This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json) Hash identifier: mf4Zo1H5sezFApXIOuTZxopKytuLgZ0zE61iumJ/i1E= Subject key identifier: 1A:71:1F:00:D5:51:E1:B6:2A:76:E6:FA:1F:91:FA:B7:C7:D8:44:04 Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Certificate serial: 019B1C179388A3DF5B1C4F9E19F515113509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 09:01:05 +0000 Manifest this update: Sun 14 Dec 2025 09:01:05 +0000 Manifest next update: Mon 15 Dec 2025 09:01:05 +0000 Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: OH2xtg7W+mWLvdZj8/rJhrgCUefxCobK17W/ACi7RFE=) 2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:93:88:a3:df:5b:1c:4f:9e:19:f5:15:11:35:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Validity Not Before: Dec 14 09:01:05 2025 GMT Not After : Dec 15 09:01:05 2025 GMT Subject: CN=1a711f00d551e1b62a76e6fa1f91fab7c7d84404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e4:99:65:c5:a8:b5:f8:ed:f9:91:92:8c:bb: 49:a0:9c:89:64:6b:13:74:77:53:9d:53:75:40:e0: 13:0d:d1:a9:c1:3f:30:64:a9:b0:a7:bc:ee:08:45: a7:05:34:e0:76:15:f1:36:05:6f:14:79:66:44:b0: bc:4d:0a:35:96:74:60:e3:1f:5e:8e:5d:31:74:0d: ff:16:b6:5a:ef:d0:c0:43:a8:66:63:37:ab:db:98: 78:8d:60:02:2a:40:3f:b2:d6:e3:00:7b:3e:af:d5: 42:08:e5:d1:95:1b:4c:0f:d0:56:0f:6b:03:5c:0c: fb:3f:05:bf:a4:d9:1f:9b:45:43:ce:af:52:5d:bc: be:65:bb:d8:3c:69:aa:e1:76:e5:53:0d:98:a4:6e: d1:7b:aa:df:1c:cb:21:37:43:da:76:97:7f:a8:f0: da:4a:b5:5f:9f:97:63:c0:3c:4b:7a:9f:14:1a:a6: 93:a9:ae:3e:27:77:55:21:31:3b:09:db:74:31:5d: 4b:c5:39:2f:51:48:24:54:e6:28:a0:b3:ff:0c:74: 08:c0:63:f3:0f:e8:c9:8f:cf:f5:d5:04:2e:1d:0f: f7:3d:b3:9a:b3:9d:50:c5:a6:a4:44:e8:bd:a2:de: 8a:86:02:54:12:5d:a6:bc:44:9d:87:fe:e3:69:dc: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:1F:00:D5:51:E1:B6:2A:76:E6:FA:1F:91:FA:B7:C7:D8:44:04 X509v3 Authority Key Identifier: keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:1c:8d:c8:87:ba:f2:71:fe:14:6c:ac:ec:c4:54:1a:80: b9:71:3c:6b:6b:6e:1d:89:06:74:4d:51:e0:2d:cb:68:67:71: de:39:c5:7e:67:a0:e8:f9:2e:52:88:b8:0a:10:29:99:a2:71: 88:93:14:08:8e:e0:6c:02:01:f1:e6:e3:9b:ad:1e:46:11:b1: 52:f2:b3:bb:4e:72:4f:5c:bb:0a:61:ba:50:f6:62:12:b3:cc: 8b:ab:74:d6:39:3f:c7:d2:3d:ae:8c:ab:47:11:06:e3:ce:2d: 0b:80:44:d4:17:67:a1:19:a6:bc:07:5e:c3:8d:3c:fc:64:76: 39:5b:a4:04:60:93:6a:28:ef:16:54:2c:24:a8:da:30:77:e6: cb:43:d1:da:ac:04:61:64:06:09:b3:8f:de:9d:6b:93:67:33: 49:0a:d4:cc:f7:37:b8:ab:4a:00:8e:a3:41:ef:0d:8b:dc:d1: 16:26:ad:0a:a4:c1:aa:08:46:6b:0e:88:be:a1:a6:a7:cb:b5: 3d:4e:89:f6:f2:f7:87:3e:61:6b:6a:8c:40:84:cd:31:c0:9e: bb:6a:be:bf:6a:f8:0e:24:e1:3f:a1:93:49:a0:d3:bf:de:d0: c0:0e:79:ae:41:c2:a5:ef:30:18:40:4d:b7:00:85:ca:4c:84: d3:3b:e4:36 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZscF5OIo99bHE+eGfUVETUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3 NGJlZDIwHhcNMjUxMjE0MDkwMTA1WhcNMjUxMjE1MDkwMTA1WjAzMTEwLwYDVQQD EygxYTcxMWYwMGQ1NTFlMWI2MmE3NmU2ZmExZjkxZmFiN2M3ZDg0NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uSZZcWotfjt+ZGSjLtJoJyJZGsT dHdTnVN1QOATDdGpwT8wZKmwp7zuCEWnBTTgdhXxNgVvFHlmRLC8TQo1lnRg4x9e jl0xdA3/FrZa79DAQ6hmYzer25h4jWACKkA/stbjAHs+r9VCCOXRlRtMD9BWD2sD XAz7PwW/pNkfm0VDzq9SXby+ZbvYPGmq4XblUw2YpG7Re6rfHMshN0Padpd/qPDa SrVfn5djwDxLep8UGqaTqa4+J3dVITE7Cdt0MV1LxTkvUUgkVOYooLP/DHQIwGPz D+jJj8/11QQuHQ/3PbOas51QxaakROi9ot6KhgJUEl2mvESdh/7jadz3QwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBpxHwDVUeG2Knbm+h+R+rfH2EQEMB8GA1UdIwQY MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0 ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpcc jciHuvJx/hRsrOzEVBqAuXE8a2tuHYkGdE1R4C3LaGdx3jnFfmeg6PkuUoi4ChAp maJxiJMUCI7gbAIB8ebjm60eRhGxUvKzu05yT1y7CmG6UPZiErPMi6t01jk/x9I9 royrRxEG484tC4BE1BdnoRmmvAdew408/GR2OVukBGCTaijvFlQsJKjaMHfmy0PR 2qwEYWQGCbOP3p1rk2czSQrUzPc3uKtKAI6jQe8Ni9zRFiatCqTBqghGaw6IvqGm p8u1PU6J9vL3hz5ha2qMQITNMcCeu2q+v2r4DiThP6GTSaDTv97QwA55rkHCpe8w GEBNtwCFykyE0zvkNg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:14:23 2025 by rpki-client