This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json) Hash identifier: a0Y6uieAiUGfvBP+ccimWi6PllgEzVBNs+6ZLcx8Xdk= Subject key identifier: CA:BB:FC:3D:68:93:2D:C0:44:90:DD:10:30:EC:71:0E:0A:22:42:4A Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd Certificate serial: 019B5977071EACB49963C129FC7B5405B5C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft Manifest number: 1248 Signing time: Fri 26 Dec 2025 07:02:11 +0000 Manifest this update: Fri 26 Dec 2025 07:02:11 +0000 Manifest next update: Sat 27 Dec 2025 07:02:11 +0000 Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=) 2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: OHVgIs9t9yP9MjsfUn/O6CyOb4zzAwJVSe/8sQm4AoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:07:1e:ac:b4:99:63:c1:29:fc:7b:54:05:b5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd Validity Not Before: Dec 26 07:02:11 2025 GMT Not After : Dec 27 07:02:11 2025 GMT Subject: CN=cabbfc3d68932dc04490dd1030ec710e0a22424a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:a1:56:81:ad:c2:8f:68:75:b2:67:0e:99: fa:c3:2b:7c:04:8e:67:b6:f8:53:24:6e:f0:4d:46: 58:ef:6d:9c:39:f0:f3:31:9e:00:2e:d3:ac:2d:5c: 1d:54:b7:d6:3b:a1:61:b7:c6:03:28:8b:d6:04:3f: 50:d6:62:e9:6a:6c:5e:80:a3:00:23:b3:85:9b:35: bc:7d:7b:fd:fe:c2:b8:47:0f:95:0f:60:86:01:01: d6:fe:98:c1:37:2e:84:8d:12:e2:63:eb:74:7c:45: d0:cd:40:81:49:36:7e:90:d1:17:87:28:c3:ca:b4: 60:e5:c2:4d:1c:c5:06:da:d9:e3:32:c4:37:1d:ec: 9b:6e:c5:45:45:50:a0:be:2e:3d:4a:4b:9d:a0:8b: 34:8c:4c:12:4d:0a:0b:bc:75:25:4c:a4:c3:f4:0f: 77:f4:1e:e3:d7:dc:c0:56:ba:5f:77:2e:63:f5:fb: 3e:0e:7b:68:eb:a9:9c:80:a4:f3:8c:e6:be:64:1e: 91:ff:ea:2c:72:fe:6c:64:9c:82:cd:ec:53:9d:6b: c9:a7:4b:2a:8c:e5:0c:7d:80:68:a3:c3:22:cc:2a: cb:2b:a1:9c:f5:0e:22:66:ca:06:44:2e:54:dd:69: bd:5d:b8:4f:b6:08:e6:83:e3:5b:6d:a7:67:c4:dd: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BB:FC:3D:68:93:2D:C0:44:90:DD:10:30:EC:71:0E:0A:22:42:4A X509v3 Authority Key Identifier: keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fd:45:3f:37:60:46:54:54:9f:92:aa:2f:2a:7b:1e:61:34: d9:2a:19:d0:7c:39:19:6f:5d:1e:11:0c:b2:22:ce:04:c4:95: 21:97:30:cf:82:3d:2d:29:46:91:2e:c9:e1:7f:c1:af:8c:bc: 48:1d:ea:8d:3e:32:b3:36:06:6e:4d:49:7a:cb:33:c5:68:10: 8e:fe:f5:32:35:db:c5:16:b3:20:97:ef:0e:5e:16:1c:2d:e1: c8:d6:86:a8:67:ed:3f:12:bb:36:40:a6:22:04:ef:78:8b:77: 99:e9:e6:5b:24:ea:fb:c8:24:a0:bb:06:4d:48:a4:44:64:59: 96:a4:b7:c0:c5:dc:ad:ae:16:18:25:c1:aa:9b:ac:19:bd:c0: a3:35:63:f7:8b:f8:2d:42:b6:51:cf:2f:df:de:fa:ae:92:b2: e4:9f:dc:e5:3e:0f:75:cf:b8:37:87:16:50:2c:a6:d1:77:72: e5:69:29:90:c2:e8:f8:48:77:32:9c:02:1f:b2:be:ca:d2:25: 8d:46:fc:02:f7:57:07:fb:ce:23:77:61:7b:6c:b1:37:8d:45: af:36:64:1c:61:e7:da:e9:99:3b:b3:58:1b:7f:8a:65:7d:b6: d2:9f:c8:df:03:bd:29:fd:e2:a6:89:4f:47:4f:3a:9c:91:30: 3f:e7:31:a9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdwcerLSZY8Ep/HtUBbXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MWE4MjIzMDAyZTMxMjRlNWJiMDZlODJkNGY2MGEzNzli OTNkY2QwHhcNMjUxMjI2MDcwMjExWhcNMjUxMjI3MDcwMjExWjAzMTEwLwYDVQQD EyhjYWJiZmMzZDY4OTMyZGMwNDQ5MGRkMTAzMGVjNzEwZTBhMjI0MjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKyhVoGtwo9odbJnDpn6wyt8BI5n tvhTJG7wTUZY722cOfDzMZ4ALtOsLVwdVLfWO6Fht8YDKIvWBD9Q1mLpamxegKMA I7OFmzW8fXv9/sK4Rw+VD2CGAQHW/pjBNy6EjRLiY+t0fEXQzUCBSTZ+kNEXhyjD yrRg5cJNHMUG2tnjMsQ3HeybbsVFRVCgvi49SkudoIs0jEwSTQoLvHUlTKTD9A93 9B7j19zAVrpfdy5j9fs+Dnto66mcgKTzjOa+ZB6R/+oscv5sZJyCzexTnWvJp0sq jOUMfYBoo8MizCrLK6Gc9Q4iZsoGRC5U3Wm9XbhPtgjmg+NbbadnxN1HxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMq7/D1oky3ARJDdEDDscQ4KIkJKMB8GA1UdIwQY MBaAFPkagiMALjEk5bsG6C1PYKN5uT3NMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ScUNJd0F1TVNUbHV3Ym9MVTlnbzNtNVBjMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTQzNzMyLTk2MjEtNGE0Mi04N2Rh LWIyZGUzZWJmM2U3ZS8xLzEtUnFDSXdBdU1TVGx1d2JvTFU5Z28zbTVQYzAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE4Lzk0MzczMi05NjIxLTRhNDItODdkYS1iMmRlM2ViZjNl N2UvMS8xLVJxQ0l3QXVNU1RsdXdib0xVOWdvM201UGMwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXP1F PzdgRlRUn5KqLyp7HmE02SoZ0Hw5GW9dHhEMsiLOBMSVIZcwz4I9LSlGkS7J4X/B r4y8SB3qjT4yszYGbk1JesszxWgQjv71MjXbxRazIJfvDl4WHC3hyNaGqGftPxK7 NkCmIgTveIt3menmWyTq+8gkoLsGTUikRGRZlqS3wMXcra4WGCXBqpusGb3AozVj 94v4LUK2Uc8v3976rpKy5J/c5T4Pdc+4N4cWUCym0Xdy5WkpkMLo+Eh3MpwCH7K+ ytIljUb8AvdXB/vOI3dhe2yxN41FrzZkHGHn2umZO7NYG3+KZX220p/I3wO9Kf3i polPR086nJEwP+cxqQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:06 2025 by rpki-client