This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json) Hash identifier: f7qSsk4TRaajpUcJk30lnVd3wmX7Rghbzt1kv4AUffQ= Subject key identifier: 0C:E9:07:D9:22:52:C5:31:BC:46:35:B1:A8:CC:00:F3:56:EA:89:87 Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c Certificate serial: 019B2175565A70F62F0E823A373C462BCD12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 10:01:36 +0000 Manifest this update: Mon 15 Dec 2025 10:01:36 +0000 Manifest next update: Tue 16 Dec 2025 10:01:36 +0000 Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: 7UFdGCsUMLHD5doFv9hmn3HwrbhotOtxSkUlEgzneok=) 2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=) 3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=) 4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:56:5a:70:f6:2f:0e:82:3a:37:3c:46:2b:cd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c Validity Not Before: Dec 15 10:01:36 2025 GMT Not After : Dec 16 10:01:36 2025 GMT Subject: CN=0ce907d92252c531bc4635b1a8cc00f356ea8987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:4d:33:53:f1:c9:ff:f3:05:b4:6b:97:97: 40:4c:23:f9:e6:04:4d:ce:c3:46:88:0e:31:07:7d: 66:75:ce:3e:61:8b:c8:86:6f:7f:69:39:f5:2f:a5: 1d:7a:a1:b4:7f:67:4b:cb:1e:7c:bc:9e:c2:3d:53: 65:3e:ae:5e:4a:7c:74:00:21:b7:26:1c:bf:2e:d6: 2c:2f:19:bf:bd:57:75:ca:8f:ca:aa:15:bb:70:5d: b6:02:c3:a9:67:b6:0b:bb:98:02:f2:38:8c:49:c4: 06:e9:14:d3:25:96:5c:af:6d:34:7e:3c:42:2c:b9: fa:d7:e3:5b:33:c7:3b:9d:46:42:a0:05:bd:3f:dd: e9:30:77:e2:1e:76:f2:ce:90:3c:6a:c1:11:4a:21: 43:78:c3:e9:36:6a:f4:00:03:3e:16:e1:cc:f5:59: 0b:20:73:d0:2f:74:d6:bd:8e:cb:08:af:fc:4b:3d: 31:0a:44:9e:8f:c4:8f:ee:95:2a:39:8c:a3:bc:e0: af:8e:b8:77:f9:b5:da:ad:31:29:97:b2:60:b9:c0: 2e:1e:d9:83:84:2d:99:1a:34:68:6c:3c:6f:17:3b: 87:2a:98:13:93:78:5d:7b:5b:36:1e:44:9d:57:66: 2e:2f:65:19:e8:7a:4c:84:80:2a:8e:a8:88:f1:b8: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:07:D9:22:52:C5:31:BC:46:35:B1:A8:CC:00:F3:56:EA:89:87 X509v3 Authority Key Identifier: keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:05:f4:de:c9:7d:f2:9b:0a:49:1c:83:a6:7e:8a:72:d1:2e: e2:ba:49:de:7b:2f:80:8e:21:4a:b8:ab:05:61:c1:80:8f:fb: 4a:fb:d6:94:d4:75:38:ec:21:53:78:26:2f:ff:da:8d:b1:6f: 2c:6e:dc:01:87:09:10:be:0e:df:80:3e:e9:d5:35:08:88:52: c8:b2:e8:d5:4e:18:c4:35:09:e3:70:ec:64:2b:b5:0c:1b:3f: 51:13:53:77:98:58:2a:b5:fc:13:69:91:a8:66:d4:f7:63:7c: 93:47:ec:c1:1a:4d:50:54:18:86:18:97:48:72:01:de:bc:41: e4:ad:60:5f:1d:db:5b:74:dc:63:09:5a:b4:fd:7e:a4:b2:81: e8:a7:0b:2c:82:01:97:bd:b7:72:ad:35:10:df:5d:42:e3:f5: b1:b7:c0:3c:38:ca:3e:9f:b7:80:c9:04:3a:cc:6c:50:6b:d3: fa:0f:f0:d1:1a:4f:cd:f7:9f:26:d0:7a:4b:8e:25:4a:8a:fd: 28:ff:2f:63:ae:fe:e6:ab:80:ad:fc:ea:fd:72:64:52:6f:11: 4a:bb:fa:7f:fd:ba:c5:80:3b:ff:c6:61:50:07:fd:5d:64:0d: c8:4e:16:21:e0:40:c5:4c:8d:a5:0e:ef:70:d3:7e:7b:03:a2: 6e:db:69:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZshdVZacPYvDoI6NzxGK80SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYzA4OWE5Y2Q2YTAzNzViYWU0OTljYzA2YTRjYWEzMDcx YjVkNGMwHhcNMjUxMjE1MTAwMTM2WhcNMjUxMjE2MTAwMTM2WjAzMTEwLwYDVQQD EygwY2U5MDdkOTIyNTJjNTMxYmM0NjM1YjFhOGNjMDBmMzU2ZWE4OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TVNM1Pxyf/zBbRrl5dATCP55gRN zsNGiA4xB31mdc4+YYvIhm9/aTn1L6UdeqG0f2dLyx58vJ7CPVNlPq5eSnx0ACG3 Jhy/LtYsLxm/vVd1yo/KqhW7cF22AsOpZ7YLu5gC8jiMScQG6RTTJZZcr200fjxC LLn61+NbM8c7nUZCoAW9P93pMHfiHnbyzpA8asERSiFDeMPpNmr0AAM+FuHM9VkL IHPQL3TWvY7LCK/8Sz0xCkSej8SP7pUqOYyjvOCvjrh3+bXarTEpl7JgucAuHtmD hC2ZGjRobDxvFzuHKpgTk3hde1s2HkSdV2YuL2UZ6HpMhIAqjqiI8bgKhwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAzpB9kiUsUxvEY1sajMAPNW6omHMB8GA1UdIwQY MBaAFPrAianNagN1uuSZzAakyqMHG11MMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zQ0pxYzFxQTNXNjVKbk1CcVRLb3djYlhVdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmZhYzlmLTYxOGMtNDJmNi05NDgz LTc3N2Y4NjE2NjIyMS8xLzEtc0NKcWMxcUEzVzY1Sm5NQnFUS293Y2JYVXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzhiLzJmYWM5Zi02MThjLTQyZjYtOTQ4My03NzdmODYxNjYy MjEvMS8xLXNDSnFjMXFBM1c2NUpuTUJxVEtvd2NiWFV3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQX0 3sl98psKSRyDpn6KctEu4rpJ3nsvgI4hSrirBWHBgI/7SvvWlNR1OOwhU3gmL//a jbFvLG7cAYcJEL4O34A+6dU1CIhSyLLo1U4YxDUJ43DsZCu1DBs/URNTd5hYKrX8 E2mRqGbU92N8k0fswRpNUFQYhhiXSHIB3rxB5K1gXx3bW3TcYwlatP1+pLKB6KcL LIIBl723cq01EN9dQuP1sbfAPDjKPp+3gMkEOsxsUGvT+g/w0RpPzfefJtB6S44l Sor9KP8vY67+5quArfzq/XJkUm8RSrv6f/26xYA7/8ZhUAf9XWQNyE4WIeBAxUyN pQ7vcNN+ewOibttpkw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:34 2025 by rpki-client