This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json) Hash identifier: KT3UMZgSeJZoqn4k3FJQMcab9674Z292soBlzHZEZDw= Subject key identifier: 6A:AA:E1:0C:C7:70:D0:31:70:B1:30:66:A8:35:FF:00:13:A3:94:24 Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Certificate serial: 019B35698CCE4FFC6456535C5D3F3B66F8FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft Manifest number: 117E Signing time: Fri 19 Dec 2025 07:01:08 +0000 Manifest this update: Fri 19 Dec 2025 07:01:08 +0000 Manifest next update: Sat 20 Dec 2025 07:01:08 +0000 Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: A0nXhm35MZ9oDQsK1mNNLWazRDdg6+lTqZgSIW5DupI=) 2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=) 3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:8c:ce:4f:fc:64:56:53:5c:5d:3f:3b:66:f8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Validity Not Before: Dec 19 07:01:08 2025 GMT Not After : Dec 20 07:01:08 2025 GMT Subject: CN=6aaae10cc770d03170b13066a835ff0013a39424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:ae:61:cc:b3:74:e7:2a:8f:68:f8:30:fa: 3d:72:f5:f7:ec:79:8f:50:2d:5f:f7:42:83:28:ae: 0e:a6:47:63:a2:36:3a:23:82:ea:ec:a8:db:6d:62: 1b:3b:06:cf:26:34:fb:e2:95:4a:9c:df:e8:4e:45: 1d:81:93:49:7a:2e:37:2d:f0:23:35:14:35:eb:80: 1f:bf:30:1c:5b:d6:b3:0b:54:d8:22:ef:66:f3:db: d0:ea:26:88:e4:07:5b:e4:a7:81:12:66:fa:83:8b: f1:e1:12:4f:bd:b7:41:69:8c:92:47:06:53:23:1d: 69:d0:14:37:bb:4c:fe:67:eb:e8:68:41:6b:0d:0c: bf:99:cd:7d:24:59:09:29:f7:35:40:6a:f1:fa:2c: 5d:e6:b2:b9:28:f1:de:85:4b:f2:be:30:54:22:6f: dc:75:b5:62:42:1b:32:a1:c0:46:5e:da:df:6d:c3: 09:40:c6:e3:fa:4f:2e:35:f3:da:3e:9e:b6:01:7d: 26:70:c1:db:7e:00:fd:4e:a7:a2:5f:bb:93:e4:ac: f6:d3:74:df:06:34:73:92:0b:e1:10:b3:08:12:c1: b4:36:68:c9:5b:a2:8b:18:ff:50:bc:5c:8a:f8:fc: b7:64:3f:2d:5c:3c:26:df:0f:02:1d:92:8c:3a:95: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AA:E1:0C:C7:70:D0:31:70:B1:30:66:A8:35:FF:00:13:A3:94:24 X509v3 Authority Key Identifier: keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c9:73:13:4a:63:4c:95:53:4a:4e:51:5f:cf:da:75:c5:18: d0:6e:28:d4:72:d1:2e:56:35:c3:1e:03:9b:c0:2b:5d:e6:80: 82:a3:46:db:81:1e:35:38:a8:12:85:e4:31:54:6b:d4:29:7e: f8:b1:28:0c:8b:03:c8:4d:78:e1:d7:78:95:5b:fd:16:27:7a: 36:10:fe:a7:82:f5:80:86:6a:d9:4b:a6:d9:5d:df:96:93:54: 31:b4:67:0b:ca:1d:ad:9b:13:c7:0b:0b:55:ad:d4:e6:4b:d2: 0e:dd:fa:df:56:e3:9c:a3:ef:79:7c:f8:6b:36:aa:2e:cb:88: 82:fe:27:93:13:10:d3:38:4a:52:a7:6a:d2:d2:64:68:7d:de: 79:7b:9a:38:31:61:e1:ed:f7:0e:97:7d:89:9b:4e:17:e4:73: 06:f4:2a:0c:c3:43:47:6b:e2:4e:22:c6:9d:d0:7c:c0:c5:e0: d1:71:5d:74:66:50:f3:d3:51:a6:b7:16:50:a6:34:66:72:f4: ae:83:89:2b:14:47:3f:a7:85:49:81:be:71:f8:88:a7:fc:58: 28:0d:69:2d:18:af:f2:74:b6:32:73:f3:f5:60:3e:52:c7:2e: af:31:70:0e:db:26:4b:b1:b7:c4:d7:08:45:9a:09:fe:94:f2: 82:b8:a3:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aYzOT/xkVlNcXT87Zvj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh NmNhMjgwHhcNMjUxMjE5MDcwMTA4WhcNMjUxMjIwMDcwMTA4WjAzMTEwLwYDVQQD Eyg2YWFhZTEwY2M3NzBkMDMxNzBiMTMwNjZhODM1ZmYwMDEzYTM5NDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ2uYcyzdOcqj2j4MPo9cvX37HmP UC1f90KDKK4OpkdjojY6I4Lq7KjbbWIbOwbPJjT74pVKnN/oTkUdgZNJei43LfAj NRQ164AfvzAcW9azC1TYIu9m89vQ6iaI5Adb5KeBEmb6g4vx4RJPvbdBaYySRwZT Ix1p0BQ3u0z+Z+voaEFrDQy/mc19JFkJKfc1QGrx+ixd5rK5KPHehUvyvjBUIm/c dbViQhsyocBGXtrfbcMJQMbj+k8uNfPaPp62AX0mcMHbfgD9TqeiX7uT5Kz203Tf BjRzkgvhELMIEsG0NmjJW6KLGP9QvFyK+Py3ZD8tXDwm3w8CHZKMOpUhWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqq4QzHcNAxcLEwZqg1/wATo5QkMB8GA1UdIwQY MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKslzE0pj TJVTSk5RX8/adcUY0G4o1HLRLlY1wx4Dm8ArXeaAgqNG24EeNTioEoXkMVRr1Cl+ +LEoDIsDyE144dd4lVv9Fid6NhD+p4L1gIZq2Uum2V3flpNUMbRnC8odrZsTxwsL Va3U5kvSDt3631bjnKPveXz4azaqLsuIgv4nkxMQ0zhKUqdq0tJkaH3eeXuaODFh 4e33Dpd9iZtOF+RzBvQqDMNDR2viTiLGndB8wMXg0XFddGZQ89NRprcWUKY0ZnL0 roOJKxRHP6eFSYG+cfiIp/xYKA1pLRiv8nS2MnPz9WA+UscurzFwDtsmS7G3xNcI RZoJ/pTygrijeA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:32 2025 by rpki-client