This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json) Hash identifier: QeBarV87/P5rcAV776qswtMx4ehYeXQ4Rmcf65WRIjY= Subject key identifier: A3:0D:78:20:CD:B7:CE:15:BA:B6:B7:9E:44:93:84:DA:2A:3E:B0:83 Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Certificate serial: 019B6166160E121BBC2AB0FDDA68C2DF3F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft Manifest number: 10D2 Signing time: Sat 27 Dec 2025 20:00:38 +0000 Manifest this update: Sat 27 Dec 2025 20:00:38 +0000 Manifest next update: Sun 28 Dec 2025 20:00:38 +0000 Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: RivIeVjbt3LTu6/1kOGgliF8mJISkCxVhCPLyG0Vs2o=) 2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:16:0e:12:1b:bc:2a:b0:fd:da:68:c2:df:3f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Validity Not Before: Dec 27 20:00:38 2025 GMT Not After : Dec 28 20:00:38 2025 GMT Subject: CN=a30d7820cdb7ce15bab6b79e449384da2a3eb083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:9b:82:b1:a5:40:4a:61:11:50:9a:a2:96: 90:69:11:de:f8:3a:1e:6a:46:ab:93:cb:35:17:17: a4:70:55:b9:58:bd:5c:3d:99:96:d4:7e:3a:af:97: c7:62:67:fd:2c:cb:ae:37:2b:ea:5b:4c:26:1f:66: 6c:1c:00:d2:04:25:b9:b8:05:b8:81:00:02:a2:38: 8b:3a:a2:da:0e:65:cf:54:be:f5:b8:c7:8c:70:4d: 24:b6:e8:63:c4:5d:e6:df:3a:8d:05:2e:5b:89:ec: af:87:43:93:d3:ba:e4:99:39:49:17:c9:5f:4e:bd: 1d:e9:65:51:10:d3:19:46:4a:b5:4c:f5:1f:ee:b4: 7e:74:d9:c1:14:b3:90:60:21:39:74:c1:8c:3c:73: f8:f6:36:35:22:12:31:12:e1:79:5f:9a:01:fc:bb: df:56:d5:3b:9f:96:ce:4b:cc:64:45:60:91:5a:1d: 76:c2:68:7b:45:9d:35:9f:bd:ea:23:a7:19:27:e3: d6:e7:9f:44:5d:84:97:c8:d6:fc:7b:7f:38:24:c5: fc:4e:68:3c:6d:fe:9d:da:ed:e8:f5:9c:71:e4:7e: af:76:23:a6:6a:62:31:69:30:9b:b6:f8:99:75:f7: b7:d8:c7:a3:48:a5:bd:ae:e3:6a:ee:5a:89:02:dd: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0D:78:20:CD:B7:CE:15:BA:B6:B7:9E:44:93:84:DA:2A:3E:B0:83 X509v3 Authority Key Identifier: keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8a:cd:56:e2:7d:ae:89:75:71:0b:c0:8a:49:62:2e:45:8d: fa:b1:80:25:d1:66:02:27:13:f3:47:c6:4d:5c:93:2e:9d:95: 42:64:54:64:6f:e2:f5:f5:ce:19:5f:93:f3:62:1a:00:1a:fe: 4b:17:7f:f8:7d:37:c7:89:b0:45:4d:23:af:60:d0:40:fa:52: c2:ef:e9:f8:d9:d4:20:63:44:86:41:49:c3:5f:fa:95:d1:99: bc:33:e0:39:7e:3e:7f:9c:c4:2a:fa:01:cf:32:b4:0b:e9:67: f5:2a:c6:d7:47:05:45:10:fd:f6:0c:71:e9:25:4c:96:77:38: 95:3f:6d:45:ab:79:71:a2:10:0a:b1:0a:df:70:ca:aa:b9:08: bf:23:be:72:76:ad:ee:06:61:89:29:06:b8:64:db:6a:d7:e5: 0d:14:ac:0e:62:c3:a6:53:48:35:2a:c9:5e:b8:65:3c:2c:ae: 6b:2c:e8:28:d4:1d:cb:a3:cb:9f:a0:a1:2f:fd:dd:27:5f:c5: db:70:3c:4d:58:8f:e1:ed:0d:8f:52:94:89:9d:96:71:82:38: e2:de:b1:ad:86:22:6f:c6:64:c9:07:62:30:99:3b:e8:70:2f: ac:72:24:03:ab:7e:1f:a3:ce:4a:06:c6:bb:7f:21:8c:ec:28: d3:d8:85:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZhYOEhu8KrD92mjC3z+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2 ZjUxZjMwHhcNMjUxMjI3MjAwMDM4WhcNMjUxMjI4MjAwMDM4WjAzMTEwLwYDVQQD EyhhMzBkNzgyMGNkYjdjZTE1YmFiNmI3OWU0NDkzODRkYTJhM2ViMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5WbgrGlQEphEVCaopaQaRHe+Doe akark8s1FxekcFW5WL1cPZmW1H46r5fHYmf9LMuuNyvqW0wmH2ZsHADSBCW5uAW4 gQACojiLOqLaDmXPVL71uMeMcE0ktuhjxF3m3zqNBS5bieyvh0OT07rkmTlJF8lf Tr0d6WVRENMZRkq1TPUf7rR+dNnBFLOQYCE5dMGMPHP49jY1IhIxEuF5X5oB/Lvf VtU7n5bOS8xkRWCRWh12wmh7RZ01n73qI6cZJ+PW559EXYSXyNb8e384JMX8Tmg8 bf6d2u3o9Zxx5H6vdiOmamIxaTCbtviZdfe32MejSKW9ruNq7lqJAt0vDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMNeCDNt84Vura3nkSThNoqPrCDMB8GA1UdIwQY MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUorNVuJ9 rol1cQvAikliLkWN+rGAJdFmAicT80fGTVyTLp2VQmRUZG/i9fXOGV+T82IaABr+ Sxd/+H03x4mwRU0jr2DQQPpSwu/p+NnUIGNEhkFJw1/6ldGZvDPgOX4+f5zEKvoB zzK0C+ln9SrG10cFRRD99gxx6SVMlnc4lT9tRat5caIQCrEK33DKqrkIvyO+cnat 7gZhiSkGuGTbatflDRSsDmLDplNINSrJXrhlPCyuayzoKNQdy6PLn6ChL/3dJ1/F 23A8TViP4e0Nj1KUiZ2WcYI44t6xrYYib8ZkyQdiMJk76HAvrHIkA6t+H6POSgbG u38hjOwo09iFfA== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:37 2025 by rpki-client