This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json) Hash identifier: MSrdKBZVMm4zK3m60uCmCkrlff96xCDmAElni4h6hm4= Subject key identifier: A8:69:36:4D:5F:A2:5A:3F:91:9F:39:5E:70:93:36:51:9F:DE:09:CD Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Certificate serial: 019B33B1983EDF74EE448AEE9DEE180805EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 23:00:35 +0000 Manifest this update: Thu 18 Dec 2025 23:00:35 +0000 Manifest next update: Fri 19 Dec 2025 23:00:35 +0000 Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: J++N2QEMotTE/OfWfNh+W5xSKKZjt0cWZdYiEFHZIf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:98:3e:df:74:ee:44:8a:ee:9d:ee:18:08:05:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Validity Not Before: Dec 18 23:00:35 2025 GMT Not After : Dec 19 23:00:35 2025 GMT Subject: CN=a869364d5fa25a3f919f395e709336519fde09cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:fd:97:3b:55:68:44:5e:c9:3c:eb:57:c4: 71:aa:41:3b:46:cf:8b:07:15:d1:12:98:cb:d8:69: 4c:c2:e9:e1:b4:22:f6:c6:c5:8b:f0:91:24:d5:e4: 25:f7:72:b2:e9:9f:02:46:e7:0a:6e:53:eb:00:c8: bf:5a:68:7c:90:fc:49:69:fd:0a:1f:7f:86:b6:49: d7:a3:d2:84:a9:2c:7d:e0:74:1c:29:e1:7f:ab:fe: 51:89:e5:ca:25:8b:5b:b7:18:81:57:bb:95:2d:94: 9f:6d:55:46:b7:69:01:62:b1:00:26:09:1d:0d:fe: df:17:e0:68:f5:f3:9b:b7:d4:f4:dc:81:f2:68:24: 15:b5:e1:e6:89:4b:b6:09:ad:de:d9:62:fb:98:a3: b9:77:9d:99:1b:86:a2:56:16:34:b4:f9:e5:63:0c: 59:01:98:b6:fb:36:5f:83:be:7d:f2:7b:55:0f:8c: d1:3d:72:cd:42:0b:ec:33:2a:07:3c:5a:5b:f3:91: 22:fe:53:1f:59:27:9b:79:ce:63:b5:db:be:b0:a0: 47:31:a3:3d:10:b3:05:f6:08:ee:38:d2:ad:9e:da: 3b:4c:9b:7e:5a:64:cf:08:24:44:fd:3d:5e:42:6c: 88:2d:74:23:a9:04:09:08:4d:37:96:7f:70:58:73: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:69:36:4D:5F:A2:5A:3F:91:9F:39:5E:70:93:36:51:9F:DE:09:CD X509v3 Authority Key Identifier: keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:eb:e5:86:53:07:9b:1c:2d:a6:93:1f:77:f7:94:58:40: d6:45:e7:17:0a:17:93:d9:04:25:f3:64:e5:a6:bf:25:dc:e7: 20:8d:ab:93:38:14:47:d0:ed:25:04:cc:de:f2:5a:28:e0:f2: bc:41:4e:79:cc:9d:12:c9:cd:6e:af:7e:6c:be:f0:48:8f:59: 58:2a:9e:79:4d:60:82:65:bd:23:bd:76:e3:6a:12:91:eb:01: e7:0f:3f:b1:c6:c9:55:52:0e:0d:2f:ef:d1:2b:eb:a5:10:89: 23:c8:82:e1:ed:3f:da:06:63:a0:cf:d6:54:67:59:77:d0:5d: be:74:cb:2b:2c:99:9a:33:cb:f8:65:be:55:80:a6:f9:dd:68: db:59:4f:d6:63:d5:32:67:03:ed:88:5e:48:92:35:c6:a7:8b: 43:78:87:0a:77:5c:34:34:a4:67:8b:a5:e0:10:33:d1:1e:f0: b3:36:da:75:08:30:bf:fe:34:bf:12:bb:8c:f8:a0:05:10:4d: 54:09:f3:ea:d3:ae:52:a0:0a:c3:bb:bb:a9:91:51:6c:1c:49: 38:78:e3:fc:b5:70:c3:33:0d:f2:8c:e1:a2:8a:da:29:b0:5f: 15:cd:c4:fa:fe:c7:d6:c0:47:2c:69:47:b1:d0:06:bd:20:67: cd:81:a6:ed -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZszsZg+33TuRIrune4YCAXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGE1YWFhNmM5OTQ2MmZlYjE1OWY1NmIxYzBhZjJkZDNm NDYyNWIwHhcNMjUxMjE4MjMwMDM1WhcNMjUxMjE5MjMwMDM1WjAzMTEwLwYDVQQD EyhhODY5MzY0ZDVmYTI1YTNmOTE5ZjM5NWU3MDkzMzY1MTlmZGUwOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDr9lztVaEReyTzrV8RxqkE7Rs+L BxXREpjL2GlMwunhtCL2xsWL8JEk1eQl93Ky6Z8CRucKblPrAMi/Wmh8kPxJaf0K H3+GtknXo9KEqSx94HQcKeF/q/5RieXKJYtbtxiBV7uVLZSfbVVGt2kBYrEAJgkd Df7fF+Bo9fObt9T03IHyaCQVteHmiUu2Ca3e2WL7mKO5d52ZG4aiVhY0tPnlYwxZ AZi2+zZfg7598ntVD4zRPXLNQgvsMyoHPFpb85Ei/lMfWSebec5jtdu+sKBHMaM9 ELMF9gjuONKtnto7TJt+WmTPCCRE/T1eQmyILXQjqQQJCE03ln9wWHMFpwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKhpNk1folo/kZ85XnCTNlGf3gnNMB8GA1UdIwQY MBaAFPraWqpsmUYv6xWfVrHAry3T9GJbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10cGFxbXlaUmlfckZaOVdzY0N2TGRQMFlscy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2LWVkZjAtNDhkNy1iZTdk LTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlXc2NDdkxkUDBZbHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FjLzA2MTUwNi1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2 ZTIvMS8xLXRwYXFteVpSaV9yRlo5V3NjQ3ZMZFAwWWxzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi3r 5YZTB5scLaaTH3f3lFhA1kXnFwoXk9kEJfNk5aa/JdznII2rkzgUR9DtJQTM3vJa KODyvEFOecydEsnNbq9+bL7wSI9ZWCqeeU1ggmW9I71242oSkesB5w8/scbJVVIO DS/v0SvrpRCJI8iC4e0/2gZjoM/WVGdZd9BdvnTLKyyZmjPL+GW+VYCm+d1o21lP 1mPVMmcD7YheSJI1xqeLQ3iHCndcNDSkZ4ul4BAz0R7wszbadQgwv/40vxK7jPig BRBNVAnz6tOuUqAKw7u7qZFRbBxJOHjj/LVwwzMN8ozhooraKbBfFc3E+v7H1sBH LGlHsdAGvSBnzYGm7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:40:14 2025 by rpki-client