This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json) Hash identifier: dt5NeeT5LEDAFyEmAtO+hbmEQYarG43u0yKWvzYpYOo= Subject key identifier: 33:1F:D2:C2:FC:2B:BE:4B:41:7F:65:23:19:A3:C1:87:8B:4F:A6:63 Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439 Certificate serial: 019B0F37714A77896D4F8E21AD95368AD658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft Manifest number: 0AA0 Signing time: Thu 11 Dec 2025 21:00:50 +0000 Manifest this update: Thu 11 Dec 2025 21:00:50 +0000 Manifest next update: Fri 12 Dec 2025 21:00:50 +0000 Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: kVLdXSZrSYcjd82jOT3WbkGKjtH4gaRTvfR0ianfig8=) 2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=) 3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:71:4a:77:89:6d:4f:8e:21:ad:95:36:8a:d6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439 Validity Not Before: Dec 11 21:00:50 2025 GMT Not After : Dec 12 21:00:50 2025 GMT Subject: CN=331fd2c2fc2bbe4b417f652319a3c1878b4fa663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:89:02:c1:de:99:d8:6e:b3:8b:83:17:98: f6:18:8f:c8:b4:53:f4:35:dc:e3:34:26:e8:db:db: b4:24:fc:90:84:72:fa:a6:30:f6:2d:4f:80:02:f2: 9e:7e:74:72:ff:5c:33:96:4f:f1:a4:98:e3:ed:26: d3:bb:c8:e9:b9:f9:fb:a8:b4:3a:29:d6:9f:9d:1d: a8:34:65:b0:7b:57:2b:20:82:8c:09:b7:71:24:71: 80:14:85:93:1c:65:b6:59:fd:28:fd:8c:7a:94:79: c1:5e:62:5c:90:c9:27:77:05:38:be:df:77:5f:b2: 81:11:f5:71:ad:04:1d:d0:c0:ae:e4:bb:86:10:64: c0:dc:b2:84:e6:ab:9c:f4:d6:0e:05:96:b3:b9:2f: 7d:0e:76:4a:43:07:4b:18:d1:1c:54:0b:f6:69:4e: 32:f2:27:18:d7:68:b1:2e:09:77:61:66:a1:c5:29: 35:66:52:e7:da:2c:9d:ab:64:02:0b:d3:d2:0c:e2: 44:bb:e4:b4:96:e8:21:e3:c1:48:d7:dd:64:ad:aa: ae:df:c0:30:11:ba:35:f6:25:45:e0:d2:43:36:95: a1:90:ae:9a:fb:e2:af:6d:81:0c:86:67:d4:40:96: 83:ac:df:9d:63:d3:43:2c:a4:4f:c8:25:15:72:16: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:D2:C2:FC:2B:BE:4B:41:7F:65:23:19:A3:C1:87:8B:4F:A6:63 X509v3 Authority Key Identifier: keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9e:d2:a9:a1:09:7a:39:f4:2f:d9:0e:fb:f8:3e:3d:ec:8b: 73:a8:ae:50:7e:4d:2d:b7:ed:af:d6:4e:6c:be:69:d9:8a:00: 26:f6:58:26:69:22:47:8e:6d:d6:62:94:4a:75:a2:58:53:ab: 73:8f:2a:58:2c:3e:8e:78:e9:fd:f1:30:df:70:8b:6f:a2:17: da:74:75:69:03:e2:13:23:f0:03:5f:f6:ba:33:36:59:48:c2: 32:d0:c5:a0:ad:39:c8:65:48:cf:d9:1a:2b:5e:5a:b8:ce:1a: df:4f:a3:ad:cc:37:65:f3:25:47:80:40:a8:0e:b5:ff:93:94: 02:fb:c5:34:cb:a0:5d:70:33:2e:44:f3:66:2a:9c:c5:2b:7d: 3e:9f:10:01:5e:d4:03:c2:e2:c4:28:84:32:ed:d7:18:27:77: b9:dc:7a:40:cb:dc:3f:1c:40:66:b3:bd:92:17:ed:27:70:30: f4:63:3b:38:3d:32:dd:a1:10:7c:ad:2b:ab:1b:d7:67:ea:33: 47:56:96:53:52:8a:9e:ac:b9:f8:ce:9a:91:e7:bf:5d:82:43: f3:ab:09:f7:8b:22:a9:c2:cf:f2:0b:83:01:fd:c8:2c:1c:44: ea:b9:6f:c2:29:d8:a0:aa:ae:d9:02:0a:be:c6:bf:1b:16:d9: f5:b2:41:c6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsPN3FKd4ltT44hrZU2itZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0 YTA0MzkwHhcNMjUxMjExMjEwMDUwWhcNMjUxMjEyMjEwMDUwWjAzMTEwLwYDVQQD EygzMzFmZDJjMmZjMmJiZTRiNDE3ZjY1MjMxOWEzYzE4NzhiNGZhNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiyJAsHemdhus4uDF5j2GI/ItFP0 NdzjNCbo29u0JPyQhHL6pjD2LU+AAvKefnRy/1wzlk/xpJjj7SbTu8jpufn7qLQ6 KdafnR2oNGWwe1crIIKMCbdxJHGAFIWTHGW2Wf0o/Yx6lHnBXmJckMkndwU4vt93 X7KBEfVxrQQd0MCu5LuGEGTA3LKE5quc9NYOBZazuS99DnZKQwdLGNEcVAv2aU4y 8icY12ixLgl3YWahxSk1ZlLn2iydq2QCC9PSDOJEu+S0lugh48FI191kraqu38Aw Ebo19iVF4NJDNpWhkK6a++KvbYEMhmfUQJaDrN+dY9NDLKRPyCUVchbnFwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDMf0sL8K75LQX9lIxmjwYeLT6ZjMB8GA1UdIwQY MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJ7S qaEJejn0L9kO+/g+PeyLc6iuUH5NLbftr9ZObL5p2YoAJvZYJmkiR45t1mKUSnWi WFOrc48qWCw+jnjp/fEw33CLb6IX2nR1aQPiEyPwA1/2ujM2WUjCMtDFoK05yGVI z9kaK15auM4a30+jrcw3ZfMlR4BAqA61/5OUAvvFNMugXXAzLkTzZiqcxSt9Pp8Q AV7UA8LixCiEMu3XGCd3udx6QMvcPxxAZrO9khftJ3Aw9GM7OD0y3aEQfK0rqxvX Z+ozR1aWU1KKnqy5+M6akee/XYJD86sJ94siqcLP8guDAf3ILBxE6rlvwinYoKqu 2QIKvsa/GxbZ9bJBxg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:58 2025 by rpki-client