This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json) Hash identifier: u0RMZFlSr0hqpRDX30Y0S2L4sVJKJchStOUIJ8NfH+k= Subject key identifier: DE:C2:44:BE:37:45:65:8C:B1:EF:D9:FB:EF:A3:7C:DC:63:72:EF:C1 Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Certificate serial: 019B3EA3487F808C16B3C7311AD2777CC38F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:00:46 +0000 Manifest this update: Sun 21 Dec 2025 02:00:46 +0000 Manifest next update: Mon 22 Dec 2025 02:00:46 +0000 Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: 1YDEQb7r4PFCksQS5LVNGoD2sB0i4NchsOjeVImr7Jk=) 2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:48:7f:80:8c:16:b3:c7:31:1a:d2:77:7c:c3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Validity Not Before: Dec 21 02:00:46 2025 GMT Not After : Dec 22 02:00:46 2025 GMT Subject: CN=dec244be3745658cb1efd9fbefa37cdc6372efc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:86:01:43:00:16:97:71:65:94:76:8e:8f: bb:13:c9:9f:67:87:09:07:b1:91:d2:fd:8c:82:aa: 04:b0:50:31:3d:1f:84:d4:31:d5:c3:b9:c9:a8:52: a4:aa:09:36:25:3b:cc:ff:b7:3a:c4:81:6c:38:7f: 74:c5:b6:f0:1d:53:53:ca:7b:5e:6c:7d:9e:0c:43: d9:b1:fc:2e:1b:a5:98:59:53:d6:1d:d6:6f:77:46: 36:c2:18:35:f1:04:ad:5f:7c:3c:38:00:67:32:49: e7:15:67:55:5a:e2:9c:60:06:39:e0:22:76:b9:95: e8:21:3d:18:3a:b8:a5:0d:75:ae:96:5d:80:03:e6: 94:09:4c:90:31:f7:b3:d2:f7:8b:c4:39:a2:21:1e: 0b:bc:83:7c:c1:65:2d:dd:08:a5:36:c9:b6:85:f4: 2f:60:16:86:3b:40:d1:e8:db:0f:8b:cf:c6:ed:ca: 7b:15:c6:23:71:e9:4d:02:77:68:01:5b:6e:10:0f: 8d:db:a2:3a:da:90:8c:79:c5:bb:2b:ff:dc:1b:97: 60:b5:6a:cd:e7:d0:18:3b:3f:51:40:5b:9f:5d:35: 0f:8b:b2:74:b6:34:a5:31:58:0b:25:f4:92:a4:1e: ef:76:de:03:84:d1:fb:8b:7f:fc:27:d1:9d:fd:dd: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C2:44:BE:37:45:65:8C:B1:EF:D9:FB:EF:A3:7C:DC:63:72:EF:C1 X509v3 Authority Key Identifier: keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2b:ba:2f:4a:cd:8a:3e:46:04:4c:8d:18:84:c1:22:2b:1e: cb:af:5f:d9:e1:0e:ac:31:b8:fb:60:86:0a:11:a9:91:3c:84: 75:99:d7:01:be:1f:e7:9c:c1:99:d2:2b:47:f8:07:2b:ec:e7: f7:0b:e1:d8:a9:e4:6a:0c:02:7d:64:eb:f9:3a:10:a1:52:87: 4f:93:1f:d2:4b:26:5c:dc:f6:56:51:60:86:90:22:47:2b:12: e9:d0:3e:29:56:1b:ab:18:aa:1d:24:77:f1:5b:ff:1d:b0:4e: 55:ca:07:1c:50:28:12:8b:f7:f0:66:22:c8:e1:73:71:15:e0: f8:15:3f:f3:e0:d3:62:08:11:6e:73:c5:04:ff:a8:29:90:11: ce:b9:db:25:be:b8:ca:b5:0e:34:ee:55:a5:bb:2b:4d:ad:f2: 7d:9d:63:91:d7:04:f9:2e:0b:74:5c:cd:67:0f:c8:df:e1:09: 72:55:fc:43:3e:0d:b0:2a:44:3f:13:53:d6:fb:e2:0f:06:6a: 9f:e0:be:0a:dd:48:89:77:aa:56:60:99:da:eb:d5:c8:87:66: ac:b0:09:b8:23:ba:96:d9:46:90:88:d7:c7:a0:40:09:95:05: 0d:b0:5a:68:e7:a2:1e:56:a1:0c:0d:1b:dc:22:31:be:e3:b3: 58:0a:e6:95 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+o0h/gIwWs8cxGtJ3fMOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm NWZjYjIwHhcNMjUxMjIxMDIwMDQ2WhcNMjUxMjIyMDIwMDQ2WjAzMTEwLwYDVQQD EyhkZWMyNDRiZTM3NDU2NThjYjFlZmQ5ZmJlZmEzN2NkYzYzNzJlZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK2GAUMAFpdxZZR2jo+7E8mfZ4cJ B7GR0v2MgqoEsFAxPR+E1DHVw7nJqFKkqgk2JTvM/7c6xIFsOH90xbbwHVNTynte bH2eDEPZsfwuG6WYWVPWHdZvd0Y2whg18QStX3w8OABnMknnFWdVWuKcYAY54CJ2 uZXoIT0YOrilDXWull2AA+aUCUyQMfez0veLxDmiIR4LvIN8wWUt3QilNsm2hfQv YBaGO0DR6NsPi8/G7cp7FcYjcelNAndoAVtuEA+N26I62pCMecW7K//cG5dgtWrN 59AYOz9RQFufXTUPi7J0tjSlMVgLJfSSpB7vdt4DhNH7i3/8J9Gd/d2EswIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN7CRL43RWWMse/Z+++jfNxjcu/BMB8GA1UdIwQY MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2 LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCu6 L0rNij5GBEyNGITBIisey69f2eEOrDG4+2CGChGpkTyEdZnXAb4f55zBmdIrR/gH K+zn9wvh2KnkagwCfWTr+ToQoVKHT5Mf0ksmXNz2VlFghpAiRysS6dA+KVYbqxiq HSR38Vv/HbBOVcoHHFAoEov38GYiyOFzcRXg+BU/8+DTYggRbnPFBP+oKZARzrnb Jb64yrUONO5VpbsrTa3yfZ1jkdcE+S4LdFzNZw/I3+EJclX8Qz4NsCpEPxNT1vvi DwZqn+C+Ct1IiXeqVmCZ2uvVyIdmrLAJuCO6ltlGkIjXx6BACZUFDbBaaOeiHlah DA0b3CIxvuOzWArmlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:44:59 2025 by rpki-client