This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json) Hash identifier: ayD6ocLrBi3SyCD6FulPYl7VlISHyUUq68Ra7DsEGmY= Subject key identifier: 80:29:41:AB:5D:78:1A:6F:FE:1F:C6:3A:0F:88:04:AC:82:1A:DF:24 Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Certificate serial: 019B70D92014128E25553BF2E94721116028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 20:00:36 +0000 Manifest this update: Tue 30 Dec 2025 20:00:36 +0000 Manifest next update: Wed 31 Dec 2025 20:00:36 +0000 Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: 72ofIx9u1Kzyuzp8EPHS48d7vgz73wz10erdv49SFnw=) 2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:20:14:12:8e:25:55:3b:f2:e9:47:21:11:60:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Validity Not Before: Dec 30 20:00:36 2025 GMT Not After : Dec 31 20:00:36 2025 GMT Subject: CN=802941ab5d781a6ffe1fc63a0f8804ac821adf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:59:32:79:0f:12:2f:1c:45:1e:ac:cd:67: 9d:dd:7f:88:91:c6:5d:4e:47:60:58:38:f8:cf:fd: 6d:0e:c0:ee:58:50:df:60:b9:10:15:f4:f9:af:6d: 49:33:2f:7b:8b:6d:11:a8:29:1a:be:6a:6a:5d:77: 9a:85:05:a5:1c:58:f1:26:7f:f3:60:e4:43:7d:99: 0b:8c:d8:27:c7:6e:14:fc:47:1d:35:a4:e4:6a:e7: e7:71:1d:e7:44:06:13:b3:39:a3:29:84:e2:be:5c: 25:75:8a:10:80:fe:f6:eb:85:4c:fd:d2:bf:1a:1f: 90:bc:1c:3d:20:c7:78:10:d8:e8:09:ed:8d:89:20: 27:3c:25:19:43:7a:05:b4:4d:cc:3e:b0:1c:d4:05: b7:1a:ff:e7:d0:cb:af:12:19:f6:e3:d6:37:58:c4: 0f:87:ac:cd:4d:01:1d:88:a2:16:2e:69:e0:ef:a4: 03:0e:ad:ed:53:eb:a8:d4:fb:4f:e6:17:bf:11:35: 97:bc:c4:4f:8a:50:97:3d:f9:0a:46:cd:fb:da:7d: 76:47:2f:ca:45:a0:1a:00:4b:01:ef:63:06:91:d7: 01:cb:49:5a:ae:ef:77:1b:cf:ce:ad:5e:45:ed:a4: d6:d0:ee:0b:84:3b:15:a8:72:cd:b0:f2:dd:72:fb: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:29:41:AB:5D:78:1A:6F:FE:1F:C6:3A:0F:88:04:AC:82:1A:DF:24 X509v3 Authority Key Identifier: keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d0:e6:90:10:4c:54:c7:f1:79:65:fd:6e:b5:95:67:da:48: b3:16:99:2d:ef:1a:ed:2c:e3:b9:26:9b:e2:6f:46:6b:ee:8c: 98:e4:0b:62:6a:16:94:eb:c5:74:05:68:b1:cc:45:d4:50:3a: 65:46:92:85:50:ae:bf:9a:25:8f:ad:85:a5:f0:44:94:a9:66: ac:91:10:cc:0f:f3:aa:58:09:70:63:18:a9:ca:df:04:94:49: a0:0d:52:13:0b:fb:81:6c:78:fb:2a:84:2b:2f:bf:fa:5b:92: 5c:3f:d3:94:92:24:f6:e2:d1:59:a7:da:1d:ec:3e:63:34:d5: 3d:8c:eb:43:5f:d5:98:38:70:c4:3b:70:95:7b:3f:44:ac:c9: d6:c8:e6:9d:60:d8:78:f1:6a:c7:6e:e5:50:2c:53:72:8e:97: 55:00:c9:46:05:05:b8:03:7d:47:81:86:2a:5a:01:81:45:f4: 97:d6:ab:5e:63:6f:12:3e:da:6c:2b:26:63:20:15:c8:b8:bd: 7f:0f:27:12:2f:ec:49:33:5f:22:72:ec:69:c9:87:e5:ac:a7: 0c:d8:15:fd:b7:36:71:09:f6:bb:f4:52:09:63:d1:66:54:04: 3b:e3:2f:c3:18:56:17:c4:d2:be:d1:92:f9:7b:64:7d:9a:8a: 14:0d:a5:10 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtw2SAUEo4lVTvy6UchEWAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1 YmJkNzcwHhcNMjUxMjMwMjAwMDM2WhcNMjUxMjMxMjAwMDM2WjAzMTEwLwYDVQQD Eyg4MDI5NDFhYjVkNzgxYTZmZmUxZmM2M2EwZjg4MDRhYzgyMWFkZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg1ZMnkPEi8cRR6szWed3X+IkcZd TkdgWDj4z/1tDsDuWFDfYLkQFfT5r21JMy97i20RqCkavmpqXXeahQWlHFjxJn/z YORDfZkLjNgnx24U/EcdNaTkaufncR3nRAYTszmjKYTivlwldYoQgP7264VM/dK/ Gh+QvBw9IMd4ENjoCe2NiSAnPCUZQ3oFtE3MPrAc1AW3Gv/n0MuvEhn249Y3WMQP h6zNTQEdiKIWLmng76QDDq3tU+uo1PtP5he/ETWXvMRPilCXPfkKRs372n12Ry/K RaAaAEsB72MGkdcBy0laru93G8/OrV5F7aTW0O4LhDsVqHLNsPLdcvtzSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIApQatdeBpv/h/GOg+IBKyCGt8kMB8GA1UdIwQY MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3 LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0 MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNDm kBBMVMfxeWX9brWVZ9pIsxaZLe8a7SzjuSab4m9Ga+6MmOQLYmoWlOvFdAVoscxF 1FA6ZUaShVCuv5olj62FpfBElKlmrJEQzA/zqlgJcGMYqcrfBJRJoA1SEwv7gWx4 +yqEKy+/+luSXD/TlJIk9uLRWafaHew+YzTVPYzrQ1/VmDhwxDtwlXs/RKzJ1sjm nWDYePFqx27lUCxTco6XVQDJRgUFuAN9R4GGKloBgUX0l9arXmNvEj7abCsmYyAV yLi9fw8nEi/sSTNfInLsacmH5aynDNgV/bc2cQn2u/RSCWPRZlQEO+MvwxhWF8TS vtGS+XtkfZqKFA2lEA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:02 2025 by rpki-client