This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json) Hash identifier: rMjlopXMJu0zkkWbADiDYzX0ImJgz4iKv97xAo+r1I4= Subject key identifier: B2:83:15:3B:3E:CB:EC:E7:C1:3D:27:D7:CD:4B:3A:1E:92:30:AF:2E Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99 Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199 Certificate serial: 019B330CCDA3E60E755AF72990ED3602BA37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft Manifest number: 0EF3 Signing time: Thu 18 Dec 2025 20:00:35 +0000 Manifest this update: Thu 18 Dec 2025 20:00:35 +0000 Manifest next update: Fri 19 Dec 2025 20:00:35 +0000 Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: ndfq2oY4wt8eRxyiazJemikJppE1CZ2AxRxzcrmM4NQ=) 2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:cd:a3:e6:0e:75:5a:f7:29:90:ed:36:02:ba:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199 Validity Not Before: Dec 18 20:00:35 2025 GMT Not After : Dec 19 20:00:35 2025 GMT Subject: CN=b283153b3ecbece7c13d27d7cd4b3a1e9230af2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:44:24:e1:2b:a4:96:69:04:50:97:e9:45: 82:3d:38:16:fc:2f:52:83:5e:77:c4:b7:ad:92:8c: d8:2f:97:5c:de:cf:26:82:3f:34:8f:f7:9d:15:92: 13:de:52:3f:a0:fa:ab:f2:58:9a:f0:1d:b0:5c:49: 25:87:c8:28:f6:91:6f:18:5a:12:61:cb:41:0c:07: fd:9c:6b:93:b8:26:8e:31:84:c0:e8:dd:02:af:8d: bd:7c:aa:1a:f8:59:71:9c:af:5b:6b:94:b8:26:db: 91:c8:25:87:1f:c0:2a:6b:b6:87:30:05:b5:fd:ab: f9:85:5d:9a:0c:36:7e:21:a8:eb:27:e4:1e:1b:20: 77:99:1b:c0:a9:06:22:55:a6:75:93:42:54:f4:d0: 95:1f:04:c0:4a:fd:fc:f0:ae:c8:cd:ec:cb:21:48: 67:d4:14:22:de:3f:a1:fe:3d:b6:f5:fc:32:00:fa: 69:0b:bf:df:c5:00:84:27:6e:72:07:a6:4a:ef:56: f5:07:ff:3f:4e:e2:10:65:df:8a:a2:5d:d6:09:c7: 6a:72:aa:d0:e5:c0:70:a0:2e:11:9e:25:12:82:0b: e3:0c:74:30:8f:b8:3f:96:c3:eb:e3:51:7e:e7:54: e6:6f:50:76:25:23:1e:ce:62:2c:21:d1:de:db:2d: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:83:15:3B:3E:CB:EC:E7:C1:3D:27:D7:CD:4B:3A:1E:92:30:AF:2E X509v3 Authority Key Identifier: keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3c:50:b9:a9:eb:13:47:bf:0d:44:11:07:69:c3:7d:a8:2c: 97:d5:e6:a0:a9:f7:ff:bd:3b:a3:2a:49:09:15:6e:39:23:fb: 21:23:b0:18:2a:66:bf:d4:b9:a8:18:49:8c:e3:58:14:40:14: a9:90:62:5b:18:1e:1a:58:dc:3b:c2:2a:af:27:92:d5:fb:c8: 7d:d8:f7:96:d7:66:31:5c:c7:9d:f1:94:39:06:3e:6f:dd:ea: 7b:46:28:96:ce:80:34:08:51:f9:0b:d5:64:9e:b8:af:90:56: 0c:ca:df:81:5c:aa:99:1a:00:67:81:96:56:ee:fc:ad:03:7d: 68:af:77:5f:f4:cf:39:09:c6:da:eb:89:22:d0:2e:e3:43:8e: 1b:b1:59:28:0d:25:0e:05:26:5d:be:9f:f3:f0:15:40:55:0f: 7f:c3:57:90:a4:c4:9e:df:cb:22:76:73:63:f6:a7:0f:59:1a: ff:fa:e9:3c:fb:ac:bb:c5:2f:ec:6c:cd:55:e6:07:b6:bf:7e: 60:23:e8:f0:b6:66:03:74:4c:c7:d6:37:9a:c6:55:d1:f6:b0: 84:70:1f:28:c4:58:32:9d:88:ac:e1:2e:be:21:2e:f3:f6:e6: 55:41:11:69:01:7d:cf:e2:44:52:46:9b:c0:26:52:d3:d1:1e: 6e:27:bc:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDM2j5g51WvcpkO02Aro3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTEyMjgzNzQ3NDJkZjU0NGFhOTMwNThjNWEzYmQzZDE2 NDIxOTkwHhcNMjUxMjE4MjAwMDM1WhcNMjUxMjE5MjAwMDM1WjAzMTEwLwYDVQQD EyhiMjgzMTUzYjNlY2JlY2U3YzEzZDI3ZDdjZDRiM2ExZTkyMzBhZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGlEJOErpJZpBFCX6UWCPTgW/C9S g153xLetkozYL5dc3s8mgj80j/edFZIT3lI/oPqr8lia8B2wXEklh8go9pFvGFoS YctBDAf9nGuTuCaOMYTA6N0Cr429fKoa+FlxnK9ba5S4JtuRyCWHH8Aqa7aHMAW1 /av5hV2aDDZ+IajrJ+QeGyB3mRvAqQYiVaZ1k0JU9NCVHwTASv388K7IzezLIUhn 1BQi3j+h/j229fwyAPppC7/fxQCEJ25yB6ZK71b1B/8/TuIQZd+Kol3WCcdqcqrQ 5cBwoC4RniUSggvjDHQwj7g/lsPr41F+51Tmb1B2JSMezmIsIdHe2y1IAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKDFTs+y+znwT0n181LOh6SMK8uMB8GA1UdIwQY MBaAFH9RIoN0dC31RKqTBYxaO9PRZCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTIt MDFlYjAzNjg0ZjA5LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTItMDFlYjAzNjg0ZjA5 LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTxQuanr E0e/DUQRB2nDfagsl9XmoKn3/707oypJCRVuOSP7ISOwGCpmv9S5qBhJjONYFEAU qZBiWxgeGljcO8IqryeS1fvIfdj3ltdmMVzHnfGUOQY+b93qe0Yols6ANAhR+QvV ZJ64r5BWDMrfgVyqmRoAZ4GWVu78rQN9aK93X/TPOQnG2uuJItAu40OOG7FZKA0l DgUmXb6f8/AVQFUPf8NXkKTEnt/LInZzY/anD1ka//rpPPusu8Uv7GzNVeYHtr9+ YCPo8LZmA3RMx9Y3msZV0fawhHAfKMRYMp2IrOEuviEu8/bmVUERaQF9z+JEUkab wCZS09Eebie8Jw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:40:42 2025 by rpki-client