This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json) Hash identifier: /lpytAhqQwTPPL1oy8yreukXtJznkEr509nq0B+gDXE= Subject key identifier: 0D:5E:06:E2:CC:B0:DD:09:8D:FA:F1:81:AF:74:30:FD:41:D9:56:49 Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Certificate serial: 019B4B838D58303069B564708B5F1D470F6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft Manifest number: 12BD Signing time: Tue 23 Dec 2025 14:01:11 +0000 Manifest this update: Tue 23 Dec 2025 14:01:11 +0000 Manifest next update: Wed 24 Dec 2025 14:01:11 +0000 Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: RjuW4wLl1U1QWUlO0afIrGTFhM8ZEGu32YnqrPA3/84=) 2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:8d:58:30:30:69:b5:64:70:8b:5f:1d:47:0f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Validity Not Before: Dec 23 14:01:11 2025 GMT Not After : Dec 24 14:01:11 2025 GMT Subject: CN=0d5e06e2ccb0dd098dfaf181af7430fd41d95649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:f8:9b:e8:2a:19:0a:1d:86:99:10:80:ed: 07:16:7a:b6:51:20:20:44:0d:59:01:eb:a0:01:d4: 89:e2:a3:af:32:1e:27:e7:45:a7:bd:ee:a2:c2:12: 69:af:d5:e2:a2:a8:78:29:7e:7f:32:0a:78:6b:c6: 93:d3:37:50:a1:71:02:f5:df:61:f4:a8:25:76:67: 2d:cf:65:3d:dd:98:57:52:c9:7b:ec:63:b5:34:c3: 2d:2c:84:8e:44:bb:29:ac:b1:50:f5:0f:0d:d1:b0: 91:99:7e:e3:0e:22:93:29:10:29:a3:68:a8:b2:c4: eb:54:20:fc:5d:7a:58:02:e3:1e:16:c4:5a:3c:c9: 3d:ec:b2:60:67:6b:65:0e:79:ca:2f:ac:d8:db:56: 3e:bc:b8:8c:77:e2:42:0f:bb:7d:52:17:2b:99:8c: 52:78:5e:23:26:9e:06:96:a3:df:f6:8d:c3:f1:f6: 66:03:f2:37:7e:3e:48:81:47:e2:a8:4d:6b:c1:92: 37:0c:ec:4a:02:82:c3:e2:4d:f1:f4:21:78:c0:c0: 3c:c0:53:52:07:7a:e0:b3:d2:e8:68:a2:ad:5f:4a: 46:1b:03:f4:7e:b7:7e:34:e5:44:0c:b5:c5:d5:7e: 4f:af:15:16:f9:d8:02:89:b4:25:80:be:02:92:d6: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5E:06:E2:CC:B0:DD:09:8D:FA:F1:81:AF:74:30:FD:41:D9:56:49 X509v3 Authority Key Identifier: keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d5:cd:96:0e:c3:0c:8a:57:01:6c:ad:13:83:59:e3:19:2f: 2f:f4:0b:2c:23:27:1f:7e:e5:2a:70:0d:50:32:ca:a7:d1:26: 7b:d0:49:7c:e5:a3:d4:74:71:47:21:56:27:da:07:e0:a7:27: 2f:80:05:ae:a5:3d:3b:38:f1:a1:1d:b9:76:5b:fb:e8:9c:c7: b5:a8:da:ef:62:26:c2:e0:7d:11:21:19:e2:77:c9:86:f9:fb: 2f:88:22:ca:bb:72:9c:58:2f:e6:6e:cf:6b:c3:c7:58:21:87: 6a:0d:03:74:c4:26:c9:a8:89:0f:26:07:98:db:6d:42:da:2a: c4:13:a9:af:2d:5e:3b:a8:68:b6:46:15:74:cf:34:f5:10:17: 50:38:36:5a:81:f9:46:3c:c5:85:64:66:2f:91:59:8e:aa:88: d0:57:bd:05:59:5b:62:7b:6f:be:66:80:bf:d6:3c:7e:21:a3: 18:c0:34:43:38:4e:49:f0:d1:fc:34:a4:b7:02:07:bc:c5:5e: be:f9:94:e7:0a:e9:00:b1:2e:52:11:84:af:78:a3:f8:9e:14: c4:4e:e9:2f:b0:da:8b:7a:00:02:77:bd:5e:54:55:c6:2f:ad: cb:91:a4:13:35:21:00:c2:12:ad:62:d3:6f:bd:a5:3c:b4:af: 08:8d:24:30 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtLg41YMDBptWRwi18dRw9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm MWUxMzEwHhcNMjUxMjIzMTQwMTExWhcNMjUxMjI0MTQwMTExWjAzMTEwLwYDVQQD EygwZDVlMDZlMmNjYjBkZDA5OGRmYWYxODFhZjc0MzBmZDQxZDk1NjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQP4m+gqGQodhpkQgO0HFnq2USAg RA1ZAeugAdSJ4qOvMh4n50Wnve6iwhJpr9Xioqh4KX5/Mgp4a8aT0zdQoXEC9d9h 9Kgldmctz2U93ZhXUsl77GO1NMMtLISORLsprLFQ9Q8N0bCRmX7jDiKTKRApo2io ssTrVCD8XXpYAuMeFsRaPMk97LJgZ2tlDnnKL6zY21Y+vLiMd+JCD7t9UhcrmYxS eF4jJp4GlqPf9o3D8fZmA/I3fj5IgUfiqE1rwZI3DOxKAoLD4k3x9CF4wMA8wFNS B3rgs9LoaKKtX0pGGwP0frd+NOVEDLXF1X5PrxUW+dgCibQlgL4CktbKhQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA1eBuLMsN0Jjfrxga90MP1B2VZJMB8GA1UdIwQY MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4 LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y5L2I1NWMwNC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIy MTkvMS8xLXFXc1hTS3RrSGluTGhOcGxpaHlSLW54NFRFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNXN lg7DDIpXAWytE4NZ4xkvL/QLLCMnH37lKnANUDLKp9Eme9BJfOWj1HRxRyFWJ9oH 4KcnL4AFrqU9OzjxoR25dlv76JzHtaja72ImwuB9ESEZ4nfJhvn7L4giyrtynFgv 5m7Pa8PHWCGHag0DdMQmyaiJDyYHmNttQtoqxBOpry1eO6hotkYVdM809RAXUDg2 WoH5RjzFhWRmL5FZjqqI0Fe9BVlbYntvvmaAv9Y8fiGjGMA0QzhOSfDR/DSktwIH vMVevvmU5wrpALEuUhGEr3ij+J4UxE7pL7Dai3oAAne9XlRVxi+ty5GkEzUhAMIS rWLTb72lPLSvCI0kMA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:49:35 2025 by rpki-client