This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json) Hash identifier: 579chhREZe1GHBBA+mzWLUK5Vbec3XqoNMA5NdwqXZs= Subject key identifier: 46:9B:25:AB:2A:11:FC:6E:C6:35:E8:35:15:67:CC:C3:F2:29:63:65 Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f Certificate serial: 019B0E92EC828255CAC81F55C1D0AF72DC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft Manifest number: 154B Signing time: Thu 11 Dec 2025 18:01:08 +0000 Manifest this update: Thu 11 Dec 2025 18:01:08 +0000 Manifest next update: Fri 12 Dec 2025 18:01:08 +0000 Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: LFpVsIBQOef8Wo8XDDN/vijB6Lie6TA3tZ9xl/0iCjA=) 2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:ec:82:82:55:ca:c8:1f:55:c1:d0:af:72:dc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f Validity Not Before: Dec 11 18:01:08 2025 GMT Not After : Dec 12 18:01:08 2025 GMT Subject: CN=469b25ab2a11fc6ec635e8351567ccc3f2296365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f1:1a:f8:56:3b:0b:2a:38:70:6d:80:74:50: d1:97:a8:ff:cf:22:3e:d9:af:ad:24:d5:a8:ee:43: 67:e0:35:42:40:3a:b2:e6:2d:80:20:4b:d6:81:8b: 52:9c:a2:7f:5e:54:4b:16:97:69:e2:0a:0a:40:4c: 5c:75:6f:b7:1b:01:f5:fd:04:8a:e3:82:90:25:45: 0e:0c:65:69:0b:c0:86:35:2d:a3:97:a5:49:a7:2f: 96:f4:92:01:28:e8:f2:43:bf:ba:ad:1b:54:53:ac: 31:a0:fe:d8:0f:61:e5:f9:f2:43:c4:5a:8b:f4:49: 3f:d3:ea:eb:10:a0:9a:56:0c:89:f7:6c:97:bd:4b: d0:df:4d:12:9b:f4:d1:85:73:0e:c5:64:f5:ef:bb: d8:cd:58:41:4e:72:52:fe:8f:9d:48:68:17:b2:c9: a4:7c:31:99:9f:4f:32:c4:e4:40:36:4b:9e:f2:cf: 22:81:c8:ce:d7:ba:40:9e:eb:3d:82:f0:2c:9d:79: 82:d2:c2:ff:49:9e:42:b9:d3:9c:26:3d:33:d9:8e: be:dc:18:b0:47:0e:95:94:a9:03:2e:29:09:28:44: 90:8f:e4:4b:6e:06:f1:e0:f2:0c:ab:44:cb:a5:71: 95:0e:8e:e6:44:f6:b3:b1:1c:fe:90:dc:68:05:cc: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:25:AB:2A:11:FC:6E:C6:35:E8:35:15:67:CC:C3:F2:29:63:65 X509v3 Authority Key Identifier: keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:43:8a:c4:97:f2:c2:94:09:17:77:c8:58:9a:9a:da:6b:45: d7:43:e5:66:1a:43:45:d6:6e:35:87:ea:6f:9e:8c:23:da:f6: 91:c0:fd:77:9e:0c:8c:d0:fe:5e:a1:a8:1d:96:8f:b5:ce:f1: e8:2d:1e:2a:1d:af:e4:11:fb:b4:3f:13:c0:fe:7f:b7:72:6e: 89:9f:67:d3:91:6c:ab:0c:3b:31:86:e8:ad:e7:e8:8f:e3:1b: 4d:48:4c:15:19:98:a3:7c:00:a8:96:48:09:ac:52:83:eb:31: 6e:01:2c:90:79:6a:ff:22:9a:64:39:f0:c6:3f:81:2e:5a:41: f3:cc:e8:30:36:52:d0:d8:72:08:9d:9e:0b:87:7c:a0:d9:57: a2:43:bb:2f:56:64:b3:50:46:ab:54:be:14:40:0e:09:c3:42: 95:25:a9:8e:ad:09:01:39:8a:c0:52:26:61:7b:8f:af:a6:1a: b7:5d:a9:19:62:9e:64:53:7d:f1:7d:75:7f:e9:d5:17:18:1b: b3:de:5b:7f:1b:f2:3f:de:e5:1c:37:56:18:9f:b6:a2:68:c4: f5:47:57:bf:ac:23:a9:27:ce:ca:ff:5a:68:fa:e2:4d:91:46: fb:24:43:25:4b:76:cd:df:19:3f:b1:81:15:bb:c6:6f:16:e6: 97:96:c5:f7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOkuyCglXKyB9VwdCvctwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx ZmRmNWYwHhcNMjUxMjExMTgwMTA4WhcNMjUxMjEyMTgwMTA4WjAzMTEwLwYDVQQD Eyg0NjliMjVhYjJhMTFmYzZlYzYzNWU4MzUxNTY3Y2NjM2YyMjk2MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Ea+FY7Cyo4cG2AdFDRl6j/zyI+ 2a+tJNWo7kNn4DVCQDqy5i2AIEvWgYtSnKJ/XlRLFpdp4goKQExcdW+3GwH1/QSK 44KQJUUODGVpC8CGNS2jl6VJpy+W9JIBKOjyQ7+6rRtUU6wxoP7YD2Hl+fJDxFqL 9Ek/0+rrEKCaVgyJ92yXvUvQ300Sm/TRhXMOxWT177vYzVhBTnJS/o+dSGgXssmk fDGZn08yxORANkue8s8igcjO17pAnus9gvAsnXmC0sL/SZ5CudOcJj0z2Y6+3Biw Rw6VlKkDLikJKESQj+RLbgbx4PIMq0TLpXGVDo7mRPazsRz+kNxoBcwU0wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEabJasqEfxuxjXoNRVnzMPyKWNlMB8GA1UdIwQY MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0 ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEOK xJfywpQJF3fIWJqa2mtF10PlZhpDRdZuNYfqb56MI9r2kcD9d54MjND+XqGoHZaP tc7x6C0eKh2v5BH7tD8TwP5/t3JuiZ9n05Fsqww7MYborefoj+MbTUhMFRmYo3wA qJZICaxSg+sxbgEskHlq/yKaZDnwxj+BLlpB88zoMDZS0NhyCJ2eC4d8oNlXokO7 L1Zks1BGq1S+FEAOCcNClSWpjq0JATmKwFImYXuPr6Yat12pGWKeZFN98X11f+nV Fxgbs95bfxvyP97lHDdWGJ+2omjE9UdXv6wjqSfOyv9aaPriTZFG+yRDJUt2zd8Z P7GBFbvGbxbml5bF9w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:56 2025 by rpki-client