This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json) Hash identifier: RjK7i2pG06/U56mVgaYBvc8s8bM0z0fPbVugVvziqWo= Subject key identifier: 5A:B7:6A:02:EC:4D:25:3B:98:E5:F9:99:A7:8B:B3:B9:C5:AE:CD:CC Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7 Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7 Certificate serial: 019B5ABF38FB5ED466A0761B1159216138B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft Manifest number: 1029 Signing time: Fri 26 Dec 2025 13:00:39 +0000 Manifest this update: Fri 26 Dec 2025 13:00:39 +0000 Manifest next update: Sat 27 Dec 2025 13:00:39 +0000 Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: zphvOls0J3xNeFs90/f0KgiSSJvDmPubG80tIvOFXfo=) 2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:38:fb:5e:d4:66:a0:76:1b:11:59:21:61:38:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7 Validity Not Before: Dec 26 13:00:39 2025 GMT Not After : Dec 27 13:00:39 2025 GMT Subject: CN=5ab76a02ec4d253b98e5f999a78bb3b9c5aecdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:8c:f5:c7:d3:24:e0:d1:8e:dd:b0:6a:d5: 5b:b1:ce:ac:09:a1:a1:c8:8b:67:55:2e:e3:6a:df: 1b:25:cd:0c:43:94:ca:69:99:67:23:c6:8a:fd:2c: a9:40:c4:47:ff:1d:62:71:51:e1:bc:63:06:1c:0d: 11:68:bd:c8:53:76:27:48:e8:56:18:a2:06:b5:7d: 59:b5:3a:e9:07:e9:7d:9e:f7:d3:a8:3e:86:c3:db: 2e:cb:6a:f2:38:1f:68:9e:5f:d0:07:99:c4:65:00: 91:4b:49:dc:58:1d:30:e5:04:69:01:fe:9d:2c:52: bc:8a:af:24:ce:09:0f:ad:dc:bc:50:00:d7:b2:67: 7b:70:9d:d7:1c:3c:b2:a7:52:8e:9f:49:fe:ee:29: 5a:34:73:3e:eb:6b:a6:5e:c5:0b:4d:0b:4f:f4:43: 19:63:df:04:8a:07:ac:54:39:63:7a:f2:ff:fd:d4: f8:1d:b4:fa:f5:0a:b8:6d:d4:b2:f6:b4:18:00:c4: 3f:a1:40:6d:dc:b9:8a:dc:49:30:9c:06:7d:a7:64: 25:8a:44:47:89:2d:04:be:c9:13:b5:47:6c:23:35: d3:c9:35:32:6c:7d:fe:c9:d6:ab:a9:a5:3f:bc:5b: 55:a1:d6:e6:97:ea:ee:c2:47:f5:fe:30:9a:b5:8c: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B7:6A:02:EC:4D:25:3B:98:E5:F9:99:A7:8B:B3:B9:C5:AE:CD:CC X509v3 Authority Key Identifier: keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bc:02:16:38:2a:27:a1:8e:93:ac:a1:19:81:33:17:91:a0: 27:59:99:42:95:7f:9c:93:06:a6:6a:ff:d6:e7:27:f9:fc:31: 97:af:bf:6d:38:20:f9:d4:d6:34:57:24:93:15:6f:1c:e7:ef: ce:24:09:b4:1e:06:cb:5e:d2:69:8a:f2:ab:40:e4:53:d9:29: fb:e7:78:75:41:f4:53:76:43:00:d3:55:42:9d:f1:61:02:04: 47:6b:97:27:41:34:92:7e:61:58:e1:dd:1f:f9:6d:71:98:fc: d8:6b:6b:29:0a:c6:50:b7:b4:76:79:b3:5f:44:5c:55:15:3f: a4:e8:18:75:52:cc:6c:c0:63:71:32:89:5e:32:37:9c:8b:36: eb:4f:a2:3d:8c:1d:44:b4:bd:38:91:58:ee:03:29:4a:2f:f6: 62:5f:71:85:2d:27:0e:5a:42:08:82:ce:66:37:b8:d4:d6:ec: 33:14:53:55:8d:ec:48:58:af:c2:6c:c0:84:5e:1b:ef:94:d9: b3:c6:16:a7:79:31:db:36:ff:ff:bb:21:0a:63:e9:c4:01:8c: 99:cc:93:d8:0b:56:cb:c4:21:b5:fd:1e:08:b4:70:18:a2:a9: 4d:55:65:49:f8:ee:30:66:20:08:52:66:ff:81:13:91:30:60: 6f:33:da:f0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtavzj7XtRmoHYbEVkhYTi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmRmNTNjOWZkMmM1ZmM3NGYxZGI3MTgzNGQ3ZTQ2YTc2 ZTkxZDcwHhcNMjUxMjI2MTMwMDM5WhcNMjUxMjI3MTMwMDM5WjAzMTEwLwYDVQQD Eyg1YWI3NmEwMmVjNGQyNTNiOThlNWY5OTlhNzhiYjNiOWM1YWVjZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugOM9cfTJODRjt2watVbsc6sCaGh yItnVS7jat8bJc0MQ5TKaZlnI8aK/SypQMRH/x1icVHhvGMGHA0RaL3IU3YnSOhW GKIGtX1ZtTrpB+l9nvfTqD6Gw9suy2ryOB9onl/QB5nEZQCRS0ncWB0w5QRpAf6d LFK8iq8kzgkPrdy8UADXsmd7cJ3XHDyyp1KOn0n+7ilaNHM+62umXsULTQtP9EMZ Y98EigesVDljevL//dT4HbT69Qq4bdSy9rQYAMQ/oUBt3LmK3EkwnAZ9p2QlikRH iS0EvskTtUdsIzXTyTUybH3+ydarqaU/vFtVodbml+ruwkf1/jCatYxi+QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFq3agLsTSU7mOX5maeLs7nFrs3MMB8GA1UdIwQY MBaAFPpt9Tyf0sX8dPHbcYNNfkanbpHXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tMzFQSl9TeGZ4MDhkdHhnMDEtUnFkdWtkYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYTk0NzgwLTFiZjMtNDY3YS05MzY5 LWU5OGZmMzNmNjk3Yy8xLzEtbTMxUEpfU3hmeDA4ZHR4ZzAxLVJxZHVrZGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzL2E5NDc4MC0xYmYzLTQ2N2EtOTM2OS1lOThmZjMzZjY5 N2MvMS8xLW0zMVBKX1N4ZngwOGR0eGcwMS1ScWR1a2RjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErwC FjgqJ6GOk6yhGYEzF5GgJ1mZQpV/nJMGpmr/1ucn+fwxl6+/bTgg+dTWNFckkxVv HOfvziQJtB4Gy17SaYryq0DkU9kp++d4dUH0U3ZDANNVQp3xYQIER2uXJ0E0kn5h WOHdH/ltcZj82GtrKQrGULe0dnmzX0RcVRU/pOgYdVLMbMBjcTKJXjI3nIs260+i PYwdRLS9OJFY7gMpSi/2Yl9xhS0nDlpCCILOZje41NbsMxRTVY3sSFivwmzAhF4b 75TZs8YWp3kx2zb//7shCmPpxAGMmcyT2AtWy8Qhtf0eCLRwGKKpTVVlSfjuMGYg CFJm/4ETkTBgbzPa8A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:10 2025 by rpki-client