This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json) Hash identifier: Tm3JwldlJckhDpvnQYst5NlQkgtgPjaQ+Nvd7axEPUo= Subject key identifier: D3:BF:E9:8C:8A:AB:2D:5B:BF:0A:92:08:AE:B4:5C:C0:FB:DB:96:70 Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72 Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472 Certificate serial: 019B680D724619D07C951ECAABBA71446D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft Manifest number: 1731 Signing time: Mon 29 Dec 2025 03:01:10 +0000 Manifest this update: Mon 29 Dec 2025 03:01:10 +0000 Manifest next update: Tue 30 Dec 2025 03:01:10 +0000 Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: phdG4dwahxjt4sGJM7u2pZg+isiB5wV6gHbQ8nUYv8o=) 2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:72:46:19:d0:7c:95:1e:ca:ab:ba:71:44:6d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d422367433765b541a37390a998997b737c46472 Validity Not Before: Dec 29 03:01:10 2025 GMT Not After : Dec 30 03:01:10 2025 GMT Subject: CN=d3bfe98c8aab2d5bbf0a9208aeb45cc0fbdb9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:78:2c:8a:3a:ce:77:09:5f:84:4d:4b:8f: 97:3b:1b:e8:3d:a0:06:db:2c:34:61:65:fc:eb:2a: 2c:82:51:b1:c2:c2:61:44:65:e9:0d:c0:ba:da:3c: 7d:4a:58:42:2b:47:1c:a0:fa:07:96:4f:75:f5:f4: 06:91:b9:d4:eb:41:f7:27:8f:a3:17:a3:8f:3b:cd: 69:66:4a:48:4a:4e:a7:c5:7f:ff:3c:5d:ad:fc:19: 32:67:86:44:f6:bd:42:98:32:88:7b:d9:81:16:fb: 51:7b:9f:2b:50:4c:7a:dc:3c:ab:45:b6:da:2c:fd: 90:22:c9:94:46:8d:e3:cf:74:dc:17:ec:65:df:e2: 82:f5:2c:99:fa:34:2a:1f:c2:e3:a8:5e:f9:cb:de: 4d:33:36:2a:5c:eb:8c:c8:a0:c5:39:57:9e:b1:29: 83:c5:e1:f2:0e:43:84:1c:fe:04:15:09:d8:c2:3e: e7:58:39:75:76:d3:1a:5d:ec:fd:73:b8:4e:2c:16: ff:0b:ca:93:eb:fc:96:70:9f:78:fc:e0:c2:dd:90: b9:dd:ee:4c:0f:b2:e7:5f:2c:b7:6b:68:47:7e:49: 0d:f3:13:59:be:73:7f:4d:3e:5c:cf:f2:68:50:77: d2:d2:1e:e0:78:fb:b8:ac:d7:ae:e0:cf:5d:35:49: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:E9:8C:8A:AB:2D:5B:BF:0A:92:08:AE:B4:5C:C0:FB:DB:96:70 X509v3 Authority Key Identifier: keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:db:bf:f9:d6:de:a8:98:8c:05:21:e3:1b:5c:f6:fd:e5:b6: 3e:4f:28:f8:92:a9:f1:30:0f:09:a2:a1:96:f0:f3:ae:b9:2b: 57:ea:9b:8c:2c:75:0c:3c:c0:40:0c:23:52:5c:57:32:ca:bb: 87:7a:d9:c7:ae:bd:f3:b4:f8:94:9e:1c:1f:01:f9:42:f5:ed: e9:83:9c:e8:f0:1b:07:7e:9f:1b:df:6a:6b:9a:14:c8:00:b5: 2c:ac:ec:ff:2f:6e:40:ac:0c:e1:68:65:52:2e:42:1c:11:e8: a9:3c:83:da:06:15:56:4a:e7:95:1b:a1:0f:8d:7c:90:36:79: 72:ea:7d:7d:87:c7:d3:70:43:f0:db:79:06:af:b2:e0:85:a9: 0e:d4:58:f0:9c:92:96:dc:f2:37:b7:53:e3:3a:77:ef:5a:aa: 0e:47:88:c0:12:8f:69:9e:b4:35:3c:4a:e7:e4:9e:54:92:44: fc:c7:b2:e4:95:74:7f:43:f0:b6:62:22:de:cb:49:72:7b:37: f3:14:a3:5f:4a:b6:9a:8f:18:a7:9d:46:f9:89:08:5a:29:65: 23:5e:c2:47:41:b9:7a:fc:de:82:23:10:c5:70:16:43:14:83: ca:ba:cc:3b:d0:a3:2c:2b:39:96:7c:db:7b:f4:80:b7:d4:2d: 8b:e9:13:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDXJGGdB8lR7Kq7pxRG0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjIzNjc0MzM3NjViNTQxYTM3MzkwYTk5ODk5N2I3Mzdj NDY0NzIwHhcNMjUxMjI5MDMwMTEwWhcNMjUxMjMwMDMwMTEwWjAzMTEwLwYDVQQD EyhkM2JmZTk4YzhhYWIyZDViYmYwYTkyMDhhZWI0NWNjMGZiZGI5NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurt4LIo6zncJX4RNS4+XOxvoPaAG 2yw0YWX86yosglGxwsJhRGXpDcC62jx9SlhCK0ccoPoHlk919fQGkbnU60H3J4+j F6OPO81pZkpISk6nxX//PF2t/BkyZ4ZE9r1CmDKIe9mBFvtRe58rUEx63DyrRbba LP2QIsmURo3jz3TcF+xl3+KC9SyZ+jQqH8LjqF75y95NMzYqXOuMyKDFOVeesSmD xeHyDkOEHP4EFQnYwj7nWDl1dtMaXez9c7hOLBb/C8qT6/yWcJ94/ODC3ZC53e5M D7LnXyy3a2hHfkkN8xNZvnN/TT5cz/JoUHfS0h7gePu4rNeu4M9dNUlIsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO/6YyKqy1bvwqSCK60XMD725ZwMB8GA1UdIwQY MBaAFNQiNnQzdltUGjc5CpmJl7c3xGRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NWJlMzItODIxZi00NTE0LWFhMzEt YmM3NTQ2NjA0N2M5LzEvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy80NWJlMzItODIxZi00NTE0LWFhMzEtYmM3NTQ2NjA0N2M5 LzEvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldu/+dbe qJiMBSHjG1z2/eW2Pk8o+JKp8TAPCaKhlvDzrrkrV+qbjCx1DDzAQAwjUlxXMsq7 h3rZx66987T4lJ4cHwH5QvXt6YOc6PAbB36fG99qa5oUyAC1LKzs/y9uQKwM4Whl Ui5CHBHoqTyD2gYVVkrnlRuhD418kDZ5cup9fYfH03BD8Nt5Bq+y4IWpDtRY8JyS ltzyN7dT4zp371qqDkeIwBKPaZ60NTxK5+SeVJJE/Mey5JV0f0PwtmIi3stJcns3 8xSjX0q2mo8Yp51G+YkIWillI17CR0G5evzegiMQxXAWQxSDyrrMO9CjLCs5lnzb e/SAt9Qti+kTSA== -----END CERTIFICATE-----Generated at Mon Dec 29 07:07:43 2025 by rpki-client