This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft File: 1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json) Hash identifier: Y/kQ67cYX31Q8KMc2FLowoJjRDfOBQ7PaYiAoZNTlX4= Subject key identifier: 0F:22:50:9F:66:D4:34:2D:7A:D9:CC:F1:32:29:32:15:81:9E:DB:1D Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Certificate serial: 019B0E5BC34366D845C4FB5DC27DEA530127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft Manifest number: 1084 Signing time: Thu 11 Dec 2025 17:00:53 +0000 Manifest this update: Thu 11 Dec 2025 17:00:53 +0000 Manifest next update: Fri 12 Dec 2025 17:00:53 +0000 Files and hashes: 1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: 0YYZ/Gu01kIdV8sCYGCQOlQkjH5Wfyu0vtr8ngVl5hQ=) 2: 5h1ttuT1xe8MQqiFLClQXEEG4xI.roa (hash: K15KK7htu+WW4WVVGCjjbJDrrjHd40ite1VZJn9QCX0=) 3: dL6QyTMH147RYvNbATR7wK8mAf8.roa (hash: lSk9mx0oL0nyVdSJ+hGB8xudUQAwa8IcLy2XJ8XP0tY=) 4: q1cKMx3v15DpBk7XfHsCbT0Hr0M.roa (hash: kJPl8z55kb+AOqX1mvjlXQAxwXPA4H1QahAgTk9/aUg=) 5: rm06Swzk55gS84j69N9wUHADa3g.roa (hash: EamVaUPfEGjAAZCep2zHyRQqfCPogilef0zQIPWb7CQ=) 6: zMv4vXM8dPStyIaP6YAH3FrSdFM.roa (hash: VWJ6HSGgCLyVghdMpKY1d9rx6m4eAxvybOUx+qVtZ3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:c3:43:66:d8:45:c4:fb:5d:c2:7d:ea:53:01:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Validity Not Before: Dec 11 17:00:53 2025 GMT Not After : Dec 12 17:00:53 2025 GMT Subject: CN=0f22509f66d4342d7ad9ccf132293215819edb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:48:04:a9:db:65:7a:a9:c1:cf:17:63:c4: ba:ac:d2:ed:ea:1c:6a:4f:b8:66:df:19:49:bf:00: 0c:bc:48:12:80:bd:75:83:68:72:ef:d3:35:26:9a: be:42:5d:f6:01:82:d7:01:8d:cd:37:92:0a:bf:f9: ad:3f:69:00:3d:74:dc:c9:6a:c7:e9:97:1d:0c:d7: c1:fe:94:08:2b:35:2b:07:e9:c5:86:41:12:9d:b8: 12:fb:c2:9b:65:2d:84:f7:2b:b5:ea:a3:7e:f2:3a: 98:2a:f2:40:bc:01:83:8b:19:cd:0a:66:fa:dd:07: a7:ff:94:4f:02:cd:b9:d8:45:f3:de:58:4c:29:79: b6:80:bb:30:7a:83:0e:07:27:06:ed:1a:5d:dd:a6: e5:6c:f7:fa:ea:cb:07:05:bf:b4:88:3b:b0:06:0b: 7c:49:a1:b5:1c:b4:5a:9c:21:d5:e8:2e:01:1a:e7: b9:77:9d:a9:f1:9a:70:b2:80:fb:7c:9d:b9:6f:35: 7b:ce:98:4c:1f:d7:b5:e6:62:75:82:b8:e5:1a:4a: 0e:7a:cc:48:b4:ac:33:e3:c9:f2:54:96:ce:77:9d: 68:d0:e5:d6:dc:1a:bc:f4:1f:c9:72:fb:a2:59:f4: fb:b5:8a:42:23:4f:d9:8c:86:95:7b:ad:c1:7d:09: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:22:50:9F:66:D4:34:2D:7A:D9:CC:F1:32:29:32:15:81:9E:DB:1D X509v3 Authority Key Identifier: keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:63:7f:e1:74:9d:f0:55:58:92:31:04:70:1d:c7:17:f0:67: dc:d8:ad:6a:72:b6:a2:f7:6c:09:e6:a0:da:69:1b:35:e1:0e: 07:09:9c:b7:80:c0:67:85:0a:1b:80:38:17:62:41:4c:2d:42: 56:4b:24:5b:3f:4f:6c:e7:8f:0f:42:64:29:64:62:8c:ac:3c: 71:ce:99:66:4d:c7:ed:45:5c:f4:51:69:4b:6b:6e:a5:7c:d8: 52:4f:7e:e1:0c:5b:92:a3:a7:10:7c:e9:2d:15:09:16:c3:e3: c5:8c:9d:4d:9d:c4:90:e9:26:30:ba:67:2e:25:33:b5:e0:37: c8:b0:fc:53:18:6a:9f:d5:73:63:8f:b8:3d:79:4c:59:20:72: 14:b5:aa:e6:68:b1:f4:b8:f3:36:aa:40:eb:81:79:3c:2f:8f: 09:17:d0:07:82:8e:1b:e7:8f:cf:db:66:97:58:96:35:07:94: 42:75:ef:0d:54:64:72:e9:89:c4:a9:74:0c:d3:75:c5:1b:d0: 9b:5b:e2:71:29:cb:83:7a:03:ca:5e:6d:ba:97:78:e6:3f:f9: a3:58:31:fb:b6:7d:19:b4:d3:d0:f9:53:c0:e6:ca:2e:62:3a: 89:4d:66:4c:f6:f2:d7:a0:fa:9b:64:f3:c8:5d:1c:ac:fd:0a: 86:1a:cb:68 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOW8NDZthFxPtdwn3qUwEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm YjhmYzcwHhcNMjUxMjExMTcwMDUzWhcNMjUxMjEyMTcwMDUzWjAzMTEwLwYDVQQD EygwZjIyNTA5ZjY2ZDQzNDJkN2FkOWNjZjEzMjI5MzIxNTgxOWVkYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfdIBKnbZXqpwc8XY8S6rNLt6hxq T7hm3xlJvwAMvEgSgL11g2hy79M1Jpq+Ql32AYLXAY3NN5IKv/mtP2kAPXTcyWrH 6ZcdDNfB/pQIKzUrB+nFhkESnbgS+8KbZS2E9yu16qN+8jqYKvJAvAGDixnNCmb6 3Qen/5RPAs252EXz3lhMKXm2gLsweoMOBycG7Rpd3ablbPf66ssHBb+0iDuwBgt8 SaG1HLRanCHV6C4BGue5d52p8ZpwsoD7fJ25bzV7zphMH9e15mJ1grjlGkoOesxI tKwz48nyVJbOd51o0OXW3Bq89B/JcvuiWfT7tYpCI0/ZjIaVe63BfQmukQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA8iUJ9m1DQtetnM8TIpMhWBntsdMB8GA1UdIwQY MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm LTc2NmMwNmU1ZjA3NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNiLzgyNDQ1Zi1kMWQ3LTQ2YjAtYWY0Zi03NjZjMDZlNWYw NzUvMS8xLUZWYWVJUDVLNS1icENLcGEwNDVlX1g3ajhjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2N/ 4XSd8FVYkjEEcB3HF/Bn3NitanK2ovdsCeag2mkbNeEOBwmct4DAZ4UKG4A4F2JB TC1CVkskWz9PbOePD0JkKWRijKw8cc6ZZk3H7UVc9FFpS2tupXzYUk9+4QxbkqOn EHzpLRUJFsPjxYydTZ3EkOkmMLpnLiUzteA3yLD8Uxhqn9VzY4+4PXlMWSByFLWq 5mix9LjzNqpA64F5PC+PCRfQB4KOG+ePz9tml1iWNQeUQnXvDVRkcumJxKl0DNN1 xRvQm1vicSnLg3oDyl5tupd45j/5o1gx+7Z9GbTT0PlTwObKLmI6iU1mTPby16D6 m2TzyF0crP0KhhrLaA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:47 2025 by rpki-client