This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json) Hash identifier: 2ti4Ne432W/mPyrYn5ZpS50oGDVu3npAE6ctAA6gq20= Subject key identifier: 19:96:54:E7:CD:52:C8:06:68:21:3B:F7:52:BF:23:7E:F5:87:56:1D Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Certificate serial: 019B34FB20D71E3516E51BA920B10623814A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft Manifest number: 04B0 Signing time: Fri 19 Dec 2025 05:00:31 +0000 Manifest this update: Fri 19 Dec 2025 05:00:31 +0000 Manifest next update: Sat 20 Dec 2025 05:00:31 +0000 Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: bOSVtI0ReE0EHs9SsuSiqydzUgvwir37X7aC/G6aMrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:20:d7:1e:35:16:e5:1b:a9:20:b1:06:23:81:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Validity Not Before: Dec 19 05:00:31 2025 GMT Not After : Dec 20 05:00:31 2025 GMT Subject: CN=199654e7cd52c80668213bf752bf237ef587561d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:22:e6:6b:3e:7b:a3:25:31:ee:ec:fb:26: 37:6a:82:73:d2:56:96:be:13:7b:36:82:51:ff:e9: 9f:a4:af:af:66:15:47:94:ce:90:db:18:00:fc:d3: 9d:c0:8d:6f:4b:1d:59:06:53:52:3d:98:c0:8a:bc: 84:d8:bb:9a:5d:47:f8:b7:bd:08:c7:01:3f:3e:97: f6:67:ad:57:1b:ed:47:91:4f:d7:e3:5f:2e:f9:67: e2:b1:d5:7d:2b:10:e4:8f:31:f0:5f:e6:9f:1a:4b: 4c:db:18:ac:7c:43:90:ef:8d:7e:8f:78:8c:44:95: dd:99:b8:4f:41:4f:9e:f5:23:d5:78:57:e9:ca:3b: ce:03:0e:fa:63:5a:f0:a2:81:10:39:88:91:89:a7: 15:12:a2:dd:c0:95:e9:e5:0c:4a:58:e4:d8:8d:15: 1d:9d:c9:1e:7a:a1:7d:49:da:26:ee:8d:02:84:dc: f2:c1:2d:ea:7b:dc:ef:90:8c:b6:83:10:41:19:5c: 46:a3:3f:7e:cb:da:cd:01:dc:5f:ac:f1:cb:63:44: 1c:7a:0f:89:5f:e5:9e:b7:d8:15:c6:91:62:76:14: ea:9b:a7:12:c0:9b:8b:30:19:fe:e7:fd:f3:41:03: 89:7a:10:85:9d:37:bf:99:5d:d6:8a:61:97:96:4b: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:54:E7:CD:52:C8:06:68:21:3B:F7:52:BF:23:7E:F5:87:56:1D X509v3 Authority Key Identifier: keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cf:1f:24:cf:ae:76:f0:f9:81:5b:d9:88:07:46:70:2f:8d: 7c:d1:62:1c:c1:05:18:ee:29:78:00:a6:8c:c5:2f:48:9a:83: 7d:c7:bc:82:02:d9:f8:69:f6:7c:7c:2c:d2:55:ab:25:67:ac: 12:fd:6a:9f:78:37:0a:33:1d:c5:5f:71:31:96:7b:21:a8:e1: dc:06:f3:5f:79:e0:1e:53:1b:9d:45:f8:5a:f6:40:48:61:86: 5d:b3:7b:26:38:ec:da:0c:e0:cc:5c:c5:0c:ec:c5:07:ee:5a: b6:08:43:8d:1f:39:80:d5:41:5c:49:ab:ae:41:b6:b3:44:39: 8a:f1:b6:2a:6d:b3:82:76:1f:26:17:db:84:b7:94:c3:14:a7: 2b:84:77:34:f0:e0:9e:7c:1a:55:28:8d:4e:f5:7f:08:ff:25: 85:17:7d:2e:30:fb:a0:03:2d:19:ff:4a:ed:80:81:25:0a:23: 8e:d8:47:66:c3:4c:4d:c1:bd:4a:f9:1c:a8:3c:56:dd:55:84: 65:22:61:1e:b3:6b:67:b1:5a:c2:19:ed:82:91:fb:de:2a:9d: 15:6c:1d:40:c3:c1:6c:f3:6c:06:dc:9c:07:bb:e0:d1:b9:0c: 9e:d2:56:ea:26:a8:28:0a:25:4c:1b:6a:2f:6a:f0:65:7b:20: 6a:70:a9:df -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs0+yDXHjUW5RupILEGI4FKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzU4NWExMDVlZTgzYzY0NWUyZWVmMTNkYzA4MWUzNWNh YTJjMDQwHhcNMjUxMjE5MDUwMDMxWhcNMjUxMjIwMDUwMDMxWjAzMTEwLwYDVQQD EygxOTk2NTRlN2NkNTJjODA2NjgyMTNiZjc1MmJmMjM3ZWY1ODc1NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFYi5ms+e6MlMe7s+yY3aoJz0laW vhN7NoJR/+mfpK+vZhVHlM6Q2xgA/NOdwI1vSx1ZBlNSPZjAiryE2LuaXUf4t70I xwE/Ppf2Z61XG+1HkU/X418u+WfisdV9KxDkjzHwX+afGktM2xisfEOQ741+j3iM RJXdmbhPQU+e9SPVeFfpyjvOAw76Y1rwooEQOYiRiacVEqLdwJXp5QxKWOTYjRUd nckeeqF9Sdom7o0ChNzywS3qe9zvkIy2gxBBGVxGoz9+y9rNAdxfrPHLY0Qceg+J X+Wet9gVxpFidhTqm6cSwJuLMBn+5/3zQQOJehCFnTe/mV3WimGXlkuGYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBmWVOfNUsgGaCE791K/I371h1YdMB8GA1UdIwQY MBaAFPo1haEF7oPGReLu8T3AgeNcqiwEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qV0ZvUVh1ZzhaRjR1N3hQY0NCNDF5cUxBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjk3YWExLTZmM2MtNGJkNS05MWQ0 LWM0YTliOTU3NjVhYy8xLzEtaldGb1FYdWc4WkY0dTd4UGNDQjQxeXFMQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y5N2FhMS02ZjNjLTRiZDUtOTFkNC1jNGE5Yjk1NzY1 YWMvMS8xLWpXRm9RWHVnOFpGNHU3eFBjQ0I0MXlxTEFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs8f JM+udvD5gVvZiAdGcC+NfNFiHMEFGO4peACmjMUvSJqDfce8ggLZ+Gn2fHws0lWr JWesEv1qn3g3CjMdxV9xMZZ7Iajh3AbzX3ngHlMbnUX4WvZASGGGXbN7Jjjs2gzg zFzFDOzFB+5atghDjR85gNVBXEmrrkG2s0Q5ivG2Km2zgnYfJhfbhLeUwxSnK4R3 NPDgnnwaVSiNTvV/CP8lhRd9LjD7oAMtGf9K7YCBJQojjthHZsNMTcG9SvkcqDxW 3VWEZSJhHrNrZ7FawhntgpH73iqdFWwdQMPBbPNsBtycB7vg0bkMntJW6iaoKAol TBtqL2rwZXsganCp3w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:01 2025 by rpki-client