This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json) Hash identifier: TblwOxU8ZEOieSCNvUEzFSgyQBYj5nRyGsXjAU3ZgSQ= Subject key identifier: 68:46:DF:7A:68:07:0B:E1:7B:A4:B5:1C:5A:EA:3F:B9:79:D6:6E:22 Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3 Certificate serial: 019B1DCE9FAB59B68AF774A87A1A0304B3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft Manifest number: 170C Signing time: Sun 14 Dec 2025 17:00:39 +0000 Manifest this update: Sun 14 Dec 2025 17:00:39 +0000 Manifest next update: Mon 15 Dec 2025 17:00:39 +0000 Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: NA8AtWuIK5MwqSBsnOu1KyatNAtKOB0X5geoNNhWXHY=) 2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:ce:9f:ab:59:b6:8a:f7:74:a8:7a:1a:03:04:b3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3 Validity Not Before: Dec 14 17:00:39 2025 GMT Not After : Dec 15 17:00:39 2025 GMT Subject: CN=6846df7a68070be17ba4b51c5aea3fb979d66e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:5a:61:bf:02:9a:0f:f6:53:1f:c3:31:7d: f8:56:24:aa:86:c6:95:44:0f:ad:74:36:a6:74:80: 2c:ac:3a:c1:a9:b8:8f:15:74:83:ae:88:f7:42:42: e3:ed:14:6b:e9:57:dc:3a:bb:67:56:fe:de:fb:cb: 1e:4e:fb:78:0d:fe:9b:66:99:3a:1e:11:f8:f0:74: d3:ca:bc:64:c1:89:97:0a:36:f5:e2:6e:57:b5:85: 99:fa:b4:2f:23:76:4a:1a:5b:32:5f:6e:b0:63:94: 70:38:87:34:91:58:35:04:29:a8:fd:c8:0b:ff:13: de:eb:6c:f1:7b:96:63:dd:26:04:cf:37:33:31:c1: 54:73:69:0a:e8:64:5d:0c:67:4e:89:47:2b:79:e9: 44:43:8f:12:89:a2:50:a8:9e:f8:ea:12:9b:d9:dc: 45:90:99:03:ac:5d:21:8a:30:29:b7:48:bd:6a:77: 48:17:a4:e0:7e:86:4e:12:fa:46:09:40:17:cb:bc: a6:66:6a:be:25:a0:1d:de:bd:94:6f:1d:f7:5a:0c: 1f:1c:04:e4:52:9f:e7:dd:04:da:b5:50:bd:92:a5: 2c:db:07:08:25:08:e3:f1:7d:71:0a:38:8f:40:47: 54:50:8b:d9:3b:f3:9b:ed:99:f3:77:2c:09:c4:13: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:DF:7A:68:07:0B:E1:7B:A4:B5:1C:5A:EA:3F:B9:79:D6:6E:22 X509v3 Authority Key Identifier: keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a4:7e:23:02:4a:17:17:b3:7b:81:f0:c0:df:6f:fa:2a:b0: 76:3d:ea:4c:c8:e3:a8:06:87:8d:41:37:5b:2b:82:d8:f9:c3: bf:69:a5:26:8e:6a:13:b2:31:96:88:66:16:92:7e:64:49:cb: ae:71:d1:d7:9a:00:c2:5d:2e:48:91:0d:67:cd:06:39:01:66: 29:77:92:bb:f1:0a:83:82:79:35:1f:b9:82:3f:7a:60:67:b3: 6e:c7:60:9f:1b:55:40:ce:df:16:78:5b:ce:b9:05:ca:93:52: db:dc:47:6b:65:a2:cb:15:ae:d6:ae:40:bd:0a:68:1b:5b:4c: a1:cd:91:00:c7:01:2e:10:11:fa:41:c1:24:cb:29:6f:df:a0: 09:42:e4:d9:53:69:c8:a6:5e:c2:29:5b:1b:e0:cd:60:7f:83: e1:e5:fb:b5:64:67:df:06:db:0a:fe:b5:b2:dc:27:cc:ce:20: ed:65:e7:8a:13:e3:6f:26:28:35:6b:3e:28:23:8e:65:90:44: ef:64:6c:97:96:74:2e:04:67:43:31:42:b0:85:49:72:4d:8f: 69:a2:41:16:b5:ec:05:d2:27:72:14:a5:de:28:24:e0:36:34: 55:47:f9:19:26:1a:70:a6:97:a2:ff:fa:a9:fa:5c:94:b2:ac: 85:18:64:0e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsdzp+rWbaK93SoehoDBLP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz MTIyYjMwHhcNMjUxMjE0MTcwMDM5WhcNMjUxMjE1MTcwMDM5WjAzMTEwLwYDVQQD Eyg2ODQ2ZGY3YTY4MDcwYmUxN2JhNGI1MWM1YWVhM2ZiOTc5ZDY2ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOVaYb8Cmg/2Ux/DMX34ViSqhsaV RA+tdDamdIAsrDrBqbiPFXSDroj3QkLj7RRr6VfcOrtnVv7e+8seTvt4Df6bZpk6 HhH48HTTyrxkwYmXCjb14m5XtYWZ+rQvI3ZKGlsyX26wY5RwOIc0kVg1BCmo/cgL /xPe62zxe5Zj3SYEzzczMcFUc2kK6GRdDGdOiUcreelEQ48SiaJQqJ746hKb2dxF kJkDrF0hijApt0i9andIF6TgfoZOEvpGCUAXy7ymZmq+JaAd3r2Ubx33WgwfHATk Up/n3QTatVC9kqUs2wcIJQjj8X1xCjiPQEdUUIvZO/Ob7ZnzdywJxBNlCQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGhG33poBwvhe6S1HFrqP7l51m4iMB8GA1UdIwQY MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4 LTkyMGI1MmE5ZjZhNS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQyLzA0NjZmOC0zMzBkLTRhYzktYWMxOC05MjBiNTJhOWY2 YTUvMS8xLXFGcENjcE5vNWsxNnJtdkE0dFlwU014SXJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqR+ IwJKFxeze4HwwN9v+iqwdj3qTMjjqAaHjUE3WyuC2PnDv2mlJo5qE7IxlohmFpJ+ ZEnLrnHR15oAwl0uSJENZ80GOQFmKXeSu/EKg4J5NR+5gj96YGezbsdgnxtVQM7f FnhbzrkFypNS29xHa2WiyxWu1q5AvQpoG1tMoc2RAMcBLhAR+kHBJMspb9+gCULk 2VNpyKZewilbG+DNYH+D4eX7tWRn3wbbCv61stwnzM4g7WXnihPjbyYoNWs+KCOO ZZBE72Rsl5Z0LgRnQzFCsIVJck2PaaJBFrXsBdInchSl3igk4DY0VUf5GSYacKaX ov/6qfpclLKshRhkDg== -----END CERTIFICATE-----Generated at Mon Dec 15 00:58:54 2025 by rpki-client