This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json) Hash identifier: jOXmvmwp7YmLlvl9F9MMZqv4n62K5u06vUvmn7PPMis= Subject key identifier: 1B:30:38:A9:42:38:46:18:1B:D8:88:29:D9:F3:56:37:F0:51:4E:98 Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143 Certificate serial: 019B65E7E2058ECF2CFDF7CD3E18A848DA99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft Manifest number: 0BAC Signing time: Sun 28 Dec 2025 17:00:53 +0000 Manifest this update: Sun 28 Dec 2025 17:00:53 +0000 Manifest next update: Mon 29 Dec 2025 17:00:53 +0000 Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: IgMcB1PIEydtrxI4iiNsxQ98FQdnDuHYI5afnqRSqls=) 2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:e2:05:8e:cf:2c:fd:f7:cd:3e:18:a8:48:da:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143 Validity Not Before: Dec 28 17:00:53 2025 GMT Not After : Dec 29 17:00:53 2025 GMT Subject: CN=1b3038a9423846181bd88829d9f35637f0514e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:14:f8:48:39:dd:00:0f:4a:ae:b9:c8:75: 60:19:cd:38:92:3d:96:62:fe:5d:ac:40:d1:f2:ba: ee:3f:f2:f6:0f:ff:55:0c:85:e5:35:34:f1:eb:97: 56:d4:f2:b9:20:33:92:7d:8e:03:1f:59:ed:92:8a: 23:75:a7:71:24:42:6b:4c:47:c5:0e:8a:97:ab:07: 02:76:e8:c7:5c:55:d7:ba:49:0f:27:b2:8c:73:c3: bd:7c:dc:e8:a5:5f:e3:d4:cb:f3:34:b7:67:18:ca: d3:4b:e2:7e:90:4e:3f:24:b1:86:c1:a9:78:53:e2: ea:21:73:3a:52:ec:99:7b:b3:7c:6f:63:bd:e3:dd: de:75:8a:e3:9e:0e:93:29:14:81:03:76:b4:d1:47: 42:94:c0:49:1d:7d:dc:d2:93:c9:fd:27:45:9e:ec: 45:2b:82:98:e0:f2:ed:a4:a2:7c:a0:0e:1d:cd:52: e9:19:f2:02:c3:eb:13:40:d4:60:f2:4d:61:c7:c9: b8:27:d5:a5:4f:f8:3b:4e:7f:7b:03:91:b1:cf:8f: f1:42:15:a7:93:b8:10:2b:5d:db:c4:8b:83:4f:08: 65:00:29:c5:d1:da:79:c7:84:be:7f:c0:8c:9f:85: 93:83:6f:ec:9a:a5:3b:3f:2a:67:1a:d7:ba:83:13: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:30:38:A9:42:38:46:18:1B:D8:88:29:D9:F3:56:37:F0:51:4E:98 X509v3 Authority Key Identifier: keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:69:c8:d9:c2:d4:2a:d4:1a:e0:62:54:6a:74:ea:4c:11:a8: 01:c2:21:49:bf:84:ef:12:1a:9a:b9:3a:c9:19:26:dc:8b:d2: d8:d7:23:b4:58:54:03:3b:f0:0b:8c:e9:9f:ca:fa:13:1f:56: da:80:3f:11:e9:3f:02:0b:27:4d:79:c4:a7:07:48:48:0e:b5: 82:b3:44:5f:08:cc:16:95:c5:9b:bb:42:25:72:be:90:c7:0c: 9b:92:77:be:c4:11:7b:21:91:48:0c:f7:6f:e5:2c:06:0a:10: 1f:66:17:72:c0:d2:84:0a:23:0f:4e:fc:63:f9:f6:44:03:dd: fc:1e:4b:b9:7b:81:89:37:37:9c:84:8e:16:95:1e:de:94:7b: 47:b7:ee:4e:48:75:1d:d0:15:7d:a1:83:04:ef:cf:e4:74:7e: bc:01:5c:06:2a:67:f8:06:b8:3f:38:d4:71:25:df:1d:14:3f: b6:f3:61:82:d1:9b:67:3d:05:52:24:64:e0:b6:73:d5:b0:a8: 70:93:8d:32:82:51:a5:34:ef:00:0c:d0:b6:d3:eb:33:2f:fd: ac:99:a9:18:6c:62:75:b5:aa:b8:00:1d:d7:c8:b3:a7:91:9d: 2d:00:98:b3:66:a4:dd:06:d8:d0:f5:fb:6e:ae:c8:d0:6b:dd: a6:b5:25:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtl5+IFjs8s/ffNPhioSNqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0 NWMxNDMwHhcNMjUxMjI4MTcwMDUzWhcNMjUxMjI5MTcwMDUzWjAzMTEwLwYDVQQD EygxYjMwMzhhOTQyMzg0NjE4MWJkODg4MjlkOWYzNTYzN2YwNTE0ZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PYU+Eg53QAPSq65yHVgGc04kj2W Yv5drEDR8rruP/L2D/9VDIXlNTTx65dW1PK5IDOSfY4DH1ntkoojdadxJEJrTEfF DoqXqwcCdujHXFXXukkPJ7KMc8O9fNzopV/j1MvzNLdnGMrTS+J+kE4/JLGGwal4 U+LqIXM6UuyZe7N8b2O9493edYrjng6TKRSBA3a00UdClMBJHX3c0pPJ/SdFnuxF K4KY4PLtpKJ8oA4dzVLpGfICw+sTQNRg8k1hx8m4J9WlT/g7Tn97A5Gxz4/xQhWn k7gQK13bxIuDTwhlACnF0dp5x4S+f8CMn4WTg2/smqU7PypnGte6gxP3swIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBswOKlCOEYYG9iIKdnzVjfwUU6YMB8GA1UdIwQY MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4 YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGnI 2cLUKtQa4GJUanTqTBGoAcIhSb+E7xIamrk6yRkm3IvS2NcjtFhUAzvwC4zpn8r6 Ex9W2oA/Eek/AgsnTXnEpwdISA61grNEXwjMFpXFm7tCJXK+kMcMm5J3vsQReyGR SAz3b+UsBgoQH2YXcsDShAojD078Y/n2RAPd/B5LuXuBiTc3nISOFpUe3pR7R7fu Tkh1HdAVfaGDBO/P5HR+vAFcBipn+Aa4PzjUcSXfHRQ/tvNhgtGbZz0FUiRk4LZz 1bCocJONMoJRpTTvAAzQttPrMy/9rJmpGGxidbWquAAd18izp5GdLQCYs2ak3QbY 0PX7bq7I0GvdprUlcQ== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:44 2025 by rpki-client