This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json) Hash identifier: 5PCkTEhZCSw/mIq59AJf8ei2mmvoHbeXbZR8AoX0I1c= Subject key identifier: 18:8C:5E:88:16:57:7B:68:86:59:CF:01:C4:99:B6:40:C9:2C:EB:BB Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Certificate serial: 019B0D80890272200B42C821ADE6BCA2C244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft Manifest number: 0BC8 Signing time: Thu 11 Dec 2025 13:01:25 +0000 Manifest this update: Thu 11 Dec 2025 13:01:25 +0000 Manifest next update: Fri 12 Dec 2025 13:01:25 +0000 Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: kKLa4i5z8x9OHe7UgL8ZGg94RRBof3ZuYm0lYpUNs+4=) 2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:89:02:72:20:0b:42:c8:21:ad:e6:bc:a2:c2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Validity Not Before: Dec 11 13:01:25 2025 GMT Not After : Dec 12 13:01:25 2025 GMT Subject: CN=188c5e8816577b688659cf01c499b640c92cebbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:12:e0:ca:bb:a9:bb:54:9c:a7:16:e6:89: 9b:b7:c3:96:dd:dd:80:67:65:b5:25:d1:ae:53:3f: ee:c3:63:d3:55:74:5b:ed:74:5a:cf:8a:09:34:9f: 82:f1:bd:71:b3:a3:ef:e1:12:02:31:2d:aa:49:1b: f0:89:60:b1:07:07:a3:45:67:fd:86:d9:b3:a1:53: 99:46:32:99:0c:b7:96:f6:ba:71:65:4b:10:77:71: 7f:0b:a2:56:dc:fb:0a:6b:93:09:f3:01:c1:e4:db: 6b:9b:c1:01:c2:02:b7:64:5c:3a:a0:2e:10:52:65: df:58:c6:dd:d6:58:d6:5d:80:da:ba:d6:6f:03:cb: 49:58:4a:ab:24:0b:98:90:ba:7d:a1:56:8d:f6:0b: d5:1c:af:d3:94:62:39:fb:c2:f6:37:85:51:35:92: 64:46:0e:5f:5c:2d:9e:f2:75:38:a4:99:63:01:bd: 45:7d:d1:db:a0:5e:7e:0c:df:51:c9:83:01:a5:b4: 5c:da:99:3b:d8:26:ac:2e:18:45:d2:59:5c:a4:df: ec:7d:2c:95:df:e2:1b:a8:21:90:66:e1:0f:54:3c: 9b:ca:4c:c0:d2:e8:15:cf:0c:60:83:d6:27:23:c7: c9:be:c6:ed:da:0b:54:20:55:c8:fa:f6:42:fd:3f: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8C:5E:88:16:57:7B:68:86:59:CF:01:C4:99:B6:40:C9:2C:EB:BB X509v3 Authority Key Identifier: keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:8c:6b:ec:fc:77:83:2b:f7:9a:cb:58:d3:13:0e:47:57:8a: e5:d4:d0:61:bf:53:4b:49:5b:c7:c1:f2:3f:dc:3c:cd:7a:bb: dd:5c:ad:38:d5:1d:d0:72:fe:68:58:13:3d:d3:3b:3f:a3:58: d0:46:ae:b6:12:5e:d9:b0:a9:fa:b1:53:16:6a:68:95:07:5d: 55:d1:58:53:4c:fa:d5:5c:82:fc:2d:54:b2:b8:e5:ee:29:77: ef:f2:24:a8:69:70:c5:52:be:f2:3c:3d:de:37:4d:75:f2:4c: f0:77:5f:33:a1:be:99:50:9d:ca:2e:d1:60:63:c0:d7:15:63: ba:87:ea:b7:c5:0e:7f:1e:ae:e7:32:d9:85:64:5b:5c:ea:8d: 8a:5e:02:fc:f3:57:7b:53:75:9e:3f:7d:81:68:6e:dd:b3:fd: 88:db:ba:ba:a4:56:7d:f7:5f:5d:60:0c:b4:66:49:c2:f5:b9: 12:10:b3:62:70:16:27:df:dc:25:f8:d7:b4:9d:f0:a2:94:5b: 12:53:c9:28:ce:07:9d:ff:b6:fb:43:00:f5:b3:b8:67:63:c9: e8:c5:8e:bc:de:a8:02:5a:31:cb:8f:67:b0:82:8b:c5:37:0b: 4a:79:45:4d:16:24:bd:13:37:16:af:f3:37:30:06:df:5c:70: f9:6a:80:f9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsNgIkCciALQsghrea8osJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0 ZmQ1MDgwHhcNMjUxMjExMTMwMTI1WhcNMjUxMjEyMTMwMTI1WjAzMTEwLwYDVQQD EygxODhjNWU4ODE2NTc3YjY4ODY1OWNmMDFjNDk5YjY0MGM5MmNlYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+MS4Mq7qbtUnKcW5ombt8OW3d2A Z2W1JdGuUz/uw2PTVXRb7XRaz4oJNJ+C8b1xs6Pv4RICMS2qSRvwiWCxBwejRWf9 htmzoVOZRjKZDLeW9rpxZUsQd3F/C6JW3PsKa5MJ8wHB5Ntrm8EBwgK3ZFw6oC4Q UmXfWMbd1ljWXYDautZvA8tJWEqrJAuYkLp9oVaN9gvVHK/TlGI5+8L2N4VRNZJk Rg5fXC2e8nU4pJljAb1FfdHboF5+DN9RyYMBpbRc2pk72CasLhhF0llcpN/sfSyV 3+IbqCGQZuEPVDybykzA0ugVzwxgg9YnI8fJvsbt2gtUIFXI+vZC/T9CywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBiMXogWV3tohlnPAcSZtkDJLOu7MB8GA1UdIwQY MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4xr 7Px3gyv3mstY0xMOR1eK5dTQYb9TS0lbx8HyP9w8zXq73VytONUd0HL+aFgTPdM7 P6NY0EauthJe2bCp+rFTFmpolQddVdFYU0z61VyC/C1Usrjl7il37/IkqGlwxVK+ 8jw93jdNdfJM8HdfM6G+mVCdyi7RYGPA1xVjuofqt8UOfx6u5zLZhWRbXOqNil4C /PNXe1N1nj99gWhu3bP9iNu6uqRWffdfXWAMtGZJwvW5EhCzYnAWJ9/cJfjXtJ3w opRbElPJKM4Hnf+2+0MA9bO4Z2PJ6MWOvN6oAloxy49nsIKLxTcLSnlFTRYkvRM3 Fq/zNzAG31xw+WqA+Q== -----END CERTIFICATE-----Generated at Thu Dec 11 15:09:37 2025 by rpki-client