This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json) Hash identifier: sq9YW/jG0puHW8oFHZVglz9n+HnEkgtXubfONtm63BA= Subject key identifier: 6E:A4:4E:F1:C1:79:6A:99:D1:6A:37:0A:3A:12:DD:B7:28:72:E0:08 Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01 Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901 Certificate serial: 019B0F377C63769CCED3A5826BC32E7519C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft Manifest number: 0511 Signing time: Thu 11 Dec 2025 21:00:53 +0000 Manifest this update: Thu 11 Dec 2025 21:00:53 +0000 Manifest next update: Fri 12 Dec 2025 21:00:53 +0000 Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: X9PHcI7X/m4y06KL3fr9f0pc7/86pfc7d1+IEytbf04=) 2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:7c:63:76:9c:ce:d3:a5:82:6b:c3:2e:75:19:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901 Validity Not Before: Dec 11 21:00:53 2025 GMT Not After : Dec 12 21:00:53 2025 GMT Subject: CN=6ea44ef1c1796a99d16a370a3a12ddb72872e008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:36:1b:ca:7c:61:80:82:fd:94:b7:85:2f: d9:40:ba:9a:c3:f5:50:6c:46:77:2a:d5:b0:9f:94: fc:57:01:30:38:ca:d3:87:3f:7f:28:28:e3:49:6e: b2:41:9d:04:4d:5b:47:4c:18:17:af:b7:72:51:22: 98:a8:31:c5:af:0b:a6:e2:c8:6d:25:3b:cb:cb:aa: 2f:ca:1b:f8:0e:13:0f:8a:9f:98:bd:e2:dc:a5:4b: 85:f4:17:00:ed:d1:ec:cc:ee:15:09:ba:9c:d3:70: 3e:fa:fc:42:6a:6b:7a:49:e8:a1:84:69:56:4b:0c: 6c:8c:9e:1c:15:8b:94:93:1f:9c:ea:20:30:87:49: 0a:26:f2:7c:c7:78:98:6d:b2:c2:80:83:a1:7e:2e: 89:02:5e:59:1b:36:4b:15:5e:bd:de:a1:72:da:99: e0:84:ac:6e:65:b1:3d:dd:9e:0a:d0:12:7d:05:aa: 20:1f:d5:38:5a:52:75:7b:1c:fd:da:9b:b1:a9:a1: 85:94:49:51:d6:f1:a8:ba:6d:12:ba:63:68:9b:d7: a5:0d:f3:6b:dd:cb:35:c4:58:98:6a:ef:75:25:27: c7:60:39:d8:f0:61:db:d1:e3:40:26:13:ec:e2:09: c1:a5:d1:28:af:26:96:67:db:d5:dc:e0:20:6f:4b: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A4:4E:F1:C1:79:6A:99:D1:6A:37:0A:3A:12:DD:B7:28:72:E0:08 X509v3 Authority Key Identifier: keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:17:b0:5e:1a:40:b0:0b:75:9c:dd:50:0a:66:e5:68:b3:29: db:40:8d:ec:2a:2c:9f:06:a7:d1:af:e0:bc:ab:88:96:c5:68: f4:0a:04:c6:05:f2:86:03:c5:19:3a:a5:54:19:a8:97:f7:c4: fb:51:72:6b:09:ca:74:2f:88:4b:4c:a4:34:82:25:13:ef:8d: f9:15:2e:69:4f:c9:22:93:d3:68:8f:7e:5d:e2:36:97:97:9d: 7f:ee:fc:c1:74:c7:27:05:ef:22:70:e3:fe:1a:8a:8a:87:3b: b2:31:24:21:d3:e2:18:5b:28:13:f0:07:17:99:18:12:57:da: b0:41:67:f5:57:a9:e7:ba:94:78:a4:73:b8:5c:42:f7:39:be: f2:e3:2d:a1:2d:3c:c7:bc:b3:26:2f:c1:d4:b6:1d:24:7c:72: 5e:ee:8d:65:59:29:51:a9:7a:c4:a0:22:d7:d6:6b:1e:e5:69: 31:70:f3:5c:2b:e1:2a:b2:09:2f:b1:5c:7e:f5:59:68:27:fa: 7c:2c:8a:2f:3e:57:ca:7d:4c:79:0f:e1:40:95:37:c0:84:97: fb:3b:d6:23:61:bc:a5:c1:d2:80:c2:26:ff:5e:48:86:58:63: f2:bd:f5:47:eb:f5:2b:15:11:ab:17:53:27:74:37:2a:cb:52: b0:75:41:01 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsPN3xjdpzO06WCa8MudRnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZmNGRmMmVmYzY5ZWNjMTkyZWE1YWVmZDdiM2I5N2Y1 ODA5MDEwHhcNMjUxMjExMjEwMDUzWhcNMjUxMjEyMjEwMDUzWjAzMTEwLwYDVQQD Eyg2ZWE0NGVmMWMxNzk2YTk5ZDE2YTM3MGEzYTEyZGRiNzI4NzJlMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1o2G8p8YYCC/ZS3hS/ZQLqaw/VQ bEZ3KtWwn5T8VwEwOMrThz9/KCjjSW6yQZ0ETVtHTBgXr7dyUSKYqDHFrwum4sht JTvLy6ovyhv4DhMPip+YveLcpUuF9BcA7dHszO4VCbqc03A++vxCamt6SeihhGlW SwxsjJ4cFYuUkx+c6iAwh0kKJvJ8x3iYbbLCgIOhfi6JAl5ZGzZLFV693qFy2png hKxuZbE93Z4K0BJ9BaogH9U4WlJ1exz92puxqaGFlElR1vGoum0SumNom9elDfNr 3cs1xFiYau91JSfHYDnY8GHb0eNAJhPs4gnBpdEoryaWZ9vV3OAgb0t4NQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG6kTvHBeWqZ0Wo3CjoS3bcocuAIMB8GA1UdIwQY MBaAFPsf9N8u/GnswZLqWu/Xs7l/WAkBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14XzAzeTc4YWV6Qmt1cGE3OWV6dVg5WUNRRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1LWUxYTMtNDJiNS05Yjdi LTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBhNzllenVYOVlDUUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RiLzY3OWUxNS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRh MDUvMS8xLXhfMDN5NzhhZXpCa3VwYTc5ZXp1WDlZQ1FFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBew XhpAsAt1nN1QCmblaLMp20CN7Cosnwan0a/gvKuIlsVo9AoExgXyhgPFGTqlVBmo l/fE+1FyawnKdC+IS0ykNIIlE++N+RUuaU/JIpPTaI9+XeI2l5edf+78wXTHJwXv InDj/hqKioc7sjEkIdPiGFsoE/AHF5kYElfasEFn9Vep57qUeKRzuFxC9zm+8uMt oS08x7yzJi/B1LYdJHxyXu6NZVkpUal6xKAi19ZrHuVpMXDzXCvhKrIJL7FcfvVZ aCf6fCyKLz5Xyn1MeQ/hQJU3wISX+zvWI2G8pcHSgMIm/15Ihlhj8r31R+v1KxUR qxdTJ3Q3KstSsHVBAQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:12 2025 by rpki-client