This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json) Hash identifier: NRsTWJAwMqXIZNl/LxhvgVCJf+cIjONa7RtOmhZU1fA= Subject key identifier: CB:7F:9B:90:42:A9:42:89:C0:96:E7:17:97:41:49:46:F1:66:5D:6A Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85 Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385 Certificate serial: 019B3D5A3CAA7542BA27001967BF0A06CAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:01:22 +0000 Manifest this update: Sat 20 Dec 2025 20:01:22 +0000 Manifest next update: Sun 21 Dec 2025 20:01:22 +0000 Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: 4+E/i8YQRmAd3PxgKjmzqNLXW1e8D4wO+y6C0J0tlc4=) 2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=) 3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3c:aa:75:42:ba:27:00:19:67:bf:0a:06:ca:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385 Validity Not Before: Dec 20 20:01:22 2025 GMT Not After : Dec 21 20:01:22 2025 GMT Subject: CN=cb7f9b9042a94289c096e71797414946f1665d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:0e:97:31:2b:e1:7e:d4:7d:c5:86:4a:0c: 51:f0:3e:dc:07:d5:07:88:26:3c:c1:be:6d:1c:c5: 81:a8:05:c1:5c:58:13:96:54:3c:a8:26:bc:25:df: 10:cb:af:c5:eb:65:23:1e:46:2f:1a:e8:e6:cb:99: a8:e2:90:10:42:91:1b:40:ad:f8:9e:07:e0:08:91: e9:5c:38:15:41:80:19:31:0a:a7:30:59:81:fa:21: 89:f8:70:00:83:d6:6c:75:8b:53:c3:46:bf:07:41: bd:e5:a8:87:76:83:2d:5f:c4:32:7a:9b:02:66:42: b5:ab:f9:ea:89:51:85:21:04:87:df:20:63:5c:f3: 4d:2c:f1:a1:00:b0:6c:3d:66:88:aa:f1:d4:41:7f: b9:7a:61:4b:85:e3:b3:e4:58:0c:66:6e:46:ca:5b: 32:df:14:ff:49:13:8c:a6:0e:6d:0b:ad:41:a5:4c: 53:07:5f:de:bd:98:03:04:5f:6b:4f:80:14:38:94: 84:ca:c4:be:06:64:32:43:35:86:23:4c:01:e0:44: db:23:bd:66:6d:43:58:08:dc:98:55:18:05:de:ca: 09:65:e6:06:8f:f6:8f:7c:21:2a:73:47:1f:0e:7e: b1:f4:02:4f:b6:88:28:59:c9:e9:0f:36:d2:dd:bc: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:9B:90:42:A9:42:89:C0:96:E7:17:97:41:49:46:F1:66:5D:6A X509v3 Authority Key Identifier: keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:67:70:22:e6:fb:8a:2f:00:af:06:ad:a2:75:b9:27:f4:5e: 7f:d1:c7:a3:2d:f0:88:e4:b9:55:06:62:c7:82:d2:82:91:d4: 16:97:8d:5a:2e:38:f8:74:2e:24:4b:a5:39:b0:77:1d:58:06: 5a:c9:f2:da:7b:56:2e:07:80:97:23:76:3f:aa:92:ab:ef:a1: 21:00:d7:e9:0d:af:d0:a1:d4:f4:02:ce:78:6c:b0:42:c3:09: dd:c7:68:6c:78:89:63:05:84:c2:34:73:1d:19:37:7a:ed:23: 73:5a:95:e5:c2:58:ae:b4:c4:48:f2:2f:03:84:cf:33:1a:6e: cd:77:dd:1c:2c:13:4a:82:7a:25:51:f2:07:a2:08:1d:70:f7: 83:40:be:1a:56:cf:79:79:0e:a8:84:e6:fc:22:ad:72:1e:b4: b2:c9:f5:bf:53:c8:07:59:f2:70:be:f8:6c:7a:58:4c:4a:45: 25:07:85:e0:d4:06:a8:d7:4e:fd:01:cb:7d:d7:02:3b:ba:31: 41:e0:5f:76:73:8d:cf:be:d7:c4:30:21:90:8f:30:98:d4:df: d0:93:e0:ac:95:c8:96:85:82:4c:72:78:16:a2:51:d6:af:a5: 20:0f:cd:03:e2:b6:d0:86:42:28:34:3c:4e:c4:79:00:d5:a6: 8c:e8:8c:42 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9WjyqdUK6JwAZZ78KBsrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmJjODQxNTgyMTQ4NmU4ZmUwODYwYjViZWMzZTkyODNi ODAzODUwHhcNMjUxMjIwMjAwMTIyWhcNMjUxMjIxMjAwMTIyWjAzMTEwLwYDVQQD EyhjYjdmOWI5MDQyYTk0Mjg5YzA5NmU3MTc5NzQxNDk0NmYxNjY1ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsOlzEr4X7UfcWGSgxR8D7cB9UH iCY8wb5tHMWBqAXBXFgTllQ8qCa8Jd8Qy6/F62UjHkYvGujmy5mo4pAQQpEbQK34 ngfgCJHpXDgVQYAZMQqnMFmB+iGJ+HAAg9ZsdYtTw0a/B0G95aiHdoMtX8QyepsC ZkK1q/nqiVGFIQSH3yBjXPNNLPGhALBsPWaIqvHUQX+5emFLheOz5FgMZm5Gylsy 3xT/SROMpg5tC61BpUxTB1/evZgDBF9rT4AUOJSEysS+BmQyQzWGI0wB4ETbI71m bUNYCNyYVRgF3soJZeYGj/aPfCEqc0cfDn6x9AJPtogoWcnpDzbS3bzniwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMt/m5BCqUKJwJbnF5dBSUbxZl1qMB8GA1UdIwQY MBaAFPj7yEFYIUhuj+CGC1vsPpKDuAOFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QdklRVmdoU0c2UDRJWUxXLXcta29PNEE0VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhm LWVjOTY3YjUxMWQ3Zi8xLzEtUHZJUVZnaFNHNlA0SVlMVy13LWtvTzRBNFUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzM2MWM1Ny1lYTQyLTQ3ZTItYTY4Zi1lYzk2N2I1MTFk N2YvMS8xLVB2SVFWZ2hTRzZQNElZTFctdy1rb080QTRVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWdw Iub7ii8ArwatonW5J/Ref9HHoy3wiOS5VQZix4LSgpHUFpeNWi44+HQuJEulObB3 HVgGWsny2ntWLgeAlyN2P6qSq++hIQDX6Q2v0KHU9ALOeGywQsMJ3cdobHiJYwWE wjRzHRk3eu0jc1qV5cJYrrTESPIvA4TPMxpuzXfdHCwTSoJ6JVHyB6IIHXD3g0C+ GlbPeXkOqITm/CKtch60ssn1v1PIB1nycL74bHpYTEpFJQeF4NQGqNdO/QHLfdcC O7oxQeBfdnONz77XxDAhkI8wmNTf0JPgrJXIloWCTHJ4FqJR1q+lIA/NA+K20IZC KDQ8TsR5ANWmjOiMQg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:29 2025 by rpki-client