This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json) Hash identifier: xUjczAVkCIdXE7QrqqIOyXwKgILiJCik//gphp53KAc= Subject key identifier: 8B:D3:E2:8D:8D:D7:A3:C4:04:3C:9C:B5:D3:50:7F:93:15:16:46:FD Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d Certificate serial: 019B5072F8A9008C9013C27E87E97C708B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 13:01:10 +0000 Manifest this update: Wed 24 Dec 2025 13:01:10 +0000 Manifest next update: Thu 25 Dec 2025 13:01:10 +0000 Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: JZx3hUFHYGRL4NavdosWBHZc9GmxqnDZmuQfhxpK4FQ=) 2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:f8:a9:00:8c:90:13:c2:7e:87:e9:7c:70:8b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d Validity Not Before: Dec 24 13:01:10 2025 GMT Not After : Dec 25 13:01:10 2025 GMT Subject: CN=8bd3e28d8dd7a3c4043c9cb5d3507f93151646fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:0a:2a:2a:1e:cf:a5:dc:b9:81:79:5e:80: 74:0e:b8:86:62:93:da:ff:a1:23:af:27:13:a8:37: ae:ef:42:ce:09:00:11:db:e7:83:e0:53:12:3b:53: 98:b1:1a:aa:51:0c:c0:ab:7c:0e:29:cf:5a:27:1b: b8:9b:29:a7:18:0d:6d:ef:2f:65:97:73:64:a7:6f: c9:de:3b:3f:ec:35:8f:c2:8b:61:91:a4:b9:0f:19: 68:90:c8:c3:80:27:9d:f1:d6:5d:d8:c1:ba:a5:71: 17:47:5f:0d:b8:51:85:15:b3:ba:1f:02:23:1b:78: 78:f8:da:a3:b8:50:d0:b6:3c:53:5d:59:b5:3f:94: 79:ed:75:d8:5b:f0:c8:58:03:c2:81:37:fe:95:26: 4d:2b:d6:b6:7f:a4:e9:4c:2e:08:2a:19:cb:56:88: 43:44:1a:a1:59:9b:9f:4d:c2:82:02:f8:bb:d0:d0: 2c:d4:7d:51:f8:95:b1:84:d6:9c:ef:39:d2:6b:2c: 86:5f:8d:98:ef:04:f2:52:ea:5f:ab:3b:fe:bc:57: 1b:38:9f:58:c5:03:d9:08:08:d5:47:fa:fd:ee:e7: 41:38:b9:47:7b:58:d1:29:ec:cd:b2:ab:89:d6:40: 64:9d:29:0a:f9:cb:c3:72:44:d8:1c:77:2c:f4:12: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:E2:8D:8D:D7:A3:C4:04:3C:9C:B5:D3:50:7F:93:15:16:46:FD X509v3 Authority Key Identifier: keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:60:2f:0f:56:e2:74:90:03:8d:6d:0e:0a:77:0b:a1:12:44: c1:9e:86:1a:fd:94:c7:4d:e0:42:37:9a:cb:40:0a:ce:b8:f3: 85:53:67:b2:a3:90:b6:f8:3a:c1:70:5c:9e:6d:62:51:18:c6: 77:57:fe:36:08:db:8a:2f:b1:db:35:23:2e:d3:51:8b:bd:1a: 97:de:d7:15:f7:ed:ba:61:c1:1b:60:d3:31:aa:74:d0:d6:4c: b8:fe:e7:3a:56:2b:9d:91:ee:2f:bd:5d:f9:a9:ea:cd:e2:98: ca:ff:9a:80:e8:97:2b:9e:03:b8:a1:a4:cf:a9:33:12:2c:22: a9:73:62:d7:2d:56:c5:6c:1f:87:e6:12:ae:6e:b5:94:92:b2: 48:c6:ac:45:d3:af:f2:68:e4:54:7e:ac:b1:be:87:52:48:1f: 04:49:ca:25:26:8d:9a:86:b4:9c:f8:42:c5:67:0f:27:39:da: dc:35:9f:5b:85:46:8b:94:33:ba:5b:55:bc:8d:17:aa:d6:32: 48:13:1e:77:14:e6:45:e5:a0:16:83:e2:38:97:0f:55:75:6f: 30:e6:d8:aa:59:c3:d2:a1:14:ff:f2:83:33:93:1e:92:af:09: 08:f1:cd:9f:d3:7d:84:dc:3b:e5:d9:14:1e:a8:53:67:53:0e: eb:1a:4e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcvipAIyQE8J+h+l8cIsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NzdjZTE0MzQyMzJkODA4MTk1ZDBjYTcwYWIzOTFkZmIw N2FmMmQwHhcNMjUxMjI0MTMwMTEwWhcNMjUxMjI1MTMwMTEwWjAzMTEwLwYDVQQD Eyg4YmQzZTI4ZDhkZDdhM2M0MDQzYzljYjVkMzUwN2Y5MzE1MTY0NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkUKKioez6XcuYF5XoB0DriGYpPa /6EjrycTqDeu70LOCQAR2+eD4FMSO1OYsRqqUQzAq3wOKc9aJxu4mymnGA1t7y9l l3Nkp2/J3js/7DWPwothkaS5DxlokMjDgCed8dZd2MG6pXEXR18NuFGFFbO6HwIj G3h4+NqjuFDQtjxTXVm1P5R57XXYW/DIWAPCgTf+lSZNK9a2f6TpTC4IKhnLVohD RBqhWZufTcKCAvi70NAs1H1R+JWxhNac7znSayyGX42Y7wTyUupfqzv+vFcbOJ9Y xQPZCAjVR/r97udBOLlHe1jRKezNsquJ1kBknSkK+cvDckTYHHcs9BJlnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvT4o2N16PEBDyctdNQf5MVFkb9MB8GA1UdIwQY MBaAFNV3zhQ0Iy2AgZXQynCrOR37B68tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMt NjBlNmIxNDhkMjhiLzEvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMtNjBlNmIxNDhkMjhi LzEvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2AvD1bi dJADjW0OCncLoRJEwZ6GGv2Ux03gQjeay0AKzrjzhVNnsqOQtvg6wXBcnm1iURjG d1f+Ngjbii+x2zUjLtNRi70al97XFfftumHBG2DTMap00NZMuP7nOlYrnZHuL71d +anqzeKYyv+agOiXK54DuKGkz6kzEiwiqXNi1y1WxWwfh+YSrm61lJKySMasRdOv 8mjkVH6ssb6HUkgfBEnKJSaNmoa0nPhCxWcPJzna3DWfW4VGi5QzultVvI0XqtYy SBMedxTmReWgFoPiOJcPVXVvMObYqlnD0qEU//KDM5Mekq8JCPHNn9N9hNw75dkU HqhTZ1MO6xpOxw== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:24 2025 by rpki-client