This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json) Hash identifier: ckJXeG59V/9T6HfE1FNvnhnW4nRJ4xgm01xFOXdJQHE= Subject key identifier: 8A:1D:7E:A9:C7:32:5E:9C:A2:BC:52:6F:83:80:31:EF:A4:43:14:FE Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c Certificate serial: 019B3A58715DAB8B2592B54D80C2832895BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft Manifest number: 11AA Signing time: Sat 20 Dec 2025 06:00:33 +0000 Manifest this update: Sat 20 Dec 2025 06:00:33 +0000 Manifest next update: Sun 21 Dec 2025 06:00:33 +0000 Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: QwIGPdto7NMt0Ly1qbMZ/ckQPLsEECmkySLtfrG4MxQ=) 2: DiLoOspEZ-miVIlFnPiykV7JGvU.roa (hash: 2IDQXBT0pmiOkj8NyXZhIUPtoHmvSFqSMYQziKEr2Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:71:5d:ab:8b:25:92:b5:4d:80:c2:83:28:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c Validity Not Before: Dec 20 06:00:33 2025 GMT Not After : Dec 21 06:00:33 2025 GMT Subject: CN=8a1d7ea9c7325e9ca2bc526f838031efa44314fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:2b:e8:e4:b6:28:1e:e1:2f:a0:5f:74:a2: 5c:c5:1e:83:c7:f8:2e:38:8c:cc:cb:2a:99:19:91: d3:98:c8:b7:72:c6:ef:8e:d9:af:12:2f:4d:13:f8: 96:55:88:ae:df:49:a5:f5:ce:d6:43:84:cf:04:8f: 02:d6:e7:80:f0:e7:77:3b:aa:50:05:a1:b7:e4:b9: 2c:03:be:9b:72:13:0d:4f:f7:68:3b:84:19:25:47: 14:0a:f2:2d:28:a2:74:1d:23:8d:29:95:6c:19:bd: f4:13:1e:1b:7b:3e:c6:8b:1f:b0:eb:2a:42:a6:be: a7:16:c1:6a:d2:c1:6e:ef:f8:6c:8a:fd:30:52:ad: 23:ab:a0:85:07:4c:3d:67:1a:0f:89:f0:72:28:00: 75:3c:fc:3a:13:03:55:2f:b1:f4:92:f3:b4:3d:c9: 30:4c:c5:ac:f5:56:95:2f:9e:70:71:eb:00:d6:86: 61:b1:90:3a:56:8f:e7:07:25:24:c8:60:ca:9a:38: 6e:16:87:98:17:90:e5:89:6b:c5:af:76:54:66:ae: ff:30:10:b0:ef:9d:2c:59:5c:8f:30:6c:16:47:55: 5d:4c:d8:43:3a:1b:cd:d8:c7:32:c6:bf:b1:f5:4e: 98:9c:df:8e:f7:8d:f1:b4:71:b2:2a:8c:3c:65:76: 90:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:7E:A9:C7:32:5E:9C:A2:BC:52:6F:83:80:31:EF:A4:43:14:FE X509v3 Authority Key Identifier: keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e5:d7:95:a0:34:47:0b:c0:9f:01:08:14:ea:ae:af:46:e8: 8d:7d:7c:12:54:87:55:af:fc:6f:9e:92:35:a8:86:65:8e:22: 62:01:9a:af:06:fa:61:86:6e:af:2f:38:18:4f:be:e6:3d:95: 52:06:d3:5c:00:46:3f:8b:ad:7a:66:2f:85:f0:1b:e8:85:7c: f4:38:55:d0:58:60:4d:73:e5:6f:70:fc:1b:c2:ec:bb:2e:86: 71:96:66:ee:c3:c7:1e:e3:e0:96:75:7a:c2:47:1b:bb:de:74: d9:e0:a7:df:77:dc:ae:f5:f8:f0:fb:df:c7:0f:8b:92:b4:89: a2:9e:82:20:f8:41:05:59:0b:a0:85:9e:0b:94:c1:94:34:c2: ef:60:65:fe:99:a2:cf:9b:3e:f1:74:11:e7:85:20:bc:d7:02: 69:e7:79:2e:7b:1b:fd:21:57:73:89:30:55:bb:3f:5c:dd:50: b1:c9:8d:1a:ca:f1:7a:2b:90:9f:50:a9:e3:c7:92:63:ee:cf: 41:df:a2:61:70:ff:b7:e2:9a:48:37:ed:21:f5:7f:dc:3b:17: 0d:22:a0:3f:c2:21:70:48:5f:0d:7a:46:37:40:f4:c0:1f:ff: 89:fa:37:8b:54:d2:bb:f7:c0:d8:e2:a9:f5:2a:79:6e:21:31: a2:f0:09:6b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6WHFdq4slkrVNgMKDKJW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZmNkNDUxNWI0OTMwMzkyMTY3NThkZTczOGU0ZjFhZThl MzIyNGMwHhcNMjUxMjIwMDYwMDMzWhcNMjUxMjIxMDYwMDMzWjAzMTEwLwYDVQQD Eyg4YTFkN2VhOWM3MzI1ZTljYTJiYzUyNmY4MzgwMzFlZmE0NDMxNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAYr6OS2KB7hL6BfdKJcxR6Dx/gu OIzMyyqZGZHTmMi3csbvjtmvEi9NE/iWVYiu30ml9c7WQ4TPBI8C1ueA8Od3O6pQ BaG35LksA76bchMNT/doO4QZJUcUCvItKKJ0HSONKZVsGb30Ex4bez7Gix+w6ypC pr6nFsFq0sFu7/hsiv0wUq0jq6CFB0w9ZxoPifByKAB1PPw6EwNVL7H0kvO0Pckw TMWs9VaVL55wcesA1oZhsZA6Vo/nByUkyGDKmjhuFoeYF5DliWvFr3ZUZq7/MBCw 750sWVyPMGwWR1VdTNhDOhvN2Mcyxr+x9U6YnN+O943xtHGyKow8ZXaQUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIodfqnHMl6corxSb4OAMe+kQxT+MB8GA1UdIwQY MBaAFPv81FFbSTA5IWdY3nOOTxro4yJMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1felVVVnRKTURraFoxamVjNDVQR3Vqaklrdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZDY0ODZhLThmZjctNDI2Zi04ZDg2 LTA5OGQwNGNlNTFiMi8xLzEtX3pVVVZ0Sk1Ea2haMWplYzQ1UEd1ampJa3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY4L2Q2NDg2YS04ZmY3LTQyNmYtOGQ4Ni0wOThkMDRjZTUx YjIvMS8xLV96VVVWdEpNRGtoWjFqZWM0NVBHdWpqSWt3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOXX laA0RwvAnwEIFOqur0bojX18ElSHVa/8b56SNaiGZY4iYgGarwb6YYZury84GE++ 5j2VUgbTXABGP4utemYvhfAb6IV89DhV0FhgTXPlb3D8G8Lsuy6GcZZm7sPHHuPg lnV6wkcbu9502eCn33fcrvX48Pvfxw+LkrSJop6CIPhBBVkLoIWeC5TBlDTC72Bl /pmiz5s+8XQR54UgvNcCaed5Lnsb/SFXc4kwVbs/XN1QscmNGsrxeiuQn1Cp48eS Y+7PQd+iYXD/t+KaSDftIfV/3DsXDSKgP8IhcEhfDXpGN0D0wB//ifo3i1TSu/fA 2OKp9Sp5biExovAJaw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:10 2025 by rpki-client