This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json) Hash identifier: p+pN6uy6XC7u4gpxHJ6oyIBWVgcnd+R9jaNte9X0ej8= Subject key identifier: 2B:9C:BB:42:0F:DB:42:2D:E7:22:87:CE:A5:77:C8:87:15:58:75:02 Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf Certificate serial: 019B360E3AB294713AECB0E56444821078FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 10:01:00 +0000 Manifest this update: Fri 19 Dec 2025 10:01:00 +0000 Manifest next update: Sat 20 Dec 2025 10:01:00 +0000 Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: T0EvOF2n1noWB/q/AmftsiaT6DLWABJcYZtwg6yddbE=) 2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=) 3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:3a:b2:94:71:3a:ec:b0:e5:64:44:82:10:78:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf Validity Not Before: Dec 19 10:01:00 2025 GMT Not After : Dec 20 10:01:00 2025 GMT Subject: CN=2b9cbb420fdb422de72287cea577c88715587502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:ae:4c:c6:c2:d6:41:96:08:8b:86:72:94: 09:70:83:98:83:11:b1:11:48:fc:64:69:3d:42:ca: 77:0a:a7:7b:18:07:90:53:1a:ae:36:e7:5b:b5:7d: be:cb:ef:db:b8:82:f6:68:0b:a7:a5:ec:4d:73:9f: 66:8d:06:37:e4:da:da:d1:fc:90:e3:38:d1:0e:f6: 49:10:7c:87:bf:37:54:83:65:d7:46:63:9b:bd:41: d9:0c:e4:58:3d:55:f3:83:bd:d2:30:78:11:34:d9: 70:a3:af:80:d1:55:88:f9:2d:6d:7c:20:92:c8:80: 23:7f:08:c8:ad:7e:93:80:7c:28:87:ef:11:3d:35: aa:a3:83:e1:19:ee:d5:d1:e8:3e:f2:fe:98:56:4c: f3:9d:0c:c6:55:24:4b:79:5d:85:63:23:a8:00:a6: 4f:e4:3e:49:ec:72:56:7d:19:b9:3e:1c:75:fb:ee: 66:a6:e1:0b:2e:86:0b:67:09:be:33:a2:41:a8:68: 72:07:a6:da:8e:66:63:c9:76:3d:c1:03:2b:37:ac: f6:7e:8c:04:74:78:80:01:3f:a1:5c:2e:93:4a:4f: 04:28:3d:11:ba:10:b6:dc:fd:8e:42:9c:16:d0:52: dd:9a:08:23:24:e4:4e:bb:1b:0f:85:1c:70:7c:47: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:BB:42:0F:DB:42:2D:E7:22:87:CE:A5:77:C8:87:15:58:75:02 X509v3 Authority Key Identifier: keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:89:f7:3c:cc:2d:be:0d:97:00:3d:1e:6f:d7:e6:bc:1d: d6:64:16:e6:8f:41:74:34:55:87:c6:a5:ae:58:51:29:a8:29: aa:96:2e:93:4b:a2:14:5e:ed:4d:7f:88:a4:73:43:a4:68:43: 2c:d3:b8:bf:1b:64:b7:5c:3c:f4:e8:04:25:4d:3f:93:16:3c: 12:62:d7:67:43:52:04:18:99:6c:07:71:2b:0e:21:9e:f8:a6: 9b:de:e9:1a:23:76:bd:dc:15:a4:57:9e:f5:1c:8c:4c:6f:11: c0:71:22:44:ff:1b:46:31:fc:c7:93:19:6f:2e:83:29:a2:2e: a3:48:9e:04:cc:5a:05:32:04:03:9b:eb:6b:12:84:61:21:e2: fb:ad:d7:75:78:be:3c:f1:e4:c5:c2:67:2e:8f:0c:3d:20:ff: b4:e3:57:e4:1b:10:d4:5e:56:a0:ab:93:3a:ef:b7:ce:3f:55: 1d:6e:14:4d:32:41:b1:3a:26:f0:be:33:4c:80:e4:a9:90:4b: 2d:e9:a6:4a:2e:b4:8c:ba:82:b2:5e:e1:18:db:19:76:28:98: b8:5d:33:63:c2:a3:51:7d:d8:d2:f4:58:be:90:eb:45:a0:7e: 89:11:78:1c:40:ab:b6:8f:2a:4c:ac:31:40:ac:55:cf:e4:a9: 30:48:91:97 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs2DjqylHE67LDlZESCEHj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw MGViY2YwHhcNMjUxMjE5MTAwMTAwWhcNMjUxMjIwMTAwMTAwWjAzMTEwLwYDVQQD EygyYjljYmI0MjBmZGI0MjJkZTcyMjg3Y2VhNTc3Yzg4NzE1NTg3NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvauTMbC1kGWCIuGcpQJcIOYgxGx EUj8ZGk9Qsp3Cqd7GAeQUxquNudbtX2+y+/buIL2aAunpexNc59mjQY35Nra0fyQ 4zjRDvZJEHyHvzdUg2XXRmObvUHZDORYPVXzg73SMHgRNNlwo6+A0VWI+S1tfCCS yIAjfwjIrX6TgHwoh+8RPTWqo4PhGe7V0eg+8v6YVkzznQzGVSRLeV2FYyOoAKZP 5D5J7HJWfRm5Phx1++5mpuELLoYLZwm+M6JBqGhyB6bajmZjyXY9wQMrN6z2fowE dHiAAT+hXC6TSk8EKD0RuhC23P2OQpwW0FLdmggjJOROuxsPhRxwfEf+lwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCucu0IP20It5yKHzqV3yIcVWHUCMB8GA1UdIwQY MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1 NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjyJ 9zzMLb4NlwA9Hm/X5rwd1mQW5o9BdDRVh8alrlhRKagpqpYuk0uiFF7tTX+IpHND pGhDLNO4vxtkt1w89OgEJU0/kxY8EmLXZ0NSBBiZbAdxKw4hnvimm97pGiN2vdwV pFee9RyMTG8RwHEiRP8bRjH8x5MZby6DKaIuo0ieBMxaBTIEA5vraxKEYSHi+63X dXi+PPHkxcJnLo8MPSD/tONX5BsQ1F5WoKuTOu+3zj9VHW4UTTJBsTom8L4zTIDk qZBLLemmSi60jLqCsl7hGNsZdiiYuF0zY8KjUX3Y0vRYvpDrRaB+iRF4HECrto8q TKwxQKxVz+SpMEiRlw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:04 2025 by rpki-client