This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json) Hash identifier: /1m4cUZUB1lZg8ylIU57Up9oxTTJUeGSs03MNcyv250= Subject key identifier: 30:4B:29:C8:2B:D4:35:A7:3B:73:B7:E2:76:49:03:96:DC:CD:EB:B7 Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Certificate serial: 019B0FA5BA9FF3CC763681A81763E6B58362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft Manifest number: 0404 Signing time: Thu 11 Dec 2025 23:01:18 +0000 Manifest this update: Thu 11 Dec 2025 23:01:18 +0000 Manifest next update: Fri 12 Dec 2025 23:01:18 +0000 Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: bZGQ49iCJNiHqPQmhEwAkPeeJvPh3Q8nSa5bZ2XBRPU=) 2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:ba:9f:f3:cc:76:36:81:a8:17:63:e6:b5:83:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d Validity Not Before: Dec 11 23:01:18 2025 GMT Not After : Dec 12 23:01:18 2025 GMT Subject: CN=304b29c82bd435a73b73b7e276490396dccdebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:37:ff:db:92:fa:b2:66:86:7a:5d:ab:53: 6e:e6:f9:6d:fc:c6:a7:1d:26:2c:b9:c5:f0:b9:6c: f4:12:17:3c:e8:8d:01:1f:fe:e4:9e:10:9f:53:05: 15:2f:c9:27:b5:f7:6c:87:61:81:43:6b:fd:54:ff: a8:66:c8:63:b5:ba:e1:b7:fd:0b:a9:41:34:0c:ce: da:f5:67:c8:1f:de:bc:bc:d5:50:32:ec:1a:d1:fa: ec:ce:97:b1:c8:10:fb:5d:f5:09:89:c6:e5:22:a5: d7:00:e6:bc:2e:58:d1:ac:13:43:f5:c8:ac:31:65: 68:ea:16:69:6a:46:02:a5:ad:dc:3f:a6:8c:96:53: f8:7a:7b:0f:58:30:00:c1:73:e9:50:85:b7:8e:d9: e4:37:5a:b9:93:21:9d:ee:64:32:a7:d9:c9:25:45: 31:e0:d5:fa:4f:68:b2:67:d6:15:7d:a9:db:ee:04: 15:13:fa:9b:e6:ed:6d:8b:f0:75:6d:84:84:fd:5f: 1d:e6:2f:ba:d3:42:d5:8f:37:31:ae:ee:1d:5a:c8: 6e:f4:31:48:5d:14:d9:c8:a8:b6:a1:19:e8:f3:b2: 65:d8:94:d0:ef:f4:40:84:05:8a:b4:8b:9e:a5:43: 9a:4c:e9:fa:e0:c1:20:94:e1:66:38:04:24:05:f7: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:29:C8:2B:D4:35:A7:3B:73:B7:E2:76:49:03:96:DC:CD:EB:B7 X509v3 Authority Key Identifier: keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2b:9e:d5:4d:70:af:32:b7:36:d7:66:dd:17:b2:a8:37:6a: 01:e9:d3:22:df:03:fa:33:e6:85:29:74:85:fd:8b:87:ff:f3: b6:51:5e:b4:ec:af:9e:79:b0:cb:1b:f0:44:b7:a3:d4:a8:b7: 59:c7:9b:64:3d:0d:f0:3d:8b:1e:1a:8a:0d:31:67:27:23:bf: 8a:4d:0f:b4:36:7f:d5:fa:ec:69:29:1f:89:a0:4e:64:4b:d4: 45:91:cb:0c:1d:d3:d9:9a:64:3c:20:78:93:a0:7c:f4:4b:cb: 2c:16:c0:d8:1f:ad:0b:7c:39:4d:03:29:ed:65:bb:7f:fe:94: 83:1c:de:77:0c:7a:f9:9a:13:55:af:4f:9d:f1:1c:2d:02:87: 38:da:3a:74:25:fb:ba:74:39:21:61:a7:f7:0e:66:93:d4:99: 90:a0:ef:d0:a4:f8:69:13:00:e8:ef:fd:96:cc:99:ff:00:9d: b4:ff:e3:15:5f:8f:a2:27:b8:ab:05:eb:31:69:7c:f0:06:5b: 83:22:58:ee:76:95:6f:21:f1:85:5a:ec:ba:c7:32:59:31:be: d5:2d:5b:93:15:29:2f:a9:d3:46:0d:f9:ab:b6:3a:d8:ff:17: 6b:ba:aa:3a:39:60:2e:40:8e:79:c7:16:11:17:15:ce:2d:6c: 34:b6:2e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpbqf88x2NoGoF2PmtYNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5 NTU0NmQwHhcNMjUxMjExMjMwMTE4WhcNMjUxMjEyMjMwMTE4WjAzMTEwLwYDVQQD EygzMDRiMjljODJiZDQzNWE3M2I3M2I3ZTI3NjQ5MDM5NmRjY2RlYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhs3/9uS+rJmhnpdq1Nu5vlt/Man HSYsucXwuWz0Ehc86I0BH/7knhCfUwUVL8kntfdsh2GBQ2v9VP+oZshjtbrht/0L qUE0DM7a9WfIH968vNVQMuwa0frszpexyBD7XfUJicblIqXXAOa8LljRrBND9cis MWVo6hZpakYCpa3cP6aMllP4ensPWDAAwXPpUIW3jtnkN1q5kyGd7mQyp9nJJUUx 4NX6T2iyZ9YVfanb7gQVE/qb5u1ti/B1bYSE/V8d5i+600LVjzcxru4dWshu9DFI XRTZyKi2oRno87Jl2JTQ7/RAhAWKtIuepUOaTOn64MEglOFmOAQkBfe4GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBLKcgr1DWnO3O34nZJA5bczeu3MB8GA1UdIwQY MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCue1U1w rzK3Ntdm3ReyqDdqAenTIt8D+jPmhSl0hf2Lh//ztlFetOyvnnmwyxvwRLej1Ki3 WcebZD0N8D2LHhqKDTFnJyO/ik0PtDZ/1frsaSkfiaBOZEvURZHLDB3T2ZpkPCB4 k6B89EvLLBbA2B+tC3w5TQMp7WW7f/6Ugxzedwx6+ZoTVa9PnfEcLQKHONo6dCX7 unQ5IWGn9w5mk9SZkKDv0KT4aRMA6O/9lsyZ/wCdtP/jFV+Poie4qwXrMWl88AZb gyJY7naVbyHxhVrsuscyWTG+1S1bkxUpL6nTRg35q7Y62P8Xa7qqOjlgLkCOeccW ERcVzi1sNLYupQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:02 2025 by rpki-client