This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json) Hash identifier: v6O2Vwez8h20GUJ2F/9q6vZiQIdGqi9DyGGpTmqyCOs= Subject key identifier: 46:42:29:A0:24:C2:3C:78:72:DA:09:81:7C:CD:45:88:1D:E8:F3:0F Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f Certificate serial: 019B3CEC4716D672E6FF4C380D319D897F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft Manifest number: 1563 Signing time: Sat 20 Dec 2025 18:01:16 +0000 Manifest this update: Sat 20 Dec 2025 18:01:16 +0000 Manifest next update: Sun 21 Dec 2025 18:01:16 +0000 Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: 0VjpqpIV6+hjjnREXe3gjs0LiQhkD5VdAXBYzggtTrU=) 2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:47:16:d6:72:e6:ff:4c:38:0d:31:9d:89:7f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f Validity Not Before: Dec 20 18:01:16 2025 GMT Not After : Dec 21 18:01:16 2025 GMT Subject: CN=464229a024c23c7872da09817ccd45881de8f30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:cc:75:8d:01:75:a6:1a:8a:f0:f4:a2:71: 21:d0:41:8e:81:c0:7a:fe:7c:f1:fc:38:1c:90:05: 91:c5:3c:c7:b3:45:d2:69:8d:5f:ac:11:a1:0d:c5: 57:98:6c:21:75:7e:21:1e:68:8d:48:e6:51:2e:5f: 25:d8:b1:f6:4d:41:bb:40:70:ef:e5:05:27:b9:c7: d3:ef:ba:b6:ea:08:97:bb:e2:b2:93:f5:56:bd:9e: e9:33:49:75:b1:43:bc:30:4c:49:6e:88:f2:77:b2: 52:45:8c:f5:7b:85:2b:49:e3:86:99:f1:8a:21:29: f1:40:6e:84:c9:06:e3:f5:98:0e:b4:fa:db:39:62: fd:5e:0d:4d:76:3e:61:7e:56:06:cb:66:cb:d5:3a: be:20:51:4d:fa:b0:43:10:9f:1f:4e:dc:3e:57:ea: d7:52:b0:8d:a0:cc:11:f4:9a:9a:4f:18:66:2c:2d: ef:79:b8:1a:f1:71:e0:95:bd:cd:a2:b1:7e:38:0a: bf:f4:ff:49:7a:48:51:73:10:cf:f2:ca:7b:0e:a0: 1d:1c:cc:40:cb:41:4e:17:68:1d:a8:13:91:a7:3b: cd:f4:0a:92:79:cc:9f:a5:9c:3a:70:a5:47:31:b9: e5:04:00:35:74:bb:14:f6:61:76:a9:53:dc:ce:7f: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:42:29:A0:24:C2:3C:78:72:DA:09:81:7C:CD:45:88:1D:E8:F3:0F X509v3 Authority Key Identifier: keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:10:04:09:02:18:4c:e2:c0:16:b2:48:35:48:3d:b8:4d:e9: 73:8c:96:d5:d0:b2:a8:65:92:bc:07:8d:08:12:a2:26:f9:bd: f5:21:f4:0f:67:d7:a2:66:b8:4f:20:c9:1d:8b:9f:20:f4:7e: d6:22:b5:64:47:0b:e5:a9:8e:34:2b:f6:80:16:b6:1c:07:62: ac:df:f7:d0:4c:81:c4:da:91:d6:a8:8e:41:8e:67:e6:81:e9: 04:5a:cb:89:47:be:f8:b3:4d:02:3e:e6:e4:87:9b:72:eb:95: 99:87:02:b4:05:b1:87:89:18:d0:d2:2e:d3:b6:5a:a6:cc:50: 18:f9:d7:c9:65:a9:05:7f:2b:7a:c2:15:b6:09:0b:af:84:c5: 7f:1b:fe:7c:4a:0d:86:8d:a2:27:7d:d4:bb:a3:37:71:59:d3: 4d:34:1c:bb:19:b7:a5:6c:aa:34:1b:95:bf:4d:41:fd:08:c4: a5:7b:ff:37:3f:a2:54:00:92:b6:8f:40:54:a8:f2:b7:86:6b: 32:80:fa:76:6f:8f:55:7b:40:2b:67:c7:af:fe:19:ba:26:b4: 38:b6:47:dd:e0:c0:4a:8b:0d:c6:c7:23:6e:5f:42:2c:67:88: 1b:45:a1:0c:94:a1:5a:f3:d2:bd:97:da:09:9d:2a:f6:1b:71: 0a:90:14:76 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs87EcW1nLm/0w4DTGdiX8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx ZmRmNWYwHhcNMjUxMjIwMTgwMTE2WhcNMjUxMjIxMTgwMTE2WjAzMTEwLwYDVQQD Eyg0NjQyMjlhMDI0YzIzYzc4NzJkYTA5ODE3Y2NkNDU4ODFkZThmMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqDMdY0BdaYaivD0onEh0EGOgcB6 /nzx/DgckAWRxTzHs0XSaY1frBGhDcVXmGwhdX4hHmiNSOZRLl8l2LH2TUG7QHDv 5QUnucfT77q26giXu+Kyk/VWvZ7pM0l1sUO8MExJbojyd7JSRYz1e4UrSeOGmfGK ISnxQG6EyQbj9ZgOtPrbOWL9Xg1Ndj5hflYGy2bL1Tq+IFFN+rBDEJ8fTtw+V+rX UrCNoMwR9JqaTxhmLC3vebga8XHglb3NorF+OAq/9P9JekhRcxDP8sp7DqAdHMxA y0FOF2gdqBORpzvN9AqSecyfpZw6cKVHMbnlBAA1dLsU9mF2qVPczn+oHwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEZCKaAkwjx4ctoJgXzNRYgd6PMPMB8GA1UdIwQY MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0 ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhAE CQIYTOLAFrJINUg9uE3pc4yW1dCyqGWSvAeNCBKiJvm99SH0D2fXoma4TyDJHYuf IPR+1iK1ZEcL5amONCv2gBa2HAdirN/30EyBxNqR1qiOQY5n5oHpBFrLiUe++LNN Aj7m5IebcuuVmYcCtAWxh4kY0NIu07ZapsxQGPnXyWWpBX8resIVtgkLr4TFfxv+ fEoNho2iJ33Uu6M3cVnTTTQcuxm3pWyqNBuVv01B/QjEpXv/Nz+iVACSto9AVKjy t4ZrMoD6dm+PVXtAK2fHr/4Zuia0OLZH3eDASosNxscjbl9CLGeIG0WhDJShWvPS vZfaCZ0q9htxCpAUdg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:58 2025 by rpki-client