This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json) Hash identifier: f/y2CQH9ZCQ+DrpGQqk+Q2LT3Bcx4ojZ+BvMQl5ZqVg= Subject key identifier: AD:1E:D6:13:2F:47:74:EC:DD:B0:55:1A:81:07:A0:6B:4E:EB:D8:3D Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d Certificate serial: 019B5305CF33B0433F4AFFDDCECC1F23F923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft Manifest number: 09E2 Signing time: Thu 25 Dec 2025 01:00:48 +0000 Manifest this update: Thu 25 Dec 2025 01:00:48 +0000 Manifest next update: Fri 26 Dec 2025 01:00:48 +0000 Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: it1eepKgN8OkvHEcQixbzUjqSqjBZ+emlU2PqHvPBI8=) 2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=) 3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:cf:33:b0:43:3f:4a:ff:dd:ce:cc:1f:23:f9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d Validity Not Before: Dec 25 01:00:48 2025 GMT Not After : Dec 26 01:00:48 2025 GMT Subject: CN=ad1ed6132f4774ecddb0551a8107a06b4eebd83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b8:96:46:86:5a:fb:1a:96:30:7b:de:03:ca: 42:92:fc:49:c4:20:6d:80:d3:49:2b:39:60:72:22: 54:0b:43:6e:a2:e8:76:9b:16:11:e2:ad:e1:dc:1f: 8a:ef:1a:a1:98:56:0f:81:5b:3c:4a:23:ce:6d:59: 9c:6f:16:e8:73:f9:bb:5e:09:da:0c:19:93:81:78: 1d:98:77:c3:17:0a:48:5c:a3:b9:ed:df:a5:94:a3: 97:bf:ee:e1:b4:b1:8f:31:23:22:ec:18:cf:fc:60: 4a:98:a6:d2:e1:1b:70:0d:9d:32:1c:63:b9:33:a4: 96:f3:7f:4d:44:8c:9c:f4:2d:1e:0f:6a:53:97:5e: 6f:1c:f0:87:66:c3:b7:90:e3:39:79:da:ac:2f:e7: 8b:6b:00:c7:e4:ac:d3:1f:96:56:0b:95:06:58:a0: 36:99:d9:d4:1e:03:63:1a:e0:7f:d8:1c:18:26:6f: 1d:6d:30:de:ca:03:2e:5a:f8:82:72:57:d2:89:01: d8:6a:6e:4a:fd:66:d5:db:c9:f5:df:8e:ba:f4:7d: fd:11:15:99:e6:f2:a1:53:b3:d3:d2:2b:6d:b7:ba: 4a:4a:77:02:d2:04:1d:3b:93:48:3a:80:70:3d:31: cc:a2:08:d0:34:6d:c1:e2:47:bd:8a:c9:e5:02:3c: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:D6:13:2F:47:74:EC:DD:B0:55:1A:81:07:A0:6B:4E:EB:D8:3D X509v3 Authority Key Identifier: keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:76:33:4f:8d:79:91:68:33:0d:18:0f:9b:5c:b8:79:23: 97:e9:68:3f:f0:c3:0e:98:9e:06:4f:2c:4d:e7:2b:45:9f:07: d5:ea:db:88:d7:f4:6d:5d:f4:cf:34:5f:a5:3f:4e:3a:48:82: 99:7f:0f:2c:c1:ad:35:39:34:48:20:7b:7b:87:96:dc:41:c0: b1:ca:ea:91:ad:5d:42:61:39:77:a7:8b:c8:83:43:98:ce:d9: 9d:e9:56:e0:8e:a5:f9:c2:de:07:6f:d9:27:f2:af:1c:d2:89: 80:a6:20:2f:ec:aa:58:79:45:83:39:d1:c1:f4:ce:7f:98:dd: b2:92:2a:55:0a:3b:78:81:11:84:f7:69:35:6e:c4:c5:7f:71: 83:24:8f:40:8d:6c:16:c5:65:03:fc:e9:da:6c:d7:f4:09:f0: 34:b7:7c:6d:5b:bc:c7:20:0e:f7:85:6a:52:2d:e3:97:78:43: 02:6f:b2:9d:b7:3d:1c:0e:58:cc:fb:42:5f:4a:39:c3:7e:d6: d9:04:9c:0f:d4:37:b4:3f:37:e4:d8:bd:05:b7:57:6d:e0:3f: c1:39:ed:8e:c1:3a:b9:dc:1e:d3:d8:1e:69:81:08:c7:f3:eb: d6:46:94:1f:0e:0b:15:f4:c7:e1:49:ee:3c:24:a9:db:5f:7a: 5d:d7:87:e3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtTBc8zsEM/Sv/dzswfI/kjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz NmRhNWQwHhcNMjUxMjI1MDEwMDQ4WhcNMjUxMjI2MDEwMDQ4WjAzMTEwLwYDVQQD EyhhZDFlZDYxMzJmNDc3NGVjZGRiMDU1MWE4MTA3YTA2YjRlZWJkODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbiWRoZa+xqWMHveA8pCkvxJxCBt gNNJKzlgciJUC0Nuouh2mxYR4q3h3B+K7xqhmFYPgVs8SiPObVmcbxboc/m7Xgna DBmTgXgdmHfDFwpIXKO57d+llKOXv+7htLGPMSMi7BjP/GBKmKbS4RtwDZ0yHGO5 M6SW839NRIyc9C0eD2pTl15vHPCHZsO3kOM5edqsL+eLawDH5KzTH5ZWC5UGWKA2 mdnUHgNjGuB/2BwYJm8dbTDeygMuWviCclfSiQHYam5K/WbV28n134669H39ERWZ 5vKhU7PT0ittt7pKSncC0gQdO5NIOoBwPTHMogjQNG3B4ke9isnlAjxCywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK0e1hMvR3Ts3bBVGoEHoGtO69g9MB8GA1UdIwQY MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdZ2 M0+NeZFoMw0YD5tcuHkjl+loP/DDDpieBk8sTecrRZ8H1erbiNf0bV30zzRfpT9O OkiCmX8PLMGtNTk0SCB7e4eW3EHAscrqka1dQmE5d6eLyINDmM7ZnelW4I6l+cLe B2/ZJ/KvHNKJgKYgL+yqWHlFgznRwfTOf5jdspIqVQo7eIERhPdpNW7ExX9xgySP QI1sFsVlA/zp2mzX9AnwNLd8bVu8xyAO94VqUi3jl3hDAm+ynbc9HA5YzPtCX0o5 w37W2QScD9Q3tD835Ni9BbdXbeA/wTntjsE6udwe09geaYEIx/Pr1kaUHw4LFfTH 4UnuPCSp2196XdeH4w== -----END CERTIFICATE-----Generated at Thu Dec 25 08:24:01 2025 by rpki-client