This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json) Hash identifier: zMVyj7gm21Bs3HmTh6Ai/YjaF0NzOkoyioU1vNRhAbU= Subject key identifier: FF:10:1C:32:6C:F9:05:7E:02:8F:70:06:03:B9:EE:28:A1:04:20:91 Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Certificate serial: 019AAFBAFDCA99DC739257EA8E734684BB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft Manifest number: 10 Signing time: Sun 23 Nov 2025 08:00:58 +0000 Manifest this update: Sun 23 Nov 2025 08:00:58 +0000 Manifest next update: Mon 24 Nov 2025 08:00:58 +0000 Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: eV0X7OYm/+OzPiuqbj7MvlTcvrbTFFTiqP1dO/V1c4I=) 2: eBymUAqZyrXsauAb8neOB7R0FqA.roa (hash: wowD/ZNy2Gh6RNTsjMg8v4b4d4GuZYTg//SMNlCdkxg=) 3: u4qmxEf6xnyqisVRIL8RtgUjb6U.roa (hash: IhkTYP7c/yQI3dq18PlMoNcZW/0iTHX4nmvnsV9qddU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:af:ba:fd:ca:99:dc:73:92:57:ea:8e:73:46:84:bb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Validity Not Before: Nov 23 08:00:58 2025 GMT Not After : Nov 24 08:00:58 2025 GMT Subject: CN=ff101c326cf9057e028f700603b9ee28a1042091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:06:df:3f:89:2a:46:3a:94:9c:81:9e:4f: 6c:7e:20:d1:96:ad:de:2c:30:04:bd:f3:1d:54:61: 30:c0:bb:71:45:69:02:ad:74:0f:a1:82:e8:0f:3c: aa:7f:46:c7:0d:28:df:93:b5:eb:52:34:aa:43:01: fb:fb:4d:d3:81:9c:4c:42:59:63:d0:af:8d:f8:2f: 56:44:3d:df:44:b8:97:f5:c6:fa:e6:e0:c0:70:9e: 82:d5:55:b0:d1:b0:97:1a:e8:cc:65:62:0d:cf:41: d6:d8:72:72:5c:f8:24:58:c5:18:8e:d7:ad:ab:9b: 10:b7:c6:9c:3b:4c:3c:43:86:7e:0a:a4:8b:a1:a8: 90:1e:ca:50:70:df:8b:3d:86:f4:b4:2a:a6:3b:0c: 66:37:64:7d:47:d0:86:c9:e5:18:39:69:9f:69:1c: 33:ed:87:64:5c:f4:96:cc:f5:fb:95:7b:d8:0d:c0: bb:92:cc:85:34:be:d2:3a:81:c5:58:4c:56:0f:18: 7c:af:47:f9:e6:1c:a9:a2:5b:60:82:df:86:47:59: 1b:75:f7:83:26:7f:62:af:5c:ee:a1:5a:ab:a7:fa: 81:de:ba:e1:5f:8f:30:17:c2:62:15:e4:f4:6c:2f: 34:6e:64:02:b6:6d:94:5b:a2:a1:4a:df:47:c7:c7: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:10:1C:32:6C:F9:05:7E:02:8F:70:06:03:B9:EE:28:A1:04:20:91 X509v3 Authority Key Identifier: keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:88:be:fa:ce:54:91:a4:02:cb:35:2a:95:a0:92:de:49:e6: 5a:a7:28:26:bd:cd:2a:c2:34:dc:5a:81:b3:37:d8:4b:00:92: 31:7f:81:12:4b:49:4c:a7:84:5c:a8:d1:7a:25:8a:b3:00:e5: e9:d6:c4:eb:49:65:5c:e1:56:e2:78:ed:ab:d5:6a:6d:e4:8c: 2c:67:b8:c8:cb:5f:96:37:00:d2:4e:37:ef:80:20:5e:90:61: 6f:74:b9:ef:50:bf:9d:f0:0a:0e:fb:5a:c0:d1:b6:8e:ea:f3: 68:81:1a:dd:b3:ec:4c:c0:ef:f6:cf:79:00:b6:6a:dc:15:73: 5f:ac:45:a0:7c:c9:42:6d:30:0d:a8:cb:3c:a7:69:67:d3:51: 0b:1c:aa:70:45:2c:9a:d4:fb:05:91:31:58:2f:32:d5:8f:e8: 97:18:62:75:43:67:8b:84:aa:0d:14:a8:cf:0e:14:79:9c:db: df:9e:18:5e:9d:d3:8f:66:20:e3:60:dc:2f:f4:21:48:4f:6f: b3:3c:9f:b1:6a:d7:06:05:e4:f4:18:f1:b0:1d:35:ec:e3:f4: a2:b0:75:db:71:72:45:e3:dd:bd:5b:3b:bd:7b:e8:c1:d1:3f: 19:04:c3:b2:6a:1e:c3:bb:c2:1e:16:d0:eb:d8:f4:ed:f2:d1: 1d:3b:0b:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqvuv3KmdxzklfqjnNGhLuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTU1MzYxMmQ5NGIwOTFiMzY1OWIyMTIwYmM4ZWZiMjYw ZTdkMzAwHhcNMjUxMTIzMDgwMDU4WhcNMjUxMTI0MDgwMDU4WjAzMTEwLwYDVQQD EyhmZjEwMWMzMjZjZjkwNTdlMDI4ZjcwMDYwM2I5ZWUyOGExMDQyMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQwG3z+JKkY6lJyBnk9sfiDRlq3e LDAEvfMdVGEwwLtxRWkCrXQPoYLoDzyqf0bHDSjfk7XrUjSqQwH7+03TgZxMQllj 0K+N+C9WRD3fRLiX9cb65uDAcJ6C1VWw0bCXGujMZWINz0HW2HJyXPgkWMUYjtet q5sQt8acO0w8Q4Z+CqSLoaiQHspQcN+LPYb0tCqmOwxmN2R9R9CGyeUYOWmfaRwz 7YdkXPSWzPX7lXvYDcC7ksyFNL7SOoHFWExWDxh8r0f55hypoltggt+GR1kbdfeD Jn9ir1zuoVqrp/qB3rrhX48wF8JiFeT0bC80bmQCtm2UW6KhSt9Hx8dNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8QHDJs+QV+Ao9wBgO57iihBCCRMB8GA1UdIwQY MBaAFNalU2EtlLCRs2WbISC8jvsmDn0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQt ZTA1OTA2Y2I2OTQ4LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQtZTA1OTA2Y2I2OTQ4 LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYi++s5U kaQCyzUqlaCS3knmWqcoJr3NKsI03FqBszfYSwCSMX+BEktJTKeEXKjReiWKswDl 6dbE60llXOFW4njtq9VqbeSMLGe4yMtfljcA0k4374AgXpBhb3S571C/nfAKDvta wNG2jurzaIEa3bPsTMDv9s95ALZq3BVzX6xFoHzJQm0wDajLPKdpZ9NRCxyqcEUs mtT7BZExWC8y1Y/olxhidUNni4SqDRSozw4UeZzb354YXp3Tj2Yg42DcL/QhSE9v szyfsWrXBgXk9BjxsB017OP0orB123FyRePdvVs7vXvowdE/GQTDsmoew7vCHhbQ 69j07fLRHTsLvA== -----END CERTIFICATE-----Generated at Sun Nov 23 14:44:12 2025 by rpki-client