This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json) Hash identifier: lCfs/ilDe5RrmibMhf1bN8BLEVXZIQyGKX0hkzeWbOA= Subject key identifier: 95:04:D1:F7:29:0A:E6:D1:F3:77:58:F5:05:E4:62:42:37:0E:70:BF Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019B10EF858210917E5A6ECB8338A4B3B3BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 05:01:31 +0000 Manifest this update: Fri 12 Dec 2025 05:01:31 +0000 Manifest next update: Sat 13 Dec 2025 05:01:31 +0000 Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: XaPsLWZprOx4blYZP0eIfLdi63rT98O1LOhpKAT5zUU=) 2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=) 3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=) 4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:85:82:10:91:7e:5a:6e:cb:83:38:a4:b3:b3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Dec 12 05:01:31 2025 GMT Not After : Dec 13 05:01:31 2025 GMT Subject: CN=9504d1f7290ae6d1f37758f505e46242370e70bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:90:92:3a:50:69:7a:cb:11:ff:75:26:ac: 17:26:19:50:80:aa:8f:cc:bc:d2:76:10:47:70:7c: 0e:06:bf:97:5a:d3:93:91:e7:23:e7:58:da:f1:a5: cc:60:27:5e:e3:80:38:6a:9e:07:57:17:43:1d:a4: 20:20:17:9d:87:1d:69:fa:22:b6:57:af:e5:52:97: c6:31:08:34:61:63:9a:9a:ed:35:8d:86:02:7a:06: 73:08:a1:f6:65:43:d5:c6:77:0d:d6:d7:77:de:88: 58:32:2a:8e:cf:c3:99:fc:e2:ed:b8:3e:c3:70:c9: 93:e8:f4:b2:83:f6:df:1a:b0:0d:ce:f0:80:3d:6a: 4c:b3:55:9f:90:4f:3c:fe:e3:41:90:ea:a4:5d:5b: 6d:21:fa:d0:a6:ef:82:01:48:fc:de:49:e4:fc:91: b0:4a:ea:22:fa:62:78:91:7b:bf:e4:35:5e:fa:be: ea:13:70:d3:d2:e8:76:d6:64:5f:57:3c:84:f0:32: 80:6a:ce:6e:5a:08:32:e4:cd:b9:38:76:36:03:20: fe:35:ce:68:e8:44:f2:b9:ff:30:da:28:16:fa:63: 46:76:03:a8:f1:7e:50:17:77:b6:ae:6b:dd:88:a7: dd:6d:d6:37:ef:08:12:66:3b:0c:9e:e3:94:e1:07: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:D1:F7:29:0A:E6:D1:F3:77:58:F5:05:E4:62:42:37:0E:70:BF X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:53:1c:a7:af:00:5c:60:c6:67:60:17:38:54:77:4b:65:66: 6f:09:7f:c7:53:00:99:9c:45:95:46:2d:a2:fe:d7:05:6f:af: 52:6a:9c:18:74:e3:a7:e6:29:d2:fc:39:82:9c:82:45:04:12: d0:03:a2:a6:21:f5:de:a6:db:ef:dc:de:69:89:ed:d0:53:77: d4:14:95:65:85:95:6a:f8:b8:04:40:e3:0e:18:a7:51:8a:d8: a4:84:49:45:0d:8a:93:bc:45:fe:7c:71:e0:8c:55:4d:2b:5b: 4e:4f:9e:cf:e4:2e:a5:f1:06:8e:ae:d6:0e:5c:89:89:4e:7a: c6:bf:e5:a9:18:29:c6:ca:6d:6a:83:b2:05:f3:e8:4f:13:d0: 69:07:f7:9c:2d:08:0e:96:a9:fc:8b:45:08:f4:f7:c9:57:fb: fc:72:04:71:ef:2a:91:71:b8:f7:01:a3:71:9f:eb:28:23:00: 20:11:f6:a7:9e:5a:eb:51:e0:27:73:57:f4:d3:1b:7d:4f:ae: 63:19:a8:1d:1d:8a:60:3d:95:3b:24:4d:e9:02:89:9e:15:75: f2:f9:17:58:33:cf:23:1d:25:bc:a7:c6:41:6a:64:81:1a:a0: 2d:30:bb:a6:a9:08:c7:9d:75:4b:5b:e5:e6:4d:2f:75:b7:e7: 80:eb:82:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ74WCEJF+Wm7Lgziks7O8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjUxMjEyMDUwMTMxWhcNMjUxMjEzMDUwMTMxWjAzMTEwLwYDVQQD Eyg5NTA0ZDFmNzI5MGFlNmQxZjM3NzU4ZjUwNWU0NjI0MjM3MGU3MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqqQkjpQaXrLEf91JqwXJhlQgKqP zLzSdhBHcHwOBr+XWtOTkecj51ja8aXMYCde44A4ap4HVxdDHaQgIBedhx1p+iK2 V6/lUpfGMQg0YWOamu01jYYCegZzCKH2ZUPVxncN1td33ohYMiqOz8OZ/OLtuD7D cMmT6PSyg/bfGrANzvCAPWpMs1WfkE88/uNBkOqkXVttIfrQpu+CAUj83knk/JGw Suoi+mJ4kXu/5DVe+r7qE3DT0uh21mRfVzyE8DKAas5uWggy5M25OHY2AyD+Nc5o 6ETyuf8w2igW+mNGdgOo8X5QF3e2rmvdiKfdbdY37wgSZjsMnuOU4QdGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUE0fcpCubR83dY9QXkYkI3DnC/MB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElMcp68A XGDGZ2AXOFR3S2Vmbwl/x1MAmZxFlUYtov7XBW+vUmqcGHTjp+Yp0vw5gpyCRQQS 0AOipiH13qbb79zeaYnt0FN31BSVZYWVavi4BEDjDhinUYrYpIRJRQ2Kk7xF/nxx 4IxVTStbTk+ez+QupfEGjq7WDlyJiU56xr/lqRgpxsptaoOyBfPoTxPQaQf3nC0I Dpap/ItFCPT3yVf7/HIEce8qkXG49wGjcZ/rKCMAIBH2p55a61HgJ3NX9NMbfU+u YxmoHR2KYD2VOyRN6QKJnhV18vkXWDPPIx0lvKfGQWpkgRqgLTC7pqkIx511S1vl 5k0vdbfngOuC2Q== -----END CERTIFICATE-----Generated at Fri Dec 12 09:28:20 2025 by rpki-client