This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json) Hash identifier: VQTiLowcLe2TXIZbIwa6hP9S5L6VJ3buM1yaLjEHGV4= Subject key identifier: 67:01:D7:4E:28:40:EF:B4:7C:29:D7:F2:3A:C8:49:74:C0:1A:A6:C8 Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34 Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934 Certificate serial: 019B3DC75336F2267F660F36C639A297521E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft Manifest number: 12B0 Signing time: Sat 20 Dec 2025 22:00:31 +0000 Manifest this update: Sat 20 Dec 2025 22:00:31 +0000 Manifest next update: Sun 21 Dec 2025 22:00:31 +0000 Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: sOOelvAQOFCvKEiMi/89spx4zBk3QrQLI6F0NO4tH+8=) 2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:53:36:f2:26:7f:66:0f:36:c6:39:a2:97:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934 Validity Not Before: Dec 20 22:00:31 2025 GMT Not After : Dec 21 22:00:31 2025 GMT Subject: CN=6701d74e2840efb47c29d7f23ac84974c01aa6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:8f:e2:82:5b:8a:4d:0d:49:8d:08:91:e2: 5f:71:ce:80:b1:41:f1:7f:af:48:8b:bd:16:94:4f: 31:6c:f1:74:23:e2:df:35:3f:74:d3:6a:a5:14:f2: fa:22:9f:8f:2a:c8:67:35:63:e6:4a:c8:ae:dd:6b: 54:1d:14:19:57:33:7b:f6:4e:16:95:9d:90:c4:bc: 8a:b8:50:97:5c:e2:86:62:07:ff:71:75:ce:bc:51: 90:3b:e5:37:6b:41:f7:c7:59:2b:cd:47:be:ca:6b: d8:01:65:35:e5:d3:0b:1f:5c:d4:7b:d5:12:eb:8d: ed:56:35:51:bd:70:ce:27:53:1b:ac:1e:8a:4e:13: 85:a1:a2:85:8c:1c:4f:09:dd:f9:64:46:53:ca:24: 62:93:3f:34:ee:4c:80:dc:6d:3e:b7:72:41:5b:35: 72:bc:c9:d0:9a:35:bb:08:b4:5a:37:72:44:af:8d: c1:fa:f7:f9:e9:02:a7:cf:fa:23:e5:45:e6:1c:0a: 90:29:f0:a8:55:0b:28:09:cd:3d:96:ef:c6:7c:2b: c2:b3:4e:20:2a:fc:b0:26:3e:f6:47:06:09:6e:5e: 06:86:74:b5:d4:40:69:85:e1:cc:5b:49:11:bb:ee: ec:5d:43:06:fe:e8:f4:38:58:d8:f9:a4:cd:4c:9e: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:D7:4E:28:40:EF:B4:7C:29:D7:F2:3A:C8:49:74:C0:1A:A6:C8 X509v3 Authority Key Identifier: keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d7:e2:37:48:e2:7d:89:45:86:ca:82:6c:67:31:19:96:3b: 39:1e:d6:e6:bd:03:6d:7c:5d:6e:40:af:64:b8:ec:6e:c1:fd: b5:34:be:46:44:ef:a5:ef:39:21:a1:53:7c:13:44:43:fa:8d: 7a:95:a1:19:83:7a:d4:4d:03:31:9c:43:87:a0:e3:8f:cb:f8: b6:45:a8:23:79:53:d2:6f:e4:71:81:8d:4f:d7:1d:1b:40:82: c3:c9:de:18:25:7f:30:96:c5:db:bd:74:44:6c:36:c5:a4:5a: 87:05:b9:36:90:84:25:66:22:4a:3c:f4:60:fd:78:f4:3a:6a: 12:04:d1:54:44:20:10:bd:2c:7b:d2:f8:37:d9:82:44:47:48: 22:da:5f:a9:96:53:4c:d5:cd:4c:a1:57:ab:d0:54:ad:c7:19: 8f:c2:a6:9f:e9:5b:99:7c:2c:69:23:75:86:4f:f4:91:b9:12: f6:1b:7f:23:76:9d:e7:85:aa:ec:87:5d:73:b1:6a:37:39:eb: f1:c3:ee:0d:31:35:68:7b:f1:de:73:10:0c:b0:f6:d9:f3:ec: 2b:d9:21:3f:e5:48:30:b6:ba:43:59:6f:2c:c1:17:66:b3:bd: 38:ae:08:dc:a8:7c:b8:0d:a8:69:a4:2d:a1:05:3b:55:78:e4: 11:4a:d4:47 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9x1M28iZ/Zg82xjmil1IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5 YzY5MzQwHhcNMjUxMjIwMjIwMDMxWhcNMjUxMjIxMjIwMDMxWjAzMTEwLwYDVQQD Eyg2NzAxZDc0ZTI4NDBlZmI0N2MyOWQ3ZjIzYWM4NDk3NGMwMWFhNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkheP4oJbik0NSY0IkeJfcc6AsUHx f69Ii70WlE8xbPF0I+LfNT9002qlFPL6Ip+PKshnNWPmSsiu3WtUHRQZVzN79k4W lZ2QxLyKuFCXXOKGYgf/cXXOvFGQO+U3a0H3x1krzUe+ymvYAWU15dMLH1zUe9US 643tVjVRvXDOJ1MbrB6KThOFoaKFjBxPCd35ZEZTyiRikz807kyA3G0+t3JBWzVy vMnQmjW7CLRaN3JEr43B+vf56QKnz/oj5UXmHAqQKfCoVQsoCc09lu/GfCvCs04g KvywJj72RwYJbl4GhnS11EBpheHMW0kRu+7sXUMG/uj0OFjY+aTNTJ4qGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGcB104oQO+0fCnX8jrISXTAGqbIMB8GA1UdIwQY MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh LWYxZTY1Zjk3Yzg5YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2NlLzkxMGY2Ny0xZmZjLTQxYzQtYTJlYS1mMWU2NWY5N2M4 OWEvMS8xLWpCNElTTU9lNmdhVFVjYVdSNTQ2bldjYVRRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9fi N0jifYlFhsqCbGcxGZY7OR7W5r0DbXxdbkCvZLjsbsH9tTS+RkTvpe85IaFTfBNE Q/qNepWhGYN61E0DMZxDh6Djj8v4tkWoI3lT0m/kcYGNT9cdG0CCw8neGCV/MJbF 2710RGw2xaRahwW5NpCEJWYiSjz0YP149DpqEgTRVEQgEL0se9L4N9mCREdIItpf qZZTTNXNTKFXq9BUrccZj8Kmn+lbmXwsaSN1hk/0kbkS9ht/I3ad54Wq7Iddc7Fq Nznr8cPuDTE1aHvx3nMQDLD22fPsK9khP+VIMLa6Q1lvLMEXZrO9OK4I3Kh8uA2o aaQtoQU7VXjkEUrURw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:00 2025 by rpki-client