This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json) Hash identifier: HGsHO8TjUmCBGIjyhNJP6pPPdg+R/twvf3Moo/0LgzM= Subject key identifier: 15:C4:EB:84:39:4F:7C:E3:08:A3:CB:56:D5:D9:90:11:F5:F1:D0:0A Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Certificate serial: 019B2174E9010CF8489C0FEADE864D03F2FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft Manifest number: 037E Signing time: Mon 15 Dec 2025 10:01:08 +0000 Manifest this update: Mon 15 Dec 2025 10:01:08 +0000 Manifest next update: Tue 16 Dec 2025 10:01:08 +0000 Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: CgSNzY7hPbNyIeVN8eqqEVw15WQTGyv00ykaElYqp8c=) 2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:e9:01:0c:f8:48:9c:0f:ea:de:86:4d:03:f2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Validity Not Before: Dec 15 10:01:08 2025 GMT Not After : Dec 16 10:01:08 2025 GMT Subject: CN=15c4eb84394f7ce308a3cb56d5d99011f5f1d00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:3b:dc:81:6e:ee:a8:c8:1e:a6:3b:2a:5a: 6d:ae:e4:42:7b:f3:60:a8:53:83:8c:88:a1:45:bf: 7d:8e:de:83:b3:0f:8d:03:2a:0c:fc:d6:26:ba:ef: fd:3e:13:91:13:39:62:48:31:8e:53:6b:f0:41:30: 5f:2f:43:f3:f1:d9:ff:00:a6:61:b3:29:00:54:1e: 8b:f5:22:3e:89:8f:7b:4f:f3:ef:04:f5:92:7c:e9: bc:97:94:23:74:fe:b1:cf:2e:54:f2:5e:48:5a:60: cf:fc:47:07:3d:e4:a4:fc:5f:ee:80:20:f5:b8:3e: 6a:91:7f:4d:a6:60:fe:35:a1:23:58:ad:f4:3a:46: 5d:42:e2:33:54:80:4b:0e:12:e7:ef:39:da:56:78: f9:0c:a8:46:4c:73:e8:1b:97:c7:34:f0:2f:23:d7: af:c4:50:7e:d1:57:6e:cd:a3:a8:82:b7:7b:b1:33: ba:da:bd:a0:d1:e1:b4:8d:fd:e6:ac:83:03:45:0c: 76:60:87:08:28:d6:42:0d:7d:10:25:17:ff:3f:a9: c2:6a:d3:ef:c5:d4:a7:98:24:9f:1c:bb:14:3a:01: d3:a0:40:ba:f0:4e:32:aa:5c:49:f6:74:fe:a6:27: e4:93:46:3d:78:f3:e9:b3:8f:33:50:e9:ac:d0:de: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C4:EB:84:39:4F:7C:E3:08:A3:CB:56:D5:D9:90:11:F5:F1:D0:0A X509v3 Authority Key Identifier: keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7c:25:73:58:13:46:00:41:e8:5e:90:55:27:6c:8f:e1:69: d6:36:a0:5a:f9:f3:01:41:5e:cd:6d:e7:8a:21:7a:38:01:72: b0:67:cf:a9:d4:c4:bb:14:f3:69:80:9c:b4:07:02:73:76:d6: 87:4d:09:33:85:eb:90:6e:dd:d3:ce:bd:00:5e:f7:83:2c:8b: 72:09:21:7f:17:80:43:a0:be:5c:4c:e1:5c:6f:62:ef:3a:c1: ac:53:01:8c:3b:77:24:2d:53:b4:16:69:25:ce:9e:5b:fa:74: 17:4c:18:69:29:aa:11:b4:f6:63:b2:d8:6c:fd:3b:e9:66:e3: d3:a7:99:7c:9e:33:c7:62:7f:d1:5d:a7:07:d1:b3:15:73:22: 3c:68:1d:f8:8c:03:49:4e:46:50:5e:ec:34:80:2a:bb:99:64: f8:e6:fd:dc:c6:8f:64:be:f6:8f:6a:a4:2f:48:fb:29:fa:97: fb:7b:7d:a1:97:cc:ae:08:77:76:a2:cd:9b:d9:a9:69:bb:4f: f4:89:7b:a5:8a:ee:92:dd:c1:24:92:58:fd:00:1f:59:12:db: 02:7b:d8:b4:39:e9:7c:8f:6f:53:60:ff:4d:c8:c7:f5:e4:b4: 32:eb:37:99:48:9c:52:f9:77:ff:27:d5:4f:f3:04:8e:26:70: 65:56:2b:04 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZshdOkBDPhInA/q3oZNA/L+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjQ2YTYzMjNiM2Q2ZmMzNGFlNDlkOGJlODg4NGY3Mjky YmRiZjQwHhcNMjUxMjE1MTAwMTA4WhcNMjUxMjE2MTAwMTA4WjAzMTEwLwYDVQQD EygxNWM0ZWI4NDM5NGY3Y2UzMDhhM2NiNTZkNWQ5OTAxMWY1ZjFkMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eg73IFu7qjIHqY7KlptruRCe/Ng qFODjIihRb99jt6Dsw+NAyoM/NYmuu/9PhOREzliSDGOU2vwQTBfL0Pz8dn/AKZh sykAVB6L9SI+iY97T/PvBPWSfOm8l5QjdP6xzy5U8l5IWmDP/EcHPeSk/F/ugCD1 uD5qkX9NpmD+NaEjWK30OkZdQuIzVIBLDhLn7znaVnj5DKhGTHPoG5fHNPAvI9ev xFB+0VduzaOogrd7sTO62r2g0eG0jf3mrIMDRQx2YIcIKNZCDX0QJRf/P6nCatPv xdSnmCSfHLsUOgHToEC68E4yqlxJ9nT+pifkk0Y9ePPps48zUOms0N6fhwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBXE64Q5T3zjCKPLVtXZkBH18dAKMB8GA1UdIwQY MBaAFPpkamMjs9b8NK5J2L6IhPcpK9v0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tUnFZeU96MXZ3MHJrbll2b2lFOXlrcjJfUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3 LTU5ZTE5MzI2MmNlNC8xLzEtbVJxWXlPejF2dzBya25Zdm9pRTl5a3IyX1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YyLzZiZjU0Yy1kODA2LTQ2M2EtYWYzNy01OWUxOTMyNjJj ZTQvMS8xLW1ScVl5T3oxdncwcmtuWXZvaUU5eWtyMl9RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3wl c1gTRgBB6F6QVSdsj+Fp1jagWvnzAUFezW3niiF6OAFysGfPqdTEuxTzaYCctAcC c3bWh00JM4XrkG7d0869AF73gyyLcgkhfxeAQ6C+XEzhXG9i7zrBrFMBjDt3JC1T tBZpJc6eW/p0F0wYaSmqEbT2Y7LYbP076Wbj06eZfJ4zx2J/0V2nB9GzFXMiPGgd +IwDSU5GUF7sNIAqu5lk+Ob93MaPZL72j2qkL0j7KfqX+3t9oZfMrgh3dqLNm9mp abtP9Il7pYrukt3BJJJY/QAfWRLbAnvYtDnpfI9vU2D/TcjH9eS0Mus3mUicUvl3 /yfVT/MEjiZwZVYrBA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:16:29 2025 by rpki-client