This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json) Hash identifier: yvcdDE5wVYipJnDFqsPHBGdmwc0WSmbES4KRNBPegNQ= Subject key identifier: 97:27:21:BA:A6:72:43:B9:F5:54:FE:E3:D5:7F:E9:B4:03:E0:71:D1 Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77 Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77 Certificate serial: 019B45B847226B5D32CC97F157FEDFB5AE11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft Manifest number: 16D1 Signing time: Mon 22 Dec 2025 11:01:03 +0000 Manifest this update: Mon 22 Dec 2025 11:01:03 +0000 Manifest next update: Tue 23 Dec 2025 11:01:03 +0000 Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: dToY3Tjhht7zX2ey0onh8jc09I3TMe8DJ4+XZP2l7ug=) 2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:47:22:6b:5d:32:cc:97:f1:57:fe:df:b5:ae:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77 Validity Not Before: Dec 22 11:01:03 2025 GMT Not After : Dec 23 11:01:03 2025 GMT Subject: CN=972721baa67243b9f554fee3d57fe9b403e071d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:40:b6:96:76:80:33:d0:c2:d8:4c:54:17: d1:17:cd:95:a1:26:62:f0:a7:63:81:6c:46:12:9b: 38:be:cd:f1:1d:68:00:19:a3:9c:98:fe:c7:4f:d4: cc:71:ed:4f:8a:40:3b:46:1d:a2:b3:ef:f0:4e:02: 3c:0a:e7:5e:5f:10:95:b0:fc:ed:ac:3c:62:d0:97: 5c:3b:fc:58:5e:31:ff:60:25:db:89:71:53:a0:3b: 40:15:e7:b1:98:5a:a4:de:77:00:9a:35:57:4c:13: e7:af:4c:f2:a1:a2:0f:d5:42:1a:38:9c:3c:49:53: 55:72:61:5a:d7:63:3f:c9:43:52:69:f8:85:f1:53: bb:09:f6:c8:72:59:b6:65:70:16:67:fd:4c:ac:3b: 38:b1:94:5f:a0:fd:55:4f:77:28:13:5f:cd:27:ca: 05:95:44:ac:3b:32:4c:b3:7f:bb:7c:60:e2:8e:8c: 14:8e:9f:91:d7:17:54:4d:98:83:b2:38:d5:6a:72: 38:11:d9:66:f0:f8:55:ae:9f:8a:77:ab:3a:f4:35: 68:9d:0a:01:d9:05:ce:9a:44:ae:c2:bc:51:9d:41: 95:18:75:b7:da:72:99:95:eb:2b:c4:b3:3f:3a:7f: dc:7a:dd:98:11:7c:ec:28:90:3c:76:c2:0d:19:c8: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:27:21:BA:A6:72:43:B9:F5:54:FE:E3:D5:7F:E9:B4:03:E0:71:D1 X509v3 Authority Key Identifier: keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8b:0c:86:fd:88:1f:6d:e4:75:30:38:4f:41:f9:20:bc:21: 73:6a:22:ea:74:b1:c2:ec:4c:0b:d9:70:7c:54:f6:31:fc:6d: b8:84:e5:4f:7d:2b:c3:fa:15:ad:01:6c:98:d8:87:35:69:b3: 6d:9a:89:cd:5d:f1:24:ff:1f:ff:5e:71:30:99:fe:02:f0:1d: cf:69:36:9d:97:24:26:c2:fc:15:c9:9f:ca:31:b3:4b:3b:d7: 3f:29:1c:45:26:dd:ba:5a:4b:8f:1b:24:15:8c:81:9f:5e:7f: 20:a3:fb:1c:96:73:eb:c5:80:18:b2:7b:c4:67:00:c3:71:2f: 4c:fd:24:30:01:14:4c:5f:f7:27:5d:0c:15:b6:c6:46:41:fb: 9c:41:cd:0a:0c:3b:b8:d4:c1:8f:33:e8:92:68:e2:e2:e6:6d: 7b:74:25:8c:3a:5c:15:e8:4c:81:6a:b0:fb:64:10:f6:88:81: 61:ab:cb:dd:e7:88:9d:f1:47:7c:0e:e8:ab:85:e3:7e:5a:81: 13:54:02:a8:78:e4:a9:6b:b0:04:ff:59:5f:bc:24:1f:e7:93: 35:0f:97:51:4e:6c:3c:73:c4:5e:04:0a:4f:ad:93:c9:cb:20: 50:bd:11:e1:3c:28:fe:46:d5:ba:ab:4d:11:83:f1:ba:9b:d0: 31:11:e8:3a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtFuEcia10yzJfxV/7fta4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2NjYWVmOWM5MTEyMGVjNmZiMTRmZjRjNGM1NzQ1YTAy MzliNzcwHhcNMjUxMjIyMTEwMTAzWhcNMjUxMjIzMTEwMTAzWjAzMTEwLwYDVQQD Eyg5NzI3MjFiYWE2NzI0M2I5ZjU1NGZlZTNkNTdmZTliNDAzZTA3MWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuydAtpZ2gDPQwthMVBfRF82VoSZi 8KdjgWxGEps4vs3xHWgAGaOcmP7HT9TMce1PikA7Rh2is+/wTgI8CudeXxCVsPzt rDxi0JdcO/xYXjH/YCXbiXFToDtAFeexmFqk3ncAmjVXTBPnr0zyoaIP1UIaOJw8 SVNVcmFa12M/yUNSafiF8VO7CfbIclm2ZXAWZ/1MrDs4sZRfoP1VT3coE1/NJ8oF lUSsOzJMs3+7fGDijowUjp+R1xdUTZiDsjjVanI4Edlm8PhVrp+Kd6s69DVonQoB 2QXOmkSuwrxRnUGVGHW32nKZlesrxLM/On/cet2YEXzsKJA8dsINGcgRcQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJcnIbqmckO59VT+49V/6bQD4HHRMB8GA1UdIwQY MBaAFPg8yu+ckRIOxvsU/0xMV0WgI5t3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Eeks3NXlSRWc3Ry14VF9URXhYUmFBam0zYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDVmY2Q1LTg4MTItNDMyZC1iNTM3 LTc2OTgyZjAzZWEwYy8xLzEtRHpLNzV5UkVnN0cteFRfVEV4WFJhQWptM2MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JmLzQ1ZmNkNS04ODEyLTQzMmQtYjUzNy03Njk4MmYwM2Vh MGMvMS8xLUR6Szc1eVJFZzdHLXhUX1RFeFhSYUFqbTNjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIsM hv2IH23kdTA4T0H5ILwhc2oi6nSxwuxMC9lwfFT2MfxtuITlT30rw/oVrQFsmNiH NWmzbZqJzV3xJP8f/15xMJn+AvAdz2k2nZckJsL8FcmfyjGzSzvXPykcRSbdulpL jxskFYyBn15/IKP7HJZz68WAGLJ7xGcAw3EvTP0kMAEUTF/3J10MFbbGRkH7nEHN Cgw7uNTBjzPokmji4uZte3QljDpcFehMgWqw+2QQ9oiBYavL3eeInfFHfA7oq4Xj flqBE1QCqHjkqWuwBP9ZX7wkH+eTNQ+XUU5sPHPEXgQKT62TycsgUL0R4Two/kbV uqtNEYPxupvQMRHoOg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:24 2025 by rpki-client