This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json) Hash identifier: Ekaj7SKGgsT4fUC/OQVtz9gTOKljZuussyrPIj85FN0= Subject key identifier: 3F:14:52:5D:7A:DA:73:08:12:61:F0:43:8F:FC:22:46:D7:32:82:54 Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7 Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7 Certificate serial: 019B39EAADD9FCFBC70DC61BE4A945F5747F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft Manifest number: 1018 Signing time: Sat 20 Dec 2025 04:00:39 +0000 Manifest this update: Sat 20 Dec 2025 04:00:39 +0000 Manifest next update: Sun 21 Dec 2025 04:00:39 +0000 Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: cL3pbtJaw8jGDS4G4LXkf4ubcO2mGYNpRGSgrIwJxtY=) 2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:ad:d9:fc:fb:c7:0d:c6:1b:e4:a9:45:f5:74:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7 Validity Not Before: Dec 20 04:00:39 2025 GMT Not After : Dec 21 04:00:39 2025 GMT Subject: CN=3f14525d7ada73081261f0438ffc2246d7328254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:00:35:0a:be:66:ab:5b:d9:f2:0e:01:a3: 7c:c4:87:e4:72:dc:a1:0d:71:df:6d:0e:79:11:b1: 0a:c0:0c:54:02:6c:6c:44:2e:46:6c:2a:ae:2d:ae: cb:76:18:2e:e5:b1:6a:a9:d6:6f:b7:f4:9a:f5:ec: db:3d:75:51:08:a2:0b:13:02:5b:2d:b5:4f:78:05: 7a:2a:a1:51:78:82:8a:33:0f:62:3f:fa:d4:f7:4f: 8c:bc:4d:e3:93:a6:e9:7f:4f:bf:cc:69:34:df:c9: 2c:3b:ce:da:75:9a:7f:7e:91:06:9d:92:f4:ea:c5: d9:66:85:2b:ea:52:40:42:fc:78:da:83:8d:44:9b: 01:69:03:2b:53:cd:c1:80:ac:cc:94:6b:d1:cd:2b: 5b:8f:9c:a0:37:02:81:2b:6c:54:f2:14:cf:f2:86: 1e:6f:56:d3:77:85:b2:a8:97:74:a3:24:88:c9:dd: 9b:f0:3e:51:8e:fc:fb:dc:d9:10:51:87:cd:8f:f7: 6a:a2:50:4b:1d:8a:01:8f:b5:36:76:d6:e7:24:87: 25:50:e2:85:26:57:c6:61:60:eb:23:f9:59:bb:6c: 57:25:13:f7:06:fe:8e:74:76:ba:0e:01:ca:6e:26: ea:a7:f4:7e:29:e8:f9:0f:8b:82:47:4c:96:1e:f8: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:14:52:5D:7A:DA:73:08:12:61:F0:43:8F:FC:22:46:D7:32:82:54 X509v3 Authority Key Identifier: keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:65:e7:cd:dc:0a:f6:8f:2f:35:ec:c7:a5:da:76:be:1b:e5: 8c:86:7c:6a:18:00:16:f7:fe:ad:1a:0b:41:0c:15:31:98:a5: a8:a7:26:eb:07:64:c9:e5:85:cc:24:de:b1:90:47:84:25:37: a2:32:a0:02:ca:d9:1e:8c:af:86:97:cf:2c:7a:8c:fd:f2:e6: 97:01:44:4d:97:ef:fa:8d:28:87:ce:95:0e:9b:c9:c2:6b:61: 4d:eb:fc:6c:ba:12:b6:c5:97:58:f1:86:27:40:41:f8:bc:f1: 5d:a7:a6:2f:dc:47:69:8f:ed:86:cd:88:8e:6a:82:98:35:a1: 56:2d:6f:0d:7e:17:5e:88:e9:0b:93:7f:04:b0:b9:9f:e9:8c: da:5c:63:b5:38:a2:55:1a:6c:c0:8e:27:64:29:44:f3:fb:5f: 5f:bf:fc:9d:31:25:4d:f1:6b:f1:78:79:69:b7:9e:eb:30:e5: 4a:6c:8d:b0:9c:48:48:92:41:a1:07:c4:a1:4c:db:51:a8:ac: eb:35:48:43:2e:97:a7:fc:16:55:3c:29:af:8b:56:da:7d:0f: 6d:5b:e6:32:4e:f0:70:25:1e:37:50:72:a1:89:4f:63:3f:43: b9:28:c9:7d:fe:9c:bb:ee:72:59:a0:58:ed:87:d1:4b:a1:7f: 94:6b:fb:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs56q3Z/PvHDcYb5KlF9XR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmRmNTNjOWZkMmM1ZmM3NGYxZGI3MTgzNGQ3ZTQ2YTc2 ZTkxZDcwHhcNMjUxMjIwMDQwMDM5WhcNMjUxMjIxMDQwMDM5WjAzMTEwLwYDVQQD EygzZjE0NTI1ZDdhZGE3MzA4MTI2MWYwNDM4ZmZjMjI0NmQ3MzI4MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyMANQq+Zqtb2fIOAaN8xIfkctyh DXHfbQ55EbEKwAxUAmxsRC5GbCquLa7Ldhgu5bFqqdZvt/Sa9ezbPXVRCKILEwJb LbVPeAV6KqFReIKKMw9iP/rU90+MvE3jk6bpf0+/zGk038ksO87adZp/fpEGnZL0 6sXZZoUr6lJAQvx42oONRJsBaQMrU83BgKzMlGvRzStbj5ygNwKBK2xU8hTP8oYe b1bTd4WyqJd0oySIyd2b8D5Rjvz73NkQUYfNj/dqolBLHYoBj7U2dtbnJIclUOKF JlfGYWDrI/lZu2xXJRP3Bv6OdHa6DgHKbibqp/R+Kej5D4uCR0yWHviHmQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD8UUl162nMIEmHwQ4/8IkbXMoJUMB8GA1UdIwQY MBaAFPpt9Tyf0sX8dPHbcYNNfkanbpHXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tMzFQSl9TeGZ4MDhkdHhnMDEtUnFkdWtkYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYTk0NzgwLTFiZjMtNDY3YS05MzY5 LWU5OGZmMzNmNjk3Yy8xLzEtbTMxUEpfU3hmeDA4ZHR4ZzAxLVJxZHVrZGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzL2E5NDc4MC0xYmYzLTQ2N2EtOTM2OS1lOThmZjMzZjY5 N2MvMS8xLW0zMVBKX1N4ZngwOGR0eGcwMS1ScWR1a2RjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2Xn zdwK9o8vNezHpdp2vhvljIZ8ahgAFvf+rRoLQQwVMZilqKcm6wdkyeWFzCTesZBH hCU3ojKgAsrZHoyvhpfPLHqM/fLmlwFETZfv+o0oh86VDpvJwmthTev8bLoStsWX WPGGJ0BB+LzxXaemL9xHaY/ths2IjmqCmDWhVi1vDX4XXojpC5N/BLC5n+mM2lxj tTiiVRpswI4nZClE8/tfX7/8nTElTfFr8Xh5abee6zDlSmyNsJxISJJBoQfEoUzb Uais6zVIQy6Xp/wWVTwpr4tW2n0PbVvmMk7wcCUeN1ByoYlPYz9DuSjJff6cu+5y WaBY7YfRS6F/lGv7+A== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:08 2025 by rpki-client