This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json) Hash identifier: FqTgIjHiml7+vCwi8RsGM1buDgjBcxMSdiJIMg66cRM= Subject key identifier: 5E:7A:84:F2:79:14:0A:E1:A0:FF:A2:64:A0:74:47:16:29:11:37:80 Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd Certificate serial: 019B1013F00FA31D5F61CA2224B7A642030E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft Manifest number: 09B9 Signing time: Fri 12 Dec 2025 01:01:40 +0000 Manifest this update: Fri 12 Dec 2025 01:01:40 +0000 Manifest next update: Sat 13 Dec 2025 01:01:40 +0000 Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: WpCdOWXaSMqPFqUqzKex2RQI4fXA1/anGFnwNhCDpSM=) 2: BoO9SwQEMHsLwB3D3d0QdThU64M.roa (hash: xEZ0t9PxPtT9JsjJCaQCvAAhYcQDNvD5JhyTg8dedDI=) 3: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=) 4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=) 5: i9UroOeG3v0LQXKmV9ahi8I0w0c.roa (hash: WzgmOp30C9OQ/f6QU939qr7xdVO2Usi3fvlLxJ7jHeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f0:0f:a3:1d:5f:61:ca:22:24:b7:a6:42:03:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd Validity Not Before: Dec 12 01:01:40 2025 GMT Not After : Dec 13 01:01:40 2025 GMT Subject: CN=5e7a84f279140ae1a0ffa264a074471629113780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:1d:95:5e:6a:1a:b7:ef:f5:7a:40:43:8c: d7:ff:3a:60:6d:64:30:e9:b5:08:10:d2:20:d9:c7: 91:9b:6d:a1:5b:b6:61:4e:62:38:c7:a6:09:06:fa: 92:a4:6e:ac:13:2a:d6:c0:c6:10:15:08:5d:2a:11: 54:e0:b4:eb:da:79:2c:7c:a9:b1:19:93:6f:68:a9: c3:46:bf:c8:9c:0a:06:62:1c:d0:5d:f8:77:a8:c6: 17:8d:5f:c6:b3:28:24:4e:eb:49:9d:b4:38:be:ce: 05:59:e9:7f:6b:96:73:28:24:89:94:bc:e0:66:6d: 36:74:5a:ba:8b:20:a6:39:48:1e:d1:68:ba:24:ea: 31:d0:f5:e8:ac:9f:99:04:4b:49:1a:f3:6b:77:22: 60:7d:94:0f:1c:4c:cc:9e:2d:9c:4c:3e:5d:61:7c: 16:70:45:2e:cc:51:4f:36:07:f4:14:0c:f3:5e:cf: a5:86:a3:bf:a8:d9:bd:da:4c:cb:5c:76:20:b9:2a: cb:f8:9d:61:e0:01:4b:1d:16:30:c3:0d:0c:3a:aa: e3:56:53:94:01:5f:45:6d:63:27:11:7e:2b:5c:1c: 1c:62:51:ce:c4:72:24:4b:db:03:41:80:5e:fc:33: d0:66:ee:97:4e:89:e0:d5:75:40:9b:06:ae:17:a7: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7A:84:F2:79:14:0A:E1:A0:FF:A2:64:A0:74:47:16:29:11:37:80 X509v3 Authority Key Identifier: keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:eb:68:81:5e:9c:6c:6b:28:66:3b:64:7b:cc:1a:19:41:2b: 9f:65:08:b2:7d:78:12:1a:1c:f9:3e:6a:03:de:10:7c:b2:f9: a5:33:2b:19:1b:5e:ca:8b:30:c3:93:5f:b2:6c:c6:28:2d:d4: 92:e0:4b:c8:63:74:e5:cd:c7:7f:b8:cd:96:c3:0e:20:45:dd: a2:8d:fd:4f:3b:ac:62:9a:c3:60:ff:f7:15:10:9d:46:fe:3b: 7b:03:03:67:c2:bb:fa:e9:9f:fd:2f:0c:d2:2f:68:0b:a2:ed: d0:eb:af:bf:3b:2a:59:7f:96:1d:f0:b5:44:7c:56:ce:5c:28: 83:79:dd:d6:49:9f:b8:a6:76:68:10:17:60:ae:f4:27:a1:f8: 25:4d:56:ff:2e:bf:90:d8:05:8d:ac:7a:ff:9f:b3:3e:7e:c1: 16:90:d8:b5:6a:4a:a0:9c:1d:51:20:05:c1:aa:d3:98:cd:e5: 26:6e:87:4b:d2:45:9b:db:2b:38:a9:6b:d6:c8:3f:98:60:bb: a8:e1:29:d6:80:e6:32:82:9b:db:df:0b:99:41:f9:01:f3:82: 09:70:ac:f7:33:f9:4d:ca:b9:40:6c:90:5e:38:30:dc:19:42: ae:a3:b8:fe:9b:c0:b1:26:39:cd:89:2b:13:1d:9e:d1:ef:b8: 77:f7:be:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/APox1fYcoiJLemQgMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk ZjQ5ZGQwHhcNMjUxMjEyMDEwMTQwWhcNMjUxMjEzMDEwMTQwWjAzMTEwLwYDVQQD Eyg1ZTdhODRmMjc5MTQwYWUxYTBmZmEyNjRhMDc0NDcxNjI5MTEzNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpodlV5qGrfv9XpAQ4zX/zpgbWQw 6bUIENIg2ceRm22hW7ZhTmI4x6YJBvqSpG6sEyrWwMYQFQhdKhFU4LTr2nksfKmx GZNvaKnDRr/InAoGYhzQXfh3qMYXjV/GsygkTutJnbQ4vs4FWel/a5ZzKCSJlLzg Zm02dFq6iyCmOUge0Wi6JOox0PXorJ+ZBEtJGvNrdyJgfZQPHEzMni2cTD5dYXwW cEUuzFFPNgf0FAzzXs+lhqO/qNm92kzLXHYguSrL+J1h4AFLHRYwww0MOqrjVlOU AV9FbWMnEX4rXBwcYlHOxHIkS9sDQYBe/DPQZu6XTong1XVAmwauF6c1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF56hPJ5FArhoP+iZKB0RxYpETeAMB8GA1UdIwQY MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt OGQyM2FjNWNiNTAyLzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALutogV6c bGsoZjtke8waGUErn2UIsn14Ehoc+T5qA94QfLL5pTMrGRteyosww5NfsmzGKC3U kuBLyGN05c3Hf7jNlsMOIEXdoo39TzusYprDYP/3FRCdRv47ewMDZ8K7+umf/S8M 0i9oC6Lt0OuvvzsqWX+WHfC1RHxWzlwog3nd1kmfuKZ2aBAXYK70J6H4JU1W/y6/ kNgFjax6/5+zPn7BFpDYtWpKoJwdUSAFwarTmM3lJm6HS9JFm9srOKlr1sg/mGC7 qOEp1oDmMoKb298LmUH5AfOCCXCs9zP5Tcq5QGyQXjgw3BlCrqO4/pvAsSY5zYkr Ex2e0e+4d/e+iQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:43:27 2025 by rpki-client