This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json) Hash identifier: ZweuA1T+IOC7sv2z1h2jLwT5sQh2vGf9YWEqhrquxI0= Subject key identifier: 48:0D:68:40:90:85:7C:6D:2E:46:DA:CF:7D:83:69:C8:F9:7A:E9:D6 Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54 Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454 Certificate serial: 019B60C1B70ED05223E63E978E427837B522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 17:01:06 +0000 Manifest this update: Sat 27 Dec 2025 17:01:06 +0000 Manifest next update: Sun 28 Dec 2025 17:01:06 +0000 Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: nBMJVDApV++giDaAp/wE+pHAT+GgjbTZE3c6vHHrJkA=) 2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:c1:b7:0e:d0:52:23:e6:3e:97:8e:42:78:37:b5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454 Validity Not Before: Dec 27 17:01:06 2025 GMT Not After : Dec 28 17:01:06 2025 GMT Subject: CN=480d684090857c6d2e46dacf7d8369c8f97ae9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:61:d6:f1:62:38:72:ed:e1:24:b9:4b:1f: e8:7d:08:12:8e:e7:73:95:54:63:bc:5c:d6:69:bc: a6:4e:1b:a4:9f:d2:84:a2:5c:e4:08:5a:fc:94:73: bf:c2:7e:0f:fa:7a:df:2a:74:a9:f9:f7:a4:4b:f1: 29:bc:b2:07:7b:1e:96:5f:ae:44:72:9a:d6:7a:d4: df:32:28:86:d2:22:e4:17:01:69:e2:e0:c1:c0:ff: 31:64:dd:f9:ab:6c:a5:08:b3:0c:27:fa:01:8e:38: c4:ea:02:77:35:b1:59:eb:52:20:5b:f6:d9:ca:b3: 5b:fc:7e:95:d4:40:35:39:b7:74:08:64:89:81:90: d5:b1:1a:49:38:a9:7e:f2:ba:4a:8a:04:40:98:61: c6:e1:8a:7c:ec:a8:c6:b1:0a:9f:74:12:c6:3b:ac: 9c:d3:38:f5:03:ed:14:55:ac:08:b1:d1:f4:5c:b1: 23:32:7b:fd:e8:14:2b:c3:c1:4d:3e:3e:3a:b1:8d: 7f:cf:d3:2d:1f:bf:f3:f6:6b:41:7a:ba:14:33:a5: 65:7e:48:f1:20:04:8c:a9:10:9f:a8:cc:3e:3a:fb: b2:1a:4e:7a:66:88:4b:e9:95:b5:30:af:dc:0c:ce: d5:7f:9b:11:0f:cb:ef:70:c6:ab:70:9b:96:1b:34: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0D:68:40:90:85:7C:6D:2E:46:DA:CF:7D:83:69:C8:F9:7A:E9:D6 X509v3 Authority Key Identifier: keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:66:f8:a7:91:d8:9a:70:2b:fa:f5:a3:b7:72:82:0e:8a:6b: 0d:01:35:33:66:db:4a:4f:b5:ff:fd:7f:41:8b:df:95:9a:17: 19:7f:78:44:1b:24:71:8a:38:20:56:3d:56:3d:5c:07:cc:ae: 5c:60:2a:31:f2:7a:cf:d9:83:c6:a2:31:c5:ae:0e:6e:f4:20: 8e:f9:2d:f4:69:cc:1f:ac:53:4a:bb:24:69:99:75:57:bb:d6: 8e:3e:33:84:f8:bb:13:ce:19:a8:07:93:dc:3f:bf:e3:df:6b: c2:c3:08:3c:73:96:4c:bf:31:82:a7:3f:36:d2:30:3c:e8:28: 76:1c:12:0c:f7:e8:5d:89:09:9b:cb:92:83:87:38:ba:6e:30: b3:6b:79:f3:e6:78:c7:b4:89:89:ed:7d:a7:7c:3f:73:04:00: 05:0e:f7:e6:48:88:2e:11:28:20:a7:99:a3:6b:fe:51:03:7e: ff:91:b9:b6:12:40:8f:fc:20:de:ca:a4:f9:a9:61:c9:e7:3e: 4f:c9:85:4e:6c:51:e6:a9:4c:99:e1:98:1a:72:17:c2:16:22: 10:d7:85:df:21:c4:bd:b4:28:02:dc:ab:58:67:96:4d:cd:7a: 53:b2:b8:9e:6a:1b:ca:12:7f:a7:4e:83:67:80:0d:d5:f5:06: 79:b7:d2:3d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtgwbcO0FIj5j6XjkJ4N7UiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4 M2I0NTQwHhcNMjUxMjI3MTcwMTA2WhcNMjUxMjI4MTcwMTA2WjAzMTEwLwYDVQQD Eyg0ODBkNjg0MDkwODU3YzZkMmU0NmRhY2Y3ZDgzNjljOGY5N2FlOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqth1vFiOHLt4SS5Sx/ofQgSjudz lVRjvFzWabymThukn9KEolzkCFr8lHO/wn4P+nrfKnSp+fekS/EpvLIHex6WX65E cprWetTfMiiG0iLkFwFp4uDBwP8xZN35q2ylCLMMJ/oBjjjE6gJ3NbFZ61IgW/bZ yrNb/H6V1EA1Obd0CGSJgZDVsRpJOKl+8rpKigRAmGHG4Yp87KjGsQqfdBLGO6yc 0zj1A+0UVawIsdH0XLEjMnv96BQrw8FNPj46sY1/z9MtH7/z9mtBeroUM6Vlfkjx IASMqRCfqMw+OvuyGk56ZohL6ZW1MK/cDM7Vf5sRD8vvcMarcJuWGzSB7wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEgNaECQhXxtLkbaz32Dacj5eunWMB8GA1UdIwQY MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5 LTgyNWQzZmYxZGRlOC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U5LzE0NjcxZS04NmQyLTQyZmMtODBkOS04MjVkM2ZmMWRk ZTgvMS8xLXFZZUtjRm12d1kxeU03LWphZ2hCS2VEdEZRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmb4 p5HYmnAr+vWjt3KCDoprDQE1M2bbSk+1//1/QYvflZoXGX94RBskcYo4IFY9Vj1c B8yuXGAqMfJ6z9mDxqIxxa4ObvQgjvkt9GnMH6xTSrskaZl1V7vWjj4zhPi7E84Z qAeT3D+/499rwsMIPHOWTL8xgqc/NtIwPOgodhwSDPfoXYkJm8uSg4c4um4ws2t5 8+Z4x7SJie19p3w/cwQABQ735kiILhEoIKeZo2v+UQN+/5G5thJAj/wg3sqk+alh yec+T8mFTmxR5qlMmeGYGnIXwhYiENeF3yHEvbQoAtyrWGeWTc16U7K4nmobyhJ/ p06DZ4AN1fUGebfSPQ== -----END CERTIFICATE-----Generated at Sat Dec 27 19:24:46 2025 by rpki-client