This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json) Hash identifier: a/TNu7xHNZuUjewMFk421PzkYL9jd4C0rm3OnIt3j7A= Subject key identifier: 25:16:86:26:69:81:A7:3D:D7:E3:5F:60:CA:9B:8A:E2:C2:A1:0A:A0 Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Certificate serial: 019B3946A18402EE78639FA7A814FB869C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 01:01:28 +0000 Manifest this update: Sat 20 Dec 2025 01:01:28 +0000 Manifest next update: Sun 21 Dec 2025 01:01:28 +0000 Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: bYleM6AsPgNFiw7aNUGGNqxuQmg/fqBjaezSLqZthnk=) 2: 8iGd8L0j6FHu_yxVIMTG7nGhl2o.roa (hash: EtgX9wLO5CJtBR8PjzUlWKaAZQPPQAmS6LoUZ8zB8hc=) 3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:a1:84:02:ee:78:63:9f:a7:a8:14:fb:86:9c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Validity Not Before: Dec 20 01:01:28 2025 GMT Not After : Dec 21 01:01:28 2025 GMT Subject: CN=251686266981a73dd7e35f60ca9b8ae2c2a10aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:26:6b:c4:36:0e:b0:15:e0:bf:69:86:f6: 78:c4:92:ca:60:c6:40:07:fc:b6:f8:09:e2:50:0e: 38:b3:fe:96:72:f8:88:20:a9:b0:d5:62:c1:e0:42: 91:8a:5a:1b:17:70:20:f2:62:9f:d8:9a:ce:fc:b9: e5:d4:c4:b7:d6:fb:3f:22:fd:0c:d8:b8:22:fc:0b: c8:1c:81:50:bd:a0:a9:32:e4:2c:c2:77:37:39:cf: 7d:2f:7e:31:b4:d5:ed:51:17:92:22:52:fd:b1:4b: cb:d4:76:a8:36:be:f3:31:0e:fc:13:de:03:29:4c: e7:28:24:ed:6d:f8:71:33:b6:03:e2:90:3c:39:ff: b8:cc:4d:30:d1:50:3a:25:bc:49:8e:c2:5e:2e:a5: 69:5a:b7:39:10:20:95:c8:bb:13:b4:7f:12:10:bb: ee:36:34:55:ae:19:a6:1f:f6:89:95:8e:d0:fd:b4: 1c:53:ed:eb:b3:6c:e6:92:ad:ab:57:09:97:6f:bb: 86:d9:51:4c:a7:73:d2:88:ae:09:60:6d:6b:9b:64: 96:d9:a4:c6:bf:87:a4:12:d7:de:7c:a5:79:e2:e0: 13:a7:7c:37:6b:d3:1a:62:38:61:cc:89:3a:bf:7b: 70:db:49:15:43:47:71:88:2d:29:4d:e0:15:20:01: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:16:86:26:69:81:A7:3D:D7:E3:5F:60:CA:9B:8A:E2:C2:A1:0A:A0 X509v3 Authority Key Identifier: keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:50:a1:03:c1:44:85:aa:81:2a:c8:54:fd:f7:08:64:69:ff: c4:14:68:ef:11:57:01:3f:71:91:a0:79:2f:84:14:77:7f:58: 66:5c:56:b6:52:cf:25:8a:e9:2a:c6:e1:d6:bd:15:56:9b:2c: ec:50:c9:54:72:34:d7:9a:d0:a7:3c:b6:27:72:36:ce:96:b8: 51:44:c6:c6:75:dd:eb:65:e1:47:5d:5e:5a:36:42:03:0d:1c: f7:dc:b3:50:49:dd:3a:16:aa:3e:a6:0b:1f:19:91:41:50:5a: 36:c7:d1:2f:19:3e:a9:f0:c8:f5:fd:a5:08:72:42:bb:26:0f: e1:0a:3a:9c:67:11:65:a2:36:e8:21:de:c1:f6:37:a4:7e:54: 88:10:f5:11:b9:3a:90:17:c3:37:15:20:51:86:f9:68:52:b5: fc:75:53:99:19:0f:d1:b6:c9:86:2a:7e:f3:c1:66:92:a8:2b: 39:5b:04:a2:40:1a:6c:e7:d5:af:c9:61:22:dc:50:58:90:c8: 46:2d:75:9f:a7:54:54:1a:06:76:0d:30:e2:e4:70:41:3d:be: b9:b6:27:69:c4:ca:cd:24:dd:95:5f:00:d7:76:7d:8e:76:2a: 78:ea:fb:d0:ad:78:7b:43:7a:9f:60:72:38:61:84:eb:39:e5: d2:e4:33:cb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5RqGEAu54Y5+nqBT7hpxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTlhZWE1NmY1MGZmOGY0MzQyY2JlZTJhZjJmMjg4YTE2 OGM5MzAwHhcNMjUxMjIwMDEwMTI4WhcNMjUxMjIxMDEwMTI4WjAzMTEwLwYDVQQD EygyNTE2ODYyNjY5ODFhNzNkZDdlMzVmNjBjYTliOGFlMmMyYTEwYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVEma8Q2DrAV4L9phvZ4xJLKYMZA B/y2+AniUA44s/6WcviIIKmw1WLB4EKRilobF3Ag8mKf2JrO/Lnl1MS31vs/Iv0M 2Lgi/AvIHIFQvaCpMuQswnc3Oc99L34xtNXtUReSIlL9sUvL1HaoNr7zMQ78E94D KUznKCTtbfhxM7YD4pA8Of+4zE0w0VA6JbxJjsJeLqVpWrc5ECCVyLsTtH8SELvu NjRVrhmmH/aJlY7Q/bQcU+3rs2zmkq2rVwmXb7uG2VFMp3PSiK4JYG1rm2SW2aTG v4ekEtfefKV54uATp3w3a9MaYjhhzIk6v3tw20kVQ0dxiC0pTeAVIAGvsQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCUWhiZpgac91+NfYMqbiuLCoQqgMB8GA1UdIwQY MBaAFPiZrqVvUP+PQ0LL7iry8oihaMkwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KbXVwVzlRXzQ5RFFzdnVLdkx5aUtGb3lUQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1 LTliZjE5ZDg0MjIwZi8xLzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2LzJjMmU2MS03Mjc5LTQ4M2MtODQ3NS05YmYxOWQ4NDIy MGYvMS8xLUptdXBXOVFfNDlEUXN2dUt2THlpS0ZveVRBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVCh A8FEhaqBKshU/fcIZGn/xBRo7xFXAT9xkaB5L4QUd39YZlxWtlLPJYrpKsbh1r0V Vpss7FDJVHI015rQpzy2J3I2zpa4UUTGxnXd62XhR11eWjZCAw0c99yzUEndOhaq PqYLHxmRQVBaNsfRLxk+qfDI9f2lCHJCuyYP4Qo6nGcRZaI26CHewfY3pH5UiBD1 Ebk6kBfDNxUgUYb5aFK1/HVTmRkP0bbJhip+88FmkqgrOVsEokAabOfVr8lhItxQ WJDIRi11n6dUVBoGdg0w4uRwQT2+ubYnacTKzSTdlV8A13Z9jnYqeOr70K14e0N6 n2ByOGGE6znl0uQzyw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:57 2025 by rpki-client