This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json) Hash identifier: XYe7ebcUKZn2buRBJZo+aN2SVh3LnFqXKgKkHLznfQ4= Subject key identifier: AE:FF:C0:F1:DF:96:51:AF:D8:AE:D7:80:53:E2:25:C0:C5:92:EA:13 Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Certificate serial: 019B35697A853CCAA7FE9008319B4A014FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft Manifest number: 121C Signing time: Fri 19 Dec 2025 07:01:03 +0000 Manifest this update: Fri 19 Dec 2025 07:01:03 +0000 Manifest next update: Sat 20 Dec 2025 07:01:03 +0000 Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: 0GcB9Qr2tt4dzJr4y98y6zP7PepZo68gaXhpXfR25Do=) 2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:7a:85:3c:ca:a7:fe:90:08:31:9b:4a:01:4f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Validity Not Before: Dec 19 07:01:03 2025 GMT Not After : Dec 20 07:01:03 2025 GMT Subject: CN=aeffc0f1df9651afd8aed78053e225c0c592ea13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:e4:5e:5c:aa:ad:76:98:eb:2f:06:89:ce: b1:85:2e:5c:56:6c:83:62:cc:db:fa:a3:36:0d:98: 90:22:69:71:f1:5c:d1:b3:f4:f3:30:9d:ee:22:e8: f0:b0:f9:11:55:8a:c6:fa:5f:c6:9d:9b:cf:cd:ee: 7e:4b:b7:ce:f3:8a:83:1a:02:aa:18:b2:2f:10:b5: 8a:4e:58:ad:03:20:75:fc:1a:10:ce:2a:49:7c:78: bd:a0:47:ba:d3:17:f5:2a:7a:1e:cd:25:03:79:22: 64:1d:f5:11:06:56:57:6e:31:f4:60:2c:0c:d6:cd: b6:af:4d:4c:9c:bd:91:3f:45:f5:d0:77:60:bd:a5: 5a:b7:a1:ca:ec:f9:11:3f:b9:fa:e9:29:c1:89:ae: 46:4f:96:a7:d8:32:6f:10:13:c3:f6:2f:9d:22:e4: 9a:ab:e3:e7:79:0b:40:1a:60:a1:0d:92:6b:03:cc: 3a:38:bd:68:36:7c:b5:75:38:63:20:f9:02:ae:39: 5f:68:74:12:bb:e0:f4:19:25:93:73:f8:60:df:71: ed:3a:39:8f:72:2f:b2:b3:5e:46:7b:20:be:66:f6: 69:5a:84:5a:ee:6b:30:92:40:79:e3:33:c5:1c:c2: 31:13:5c:c9:4b:2b:02:60:f8:3c:32:7b:f0:20:fd: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:C0:F1:DF:96:51:AF:D8:AE:D7:80:53:E2:25:C0:C5:92:EA:13 X509v3 Authority Key Identifier: keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:2e:26:14:f6:c9:f9:c0:91:ef:c4:fd:d1:af:c8:96:42: 5d:17:1e:61:4d:59:37:5e:07:a0:35:ab:ff:c4:fc:ed:0a:9f: d1:eb:0a:f7:6e:49:81:c3:da:ad:e5:65:47:5e:de:e9:48:ed: ca:ee:7c:62:2f:7a:ac:f7:bb:00:e4:50:e6:1c:72:0b:33:27: 8a:d2:39:c5:ae:4b:52:4f:a3:7a:2f:f1:7d:d4:49:30:07:e7: 0e:ad:9b:ff:73:4f:3c:4a:52:7f:94:3b:bd:e1:4a:a3:0e:66: 09:36:4d:82:22:21:e3:cb:b5:28:87:ef:bc:99:5e:ad:99:37: 1f:e4:55:ec:2a:5b:ef:10:17:3f:93:6e:e5:b9:6c:a7:47:af: b8:b5:a8:6c:cb:23:c5:9d:3a:d7:29:77:1f:79:07:d4:f9:a9: bd:de:1c:0f:74:96:f4:ad:73:9b:a1:f0:86:b7:2f:86:4c:4f: 8b:e6:c0:b8:ca:2b:5e:69:20:17:e4:71:db:86:87:c3:86:5f: 1e:13:19:67:f7:f0:4f:35:da:1b:ae:49:d9:ed:cb:5b:df:7a: 5d:cc:72:e9:d8:9c:dc:09:79:bc:5a:5b:fc:ad:4c:e0:10:0c: 34:22:03:b8:da:11:21:be:88:9f:a4:83:5f:8d:52:e1:7a:d9: ba:9d:9e:c8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs1aXqFPMqn/pAIMZtKAU/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj OGQ0MDQwHhcNMjUxMjE5MDcwMTAzWhcNMjUxMjIwMDcwMTAzWjAzMTEwLwYDVQQD EyhhZWZmYzBmMWRmOTY1MWFmZDhhZWQ3ODA1M2UyMjVjMGM1OTJlYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6vkXlyqrXaY6y8Gic6xhS5cVmyD Yszb+qM2DZiQImlx8VzRs/TzMJ3uIujwsPkRVYrG+l/GnZvPze5+S7fO84qDGgKq GLIvELWKTlitAyB1/BoQzipJfHi9oEe60xf1KnoezSUDeSJkHfURBlZXbjH0YCwM 1s22r01MnL2RP0X10HdgvaVat6HK7PkRP7n66SnBia5GT5an2DJvEBPD9i+dIuSa q+PneQtAGmChDZJrA8w6OL1oNny1dThjIPkCrjlfaHQSu+D0GSWTc/hg33HtOjmP ci+ys15GeyC+ZvZpWoRa7mswkkB54zPFHMIxE1zJSysCYPg8MnvwIP3KUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK7/wPHfllGv2K7XgFPiJcDFkuoTMB8GA1UdIwQY MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpUu JhT2yfnAke/E/dGvyJZCXRceYU1ZN14HoDWr/8T87Qqf0esK925JgcPareVlR17e 6Ujtyu58Yi96rPe7AORQ5hxyCzMnitI5xa5LUk+jei/xfdRJMAfnDq2b/3NPPEpS f5Q7veFKow5mCTZNgiIh48u1KIfvvJlerZk3H+RV7Cpb7xAXP5Nu5blsp0evuLWo bMsjxZ061yl3H3kH1Pmpvd4cD3SW9K1zm6HwhrcvhkxPi+bAuMorXmkgF+Rx24aH w4ZfHhMZZ/fwTzXaG65J2e3LW996Xcxy6dic3Al5vFpb/K1M4BAMNCIDuNoRIb6I n6SDX41S4XrZup2eyA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:21:20 2025 by rpki-client