This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json) Hash identifier: 3fZfS5tXIzaWV2S2+DmnGfTx/NlzbrxxTBh8XPDIeck= Subject key identifier: 0A:B0:68:1C:18:6E:60:6F:14:E6:39:38:11:01:40:D7:1A:6C:FA:2A Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Certificate serial: 019B30E88B9BC5B4FD645FFFDDA258B88F29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft Manifest number: 0386 Signing time: Thu 18 Dec 2025 10:01:45 +0000 Manifest this update: Thu 18 Dec 2025 10:01:45 +0000 Manifest next update: Fri 19 Dec 2025 10:01:45 +0000 Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: pJVa18dYwIu6asfIpl8tDFUs7FeWqVXh/p6gGTOn5Fc=) 2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:8b:9b:c5:b4:fd:64:5f:ff:dd:a2:58:b8:8f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Validity Not Before: Dec 18 10:01:45 2025 GMT Not After : Dec 19 10:01:45 2025 GMT Subject: CN=0ab0681c186e606f14e63938110140d71a6cfa2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:ba:b2:4f:6f:7c:66:3d:0c:3b:1c:ea:91: fb:c9:7b:ee:89:68:5e:de:52:78:27:6c:b6:17:b8: 01:78:33:f5:35:f5:8c:d0:4e:1b:74:56:c6:fd:16: d7:84:59:c1:39:42:1a:6c:e2:77:23:9a:6c:9f:bf: 26:33:f5:3b:c7:c9:44:07:ff:27:d5:27:dc:26:d5: 48:d2:d6:c7:4a:82:1d:d0:bd:88:21:16:8b:3e:73: db:5e:4c:30:fd:d6:d0:8c:ef:a1:8b:29:12:9b:72: 2c:b9:67:0b:4b:9c:8e:34:7c:da:ed:01:95:b8:a4: ef:ea:59:c2:b3:cc:0e:c4:23:54:f1:06:ca:07:30: 3d:7f:48:4c:45:ef:3f:06:0c:b1:1a:d1:ec:8a:0a: 5e:88:10:79:87:60:4c:67:e0:54:88:b7:72:09:d6: 83:07:8a:d9:8d:8f:d5:c2:9d:b9:76:10:86:e3:2d: 61:bd:9d:b0:5c:94:91:be:56:2c:cb:6f:4f:c1:79: 45:01:8d:f6:96:85:6f:a5:b2:50:ea:c9:51:ed:c1: da:56:5e:ba:ee:dd:85:6f:39:49:db:5d:c0:43:48: 15:53:3f:c9:78:6a:8e:f8:95:12:88:c6:b8:5c:c4: 32:e0:3c:a7:eb:e6:03:15:09:b1:1e:2e:7d:30:b1: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B0:68:1C:18:6E:60:6F:14:E6:39:38:11:01:40:D7:1A:6C:FA:2A X509v3 Authority Key Identifier: keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f2:9d:86:ee:25:ee:2c:32:2e:af:f6:79:21:10:7b:94:d1: e9:7e:c5:2e:e7:9f:3d:0d:22:37:11:12:45:7f:63:a4:e0:0c: 92:3e:66:38:17:fb:c2:9b:a7:d3:2e:c4:16:14:92:2e:57:55: a2:19:a4:9d:49:77:ca:72:95:24:4f:4a:3b:a4:5d:c1:38:7d: 08:bf:fc:3f:40:ea:e1:ed:7d:2d:d0:de:0b:7e:64:95:28:53: 76:89:6c:b2:f1:34:2a:fc:08:f6:eb:17:3f:be:9e:6d:7e:4d: 2f:72:60:99:db:0f:f1:15:d9:7f:bf:50:26:14:63:82:6a:49: 22:ec:64:c4:34:44:b8:59:f4:25:98:72:fe:2b:3b:9d:4a:a7: 28:cd:a4:32:3a:c1:80:ba:83:0a:d9:fe:53:e3:18:ae:77:81: 4a:38:51:8f:ed:0a:c6:8c:90:77:a6:4a:9c:93:91:a8:3d:d0: 3d:66:88:0a:8e:d8:f4:cb:52:a6:64:66:bf:c3:28:03:8c:90: b5:e2:9f:50:2a:e1:e2:3f:4c:6b:ef:31:95:19:cb:e6:ce:61: 65:d5:02:99:b8:3d:29:ef:74:f3:06:43:bd:7f:5a:66:a0:f1: df:77:dd:92:04:66:00:42:2e:9e:1c:77:a6:b6:6d:7f:b7:6b: da:ff:00:5d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsw6IubxbT9ZF//3aJYuI8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjQ2YTYzMjNiM2Q2ZmMzNGFlNDlkOGJlODg4NGY3Mjky YmRiZjQwHhcNMjUxMjE4MTAwMTQ1WhcNMjUxMjE5MTAwMTQ1WjAzMTEwLwYDVQQD EygwYWIwNjgxYzE4NmU2MDZmMTRlNjM5MzgxMTAxNDBkNzFhNmNmYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAG6sk9vfGY9DDsc6pH7yXvuiWhe 3lJ4J2y2F7gBeDP1NfWM0E4bdFbG/RbXhFnBOUIabOJ3I5psn78mM/U7x8lEB/8n 1SfcJtVI0tbHSoId0L2IIRaLPnPbXkww/dbQjO+hiykSm3IsuWcLS5yONHza7QGV uKTv6lnCs8wOxCNU8QbKBzA9f0hMRe8/BgyxGtHsigpeiBB5h2BMZ+BUiLdyCdaD B4rZjY/Vwp25dhCG4y1hvZ2wXJSRvlYsy29PwXlFAY32loVvpbJQ6slR7cHaVl66 7t2FbzlJ213AQ0gVUz/JeGqO+JUSiMa4XMQy4Dyn6+YDFQmxHi59MLG/9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAqwaBwYbmBvFOY5OBEBQNcabPoqMB8GA1UdIwQY MBaAFPpkamMjs9b8NK5J2L6IhPcpK9v0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tUnFZeU96MXZ3MHJrbll2b2lFOXlrcjJfUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3 LTU5ZTE5MzI2MmNlNC8xLzEtbVJxWXlPejF2dzBya25Zdm9pRTl5a3IyX1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YyLzZiZjU0Yy1kODA2LTQ2M2EtYWYzNy01OWUxOTMyNjJj ZTQvMS8xLW1ScVl5T3oxdncwcmtuWXZvaUU5eWtyMl9RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPKd hu4l7iwyLq/2eSEQe5TR6X7FLuefPQ0iNxESRX9jpOAMkj5mOBf7wpun0y7EFhSS LldVohmknUl3ynKVJE9KO6RdwTh9CL/8P0Dq4e19LdDeC35klShTdolssvE0KvwI 9usXP76ebX5NL3JgmdsP8RXZf79QJhRjgmpJIuxkxDREuFn0JZhy/is7nUqnKM2k MjrBgLqDCtn+U+MYrneBSjhRj+0KxoyQd6ZKnJORqD3QPWaICo7Y9MtSpmRmv8Mo A4yQteKfUCrh4j9Ma+8xlRnL5s5hZdUCmbg9Ke908wZDvX9aZqDx33fdkgRmAEIu nhx3prZtf7dr2v8AXQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:58:47 2025 by rpki-client