This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json) Hash identifier: TclMyjocDAtEuJcijptUo+gzInwCjbDE9eH1osjl2gE= Subject key identifier: 40:ED:94:81:D4:4E:F1:0F:16:58:ED:07:CB:43:B3:4F:D1:2C:C4:DA Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20 Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20 Certificate serial: 019B21ABABAF04554364808AABF7A559F713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft Manifest number: 050D Signing time: Mon 15 Dec 2025 11:00:57 +0000 Manifest this update: Mon 15 Dec 2025 11:00:57 +0000 Manifest next update: Tue 16 Dec 2025 11:00:57 +0000 Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: U/utbqpWHqNZjauYs4OTJ4ci0X20skkiuwsSudN7uDE=) 2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=) 3: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (hash: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=) 4: ZB4LbNWANDxD2OGhZaFKGVmPVqc.roa (hash: zEeyPPBtIpME2FXN1g85zYsY+3yYWfxT85ifdYuGGN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:ab:af:04:55:43:64:80:8a:ab:f7:a5:59:f7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20 Validity Not Before: Dec 15 11:00:57 2025 GMT Not After : Dec 16 11:00:57 2025 GMT Subject: CN=40ed9481d44ef10f1658ed07cb43b34fd12cc4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:e1:65:49:7f:ae:ac:0e:3b:4e:18:5b:38: 13:d5:3e:8e:d8:6d:36:4c:eb:88:23:a7:64:76:c2: 9d:6f:fb:78:4f:c4:7d:d1:9e:cc:ac:dd:c9:5c:94: 56:1c:81:4e:64:87:dd:ef:1d:c3:9d:13:f2:50:61: fd:89:49:8e:64:6d:5d:df:4a:70:78:77:2e:a7:59: ce:27:6b:25:e5:1f:de:27:9f:ba:d2:20:e7:3e:ce: e6:4e:93:e9:9c:16:eb:d6:7c:6b:3f:9f:aa:e6:52: 36:33:c7:b1:1a:91:d2:6d:77:59:a1:cc:c6:4c:09: 6f:ae:00:c6:fa:1a:8e:2a:3f:9b:e3:e9:d3:e2:8c: c0:09:fb:db:59:18:dc:a7:49:e4:4d:23:3b:ae:4d: e9:08:b7:15:ee:35:f7:68:b5:4c:b1:a1:29:c9:b5: af:f3:40:38:23:93:cc:0e:4f:9f:80:8f:62:25:50: d7:dc:03:01:ee:71:2f:02:3d:f9:d1:d9:d5:bf:83: b7:08:d0:58:f4:c3:d3:15:09:61:64:bc:ae:bd:f0: ca:0f:59:08:17:97:5d:43:a3:65:67:3b:04:d9:55: d3:2a:8a:bc:fe:00:8a:dd:7f:ef:53:7f:a4:27:7c: 54:8c:da:f5:a2:63:00:98:7c:15:c7:a8:14:b5:72: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:ED:94:81:D4:4E:F1:0F:16:58:ED:07:CB:43:B3:4F:D1:2C:C4:DA X509v3 Authority Key Identifier: keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d7:33:bf:5b:e3:28:c2:6b:ff:5a:cc:9c:88:34:6b:a6:1e: 24:e6:57:d0:3c:91:4f:52:66:4c:5e:7c:e8:ed:ea:67:78:13: 41:58:58:42:41:fc:79:54:07:2f:e0:e8:51:f3:9e:8f:e5:58: c5:64:0b:9c:01:20:b5:d8:11:d5:a5:59:9a:f9:5d:a6:5d:0f: 29:bf:ae:2a:19:6d:d0:52:b8:9b:52:4e:8b:f2:40:62:da:21: 5c:8a:d7:fc:aa:b0:a8:71:d2:dc:16:ee:d8:9a:3d:1f:14:c1: dc:71:f1:db:d4:34:2e:d6:d5:ab:49:1c:3f:1d:3e:cc:25:64: b9:a6:60:af:a3:c6:8c:f4:32:20:a1:69:7d:85:24:da:01:8e: 4a:e9:fb:a6:e5:55:54:d9:c5:c8:51:f2:fa:5e:19:b8:0a:ed: 68:3d:fa:65:78:de:45:6e:13:12:56:bc:cf:0e:90:9b:1e:74: 64:e8:4e:e4:52:a8:4f:9c:04:14:0e:36:15:03:38:2f:d1:e5: a2:bc:86:6e:38:da:e2:0d:e4:f2:dc:a1:1e:92:6c:d2:0f:fd: 93:5c:41:98:f8:88:45:bf:16:92:57:04:6c:0c:59:2e:18:ea: 6a:20:b0:c7:74:9e:97:56:25:87:db:73:ab:48:61:2c:06:b9: b4:d5:7d:2d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZshq6uvBFVDZICKq/elWfcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjhjZDVkMjRhMDhiNWE4YWZiNTdjOWU2MDRkMTkzYmM4 Y2FlMjAwHhcNMjUxMjE1MTEwMDU3WhcNMjUxMjE2MTEwMDU3WjAzMTEwLwYDVQQD Eyg0MGVkOTQ4MWQ0NGVmMTBmMTY1OGVkMDdjYjQzYjM0ZmQxMmNjNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApezhZUl/rqwOO04YWzgT1T6O2G02 TOuII6dkdsKdb/t4T8R90Z7MrN3JXJRWHIFOZIfd7x3DnRPyUGH9iUmOZG1d30pw eHcup1nOJ2sl5R/eJ5+60iDnPs7mTpPpnBbr1nxrP5+q5lI2M8exGpHSbXdZoczG TAlvrgDG+hqOKj+b4+nT4ozACfvbWRjcp0nkTSM7rk3pCLcV7jX3aLVMsaEpybWv 80A4I5PMDk+fgI9iJVDX3AMB7nEvAj350dnVv4O3CNBY9MPTFQlhZLyuvfDKD1kI F5ddQ6NlZzsE2VXTKoq8/gCK3X/vU3+kJ3xUjNr1omMAmHwVx6gUtXKetwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEDtlIHUTvEPFljtB8tDs0/RLMTaMB8GA1UdIwQY MBaAFPv4zV0koItaivtXyeYE0ZO8jK4gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fak5YU1NnaTFxSy0xZko1Z1RSazd5TXJpQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWEx LWViODc4NjliZDFjOS8xLzEtX2pOWFNTZ2kxcUstMWZKNWdUUms3eU1yaUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MwL2ViM2U5Yi02ZGI1LTQ2YzYtOWFhMS1lYjg3ODY5YmQx YzkvMS8xLV9qTlhTU2dpMXFLLTFmSjVnVFJrN3lNcmlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtcz v1vjKMJr/1rMnIg0a6YeJOZX0DyRT1JmTF586O3qZ3gTQVhYQkH8eVQHL+DoUfOe j+VYxWQLnAEgtdgR1aVZmvldpl0PKb+uKhlt0FK4m1JOi/JAYtohXIrX/KqwqHHS 3Bbu2Jo9HxTB3HHx29Q0LtbVq0kcPx0+zCVkuaZgr6PGjPQyIKFpfYUk2gGOSun7 puVVVNnFyFHy+l4ZuArtaD36ZXjeRW4TEla8zw6Qmx50ZOhO5FKoT5wEFA42FQM4 L9HloryGbjja4g3k8tyhHpJs0g/9k1xBmPiIRb8WklcEbAxZLhjqaiCwx3Sel1Yl h9tzq0hhLAa5tNV9LQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:30 2025 by rpki-client