This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json) Hash identifier: FpfXFqM3aFx/6Djixrm1BGxMRK/u6BQfy9wEcoV17w0= Subject key identifier: 37:DF:5D:06:05:76:4E:1E:AE:58:A0:CB:7E:CC:47:52:2F:49:14:05 Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81 Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081 Certificate serial: 019B5BD2C46B0C3F26DB1B822F743C95B993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft Manifest number: 0832 Signing time: Fri 26 Dec 2025 18:01:37 +0000 Manifest this update: Fri 26 Dec 2025 18:01:37 +0000 Manifest next update: Sat 27 Dec 2025 18:01:37 +0000 Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: Ri4PNooBq2NuQlAtan+xX56vIjFxwzCeBN6YWql75JY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:c4:6b:0c:3f:26:db:1b:82:2f:74:3c:95:b9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081 Validity Not Before: Dec 26 18:01:37 2025 GMT Not After : Dec 27 18:01:37 2025 GMT Subject: CN=37df5d0605764e1eae58a0cb7ecc47522f491405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:aa:83:c1:95:5c:06:a7:11:46:9c:bd:a4: 95:00:8c:d9:a5:3f:87:d2:3e:2e:48:71:5e:90:43: 2d:7e:25:66:1e:d7:40:8b:b9:55:71:ee:a8:d0:c7: b1:5b:71:ec:f1:42:5e:78:98:4c:21:22:a4:a7:f9: a5:d7:b3:13:b7:1a:07:c6:d0:9a:12:b1:9a:41:bb: b9:e5:33:02:11:75:3e:1a:c1:db:33:75:2e:40:22: 20:ac:74:c2:bb:03:16:42:21:9a:fd:39:71:40:35: 77:bb:98:44:73:23:c0:6f:05:4b:3a:db:ca:af:fe: d8:50:fe:eb:ad:ed:d6:bf:75:c1:24:b9:d2:cb:19: 6e:bb:aa:a9:b4:c0:5c:c8:67:e6:2c:f3:bd:40:e1: 55:8d:03:c2:79:68:1a:b1:52:27:8b:cd:84:38:50: ce:96:d2:52:a2:e2:9e:fe:00:6d:ad:62:4b:30:0d: 79:ac:46:31:f8:34:34:17:6e:81:c8:c2:61:e3:0f: a4:b0:1c:88:5f:d7:2d:a5:22:72:fe:ee:84:23:7d: 27:30:56:d2:62:46:ab:0b:4d:a9:75:97:ac:ef:8c: 29:40:d7:81:35:b1:c6:5f:fb:8d:ea:af:1f:0e:86: 10:bd:be:84:a6:4a:1c:da:1b:1c:f4:72:1b:03:4c: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:5D:06:05:76:4E:1E:AE:58:A0:CB:7E:CC:47:52:2F:49:14:05 X509v3 Authority Key Identifier: keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:78:8a:76:cf:35:4b:e2:c2:b0:5a:f4:68:a6:eb:fd:14:59: a7:65:87:ff:c2:45:57:b4:7a:86:b6:35:45:8e:a4:0a:f0:cf: bc:15:9b:f0:d1:fa:af:34:25:85:0e:3d:c7:9d:ed:44:5b:7f: c4:0d:1e:51:22:c2:44:63:a5:ae:e3:45:e6:fe:c7:26:97:e7: ba:df:5e:a1:2d:3d:dd:65:3a:72:3a:3d:ca:bb:89:8f:51:66: 95:00:9d:42:f9:80:57:e9:8d:37:a6:70:fb:61:99:bf:d3:6d: 3f:b9:14:1e:b1:f5:0e:f7:0f:8e:d0:45:f3:90:58:d2:a4:84: 5b:0f:3e:65:fd:85:10:98:fc:2b:25:aa:3a:4d:34:ff:cf:1e: 39:fc:a3:9d:c8:cd:57:1e:9a:67:e4:0e:08:8c:2c:fc:dd:d1: d0:1d:d2:b0:cb:21:cb:cd:24:c4:fc:15:9e:35:c3:45:0a:46: 8d:df:c1:f3:1c:a4:d0:cf:19:0d:c8:de:01:e6:09:ce:6d:43: e7:9a:05:66:14:d0:4f:fc:d0:dd:ab:ee:27:69:1b:ae:2b:1e: c7:0d:b8:f1:2b:6e:b1:65:46:77:b8:19:bb:96:33:77:5a:cf: 5a:25:19:7b:19:a4:71:f4:59:c5:47:bc:38:a2:1b:bb:67:fd: 4b:45:c3:0d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtb0sRrDD8m2xuCL3Q8lbmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2 NDQwODEwHhcNMjUxMjI2MTgwMTM3WhcNMjUxMjI3MTgwMTM3WjAzMTEwLwYDVQQD EygzN2RmNWQwNjA1NzY0ZTFlYWU1OGEwY2I3ZWNjNDc1MjJmNDkxNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRiqg8GVXAanEUacvaSVAIzZpT+H 0j4uSHFekEMtfiVmHtdAi7lVce6o0MexW3Hs8UJeeJhMISKkp/ml17MTtxoHxtCa ErGaQbu55TMCEXU+GsHbM3UuQCIgrHTCuwMWQiGa/TlxQDV3u5hEcyPAbwVLOtvK r/7YUP7rre3Wv3XBJLnSyxluu6qptMBcyGfmLPO9QOFVjQPCeWgasVIni82EOFDO ltJSouKe/gBtrWJLMA15rEYx+DQ0F26ByMJh4w+ksByIX9ctpSJy/u6EI30nMFbS YkarC02pdZes74wpQNeBNbHGX/uN6q8fDoYQvb6Epkoc2hsc9HIbA0y8FwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDffXQYFdk4erligy37MR1IvSRQFMB8GA1UdIwQY MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXiK ds81S+LCsFr0aKbr/RRZp2WH/8JFV7R6hrY1RY6kCvDPvBWb8NH6rzQlhQ49x53t RFt/xA0eUSLCRGOlruNF5v7HJpfnut9eoS093WU6cjo9yruJj1FmlQCdQvmAV+mN N6Zw+2GZv9NtP7kUHrH1DvcPjtBF85BY0qSEWw8+Zf2FEJj8KyWqOk00/88eOfyj ncjNVx6aZ+QOCIws/N3R0B3SsMshy80kxPwVnjXDRQpGjd/B8xyk0M8ZDcjeAeYJ zm1D55oFZhTQT/zQ3avuJ2kbrisexw248StusWVGd7gZu5Yzd1rPWiUZexmkcfRZ xUe8OKIbu2f9S0XDDQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:36:05 2025 by rpki-client