:45:d3: 51:0c:32:5b:1a:d4:e9:65:ce:29:44:de:42:b4:e5:46:4f:cc: 62:34:2a:e7:d2:c2:0d:36:97:37:a7:09:09:fb:54:90:8f:4e: 86:87:1e:e3:41:d0:4e:44:22:d3:0e:e4:d8:ad:74:a2:ea:b3: d4:46:a9:5c:60:34:31:51:d0:34:b1:f0:c4:01:38:d8:01:62: 3e:c0:62:60:44:58:47:f3:03:53:38:80:8c:82:c6:30:f2:24: 9a:30:3f:e8:b2:71:19:43:c8:17:c3:58:09:03:8b:e1:c2:de: 00:17:e7:1d:54:b1:3d:8f:12:17:d5:da:32:b7:ab:df:89:75: 7c:57:63:ff:70:2e:02:bf:a6:ad:d9:8c:8f:a6:ba:c1:49:43: 13:11:63:2c:53:26:b1:1e:ff:b2:6d:6d:03:24:f8:e7:88:66: 53:c3:22:06:91:18:6e:67:bc:04:f0:9c:0c:94:cb:87:f2:4b: 57:31:3e:eb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtHOObE5I5nNTiae61Jx8njMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZmNGRmMmVmYzY5ZWNjMTkyZWE1YWVmZDdiM2I5N2Y1 ODA5MDEwHhcNMjUxMjIyMTgwMTA5WhcNMjUxMjIzMTgwMTA5WjAzMTEwLwYDVQQD EygzODI3MzRjNDhjNTBjNDQ4OTYzM2QyYWRiMjc5M2UyY2U1ZDQyNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm14tz3yRh7ikdod9q0dl7jHKbZE6 QuNwDBjzWeBBy8FC1/jkOcXvdJb9+PYOgbBT4gb/UHdhX1oUByBM4hTqhjA421zi j7hBBrwe7AxfyF22GBn6pmrYXzEaWXXSgNFz7mKZybY0+45T6bv5CqoieEklQkiM zOFM/acEmkPwWInO2Iyq9PIchhhhXUBcSK1XTDGpffO4el9sq+rPf0c1yHZKFltH cviksVzYfMBI5al0/igQ/7owvvPTvd8ZhViGeErxFspqdouAxQMVAo7nGDai6KMv sHJzS+0dnSLVQb53fDXU3Y0vHBZ7sMvSQU0hB7ytjkgStJ4cdB3gPk2wLQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDgnNMSMUMRIljPSrbJ5Pizl1CUIMB8GA1UdIwQY MBaAFPsf9N8u/GnswZLqWu/Xs7l/WAkBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14XzAzeTc4YWV6Qmt1cGE3OWV6dVg5WUNRRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1LWUxYTMtNDJiNS05Yjdi LTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBhNzllenVYOVlDUUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RiLzY3OWUxNS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRh MDUvMS8xLXhfMDN5NzhhZXpCa3VwYTc5ZXp1WDlZQ1FFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/Mr limtlhRjvYPooKAjkp6danxX7GqlaRjKPEk7GhmZmoOGN9yl3KYrHMMv1N1S1rHA Jw5KzDvnbH5buWQnQMJaVk3xjEXTUQwyWxrU6WXOKUTeQrTlRk/MYjQq59LCDTaX N6cJCftUkI9Ohoce40HQTkQi0w7k2K10ouqz1EapXGA0MVHQNLHwxAE42AFiPsBi YERYR/MDUziAjILGMPIkmjA/6LJxGUPIF8NYCQOL4cLeABfnHVSxPY8SF9XaMrer 34l1fFdj/3AuAr+mrdmMj6a6wUlDExFjLFMmsR7/sm1tAyT454hmU8MiBpEYbme8 BPCcDJTLh/JLVzE+6w== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:37 2025 by rpki-client