This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json) Hash identifier: 0wGSxHpzgaNkt4cG2mbS2PPdCwgn7KFlaX1e/ZeTs1A= Subject key identifier: 0A:3F:AF:3C:A9:2A:13:0E:C4:8B:EE:54:54:27:5E:68:A8:8C:3D:2D Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79 Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479 Certificate serial: 019B522A5A582486BE65C58BC04032AEE9AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 21:01:05 +0000 Manifest this update: Wed 24 Dec 2025 21:01:05 +0000 Manifest next update: Thu 25 Dec 2025 21:01:05 +0000 Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: pL14Nl+OuuvT97o3DFHFKatJXISKhJXLMuWy/PjeBGc=) 2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:5a:58:24:86:be:65:c5:8b:c0:40:32:ae:e9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479 Validity Not Before: Dec 24 21:01:05 2025 GMT Not After : Dec 25 21:01:05 2025 GMT Subject: CN=0a3faf3ca92a130ec48bee5454275e68a88c3d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1e:8f:ff:03:6c:db:2c:62:9d:e5:0b:e8:10: 9e:22:bc:09:72:18:0f:36:54:bd:d8:9f:67:0d:ad: 68:07:f5:7d:fe:53:b9:df:33:21:59:83:c6:59:e6: 58:a2:89:30:fe:7e:16:fe:f8:4f:64:e8:e4:65:3b: 4e:3c:a7:0f:10:5e:20:12:87:98:0e:5b:46:6e:db: 60:07:b0:78:bc:c4:7d:e6:f2:6b:7f:d5:40:e0:f0: b9:6c:4c:77:71:22:74:89:1d:93:bb:f0:5c:f1:57: 38:5c:3c:63:1a:c8:8f:33:b6:93:1d:3a:c4:7f:bd: 9c:0c:f5:f4:b7:46:0c:3f:64:11:96:a6:03:e5:55: ac:ad:fe:1a:80:3d:11:59:07:c5:a4:9a:2b:59:f4: 4e:31:67:5d:91:f8:1c:88:16:37:65:f7:fc:f4:fb: 51:a5:3f:22:46:b4:cb:b9:9f:2f:d9:7e:36:20:cc: c5:b2:8d:49:a3:98:7f:e3:22:76:2a:ae:24:2a:66: 3e:95:c0:3d:13:da:cb:9f:ef:dd:23:92:ce:27:77: 77:a0:9f:7d:a8:69:d5:3a:0c:0e:c7:92:a6:5f:c8: eb:66:19:a1:7f:36:e0:d9:6b:be:4d:0c:2c:13:53: 4b:e7:10:b7:ce:78:33:69:a0:dc:11:f5:3c:31:3b: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3F:AF:3C:A9:2A:13:0E:C4:8B:EE:54:54:27:5E:68:A8:8C:3D:2D X509v3 Authority Key Identifier: keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1b:7c:06:e6:ef:64:a2:70:96:23:13:bf:c4:c3:ed:fa:64: ca:20:d0:34:7d:d4:4a:da:83:8a:ce:70:ff:11:7e:fb:96:90: 96:f8:24:72:0e:9d:b1:3f:72:1a:66:d1:55:3d:0e:37:ab:ef: f0:fe:0e:2c:47:ae:0e:d6:db:3d:00:11:de:f1:9c:ba:b5:fc: 58:b8:16:9f:e7:c0:7c:30:be:c8:95:d2:92:0c:a2:75:b8:f2: 1d:8a:a0:d6:b9:1b:2e:90:c1:0a:32:e6:7e:46:49:8a:fb:61: c3:86:81:88:91:70:ff:23:13:9d:d0:25:23:de:92:8d:bf:b5: 6f:db:41:bc:ba:7b:72:cb:64:18:1d:3a:7a:2a:de:3b:95:b4: 98:8a:a2:df:2d:b7:da:18:84:57:cc:ba:57:3e:c7:b5:75:64: 3a:50:05:f4:42:7d:25:67:71:41:9e:5a:24:70:fd:63:e4:43: d9:5e:2b:ab:7a:84:b0:12:fe:af:ea:57:a4:b9:2c:19:dc:9a: e2:79:29:9b:13:c9:ad:fc:cd:34:7d:20:33:52:75:88:4a:16: 45:5c:e1:d8:73:ab:83:39:29:9b:f0:07:a4:50:2b:fe:8f:cf: 38:d9:bf:53:bf:a1:74:6b:96:3b:af:dc:64:04:a7:0b:24:95: 1f:6b:0b:38 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtSKlpYJIa+ZcWLwEAyrumrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzMyMDk2MjVlMmEwM2RkZWVjZjkxYmI0ODA1NDhlNTcy OWQ0NzkwHhcNMjUxMjI0MjEwMTA1WhcNMjUxMjI1MjEwMTA1WjAzMTEwLwYDVQQD EygwYTNmYWYzY2E5MmExMzBlYzQ4YmVlNTQ1NDI3NWU2OGE4OGMzZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h6P/wNs2yxineUL6BCeIrwJchgP NlS92J9nDa1oB/V9/lO53zMhWYPGWeZYookw/n4W/vhPZOjkZTtOPKcPEF4gEoeY DltGbttgB7B4vMR95vJrf9VA4PC5bEx3cSJ0iR2Tu/Bc8Vc4XDxjGsiPM7aTHTrE f72cDPX0t0YMP2QRlqYD5VWsrf4agD0RWQfFpJorWfROMWddkfgciBY3Zff89PtR pT8iRrTLuZ8v2X42IMzFso1Jo5h/4yJ2Kq4kKmY+lcA9E9rLn+/dI5LOJ3d3oJ99 qGnVOgwOx5KmX8jrZhmhfzbg2Wu+TQwsE1NL5xC3zngzaaDcEfU8MTttGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAo/rzypKhMOxIvuVFQnXmiojD0tMB8GA1UdIwQY MBaAFPlzIJYl4qA93uz5G7SAVI5XKdR5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YTWdsaVhpb0QzZTdQa2J0SUJVamxjcDFIay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYWY1NGU4LWJkNjMtNDI3ZC04Y2M4 LWY0ZWNlYmJiMWVjMi8xLzEtWE1nbGlYaW9EM2U3UGtidElCVWpsY3AxSGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVkL2FmNTRlOC1iZDYzLTQyN2QtOGNjOC1mNGVjZWJiYjFl YzIvMS8xLVhNZ2xpWGlvRDNlN1BrYnRJQlVqbGNwMUhrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxt8 BubvZKJwliMTv8TD7fpkyiDQNH3UStqDis5w/xF++5aQlvgkcg6dsT9yGmbRVT0O N6vv8P4OLEeuDtbbPQAR3vGcurX8WLgWn+fAfDC+yJXSkgyidbjyHYqg1rkbLpDB CjLmfkZJivthw4aBiJFw/yMTndAlI96Sjb+1b9tBvLp7cstkGB06eireO5W0mIqi 3y232hiEV8y6Vz7HtXVkOlAF9EJ9JWdxQZ5aJHD9Y+RD2V4rq3qEsBL+r+pXpLks Gdya4nkpmxPJrfzNNH0gM1J1iEoWRVzh2HOrgzkpm/AHpFAr/o/PONm/U7+hdGuW O6/cZASnCySVH2sLOA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:02 2025 by rpki-client