This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json) Hash identifier: emQNC9Fs5YRAlS99h08AfGckFWl42CcA2BEbeALS8JA= Subject key identifier: A8:72:DE:30:6E:68:87:09:08:D4:D3:37:5D:93:89:B2:0B:36:E6:58 Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Certificate serial: 019AF3F78E01D6FBADEC2F379E3D9312C068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:01:18 +0000 Manifest next update: Sun 07 Dec 2025 14:01:18 +0000 Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: m38IsduW0p43m/2kQAFHLc91Cy9TsXlPiURAX5gmGwA=) 2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=) 3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8e:01:d6:fb:ad:ec:2f:37:9e:3d:93:12:c0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Validity Not Before: Dec 6 14:01:18 2025 GMT Not After : Dec 7 14:01:18 2025 GMT Subject: CN=a872de306e68870908d4d3375d9389b20b36e658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:2b:6d:40:93:77:fc:0e:58:e1:57:3d:3e: 44:20:d7:5e:cb:86:d1:95:81:25:a0:44:7e:63:56: 0e:80:fd:34:85:01:a3:e3:d2:d0:50:d9:43:e6:58: 41:56:c1:05:9f:cc:53:7b:b8:e6:24:23:e3:d3:62: 89:f2:09:a9:ba:60:48:95:b3:4d:f9:0f:59:85:3d: 64:fd:01:f3:28:9a:4b:77:3c:df:6e:72:bb:29:f9: e5:72:4f:d5:7f:74:62:20:7b:ae:10:b4:b8:64:d3: bd:27:c6:2f:d3:c3:6f:6f:42:01:e5:c7:72:b1:01: 90:8c:82:5f:df:29:53:48:2a:0b:9f:fc:71:5d:65: 35:bd:1f:d8:05:ed:f1:d0:8a:91:f0:99:10:e8:a7: 41:50:6c:51:db:b3:f7:2c:d8:9a:87:ed:9d:15:04: a3:ef:54:e7:46:6f:dd:35:16:b0:d7:82:2d:6f:cf: 9b:9f:51:57:18:47:f5:30:29:e6:70:0a:6e:a5:6c: ea:b5:66:2d:67:9e:dd:cf:ec:66:79:14:66:4d:22: 1f:e4:ec:39:4c:70:1a:71:65:aa:58:8e:e4:69:2f: 6d:be:50:cc:3d:f9:0e:d3:1c:cb:de:71:b2:fb:9b: c8:bf:f3:57:d7:02:11:ed:a4:bf:0a:b5:f8:85:61: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:DE:30:6E:68:87:09:08:D4:D3:37:5D:93:89:B2:0B:36:E6:58 X509v3 Authority Key Identifier: keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9a:e3:e4:97:45:0d:9d:48:95:c3:16:f2:ce:b6:d0:32:05: 25:a8:04:14:91:78:fe:d5:ba:f5:88:25:7a:d1:82:ae:4b:ed: df:d8:c6:b7:3e:86:ef:c2:2f:67:68:9b:1c:52:e9:e6:bb:43: 0d:83:3e:ed:75:b9:6b:e0:d2:72:8f:82:d1:57:f1:66:57:76: fe:0c:cd:5c:e0:f6:30:c2:9f:13:3f:e4:dc:40:76:2f:d8:f0: 50:5e:82:df:e5:6e:f4:69:cd:29:a8:44:27:f5:44:14:0d:e2: 53:62:55:c8:17:ab:32:e5:a8:a2:ce:ee:4c:0d:bc:a5:c8:b2: 4a:28:bb:e3:6c:3e:1a:77:0d:5d:b2:47:dc:0b:b6:cd:c3:ee: b6:a1:13:e8:9d:d9:9b:1b:9d:ce:c3:11:0b:f8:4e:7e:bb:77: aa:45:ce:e2:e4:0c:a2:08:ef:29:bf:c6:8b:ed:69:cd:05:4f: 39:5e:e8:57:c7:51:3c:30:c4:42:cc:6d:48:68:6f:e9:ea:71: 1e:e5:2d:de:06:5d:a6:d5:40:a6:05:22:3d:92:bf:6f:55:cf: 50:80:07:82:57:ba:86:fe:6d:0e:a7:ec:4b:c9:2c:5d:6f:12: 09:4f:7a:e8:a0:47:e6:87:1c:82:6a:50:fe:07:ad:10:3b:7f: 65:45:f9:e6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrz944B1vut7C83nj2TEsBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWRmNTYyNDhmOTc3N2ZhMjJkNWRhNmMwNGI1ZmIzMzJh NGIzNTAwHhcNMjUxMjA2MTQwMTE4WhcNMjUxMjA3MTQwMTE4WjAzMTEwLwYDVQQD EyhhODcyZGUzMDZlNjg4NzA5MDhkNGQzMzc1ZDkzODliMjBiMzZlNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj0rbUCTd/wOWOFXPT5EINdey4bR lYEloER+Y1YOgP00hQGj49LQUNlD5lhBVsEFn8xTe7jmJCPj02KJ8gmpumBIlbNN +Q9ZhT1k/QHzKJpLdzzfbnK7Kfnlck/Vf3RiIHuuELS4ZNO9J8Yv08Nvb0IB5cdy sQGQjIJf3ylTSCoLn/xxXWU1vR/YBe3x0IqR8JkQ6KdBUGxR27P3LNiah+2dFQSj 71TnRm/dNRaw14Itb8+bn1FXGEf1MCnmcApupWzqtWYtZ57dz+xmeRRmTSIf5Ow5 THAacWWqWI7kaS9tvlDMPfkO0xzL3nGy+5vIv/NX1wIR7aS/CrX4hWHdjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKhy3jBuaIcJCNTTN12TibILNuZYMB8GA1UdIwQY MBaAFPid9WJI+Xd/oi1dpsBLX7MypLNQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KMzFZa2o1ZDMtaUxWMm13RXRmc3pLa3MxQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3 LWMxNmJhZWRmNmZhNi8xLzEtSjMxWWtqNWQzLWlMVjJtd0V0ZnN6S2tzMUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1L2Q0NmQyNS01ZDhmLTQ5ODktYjU1Ny1jMTZiYWVkZjZm YTYvMS8xLUozMVlrajVkMy1pTFYybXdFdGZzektrczFBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHprj 5JdFDZ1IlcMW8s620DIFJagEFJF4/tW69YgletGCrkvt39jGtz6G78IvZ2ibHFLp 5rtDDYM+7XW5a+DSco+C0VfxZld2/gzNXOD2MMKfEz/k3EB2L9jwUF6C3+Vu9GnN KahEJ/VEFA3iU2JVyBerMuWoos7uTA28pciySii742w+GncNXbJH3Au2zcPutqET 6J3ZmxudzsMRC/hOfrt3qkXO4uQMogjvKb/Gi+1pzQVPOV7oV8dRPDDEQsxtSGhv 6epxHuUt3gZdptVApgUiPZK/b1XPUIAHgle6hv5tDqfsS8ksXW8SCU966KBH5occ gmpQ/getEDt/ZUX55g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:01 2025 by rpki-client