This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json) Hash identifier: DR14dLEj5oJuRry1+VaDzh5R+cBZlM44y0EjpV2QuXU= Subject key identifier: 33:80:6C:37:1C:17:83:04:D7:48:D3:43:4F:62:B3:6D:0D:B7:0A:80 Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Certificate serial: 019B4581DF236ADB5AAE39E31EBF5BD19EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft Manifest number: 175D Signing time: Mon 22 Dec 2025 10:01:37 +0000 Manifest this update: Mon 22 Dec 2025 10:01:37 +0000 Manifest next update: Tue 23 Dec 2025 10:01:37 +0000 Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: JDIRCQqQ90lfDralaYTz9tjLerppBfv6sHt2/0NE8BM=) 2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:df:23:6a:db:5a:ae:39:e3:1e:bf:5b:d1:9e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209 Validity Not Before: Dec 22 10:01:37 2025 GMT Not After : Dec 23 10:01:37 2025 GMT Subject: CN=33806c371c178304d748d3434f62b36d0db70a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:67:40:41:73:5f:72:1d:0c:2d:69:7d:70: 4a:98:31:35:08:2e:d5:63:c8:fb:51:64:24:9d:50: 4e:2d:97:70:f7:d3:75:1d:a6:40:ec:ce:b1:3f:28: 03:82:06:2d:a0:fb:76:3c:b3:6a:39:42:e6:4c:66: 4c:2a:f7:24:55:73:c7:e1:f6:43:a3:b5:f4:1e:7c: fb:35:1e:23:c7:0c:4c:ae:b0:9c:a2:e4:95:87:53: ff:df:66:26:36:01:e0:78:67:89:c6:b0:2c:63:0b: d8:54:9a:d6:3c:40:1e:86:6b:0f:c7:10:33:dd:1c: 06:12:58:6d:ee:2f:47:72:80:b0:fe:71:ec:89:f3: 27:c8:c1:b8:07:4e:47:9f:64:18:2b:4e:47:0c:54: 27:08:57:f9:1c:1e:98:5a:90:a9:13:ce:3b:e9:e7: 19:11:c0:53:8f:dd:e9:38:e5:c9:e5:c2:1d:3d:c2: 98:2f:7e:67:f7:ac:df:d0:e1:7d:60:e9:ef:0d:08: 79:6c:89:9f:6a:00:2f:76:99:21:8f:f7:9c:3f:2f: ce:51:b7:a9:8d:08:17:13:53:27:2f:2a:79:05:86: d6:6d:48:7f:65:b1:c3:41:1f:66:f9:c7:96:26:bc: e8:fe:ec:0e:f5:06:26:59:19:ab:c9:00:d3:74:35: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:6C:37:1C:17:83:04:D7:48:D3:43:4F:62:B3:6D:0D:B7:0A:80 X509v3 Authority Key Identifier: keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:44:d6:f6:fe:7d:57:67:f5:d7:77:a6:58:6f:81:43:78:2d: c9:d3:7f:cb:36:c6:8e:4a:45:f6:0f:fa:85:52:d9:53:c4:d4: cd:5d:23:50:a0:e3:d1:bf:06:6e:20:93:28:61:49:0b:f6:e6: 1a:49:55:f8:56:12:dd:7d:33:4b:79:95:29:34:fc:04:3a:fd: 43:e2:dd:32:45:61:44:40:2f:35:24:8e:42:bc:cd:50:0e:b6: b8:ed:67:67:8f:46:84:22:e4:39:32:55:be:09:20:c7:6e:2a: 7a:b8:f2:63:b8:b9:69:4f:3c:51:33:9b:b5:b4:ea:c3:d4:f7: 40:64:6f:03:09:de:83:df:d1:16:da:66:b7:51:66:90:5d:1b: bb:d2:b1:a2:93:93:57:46:0f:07:81:0b:32:01:8f:5f:4e:2f: ca:d1:ec:fe:e9:8e:95:70:b2:4f:7e:fa:e9:5a:4f:be:9e:b2: 99:a5:e3:99:ac:15:ba:93:7b:4c:39:ce:fa:4c:23:f2:75:3e: 2c:be:53:7f:b3:ba:94:46:ed:d2:b4:59:a3:46:4b:33:22:95: a6:15:6e:28:ae:aa:4d:f2:12:eb:25:97:96:57:96:36:c8:b8: 86:cf:76:7c:46:03:c9:77:12:e7:04:bc:07:c1:dc:2a:5d:c1: 4d:a4:3a:fd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtFgd8jattarjnjHr9b0Z7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmMzNTkwYmY0OWFmYjQyY2U0NGE4YzE3NGM0NDE2MWI4 ZmMyMDkwHhcNMjUxMjIyMTAwMTM3WhcNMjUxMjIzMTAwMTM3WjAzMTEwLwYDVQQD EygzMzgwNmMzNzFjMTc4MzA0ZDc0OGQzNDM0ZjYyYjM2ZDBkYjcwYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaNnQEFzX3IdDC1pfXBKmDE1CC7V Y8j7UWQknVBOLZdw99N1HaZA7M6xPygDggYtoPt2PLNqOULmTGZMKvckVXPH4fZD o7X0Hnz7NR4jxwxMrrCcouSVh1P/32YmNgHgeGeJxrAsYwvYVJrWPEAehmsPxxAz 3RwGElht7i9HcoCw/nHsifMnyMG4B05Hn2QYK05HDFQnCFf5HB6YWpCpE8476ecZ EcBTj93pOOXJ5cIdPcKYL35n96zf0OF9YOnvDQh5bImfagAvdpkhj/ecPy/OUbep jQgXE1MnLyp5BYbWbUh/ZbHDQR9m+ceWJrzo/uwO9QYmWRmryQDTdDVvMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDOAbDccF4ME10jTQ09is20NtwqAMB8GA1UdIwQY MBaAFPj8NZC/Sa+0LORKjBdMRBYbj8IJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QdzFrTDlKcjdRczVFcU1GMHhFRmh1UHdnay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYyLWRkNWEtNDQ4My04ZmRi LWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFNRjB4RUZodVB3Z2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJhL2ExZTZmMi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQz ZDkvMS8xLVB3MWtMOUpyN1FzNUVxTUYweEVGaHVQd2drLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPETW 9v59V2f113emWG+BQ3gtydN/yzbGjkpF9g/6hVLZU8TUzV0jUKDj0b8GbiCTKGFJ C/bmGklV+FYS3X0zS3mVKTT8BDr9Q+LdMkVhREAvNSSOQrzNUA62uO1nZ49GhCLk OTJVvgkgx24qerjyY7i5aU88UTObtbTqw9T3QGRvAwneg9/RFtpmt1FmkF0bu9Kx opOTV0YPB4ELMgGPX04vytHs/umOlXCyT3766VpPvp6ymaXjmawVupN7TDnO+kwj 8nU+LL5Tf7O6lEbt0rRZo0ZLMyKVphVuKK6qTfIS6yWXlleWNsi4hs92fEYDyXcS 5wS8B8HcKl3BTaQ6/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:31 2025 by rpki-client