This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json) Hash identifier: GWwSiSkEsgNECHZ4dsVe+hb+0RmUXaUNWWeN3EV8Tgg= Subject key identifier: 32:38:2F:9C:F9:F8:E9:74:F4:DF:47:E0:BB:A8:FF:6F:DE:E3:02:42 Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055 Certificate serial: 019B3E6D1234A30D82CCBBA81B45A341E1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft Manifest number: 13F4 Signing time: Sun 21 Dec 2025 01:01:34 +0000 Manifest this update: Sun 21 Dec 2025 01:01:34 +0000 Manifest next update: Mon 22 Dec 2025 01:01:34 +0000 Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: Q8uIzombc2Nr3A1MNpvDaBOdjpBzHpNCSm2PepXGzAg=) 2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=) 3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:12:34:a3:0d:82:cc:bb:a8:1b:45:a3:41:e1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45bab208653d4261ebf202f6036334119846055 Validity Not Before: Dec 21 01:01:34 2025 GMT Not After : Dec 22 01:01:34 2025 GMT Subject: CN=32382f9cf9f8e974f4df47e0bba8ff6fdee30242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:38:88:04:71:e8:4c:4f:cc:a3:41:27:6c: e4:e5:7f:b2:6c:b0:98:a4:b4:45:63:82:f2:c3:03: 11:86:0a:b9:55:53:1f:a6:4d:0a:24:53:7d:96:b8: 41:c4:ab:b5:a4:da:b8:1a:6d:c3:b0:69:19:92:70: 07:37:47:49:c8:47:2d:3f:2d:21:44:54:23:5a:60: 07:38:b8:9f:e5:ab:b1:d7:fc:26:a1:87:d5:ef:3f: 55:29:b6:8a:88:f1:b3:29:a8:d0:47:3a:86:4a:65: 92:b5:7e:53:1d:ee:7f:e5:b6:fe:41:42:b5:ca:11: bb:74:4c:95:67:98:97:97:a0:73:61:e2:03:47:a3: b9:63:46:99:29:36:3c:a8:12:32:e3:6d:43:41:1a: 1f:c1:0a:37:1f:79:8a:78:87:8c:bc:32:8a:4c:d4: 85:83:0a:06:41:d2:b1:e2:50:43:fe:0b:02:78:0c: 8f:83:cc:94:78:e8:8a:c3:d3:2d:dc:1a:6b:87:80: 46:1c:82:b5:83:ae:9b:38:a4:90:94:f7:35:e2:18: 38:46:ce:07:42:5e:c0:6b:91:13:88:13:7c:a6:c8: 5d:11:24:14:ae:9e:84:77:b1:5b:ad:7d:c6:65:c5: 94:ec:c2:8c:a1:09:9a:55:dc:7e:f0:15:04:23:99: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:38:2F:9C:F9:F8:E9:74:F4:DF:47:E0:BB:A8:FF:6F:DE:E3:02:42 X509v3 Authority Key Identifier: keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7c:8f:a9:af:8c:93:53:a7:8c:51:12:22:9c:ca:68:a4:6a: 5c:19:93:ff:30:5b:1c:fa:26:ab:d2:ba:91:b1:7b:03:82:2b: 20:1c:a3:df:1a:ea:f5:f2:43:cb:00:2e:22:d1:6d:23:2d:11: cb:06:8f:e9:20:b3:f0:6c:66:64:a9:7f:ca:8b:37:b4:f3:09: b5:89:60:6e:6b:f8:3c:38:c9:ad:02:d1:d8:c1:9c:d9:c6:70: fb:a1:d3:f1:9e:ae:6d:a6:2f:f2:97:a8:1d:75:9d:7d:59:58: 24:ac:b3:e3:61:f1:6e:45:31:48:2f:fe:e7:93:49:22:d1:9a: 97:0d:32:6c:03:24:7c:8c:56:1e:30:15:cc:02:45:fb:4b:95: d9:9a:44:44:99:2e:76:1a:70:1d:33:93:4e:de:2a:2c:25:d2: 46:cf:b6:59:1b:85:3c:ca:e7:d9:0c:17:25:e7:03:d2:68:f1: 4c:46:9d:9b:dc:2b:35:31:76:70:5f:0f:ae:13:32:c9:86:97: 07:3d:68:d4:9e:ee:5c:4a:b7:88:33:84:f0:e4:84:35:5e:c9: 1e:bc:fa:98:13:2a:91:fa:f9:c2:1d:29:3a:a2:ef:4a:d4:9d: 4b:05:ea:f6:c0:fd:2d:a4:59:98:67:db:96:9f:bb:bc:7c:98: cd:9a:ab:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRI0ow2CzLuoG0WjQeHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4 NDYwNTUwHhcNMjUxMjIxMDEwMTM0WhcNMjUxMjIyMDEwMTM0WjAzMTEwLwYDVQQD EygzMjM4MmY5Y2Y5ZjhlOTc0ZjRkZjQ3ZTBiYmE4ZmY2ZmRlZTMwMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqs4iARx6ExPzKNBJ2zk5X+ybLCY pLRFY4LywwMRhgq5VVMfpk0KJFN9lrhBxKu1pNq4Gm3DsGkZknAHN0dJyEctPy0h RFQjWmAHOLif5aux1/wmoYfV7z9VKbaKiPGzKajQRzqGSmWStX5THe5/5bb+QUK1 yhG7dEyVZ5iXl6BzYeIDR6O5Y0aZKTY8qBIy421DQRofwQo3H3mKeIeMvDKKTNSF gwoGQdKx4lBD/gsCeAyPg8yUeOiKw9Mt3Bprh4BGHIK1g66bOKSQlPc14hg4Rs4H Ql7Aa5ETiBN8pshdESQUrp6Ed7FbrX3GZcWU7MKMoQmaVdx+8BUEI5nV6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI4L5z5+Ol09N9H4Luo/2/e4wJCMB8GA1UdIwQY MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXyPqa+M k1OnjFESIpzKaKRqXBmT/zBbHPomq9K6kbF7A4IrIByj3xrq9fJDywAuItFtIy0R ywaP6SCz8GxmZKl/yos3tPMJtYlgbmv4PDjJrQLR2MGc2cZw+6HT8Z6ubaYv8peo HXWdfVlYJKyz42HxbkUxSC/+55NJItGalw0ybAMkfIxWHjAVzAJF+0uV2ZpERJku dhpwHTOTTt4qLCXSRs+2WRuFPMrn2QwXJecD0mjxTEadm9wrNTF2cF8PrhMyyYaX Bz1o1J7uXEq3iDOE8OSENV7JHrz6mBMqkfr5wh0pOqLvStSdSwXq9sD9LaRZmGfb lp+7vHyYzZqrpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:00 2025 by rpki-client