This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json) Hash identifier: eoTmXU5oaKyZeTYf2iSDJ67u/1ANQUQymPnb2/ktHvQ= Subject key identifier: 35:85:EC:3E:C9:85:A9:69:F0:F6:00:B0:89:F9:DF:3B:0A:49:9B:0A Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99 Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199 Certificate serial: 019B59ACBB1A28AE3670073895FE433961D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft Manifest number: 0F07 Signing time: Fri 26 Dec 2025 08:00:50 +0000 Manifest this update: Fri 26 Dec 2025 08:00:50 +0000 Manifest next update: Sat 27 Dec 2025 08:00:50 +0000 Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: JThwJ/+25fEkJe/FdguhrcGoFYL7eIi7uUhVivUJdF4=) 2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:bb:1a:28:ae:36:70:07:38:95:fe:43:39:61:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199 Validity Not Before: Dec 26 08:00:50 2025 GMT Not After : Dec 27 08:00:50 2025 GMT Subject: CN=3585ec3ec985a969f0f600b089f9df3b0a499b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:29:fc:8b:20:71:b7:a9:a9:8a:02:56:51: b2:7e:51:4e:84:93:fc:65:a7:ec:bc:77:49:bb:84: 77:92:69:39:3a:6d:8f:07:df:f2:5e:5f:53:f4:76: 23:29:0a:e6:04:f5:7b:ec:80:cf:85:5f:55:78:13: 06:a6:f2:4e:1d:22:9a:e5:e3:55:30:42:c8:7f:da: bd:59:27:c1:d7:10:a3:9f:25:41:84:73:e0:13:9e: 7c:8c:84:dc:a7:ee:a7:4b:e0:a2:00:a7:57:80:7f: cc:c2:c0:f7:46:7e:43:04:3f:93:53:1a:0f:27:6e: 15:0f:06:3c:88:83:28:fa:db:4b:8b:4d:c8:b1:3e: 7e:c5:42:45:e8:af:2b:6b:1c:26:d6:36:0c:92:c4: 48:7c:44:0f:a3:f2:52:f7:1a:80:3c:ff:48:b7:94: e2:6e:a8:fd:bf:c4:de:9b:af:89:91:1c:39:a8:d9: b6:b5:bb:87:79:ab:10:f3:bf:5f:8c:74:2f:7c:54: 21:3d:3b:4f:7e:e7:09:20:d0:44:b9:d8:ad:74:f5: 0a:4b:cf:48:4d:e8:aa:ce:69:7c:5a:92:60:e3:ca: 91:f8:28:7e:70:ef:07:16:5a:68:ed:6f:da:83:46: bc:12:39:39:7a:08:47:b5:a3:54:3d:9d:d6:97:af: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:85:EC:3E:C9:85:A9:69:F0:F6:00:B0:89:F9:DF:3B:0A:49:9B:0A X509v3 Authority Key Identifier: keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a3:05:7a:52:73:70:25:67:0c:3a:75:dc:a2:0b:a0:fe:ba: 4f:c1:fc:5d:dc:00:b8:69:8f:28:e7:cb:48:01:10:a4:00:8b: cd:dc:9d:9a:ad:fd:9c:7c:ee:f0:f0:d8:56:f0:c4:0d:d6:61: 97:bc:79:dc:4c:8e:fc:54:51:8f:9c:82:e8:63:7b:de:81:1e: ba:bb:03:22:3e:08:c1:40:11:ca:7f:ae:25:26:c3:31:af:79: dc:de:35:b5:24:55:ae:d3:06:c2:d5:79:5f:56:2d:68:60:f6: 59:ed:ff:ea:d2:4b:02:e1:d5:40:f2:69:6f:87:53:87:b0:0e: 62:b1:94:7e:62:78:41:d1:e5:63:cc:21:e4:fa:4f:36:e5:e7: 5b:d2:96:24:41:0a:d0:66:68:a9:ef:16:7d:b4:43:66:c4:b9: 9a:f0:0e:1b:fe:ad:51:d6:ba:93:f1:86:78:ce:f0:ff:af:ca: b7:f1:97:e7:1b:3c:54:8e:07:66:b8:01:c8:0e:dd:d3:14:13: 8f:2f:e2:76:1c:47:b1:01:1e:69:cd:cc:0c:ab:b7:81:92:90: a4:37:a4:31:49:cb:d5:10:fe:b5:6c:2a:51:de:9f:04:95:50: 38:4b:33:28:7d:9e:96:a1:f0:89:a1:79:12:8f:6f:ea:17:e4: 6a:46:8d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLsaKK42cAc4lf5DOWHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTEyMjgzNzQ3NDJkZjU0NGFhOTMwNThjNWEzYmQzZDE2 NDIxOTkwHhcNMjUxMjI2MDgwMDUwWhcNMjUxMjI3MDgwMDUwWjAzMTEwLwYDVQQD EygzNTg1ZWMzZWM5ODVhOTY5ZjBmNjAwYjA4OWY5ZGYzYjBhNDk5YjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweUp/IsgcbepqYoCVlGyflFOhJP8 ZafsvHdJu4R3kmk5Om2PB9/yXl9T9HYjKQrmBPV77IDPhV9VeBMGpvJOHSKa5eNV MELIf9q9WSfB1xCjnyVBhHPgE558jITcp+6nS+CiAKdXgH/MwsD3Rn5DBD+TUxoP J24VDwY8iIMo+ttLi03IsT5+xUJF6K8raxwm1jYMksRIfEQPo/JS9xqAPP9It5Ti bqj9v8Tem6+JkRw5qNm2tbuHeasQ879fjHQvfFQhPTtPfucJINBEuditdPUKS89I Teiqzml8WpJg48qR+Ch+cO8HFlpo7W/ag0a8Ejk5eghHtaNUPZ3Wl696ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWF7D7Jhalp8PYAsIn53zsKSZsKMB8GA1UdIwQY MBaAFH9RIoN0dC31RKqTBYxaO9PRZCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTIt MDFlYjAzNjg0ZjA5LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTItMDFlYjAzNjg0ZjA5 LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqMFelJz cCVnDDp13KILoP66T8H8XdwAuGmPKOfLSAEQpACLzdydmq39nHzu8PDYVvDEDdZh l7x53EyO/FRRj5yC6GN73oEeursDIj4IwUARyn+uJSbDMa953N41tSRVrtMGwtV5 X1YtaGD2We3/6tJLAuHVQPJpb4dTh7AOYrGUfmJ4QdHlY8wh5PpPNuXnW9KWJEEK 0GZoqe8WfbRDZsS5mvAOG/6tUda6k/GGeM7w/6/Kt/GX5xs8VI4HZrgByA7d0xQT jy/idhxHsQEeac3MDKu3gZKQpDekMUnL1RD+tWwqUd6fBJVQOEszKH2elqHwiaF5 Eo9v6hfkakaN5A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:05 2025 by rpki-client