This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json) Hash identifier: we5hX+7wHawMkBL3KWySAQvWlvm8N1JBfizcFhDHJiM= Subject key identifier: A7:DE:A5:4F:50:63:E9:E5:53:5D:39:81:F2:EA:6B:9D:CB:66:54:3E Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143 Certificate serial: 019B397D4B473CDB48CEB585B82D5B8D99C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft Manifest number: 0B95 Signing time: Sat 20 Dec 2025 02:01:11 +0000 Manifest this update: Sat 20 Dec 2025 02:01:11 +0000 Manifest next update: Sun 21 Dec 2025 02:01:11 +0000 Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: 39KQNlCUZ9sr5UCPc2Lx5K0AdtbxwzUGcB7ydW8MXBg=) 2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:4b:47:3c:db:48:ce:b5:85:b8:2d:5b:8d:99:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143 Validity Not Before: Dec 20 02:01:11 2025 GMT Not After : Dec 21 02:01:11 2025 GMT Subject: CN=a7dea54f5063e9e5535d3981f2ea6b9dcb66543e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:ff:1b:eb:95:8f:b9:2c:e1:62:17:3a:dc: 2c:21:fa:38:0a:57:c6:f5:31:e9:f6:28:aa:d7:56: 25:fd:a7:20:cd:94:c9:15:cb:6c:e7:1a:79:69:96: cb:d0:37:c3:c4:22:93:a1:df:8f:4b:54:ad:da:5e: 7c:44:f5:37:42:88:cb:81:3e:91:5f:8c:23:0a:3c: a5:b2:f9:90:17:4d:39:fe:d6:75:d6:2b:10:91:22: 59:48:21:68:94:4c:17:c4:ae:55:9e:64:b7:2b:c0: 54:cf:50:f1:11:f7:05:e3:d3:5c:55:ea:45:09:04: 0b:70:1e:0a:06:4b:ef:6f:65:06:a7:6c:a1:65:2e: 7c:6a:c5:89:54:56:7d:8e:ba:2c:bb:68:fd:de:00: 24:20:b4:db:96:6e:d8:86:cc:35:b1:dc:81:b1:fe: dd:77:0a:bd:8c:d5:ab:b4:a9:04:20:27:84:87:80: 42:3c:29:16:bf:37:45:e9:84:0f:21:64:f3:96:4b: 23:66:6e:a8:38:21:93:54:e1:05:7c:39:3e:2f:23: 1a:10:53:53:25:3a:6f:0f:bc:9c:bb:03:5c:76:0e: e9:c6:93:28:ec:ec:dd:a0:e0:fc:52:11:4e:0a:60: a7:72:f2:83:59:6d:c2:5f:c8:5b:aa:5a:b2:1a:38: 5b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DE:A5:4F:50:63:E9:E5:53:5D:39:81:F2:EA:6B:9D:CB:66:54:3E X509v3 Authority Key Identifier: keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:10:ab:45:90:ca:b8:9d:48:ff:e1:a9:cf:77:7b:dd:69:45: 53:ee:2a:a9:2e:a2:25:f3:e8:70:42:b9:62:bd:02:86:57:83: 98:c9:a8:da:14:69:d0:f9:a7:90:70:5d:50:e4:6c:4e:bf:71: 30:cb:af:39:7b:32:58:99:18:b0:38:78:92:55:0c:f7:93:2d: 36:cb:be:94:ab:88:c2:86:25:cd:53:25:3c:f5:77:e9:ce:28: ef:6d:01:15:a7:51:fa:fd:cd:9f:0f:27:cf:1d:0f:47:d2:6f: 9d:05:a2:a3:6c:4f:29:d1:33:f5:3e:07:ee:2f:e6:cc:55:3a: b1:db:2f:92:b3:e9:5c:11:15:c4:b2:6b:4b:e6:1b:a4:11:b3: be:4a:0e:1c:4f:da:67:78:f0:a1:87:90:01:d2:cb:74:35:cc: 3c:07:65:8d:68:3f:89:79:c6:c3:25:0a:be:81:0e:4e:25:ee: cc:dd:8e:a3:fc:4f:29:7a:78:ce:24:3c:a0:96:f0:7f:e8:dc: 88:ec:ea:a8:d4:45:39:51:6e:7f:37:ad:25:74:21:32:90:f1: de:02:cf:f6:91:cf:0a:e0:30:08:71:4f:6c:91:13:47:7d:41: 68:97:44:bc:99:34:0b:65:71:f2:76:0e:31:ed:f0:e4:3b:2c: 40:2a:98:0a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5fUtHPNtIzrWFuC1bjZnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0 NWMxNDMwHhcNMjUxMjIwMDIwMTExWhcNMjUxMjIxMDIwMTExWjAzMTEwLwYDVQQD EyhhN2RlYTU0ZjUwNjNlOWU1NTM1ZDM5ODFmMmVhNmI5ZGNiNjY1NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8n/G+uVj7ks4WIXOtwsIfo4ClfG 9THp9iiq11Yl/acgzZTJFcts5xp5aZbL0DfDxCKTod+PS1St2l58RPU3QojLgT6R X4wjCjylsvmQF005/tZ11isQkSJZSCFolEwXxK5VnmS3K8BUz1DxEfcF49NcVepF CQQLcB4KBkvvb2UGp2yhZS58asWJVFZ9jrosu2j93gAkILTblm7Yhsw1sdyBsf7d dwq9jNWrtKkEICeEh4BCPCkWvzdF6YQPIWTzlksjZm6oOCGTVOEFfDk+LyMaEFNT JTpvD7ycuwNcdg7pxpMo7OzdoOD8UhFOCmCncvKDWW3CX8hbqlqyGjhbOQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKfepU9QY+nlU105gfLqa53LZlQ+MB8GA1UdIwQY MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4 YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxCr RZDKuJ1I/+Gpz3d73WlFU+4qqS6iJfPocEK5Yr0ChleDmMmo2hRp0PmnkHBdUORs Tr9xMMuvOXsyWJkYsDh4klUM95MtNsu+lKuIwoYlzVMlPPV36c4o720BFadR+v3N nw8nzx0PR9JvnQWio2xPKdEz9T4H7i/mzFU6sdsvkrPpXBEVxLJrS+YbpBGzvkoO HE/aZ3jwoYeQAdLLdDXMPAdljWg/iXnGwyUKvoEOTiXuzN2Oo/xPKXp4ziQ8oJbw f+jciOzqqNRFOVFufzetJXQhMpDx3gLP9pHPCuAwCHFPbJETR31BaJdEvJk0C2Vx 8nYOMe3w5DssQCqYCg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:42 2025 by rpki-client