This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json) Hash identifier: f9MBCRTD+Rw6RxvKNS44dEBVl4CXW8Ee2OhhhdpQO+g= Subject key identifier: 80:D4:1E:00:75:35:FB:F1:E9:48:DA:47:70:65:0D:58:3B:B5:CA:4D Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Certificate serial: 019B1013509C3B82DEF1F006848B1CAE1205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft Manifest number: 0375 Signing time: Fri 12 Dec 2025 01:00:59 +0000 Manifest this update: Fri 12 Dec 2025 01:00:59 +0000 Manifest next update: Sat 13 Dec 2025 01:00:59 +0000 Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: LaEAGaSWisg4Bq/PAEbGULhCx3vwz+qO7hKXVLSYCIk=) 2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:50:9c:3b:82:de:f1:f0:06:84:8b:1c:ae:12:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4 Validity Not Before: Dec 12 01:00:59 2025 GMT Not After : Dec 13 01:00:59 2025 GMT Subject: CN=80d41e007535fbf1e948da4770650d583bb5ca4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:96:98:95:61:09:3f:41:22:83:b6:0a:2e: 58:00:c8:cb:67:5c:4b:99:e0:7e:fc:55:01:bd:8c: fc:38:a3:d9:cb:d6:7a:de:02:d0:ec:f9:a9:19:69: c6:a3:4d:96:9b:d8:7d:0a:70:22:0d:b7:06:eb:f7: 9a:cc:d0:58:3c:f9:41:57:50:d4:b2:b5:53:51:01: f0:03:07:92:cc:93:89:9d:44:91:1b:9f:64:80:fb: 22:d6:e3:2f:5c:50:f8:a9:c9:94:b1:6a:e8:c7:03: a9:21:14:4b:81:f5:9a:4e:1f:88:e6:cc:f4:91:be: 47:bb:fa:66:3f:3c:cb:f7:8d:3b:0b:cc:f7:8a:56: d5:3e:7b:11:09:66:1f:3e:ff:28:20:26:69:c1:16: 13:4c:54:1f:a5:0b:e6:2d:e7:67:28:1d:72:b8:8b: d6:cd:11:b2:e0:f6:a8:67:5b:e4:f6:6e:08:3a:c4: fd:9c:bc:e7:a2:b2:05:36:c8:19:b1:9f:62:68:4d: a1:e1:d4:46:cf:95:ea:c0:99:20:1f:31:fe:e2:f8: 51:68:66:82:00:bd:60:e8:60:f8:ed:7e:06:ef:e9: c6:23:a4:d3:98:a1:fe:a7:c4:04:c6:e1:55:ef:0d: d0:23:3d:5b:78:45:8c:c8:76:eb:e1:a7:a1:38:42: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:1E:00:75:35:FB:F1:E9:48:DA:47:70:65:0D:58:3B:B5:CA:4D X509v3 Authority Key Identifier: keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f6:20:bb:3f:b7:ca:cf:d7:21:ee:5a:3d:77:59:0f:10:c4: c3:2b:0b:44:c6:d4:8f:7d:ed:fd:53:3f:2a:44:24:64:bb:0e: 46:9c:0f:38:c5:95:4e:f7:85:1d:ba:cb:b2:d6:4f:18:61:30: fa:1f:cf:d6:d0:d2:d7:65:ec:d2:fd:dd:7c:a4:e2:c0:e0:20: 88:88:74:b9:3c:8c:f0:9a:cb:3d:2b:1f:84:49:ae:7f:90:05: 17:5f:0f:52:ad:ec:82:87:a6:79:47:67:4e:5d:74:fe:31:71: 9d:4a:1f:ee:d2:27:19:df:36:3c:35:36:87:65:07:bb:c3:5c: 98:b3:68:5f:b5:26:53:6c:0b:ae:a0:ae:ac:81:34:1a:7b:5f: 82:77:b0:f1:11:97:98:81:c5:24:bc:1a:b2:7b:0d:51:0f:1f: ae:fd:ae:b7:dc:1b:fc:c7:26:b7:84:ce:18:40:b3:1d:c1:0d: 2d:ae:e0:28:16:91:a1:78:ae:08:e1:d6:f1:6e:a0:33:20:d6: f0:69:96:e3:2f:d2:2d:ad:f8:4d:ac:4f:d5:fc:99:6b:10:f5: 7b:a2:24:64:39:86:df:2a:5e:a1:df:83:4a:b1:c5:b4:fa:69: 43:59:11:a3:d2:d8:a4:65:17:0a:42:e4:54:3b:e0:1e:c4:83: 38:76:f5:8e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsQE1CcO4Le8fAGhIscrhIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjQ2YTYzMjNiM2Q2ZmMzNGFlNDlkOGJlODg4NGY3Mjky YmRiZjQwHhcNMjUxMjEyMDEwMDU5WhcNMjUxMjEzMDEwMDU5WjAzMTEwLwYDVQQD Eyg4MGQ0MWUwMDc1MzVmYmYxZTk0OGRhNDc3MDY1MGQ1ODNiYjVjYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1yWmJVhCT9BIoO2Ci5YAMjLZ1xL meB+/FUBvYz8OKPZy9Z63gLQ7PmpGWnGo02Wm9h9CnAiDbcG6/eazNBYPPlBV1DU srVTUQHwAweSzJOJnUSRG59kgPsi1uMvXFD4qcmUsWroxwOpIRRLgfWaTh+I5sz0 kb5Hu/pmPzzL9407C8z3ilbVPnsRCWYfPv8oICZpwRYTTFQfpQvmLednKB1yuIvW zRGy4PaoZ1vk9m4IOsT9nLznorIFNsgZsZ9iaE2h4dRGz5XqwJkgHzH+4vhRaGaC AL1g6GD47X4G7+nGI6TTmKH+p8QExuFV7w3QIz1beEWMyHbr4aehOEJsbQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIDUHgB1Nfvx6UjaR3BlDVg7tcpNMB8GA1UdIwQY MBaAFPpkamMjs9b8NK5J2L6IhPcpK9v0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tUnFZeU96MXZ3MHJrbll2b2lFOXlrcjJfUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3 LTU5ZTE5MzI2MmNlNC8xLzEtbVJxWXlPejF2dzBya25Zdm9pRTl5a3IyX1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YyLzZiZjU0Yy1kODA2LTQ2M2EtYWYzNy01OWUxOTMyNjJj ZTQvMS8xLW1ScVl5T3oxdncwcmtuWXZvaUU5eWtyMl9RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPYg uz+3ys/XIe5aPXdZDxDEwysLRMbUj33t/VM/KkQkZLsORpwPOMWVTveFHbrLstZP GGEw+h/P1tDS12Xs0v3dfKTiwOAgiIh0uTyM8JrLPSsfhEmuf5AFF18PUq3sgoem eUdnTl10/jFxnUof7tInGd82PDU2h2UHu8NcmLNoX7UmU2wLrqCurIE0Gntfgnew 8RGXmIHFJLwasnsNUQ8frv2ut9wb/Mcmt4TOGECzHcENLa7gKBaRoXiuCOHW8W6g MyDW8GmW4y/SLa34TaxP1fyZaxD1e6IkZDmG3ypeod+DSrHFtPppQ1kRo9LYpGUX CkLkVDvgHsSDOHb1jg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:31:49 2025 by rpki-client