This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json) Hash identifier: sHgx7mGzw+nkTnxuf+gDXl6f9dpntGcz7ixLIVohWLI= Subject key identifier: D8:69:2F:E4:26:DA:2E:DD:65:C7:B8:BB:72:1A:20:E2:C8:41:8B:18 Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Certificate serial: 019AEFE324997E662CFF18569995678D2CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft Manifest number: 04B8 Signing time: Fri 05 Dec 2025 19:00:31 +0000 Manifest this update: Fri 05 Dec 2025 19:00:31 +0000 Manifest next update: Sat 06 Dec 2025 19:00:31 +0000 Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: 9lOSN4RCe/4YfmlnoK9D+ZAfg7FFxDbOgrk78/U+R3o=) 2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=) 3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:e3:24:99:7e:66:2c:ff:18:56:99:95:67:8d:2c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Validity Not Before: Dec 5 19:00:31 2025 GMT Not After : Dec 6 19:00:31 2025 GMT Subject: CN=d8692fe426da2edd65c7b8bb721a20e2c8418b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:96:73:e5:fa:2e:6b:20:4c:60:9f:05:cc: 7c:28:40:aa:5d:ff:1f:21:38:48:e2:23:48:38:6c: db:f7:fe:ee:99:4e:08:e4:e6:b3:7d:8c:1e:42:b9: 34:56:95:de:11:29:ee:c7:84:30:cd:4f:2f:e9:4a: 78:34:82:4e:2c:e5:e5:08:7f:69:91:9b:03:6b:14: 48:f7:bf:dc:3e:5b:46:78:25:59:85:14:ee:cd:2a: 22:99:28:30:28:ea:1d:1a:c1:e8:73:75:e6:ee:67: 6c:b8:bc:a4:ff:10:25:b4:17:b2:d3:40:bb:b6:cc: 75:97:7a:fc:82:50:3c:4a:ea:b1:10:94:72:ad:56: f4:8e:08:a7:5d:1b:ba:69:23:b5:6d:0a:a2:77:10: 1a:be:5c:c3:8c:41:f5:ae:e8:ca:78:a8:d8:86:c4: f8:db:e8:23:85:85:62:ef:e0:c1:fb:a9:8d:50:f4: 6c:ff:6f:84:2e:83:f2:35:b2:11:84:d0:ce:80:36: b8:cf:60:7a:a7:bf:5f:f0:ec:fb:6b:9a:7c:b2:44: ce:89:5b:f9:3a:db:c7:16:7f:c0:c7:5f:a6:0a:e5: 45:a0:3a:3f:0b:ac:e2:19:d8:ff:f3:68:c0:12:5b: c3:4b:dc:a9:3a:ce:21:ca:90:2b:59:74:29:3a:e2: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:69:2F:E4:26:DA:2E:DD:65:C7:B8:BB:72:1A:20:E2:C8:41:8B:18 X509v3 Authority Key Identifier: keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:eb:91:d6:98:1d:bc:79:2a:51:69:8d:cc:0f:e9:15:35:d8: 1d:94:0b:5a:e5:79:55:94:88:7a:4f:ba:3f:85:d4:c5:67:5d: 98:d5:7c:34:ed:50:cc:4e:54:5d:48:c8:5f:8d:81:54:1e:87: b4:0d:76:0f:e7:04:46:95:c6:fe:73:7c:7c:c9:5f:5c:99:b5: 34:80:86:16:89:cf:71:cc:cf:1f:8e:c5:7f:5e:0b:ea:fa:51: fa:34:23:0e:1e:5f:c6:f8:0d:51:4d:5d:40:d1:86:24:e3:7d: 39:a6:e4:28:da:36:41:37:b8:61:0f:44:f0:bc:0a:08:71:f6: 60:64:fe:d4:a6:df:c6:58:7c:52:0a:a5:92:c6:0d:38:94:d0: 35:2e:07:92:05:e9:f8:63:f0:85:1f:84:2e:04:e3:1e:70:28: d4:42:0f:6c:3f:35:f5:4a:20:17:43:2e:51:0c:7e:6f:35:9d: d4:19:ac:ac:dd:d9:8e:9b:bb:24:48:b2:53:20:32:44:be:6f: eb:a4:fa:8c:02:fd:e7:e0:ec:ee:29:ec:74:72:74:40:9f:bd: 1c:02:77:14:f3:12:c3:cb:0c:74:be:cd:11:4a:4e:16:a2:68: 6b:a7:c7:c0:09:52:7a:91:1b:5f:4f:cf:82:e8:5e:bc:06:37: f4:4a:e4:90 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrv4ySZfmYs/xhWmZVnjSz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4 NTVkNTQwHhcNMjUxMjA1MTkwMDMxWhcNMjUxMjA2MTkwMDMxWjAzMTEwLwYDVQQD EyhkODY5MmZlNDI2ZGEyZWRkNjVjN2I4YmI3MjFhMjBlMmM4NDE4YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40yWc+X6LmsgTGCfBcx8KECqXf8f IThI4iNIOGzb9/7umU4I5OazfYweQrk0VpXeESnux4QwzU8v6Up4NIJOLOXlCH9p kZsDaxRI97/cPltGeCVZhRTuzSoimSgwKOodGsHoc3Xm7mdsuLyk/xAltBey00C7 tsx1l3r8glA8SuqxEJRyrVb0jginXRu6aSO1bQqidxAavlzDjEH1rujKeKjYhsT4 2+gjhYVi7+DB+6mNUPRs/2+ELoPyNbIRhNDOgDa4z2B6p79f8Oz7a5p8skTOiVv5 OtvHFn/Ax1+mCuVFoDo/C6ziGdj/82jAElvDS9ypOs4hypArWXQpOuIQkwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNhpL+Qm2i7dZce4u3IaIOLIQYsYMB8GA1UdIwQY MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuuR 1pgdvHkqUWmNzA/pFTXYHZQLWuV5VZSIek+6P4XUxWddmNV8NO1QzE5UXUjIX42B VB6HtA12D+cERpXG/nN8fMlfXJm1NICGFonPcczPH47Ff14L6vpR+jQjDh5fxvgN UU1dQNGGJON9OabkKNo2QTe4YQ9E8LwKCHH2YGT+1Kbfxlh8UgqlksYNOJTQNS4H kgXp+GPwhR+ELgTjHnAo1EIPbD819UogF0MuUQx+bzWd1BmsrN3Zjpu7JEiyUyAy RL5v66T6jAL95+Ds7insdHJ0QJ+9HAJ3FPMSw8sMdL7NEUpOFqJoa6fHwAlSepEb X0/PguhevAY39ErkkA== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:57 2025 by rpki-client