This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json) Hash identifier: vSDSDEPc5Bibo7JaKwjg5qUFWYmHHpuXNasBc/Dmd28= Subject key identifier: FE:82:FE:5C:04:08:36:98:56:6C:1F:C8:76:40:D0:EE:1C:58:BE:66 Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e Certificate serial: 019B0EC9DE4F853CACDC716FBCAD09BD5829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft Manifest number: 1008 Signing time: Thu 11 Dec 2025 19:01:09 +0000 Manifest this update: Thu 11 Dec 2025 19:01:09 +0000 Manifest next update: Fri 12 Dec 2025 19:01:09 +0000 Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: WEGAA/g7LF7/E3D/J5klE5T4MLZrH91htGBw1MkH9X0=) 2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:de:4f:85:3c:ac:dc:71:6f:bc:ad:09:bd:58:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e Validity Not Before: Dec 11 19:01:09 2025 GMT Not After : Dec 12 19:01:09 2025 GMT Subject: CN=fe82fe5c04083698566c1fc87640d0ee1c58be66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:d9:f5:f9:9e:fe:d2:21:7e:50:b0:c0:82: 25:3b:bc:e6:04:db:ee:5e:5b:4b:f7:73:32:26:aa: a4:6d:ce:82:26:95:9b:79:e7:07:4f:f7:83:b9:23: 25:db:c1:58:44:06:fb:dd:2e:5d:d6:48:77:a3:9d: 2b:51:9a:9e:0d:30:67:16:90:8e:8d:37:e1:9a:1a: 29:60:d3:da:81:92:86:b6:8c:d7:fe:b2:6f:4e:6a: d0:03:92:a6:e3:9a:0c:4a:db:f5:b7:c7:b8:2e:ce: cd:6f:36:7c:8d:c0:4e:d8:66:bc:7c:a8:5c:6b:ba: a8:d5:e7:c1:1e:c6:e5:29:14:26:00:49:03:c4:fc: 52:df:c4:41:42:e0:17:5c:cd:b0:be:89:46:02:af: c3:c5:ee:b4:c0:99:ef:ef:91:26:94:95:26:1e:19: c8:94:5f:1c:23:f9:ca:58:a8:87:a1:e3:10:7a:33: f9:2e:b3:9a:a2:a1:31:0e:b6:16:ba:7a:c4:42:2c: 6b:cb:b7:95:e2:dd:b1:8c:39:09:e3:3a:02:35:79: 01:05:48:8f:e3:56:70:fd:64:5b:90:0d:23:20:e2: a9:7a:de:51:94:49:70:b6:3d:ee:04:7c:45:ef:48: f9:63:46:7b:d1:25:84:6b:af:5a:b2:d3:00:8f:60: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:82:FE:5C:04:08:36:98:56:6C:1F:C8:76:40:D0:EE:1C:58:BE:66 X509v3 Authority Key Identifier: keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:74:93:8c:6c:76:bc:be:d7:03:3b:46:c6:16:df:0b:a5:5b: 1c:be:94:47:05:b8:e3:0b:a9:dc:be:5a:f9:da:36:d7:3c:8c: 89:23:f2:40:99:5e:b4:39:52:1f:06:4a:c4:9b:46:03:68:e1: 16:d7:9e:ba:32:69:50:be:44:57:32:72:46:53:3b:77:27:78: 38:da:45:16:32:6c:81:18:f2:c8:a3:52:f4:80:1d:2e:64:ec: 9e:ed:ce:50:4b:de:a2:cb:b2:5d:45:bd:4a:ba:7a:cd:21:ea: 21:e5:af:d3:84:22:bf:26:6f:fe:a5:e6:31:bd:1a:1b:16:76: 09:7a:a8:ca:b7:63:b7:b9:86:7a:37:5f:46:fc:20:0f:4b:16: d3:70:a1:7b:4a:ef:4a:2a:52:80:72:be:f8:ff:fb:2b:4f:76: 7d:7b:df:1f:9e:0d:61:43:b0:1d:c1:ab:0f:a2:cf:a5:23:06: c4:9a:3c:19:3e:62:78:9a:5c:0d:0b:17:8e:38:ba:3f:a6:59: a9:48:25:a6:bc:7c:ec:8c:c1:7e:80:44:78:34:64:81:dc:c1: 5a:62:dc:93:9f:eb:e9:e9:76:1c:c5:ad:40:6e:55:d1:9e:8a: b2:de:b1:f5:f1:cc:62:67:07:b5:93:b4:b5:ea:70:b6:22:6e: 54:33:2f:10 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOyd5PhTys3HFvvK0JvVgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3 YzMwNmUwHhcNMjUxMjExMTkwMTA5WhcNMjUxMjEyMTkwMTA5WjAzMTEwLwYDVQQD EyhmZTgyZmU1YzA0MDgzNjk4NTY2YzFmYzg3NjQwZDBlZTFjNThiZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmubZ9fme/tIhflCwwIIlO7zmBNvu XltL93MyJqqkbc6CJpWbeecHT/eDuSMl28FYRAb73S5d1kh3o50rUZqeDTBnFpCO jTfhmhopYNPagZKGtozX/rJvTmrQA5Km45oMStv1t8e4Ls7NbzZ8jcBO2Ga8fKhc a7qo1efBHsblKRQmAEkDxPxS38RBQuAXXM2wvolGAq/Dxe60wJnv75EmlJUmHhnI lF8cI/nKWKiHoeMQejP5LrOaoqExDrYWunrEQixry7eV4t2xjDkJ4zoCNXkBBUiP 41Zw/WRbkA0jIOKpet5RlElwtj3uBHxF70j5Y0Z70SWEa69astMAj2DIhQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP6C/lwECDaYVmwfyHZA0O4cWL5mMB8GA1UdIwQY MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw LTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFlL2YzY2EyMy04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYy OWUvMS8xLUVUaDZ2cXRQTENSOGc3bHZ4d0Vna2g4TUc0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3nST jGx2vL7XAztGxhbfC6VbHL6URwW44wup3L5a+do21zyMiSPyQJletDlSHwZKxJtG A2jhFteeujJpUL5EVzJyRlM7dyd4ONpFFjJsgRjyyKNS9IAdLmTsnu3OUEveosuy XUW9Srp6zSHqIeWv04QivyZv/qXmMb0aGxZ2CXqoyrdjt7mGejdfRvwgD0sW03Ch e0rvSipSgHK++P/7K092fXvfH54NYUOwHcGrD6LPpSMGxJo8GT5ieJpcDQsXjji6 P6ZZqUglprx87IzBfoBEeDRkgdzBWmLck5/r6el2HMWtQG5V0Z6Kst6x9fHMYmcH tZO0tepwtiJuVDMvEA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:42 2025 by rpki-client