This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json) Hash identifier: T4AETgV7cXdf5zSIK6eGXJ0RCKh++7jdx/UIttvQpbo= Subject key identifier: 1D:95:28:A2:C1:3E:A5:30:E4:30:3F:35:C0:AB:25:3E:13:A5:49:2D Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Certificate serial: 019B37215369FC165A5B71A2D991DFD7C282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft Manifest number: 0937 Signing time: Fri 19 Dec 2025 15:01:29 +0000 Manifest this update: Fri 19 Dec 2025 15:01:29 +0000 Manifest next update: Sat 20 Dec 2025 15:01:29 +0000 Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: uTbzwVxz78MPU3Qn33K+rfP+0UfcpSVVdXYwj7lMW9c=) 2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=) 3: oaQDmcPYSkml0RRQKrO-Em73IK4.roa (hash: bHgFTubSxlxLmOgCBCM51N98J0JO+nt18DnWZQ7MMJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:53:69:fc:16:5a:5b:71:a2:d9:91:df:d7:c2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Validity Not Before: Dec 19 15:01:29 2025 GMT Not After : Dec 20 15:01:29 2025 GMT Subject: CN=1d9528a2c13ea530e4303f35c0ab253e13a5492d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:90:2a:13:10:51:68:d6:4e:0e:c4:f7:99: 85:98:35:86:69:a8:73:49:8d:54:7c:bd:7f:a4:0f: 1e:7e:c4:a4:40:82:30:fe:81:66:2e:b2:4f:8a:d3: 3e:cf:0f:c6:5e:bc:fe:64:02:a4:57:f2:61:de:17: 7b:cd:3f:6d:de:91:a5:03:c2:ad:3e:e2:c3:4b:7b: 47:59:ff:16:fe:ff:ed:f3:57:7d:01:06:b3:dc:d3: 69:81:30:04:b8:d3:ae:7f:7e:90:9b:be:09:56:ab: 8b:94:69:da:8c:11:40:29:a7:64:7d:fd:fb:8e:b1: ac:10:01:f7:e2:7b:fd:33:e3:12:ef:2d:72:88:8c: 78:14:79:a8:f5:71:d4:4a:9d:fe:97:c5:91:7d:16: 68:8d:fa:1a:76:a8:01:9b:8a:03:07:a3:7b:d0:3e: 8e:ad:18:5e:c6:bb:a0:23:4a:f0:ad:10:a8:7a:c8: dc:a5:00:7c:5c:0b:89:ff:7c:6b:14:62:51:5b:f7: 29:9d:b7:d8:ca:23:5c:62:85:36:61:f2:4e:29:ae: 53:83:50:85:70:b9:2b:96:7c:fb:1a:9b:f7:71:0c: 8d:ce:64:a0:2a:e4:5c:06:fd:e3:15:14:26:d4:60: 4d:b3:2f:a4:ea:1b:4e:0d:06:7f:0b:30:0c:37:8f: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:95:28:A2:C1:3E:A5:30:E4:30:3F:35:C0:AB:25:3E:13:A5:49:2D X509v3 Authority Key Identifier: keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:80:6f:ea:9b:9e:41:c6:6e:ec:7c:58:be:ff:9e:de:8f:7f: b5:80:19:e6:d6:c7:38:bc:ba:e5:56:09:4d:b4:41:ed:60:34: 6c:cf:a6:26:d4:f8:a3:ec:b8:f5:bc:35:07:47:a6:f9:fe:94: bc:ef:b9:3e:9d:c4:11:41:b0:85:8c:3e:1d:6e:6a:a8:83:6b: c1:5b:fe:06:9a:84:92:b8:16:77:fb:62:7e:29:16:31:18:b7: 93:47:af:ef:9b:a5:94:69:81:68:b2:79:54:e3:bb:3b:4f:e9: 39:b5:d3:a2:0d:54:8d:b9:87:c4:5f:2c:6e:84:a5:40:05:dc: 2c:6d:73:f7:0a:d2:18:0a:86:37:0b:6a:a9:51:ca:b5:74:19: f3:da:ec:fe:41:02:f2:57:a7:26:76:5f:3c:7d:d7:ec:d9:d2: 16:ad:9e:a8:09:86:17:6b:ca:bc:31:a8:55:73:15:5c:a4:39: ad:bc:06:ed:d4:ed:d2:37:82:1e:12:95:d8:c0:47:8c:d3:2d: 52:28:3c:f8:54:75:7e:40:86:4c:96:62:20:fb:a1:45:1e:95: 84:ee:94:12:26:a6:6e:40:49:d2:94:e0:cf:a2:e0:67:79:de: 92:cd:46:01:fd:fb:5d:17:11:b3:29:5f:3d:34:60:73:be:72: d4:7d:62:82 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs3IVNp/BZaW3Gi2ZHf18KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk NjlhODMwHhcNMjUxMjE5MTUwMTI5WhcNMjUxMjIwMTUwMTI5WjAzMTEwLwYDVQQD EygxZDk1MjhhMmMxM2VhNTMwZTQzMDNmMzVjMGFiMjUzZTEzYTU0OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSqQKhMQUWjWTg7E95mFmDWGaahz SY1UfL1/pA8efsSkQIIw/oFmLrJPitM+zw/GXrz+ZAKkV/Jh3hd7zT9t3pGlA8Kt PuLDS3tHWf8W/v/t81d9AQaz3NNpgTAEuNOuf36Qm74JVquLlGnajBFAKadkff37 jrGsEAH34nv9M+MS7y1yiIx4FHmo9XHUSp3+l8WRfRZojfoadqgBm4oDB6N70D6O rRhexrugI0rwrRCoesjcpQB8XAuJ/3xrFGJRW/cpnbfYyiNcYoU2YfJOKa5Tg1CF cLkrlnz7Gpv3cQyNzmSgKuRcBv3jFRQm1GBNsy+k6htODQZ/CzAMN48MKQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB2VKKLBPqUw5DA/NcCrJT4TpUktMB8GA1UdIwQY MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw LTA4Mjc5NDU1Zjk0MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzAwL2MwNGQ5OS1kZTQ0LTQwYWItYTJjMC0wODI3OTQ1NWY5 NDEvMS8xLXFibDZHQWp5Yk1VN21VU2tmci1qRzNXbW9NLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYBv 6pueQcZu7HxYvv+e3o9/tYAZ5tbHOLy65VYJTbRB7WA0bM+mJtT4o+y49bw1B0em +f6UvO+5Pp3EEUGwhYw+HW5qqINrwVv+BpqEkrgWd/tifikWMRi3k0ev75ullGmB aLJ5VOO7O0/pObXTog1UjbmHxF8sboSlQAXcLG1z9wrSGAqGNwtqqVHKtXQZ89rs /kEC8lenJnZfPH3X7NnSFq2eqAmGF2vKvDGoVXMVXKQ5rbwG7dTt0jeCHhKV2MBH jNMtUig8+FR1fkCGTJZiIPuhRR6VhO6UEiambkBJ0pTgz6LgZ3neks1GAf37XRcR sylfPTRgc75y1H1igg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:55:04 2025 by rpki-client