This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json) Hash identifier: UpweoYk4oO+C3tyDJxl79pAfhxsRAP4SkcpHzyknLTk= Subject key identifier: 27:7D:C5:E1:C4:09:58:B7:A7:0F:F7:1D:8D:A4:A3:C7:5B:6D:82:BD Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01 Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901 Certificate serial: 019B31FA6D1B4F1F7F6476AE6FF35A3A689B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft Manifest number: 0523 Signing time: Thu 18 Dec 2025 15:00:54 +0000 Manifest this update: Thu 18 Dec 2025 15:00:54 +0000 Manifest next update: Fri 19 Dec 2025 15:00:54 +0000 Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: 4YqfIdllmH8e6DO84GjW+AN70C5VQfyhX12L2DUwqDI=) 2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:6d:1b:4f:1f:7f:64:76:ae:6f:f3:5a:3a:68:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901 Validity Not Before: Dec 18 15:00:54 2025 GMT Not After : Dec 19 15:00:54 2025 GMT Subject: CN=277dc5e1c40958b7a70ff71d8da4a3c75b6d82bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:5a:e5:7c:1d:95:32:d7:a3:30:8d:5b:f1: 79:e9:7d:51:be:40:81:91:2a:d7:e7:f8:d6:5a:ef: d8:6f:7a:32:23:7d:3f:df:59:09:ba:87:1b:35:eb: 62:a1:b6:51:9e:86:1a:35:f0:19:1f:19:4e:09:97: 44:8d:89:4b:e4:70:55:9d:a9:9a:65:c1:71:11:e1: 2f:78:68:d4:77:9e:33:2f:d2:2c:0e:13:ff:9d:3b: c9:b6:e6:eb:0b:a8:0c:b7:94:7d:ad:2c:6c:3d:15: fb:31:24:cb:69:b1:36:1c:d8:17:15:98:fd:f8:d2: fb:7b:49:32:60:e4:d6:83:00:9f:a2:62:99:6e:88: b4:71:41:e6:83:fd:c0:9a:21:62:3d:fc:d2:02:24: 9d:6c:c3:58:68:1d:00:bb:96:d5:d7:02:bc:fe:94: 1c:b6:20:a8:aa:71:f6:b9:b2:ee:78:fd:17:e5:13: 04:8a:e4:de:e0:93:bc:88:0b:70:2a:60:7e:88:0d: 28:a8:f1:50:e9:8e:9a:4a:80:91:28:4a:e6:a0:ed: 4b:15:d5:6f:de:e1:1b:6b:aa:d3:c6:d5:7b:b2:7d: 97:20:16:49:e5:e6:b2:36:a4:6b:d2:de:7d:5e:f6: 87:5d:b4:e6:12:18:28:70:86:05:df:f3:6b:4c:10: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7D:C5:E1:C4:09:58:B7:A7:0F:F7:1D:8D:A4:A3:C7:5B:6D:82:BD X509v3 Authority Key Identifier: keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:00:1c:2d:c0:dc:8a:8d:b1:c3:9e:9b:e0:16:25:a7:e9:8a: 0a:fe:3e:8e:7a:9d:51:6e:25:66:73:cc:6b:cc:4b:af:e6:7f: 28:be:72:0a:b9:6b:6d:46:92:85:45:6f:3f:45:bc:72:ab:3e: da:1a:89:e1:29:8a:26:8a:57:38:0b:ae:37:c3:91:87:a8:d8: 9b:50:e7:70:12:c0:ea:b0:54:2f:0b:ed:ce:04:84:f2:8d:82: 56:23:ea:be:b4:dc:c9:2d:d3:3c:b5:90:df:fa:a0:a3:ec:8d: 34:6b:c6:56:7a:a6:a9:1e:eb:81:84:e1:3f:0a:cc:72:52:ec: fd:8a:e5:16:51:d3:7d:7d:45:3e:09:b8:70:92:4a:9f:b4:19: 69:ab:57:48:f1:51:f1:ff:9a:03:2c:01:cb:2e:07:4d:7d:97: c4:69:ea:36:bf:2c:b5:b3:1c:3b:b8:a4:4e:dd:38:a8:af:3a: c6:bf:e3:f5:a6:40:97:43:d5:8b:16:5b:3c:fd:05:51:54:83: af:2c:69:9c:86:fa:33:d4:d6:02:b2:ee:15:73:c6:1d:18:31: 36:9f:2f:a9:76:71:25:67:96:14:be:fd:3e:c4:cf:86:fd:8a: 09:ec:40:3a:31:38:82:9c:38:71:98:75:f3:44:2d:e9:98:18: fd:6c:c2:ea -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsx+m0bTx9/ZHaub/NaOmibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZmNGRmMmVmYzY5ZWNjMTkyZWE1YWVmZDdiM2I5N2Y1 ODA5MDEwHhcNMjUxMjE4MTUwMDU0WhcNMjUxMjE5MTUwMDU0WjAzMTEwLwYDVQQD EygyNzdkYzVlMWM0MDk1OGI3YTcwZmY3MWQ4ZGE0YTNjNzViNmQ4MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX5a5XwdlTLXozCNW/F56X1RvkCB kSrX5/jWWu/Yb3oyI30/31kJuocbNetiobZRnoYaNfAZHxlOCZdEjYlL5HBVnama ZcFxEeEveGjUd54zL9IsDhP/nTvJtubrC6gMt5R9rSxsPRX7MSTLabE2HNgXFZj9 +NL7e0kyYOTWgwCfomKZboi0cUHmg/3AmiFiPfzSAiSdbMNYaB0Au5bV1wK8/pQc tiCoqnH2ubLueP0X5RMEiuTe4JO8iAtwKmB+iA0oqPFQ6Y6aSoCRKErmoO1LFdVv 3uEba6rTxtV7sn2XIBZJ5eayNqRr0t59XvaHXbTmEhgocIYF3/NrTBCbRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCd9xeHECVi3pw/3HY2ko8dbbYK9MB8GA1UdIwQY MBaAFPsf9N8u/GnswZLqWu/Xs7l/WAkBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14XzAzeTc4YWV6Qmt1cGE3OWV6dVg5WUNRRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1LWUxYTMtNDJiNS05Yjdi LTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBhNzllenVYOVlDUUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RiLzY3OWUxNS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRh MDUvMS8xLXhfMDN5NzhhZXpCa3VwYTc5ZXp1WDlZQ1FFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAAc LcDcio2xw56b4BYlp+mKCv4+jnqdUW4lZnPMa8xLr+Z/KL5yCrlrbUaShUVvP0W8 cqs+2hqJ4SmKJopXOAuuN8ORh6jYm1DncBLA6rBULwvtzgSE8o2CViPqvrTcyS3T PLWQ3/qgo+yNNGvGVnqmqR7rgYThPwrMclLs/YrlFlHTfX1FPgm4cJJKn7QZaatX SPFR8f+aAywByy4HTX2XxGnqNr8stbMcO7ikTt04qK86xr/j9aZAl0PVixZbPP0F UVSDryxpnIb6M9TWArLuFXPGHRgxNp8vqXZxJWeWFL79PsTPhv2KCexAOjE4gpw4 cZh180Qt6ZgY/WzC6g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:08 2025 by rpki-client