This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json) Hash identifier: LdsMom2rXIuWukpqam5DB0ubVpe0xmcMjKyCJ2G6wIc= Subject key identifier: 89:2E:43:BD:15:00:52:B7:B4:3D:C1:02:05:33:C9:6E:56:91:16:6E Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11 Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11 Certificate serial: 019B0D8078580203D525ACABC46C942F01A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft Manifest number: 07FA Signing time: Thu 11 Dec 2025 13:01:21 +0000 Manifest this update: Thu 11 Dec 2025 13:01:21 +0000 Manifest next update: Fri 12 Dec 2025 13:01:21 +0000 Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 4KueNpNZBAdwlUV4WZHHCFpMqSZu/bNeHJhUYpPN3LU=) 2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:78:58:02:03:d5:25:ac:ab:c4:6c:94:2f:01:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11 Validity Not Before: Dec 11 13:01:21 2025 GMT Not After : Dec 12 13:01:21 2025 GMT Subject: CN=892e43bd150052b7b43dc1020533c96e5691166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:8d:48:0e:74:1a:9f:24:e9:05:55:10:a1: 10:ae:fd:f9:46:13:17:75:cb:6c:9f:15:f9:78:13: 94:56:c4:18:39:07:65:42:d4:22:90:8c:85:be:27: c3:df:de:42:2f:83:e3:f5:81:c0:85:9e:e8:6a:90: 23:2c:f7:94:e7:54:fc:35:30:6d:da:4b:22:12:5b: f4:0b:93:26:8f:78:71:17:a1:3e:81:7b:ac:03:02: f0:13:c7:d6:1c:6a:e6:e8:b5:da:36:ed:d2:42:31: 77:69:76:4e:0a:fa:ab:9f:47:5f:b9:36:d4:02:1d: 43:1c:7b:e6:52:7a:8c:56:8a:3e:8a:41:44:74:90: d5:ba:2b:34:93:c5:10:d3:6f:ab:dd:84:e7:97:c7: 7c:25:d3:f3:4f:1e:f9:79:e7:47:f6:ac:7a:bf:37: c1:71:91:3b:a0:b9:c8:5c:c0:cc:e0:0c:82:af:0c: bf:f9:ce:4b:ac:3c:c9:b5:22:3e:5c:2e:74:90:a1: b7:be:1a:f2:8c:d4:44:b4:85:33:e7:c7:a8:9c:6b: 34:de:f4:63:7f:bd:f9:f1:97:3e:a4:3a:86:90:3d: 12:88:34:a3:bf:8d:dd:5a:c0:57:1c:41:4c:e7:ef: 58:7d:fc:35:1f:06:2b:d9:77:fe:68:af:e9:45:52: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:43:BD:15:00:52:B7:B4:3D:C1:02:05:33:C9:6E:56:91:16:6E X509v3 Authority Key Identifier: keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:03:00:1d:9c:d7:eb:8a:23:94:1a:6e:6f:21:a8:d2:1f: bc:14:83:0a:c4:10:8c:6f:79:06:6c:49:a0:6f:0e:71:27:01: 4f:e3:f7:9e:72:03:f5:a0:86:a7:1b:4a:09:b7:34:86:aa:a5: 41:3f:a8:22:f5:c6:5c:e2:16:c7:54:30:84:26:86:5b:9e:80: 99:73:a1:3f:2b:35:60:1d:fb:78:20:0e:68:cc:bc:e5:4b:d6: 06:7f:1c:0b:9a:fe:8b:d1:53:13:78:31:94:5f:81:d0:0a:76: e7:8f:93:f8:87:64:dc:12:06:41:53:3f:2c:5b:05:08:3d:7a: e5:91:a3:0a:73:7c:75:29:b6:c7:68:e1:ae:86:1b:50:b5:14: d2:43:5d:2d:fd:da:9b:37:2b:05:75:c7:65:03:60:82:90:0e: 0c:c1:67:d8:71:b5:3d:37:07:9a:c8:18:d8:6f:38:b7:c5:31: d5:5c:2a:44:c0:92:9e:d4:7f:d9:f3:a7:f9:ac:7e:04:5d:d7: 7c:d3:d9:a6:ff:78:40:47:32:de:4a:9b:a2:2d:a4:4d:55:4a: cc:93:5f:4c:85:5f:c5:85:3a:37:11:88:02:d5:33:18:7f:67: bd:d6:f2:6e:b3:0c:d1:3e:62:85:24:45:b3:f1:81:49:d3:a9: 05:db:ae:88 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsNgHhYAgPVJayrxGyULwGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDViNTczZmIwZDI2OTk5MmE3OWE5ZTZiNDVjZGQ2MjBk ZWNjMTEwHhcNMjUxMjExMTMwMTIxWhcNMjUxMjEyMTMwMTIxWjAzMTEwLwYDVQQD Eyg4OTJlNDNiZDE1MDA1MmI3YjQzZGMxMDIwNTMzYzk2ZTU2OTExNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3amNSA50Gp8k6QVVEKEQrv35RhMX dctsnxX5eBOUVsQYOQdlQtQikIyFvifD395CL4Pj9YHAhZ7oapAjLPeU51T8NTBt 2ksiElv0C5Mmj3hxF6E+gXusAwLwE8fWHGrm6LXaNu3SQjF3aXZOCvqrn0dfuTbU Ah1DHHvmUnqMVoo+ikFEdJDVuis0k8UQ02+r3YTnl8d8JdPzTx75eedH9qx6vzfB cZE7oLnIXMDM4AyCrwy/+c5LrDzJtSI+XC50kKG3vhryjNREtIUz58eonGs03vRj f7358Zc+pDqGkD0SiDSjv43dWsBXHEFM5+9Yffw1HwYr2Xf+aK/pRVLyJwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIkuQ70VAFK3tD3BAgUzyW5WkRZuMB8GA1UdIwQY MBaAFPvVtXP7DSaZkqeanmtFzdYg3swRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05VzFjX3NOSnBtU3A1cWVhMFhOMWlEZXpCRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAy LTUwZjNkMWFlOTQ0Mi8xLzEtOVcxY19zTkpwbVNwNXFlYTBYTjFpRGV6QkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRiLzY0MzhjMC01NGU1LTRiMzMtOTUwMi01MGYzZDFhZTk0 NDIvMS8xLTlXMWNfc05KcG1TcDVxZWEwWE4xaURlekJFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXYD AB2c1+uKI5Qabm8hqNIfvBSDCsQQjG95BmxJoG8OcScBT+P3nnID9aCGpxtKCbc0 hqqlQT+oIvXGXOIWx1QwhCaGW56AmXOhPys1YB37eCAOaMy85UvWBn8cC5r+i9FT E3gxlF+B0Ap254+T+Idk3BIGQVM/LFsFCD165ZGjCnN8dSm2x2jhroYbULUU0kNd Lf3amzcrBXXHZQNggpAODMFn2HG1PTcHmsgY2G84t8Ux1VwqRMCSntR/2fOn+ax+ BF3XfNPZpv94QEcy3kqboi2kTVVKzJNfTIVfxYU6NxGIAtUzGH9nvdbybrMM0T5i hSRFs/GBSdOpBduuiA== -----END CERTIFICATE-----Generated at Thu Dec 11 17:33:57 2025 by rpki-client