This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json) Hash identifier: 1xTpNqJxoX9qMCuwKKpKC53YEPZhqe1UN4H4Xx8bRFU= Subject key identifier: F3:9C:6B:A6:E6:F1:4B:7E:7C:29:A7:52:CA:F0:6E:F2:41:6C:CA:CC Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Certificate serial: 019B2B541E094879B5AB3218DD9F3020CF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 08:01:31 +0000 Manifest this update: Wed 17 Dec 2025 08:01:31 +0000 Manifest next update: Thu 18 Dec 2025 08:01:31 +0000 Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: pWRlcmmCQ7CCm2+D435LOWOI9YEWTyA7vy6SZvAiuSc=) 2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:1e:09:48:79:b5:ab:32:18:dd:9f:30:20:cf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Validity Not Before: Dec 17 08:01:31 2025 GMT Not After : Dec 18 08:01:31 2025 GMT Subject: CN=f39c6ba6e6f14b7e7c29a752caf06ef2416ccacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:67:85:a3:9e:96:89:42:f7:90:44:b7:fa: 6d:5c:33:a0:30:91:eb:5e:0f:73:b5:ec:93:42:15: 11:e4:2d:ff:b5:c1:fa:91:5c:ad:d6:c1:61:e3:1b: 70:3c:cf:d4:31:79:1e:ee:bf:04:a0:5f:ef:00:c2: a1:a2:34:6b:11:d5:df:67:17:70:b2:21:11:5b:21: c7:f0:89:49:4d:fc:bd:f8:d7:83:db:14:ef:a3:7b: 69:bd:4c:49:0b:77:56:d0:bd:97:dc:a4:d0:b5:27: d8:ac:2b:34:c5:b7:f6:93:cf:9a:a7:47:c2:c8:44: fa:91:81:45:fc:55:d8:3d:e2:25:96:62:51:3a:5b: 6d:dc:b9:2a:08:d9:cf:f1:82:dc:92:01:01:0f:6e: 55:6a:3e:5c:98:d4:07:e5:4f:3d:2c:42:3f:7a:64: 11:d6:16:39:cd:4d:34:1e:38:72:5a:c5:99:c4:e3: ef:57:75:c8:f7:23:fd:69:71:97:b7:f0:c0:f7:40: 23:de:8a:b1:c8:bc:33:34:02:cf:7c:2a:37:41:d6: a6:bd:27:c4:49:96:99:c5:ee:e5:8e:2a:29:ce:76: cc:a5:17:35:49:0b:e6:50:cf:2a:2a:13:2c:7e:86: 4d:e9:89:c4:87:53:73:a3:84:ec:df:ec:ac:d0:45: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:6B:A6:E6:F1:4B:7E:7C:29:A7:52:CA:F0:6E:F2:41:6C:CA:CC X509v3 Authority Key Identifier: keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cb:f7:09:ca:cc:4c:ac:49:45:f0:a9:16:00:99:09:a6:17: db:4d:f9:e6:72:e4:9b:8f:68:89:7c:1b:a7:e9:7f:d7:e4:74: 3c:e5:4e:71:41:31:df:ca:9a:58:98:a2:9b:61:3e:1a:09:26: 9b:99:f6:8c:5b:9e:19:96:90:b6:06:06:eb:cb:f7:3e:ec:69: f9:e6:07:24:fa:da:31:b1:97:62:be:34:94:b5:aa:c8:42:72: 35:97:0d:d6:12:69:f3:92:37:81:26:a3:07:87:d2:d1:f1:c2: 9d:6d:59:55:c2:44:a6:bb:49:2b:dc:23:19:0a:27:b9:65:23: 7b:87:1e:95:40:cf:6b:9b:8c:e0:c7:7f:07:04:53:69:b2:20: d6:e9:03:44:18:56:d1:3d:97:63:1a:53:f6:b5:bc:4f:eb:96: 6f:59:72:64:03:3e:4a:d4:6e:e6:d0:e8:9d:07:40:bd:62:59: 0c:98:3a:02:38:e4:36:57:34:51:d4:cf:b4:de:90:ef:4a:7f: 36:73:9f:51:18:e1:be:13:55:4a:7d:2d:d8:e3:e8:ac:d1:01: 0f:db:a7:f4:6a:3d:51:57:01:46:35:da:cd:d6:9c:87:cc:75: 4b:08:5a:72:c1:2f:89:cb:ce:8f:9b:58:ce:d2:8f:5f:98:74: 83:4c:d6:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVB4JSHm1qzIY3Z8wIM+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw YTZjYjYwHhcNMjUxMjE3MDgwMTMxWhcNMjUxMjE4MDgwMTMxWjAzMTEwLwYDVQQD EyhmMzljNmJhNmU2ZjE0YjdlN2MyOWE3NTJjYWYwNmVmMjQxNmNjYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaVnhaOelolC95BEt/ptXDOgMJHr Xg9zteyTQhUR5C3/tcH6kVyt1sFh4xtwPM/UMXke7r8EoF/vAMKhojRrEdXfZxdw siERWyHH8IlJTfy9+NeD2xTvo3tpvUxJC3dW0L2X3KTQtSfYrCs0xbf2k8+ap0fC yET6kYFF/FXYPeIllmJROltt3LkqCNnP8YLckgEBD25Vaj5cmNQH5U89LEI/emQR 1hY5zU00HjhyWsWZxOPvV3XI9yP9aXGXt/DA90Aj3oqxyLwzNALPfCo3QdamvSfE SZaZxe7ljiopznbMpRc1SQvmUM8qKhMsfoZN6YnEh1Nzo4Ts3+ys0EUvLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOca6bm8Ut+fCmnUsrwbvJBbMrMMB8GA1UdIwQY MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8v3CcrM TKxJRfCpFgCZCaYX20355nLkm49oiXwbp+l/1+R0POVOcUEx38qaWJiim2E+Ggkm m5n2jFueGZaQtgYG68v3Puxp+eYHJPraMbGXYr40lLWqyEJyNZcN1hJp85I3gSaj B4fS0fHCnW1ZVcJEprtJK9wjGQonuWUje4celUDPa5uM4Md/BwRTabIg1ukDRBhW 0T2XYxpT9rW8T+uWb1lyZAM+StRu5tDonQdAvWJZDJg6AjjkNlc0UdTPtN6Q70p/ NnOfURjhvhNVSn0t2OPorNEBD9un9Go9UVcBRjXazdach8x1SwhacsEvicvOj5tY ztKPX5h0g0zWUQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:40:36 2025 by rpki-client