This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json) Hash identifier: DaaVcwSsF9D9pHpbmenzhyNrtduILnHvlSSupexfB+c= Subject key identifier: 84:B5:67:14:B2:01:72:06:6B:41:E5:F3:9F:17:EC:45:ED:A5:1F:47 Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Certificate serial: 019B3569987004844B056819F781E707DA59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 07:01:11 +0000 Manifest this update: Fri 19 Dec 2025 07:01:11 +0000 Manifest next update: Sat 20 Dec 2025 07:01:11 +0000 Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: /+dXoGr77ikQzDD3yWmBrgx6gEb+9YbtrEx6uB7gWO4=) 2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=) 3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:98:70:04:84:4b:05:68:19:f7:81:e7:07:da:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Validity Not Before: Dec 19 07:01:11 2025 GMT Not After : Dec 20 07:01:11 2025 GMT Subject: CN=84b56714b20172066b41e5f39f17ec45eda51f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:94:e5:78:8c:65:65:34:7a:ac:bd:72:c6: 69:23:7f:c0:d3:00:ef:ad:4d:fe:4a:61:88:63:57: 31:50:73:19:71:d8:4f:ed:b3:89:58:21:6e:61:1c: 50:ac:67:ce:ea:44:bf:28:84:44:2d:5c:d8:31:21: 00:41:47:22:12:9f:60:06:54:f5:29:ba:4d:32:7a: f6:f6:cf:01:f4:fa:a5:18:f2:59:ea:04:9f:03:b9: db:4a:69:57:ef:c7:e0:ce:f8:85:2e:4c:f4:f6:2e: bb:9d:e2:ee:c1:ee:38:65:8c:6f:79:f6:5c:33:a5: 23:c4:20:29:f9:61:d7:84:20:32:00:2f:e2:14:12: 2c:5f:eb:da:78:31:46:3c:58:08:7e:6b:8b:93:a2: 8f:91:b4:ac:e8:19:73:dc:fd:06:2c:14:12:1e:5d: 6d:3a:20:37:db:3d:36:e6:ae:2c:89:e7:b9:5b:a7: 4e:37:1a:a0:d5:93:b2:ab:06:29:01:c0:05:4b:23: 5b:7a:4e:24:73:7d:c7:40:66:a3:c3:62:a1:dc:55: 12:a9:22:80:3a:c8:28:eb:dd:27:34:cb:e2:f2:c7: f7:c3:6d:9d:91:6a:a0:b1:84:46:22:ab:26:29:3f: d1:ae:f6:ad:e4:77:d0:c3:91:d9:52:d2:86:a2:3f: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:67:14:B2:01:72:06:6B:41:E5:F3:9F:17:EC:45:ED:A5:1F:47 X509v3 Authority Key Identifier: keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cf:af:70:59:27:4f:fa:26:4e:8c:3c:fc:85:a9:2d:b8:b2: ab:43:ba:d8:7f:01:de:2e:bf:95:99:bd:c5:da:1e:85:94:7a: 6e:6f:5d:7c:0d:4f:34:95:6d:50:b6:cc:91:4c:e9:02:c1:04: 57:f3:7f:09:83:a8:e9:de:dd:06:68:28:8c:bb:2e:b7:18:c5: 5c:68:39:3c:a1:ac:75:46:25:e8:70:3a:f2:df:00:70:ed:df: 38:53:81:82:77:8b:62:92:f7:e9:4a:71:06:8e:85:02:ed:4c: 0a:58:6a:49:95:f7:18:5e:dc:9b:e2:bd:45:3d:06:da:42:cc: 0b:36:f2:fe:23:a2:46:12:3e:ca:04:34:43:54:c0:15:1b:56: 24:3e:5c:a7:e1:3b:ef:09:64:43:32:4e:98:a2:2c:dc:a6:9d: ee:29:4a:45:f9:d2:6b:ea:f9:c6:df:df:3b:a5:36:48:ef:93: b8:b6:03:c5:99:91:46:f9:c8:0d:e0:57:92:8e:e3:bd:13:3a: fc:08:06:ab:bc:e0:2c:9d:89:21:d9:cb:87:76:3c:b0:5b:b8: b6:2c:42:d3:37:95:cb:5e:2e:5e:12:1a:b5:4c:8f:29:e2:0e: a7:cb:a4:99:4b:af:45:e0:d7:60:2f:ef:1f:4c:ea:ae:b9:1a: 18:01:f1:38 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs1aZhwBIRLBWgZ94HnB9pZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk YTExMjYwHhcNMjUxMjE5MDcwMTExWhcNMjUxMjIwMDcwMTExWjAzMTEwLwYDVQQD Eyg4NGI1NjcxNGIyMDE3MjA2NmI0MWU1ZjM5ZjE3ZWM0NWVkYTUxZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+OU5XiMZWU0eqy9csZpI3/A0wDv rU3+SmGIY1cxUHMZcdhP7bOJWCFuYRxQrGfO6kS/KIRELVzYMSEAQUciEp9gBlT1 KbpNMnr29s8B9PqlGPJZ6gSfA7nbSmlX78fgzviFLkz09i67neLuwe44ZYxvefZc M6UjxCAp+WHXhCAyAC/iFBIsX+vaeDFGPFgIfmuLk6KPkbSs6Blz3P0GLBQSHl1t OiA32z025q4siee5W6dONxqg1ZOyqwYpAcAFSyNbek4kc33HQGajw2Kh3FUSqSKA Osgo690nNMvi8sf3w22dkWqgsYRGIqsmKT/Rrvat5HfQw5HZUtKGoj+0HwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIS1ZxSyAXIGa0Hl858X7EXtpR9HMB8GA1UdIwQY MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4 OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM+v cFknT/omTow8/IWpLbiyq0O62H8B3i6/lZm9xdoehZR6bm9dfA1PNJVtULbMkUzp AsEEV/N/CYOo6d7dBmgojLsutxjFXGg5PKGsdUYl6HA68t8AcO3fOFOBgneLYpL3 6UpxBo6FAu1MClhqSZX3GF7cm+K9RT0G2kLMCzby/iOiRhI+ygQ0Q1TAFRtWJD5c p+E77wlkQzJOmKIs3Kad7ilKRfnSa+r5xt/fO6U2SO+TuLYDxZmRRvnIDeBXko7j vRM6/AgGq7zgLJ2JIdnLh3Y8sFu4tixC0zeVy14uXhIatUyPKeIOp8ukmUuvReDX YC/vH0zqrrkaGAHxOA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:23:04 2025 by rpki-client