This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json) Hash identifier: Ggx7G8sukCD25wzz/oRfuknwnzGhAZzaBSHkg/KHCxQ= Subject key identifier: 34:95:6E:7B:13:70:C8:EC:33:AF:A2:8B:D5:F8:B8:CA:97:21:FD:71 Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e Certificate serial: 019AF31C51953683F321C31858BC728E1D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft Manifest number: 1401 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: morKz8XsxgGctd583Zw3MlrTYMtVvcKkfPn0+YT1pGs=) 2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:51:95:36:83:f3:21:c3:18:58:bc:72:8e:1d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=34956e7b1370c8ec33afa28bd5f8b8ca9721fd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:1d:15:67:bf:aa:09:ed:71:f8:b0:ae:f5: bf:29:22:70:c5:80:b2:c9:aa:9d:86:3f:6f:e6:45: 51:a8:d1:82:38:a2:dc:01:44:75:8f:7e:2a:dd:56: 5c:09:ec:32:63:c6:68:8b:f5:87:aa:15:6a:61:98: 6f:2c:c7:f3:ec:c7:09:94:44:e4:78:c1:16:4f:8e: cf:9b:57:1e:54:6b:3e:72:d8:87:e8:db:14:07:ea: 4d:19:02:92:c4:e8:49:65:3e:3a:d8:e1:31:01:26: 71:a0:68:df:ea:4a:cc:5f:61:aa:ef:ca:56:93:b6: 1d:eb:7b:07:24:55:a4:13:b2:0f:02:44:ea:6c:74: 01:65:d7:96:91:b8:04:88:e1:00:a8:6b:53:b9:13: 45:c2:d2:78:23:8e:75:e8:64:44:95:dd:2e:f2:58: 73:0f:67:f4:cf:ea:22:9c:ab:a0:19:44:f9:bd:17: 9d:95:04:33:45:e0:21:bf:18:cb:3e:71:20:44:26: ae:0f:0c:d2:c7:ac:9e:19:0e:e8:fa:ef:96:07:8f: a8:2d:c1:6f:1e:97:f6:e7:50:0e:74:05:75:b6:03: 4b:6e:cd:5e:5d:78:c0:1c:f6:30:ce:3e:12:f8:98: e6:f8:3f:7c:39:86:7d:dd:c4:c0:49:64:29:f1:8a: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:95:6E:7B:13:70:C8:EC:33:AF:A2:8B:D5:F8:B8:CA:97:21:FD:71 X509v3 Authority Key Identifier: keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3b:0d:35:3b:fb:50:14:c8:1f:dc:33:17:5b:d0:ef:ed:a0: 6b:51:36:1b:4b:fb:a8:94:b8:66:ce:17:b1:73:8c:2c:14:e1: a0:cd:3b:8d:bf:ad:e1:62:b9:06:f6:87:de:7b:4c:d5:bb:93: 5d:96:a2:e0:ad:9f:ed:42:93:bd:27:a0:5d:98:31:fb:df:ef: fb:52:32:aa:4a:00:b2:fa:44:9a:5f:08:2d:8c:df:96:53:d6: 64:ae:31:52:41:8d:8f:04:26:1d:06:34:99:16:0d:09:fe:89: 8d:e0:3c:5a:b7:01:3d:61:d7:79:32:88:e2:a8:88:2e:57:eb: 6d:af:58:04:b4:01:e8:a5:70:72:f9:3e:12:f4:15:8a:8b:69: 43:19:32:55:ff:b5:54:a6:78:9c:fa:da:3b:b1:dd:24:63:e5: 11:eb:e6:9b:dd:eb:8a:cf:a5:2c:e4:7d:2e:ad:e8:b5:db:31: 44:21:3f:a0:67:21:ef:df:a3:d7:c7:ba:3a:b1:72:66:4e:49: 5e:5f:3b:20:fc:be:a7:42:f2:69:97:31:a4:ad:a4:a0:40:16: e6:33:90:2f:f3:59:ec:2f:df:54:06:77:f0:bf:45:52:bc:b1: 7c:f9:86:dd:8a:ec:2b:3c:0f:93:bc:b7:54:f4:51:85:4d:19: 7a:71:ef:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFGVNoPzIcMYWLxyjh18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDFmMzI1YmY4YWU2OTRhMTlmMjhmZDQwN2NkNWJiNTAw ZTFiM2UwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD EygzNDk1NmU3YjEzNzBjOGVjMzNhZmEyOGJkNWY4YjhjYTk3MjFmZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxYdFWe/qgntcfiwrvW/KSJwxYCy yaqdhj9v5kVRqNGCOKLcAUR1j34q3VZcCewyY8Zoi/WHqhVqYZhvLMfz7McJlETk eMEWT47Pm1ceVGs+ctiH6NsUB+pNGQKSxOhJZT462OExASZxoGjf6krMX2Gq78pW k7Yd63sHJFWkE7IPAkTqbHQBZdeWkbgEiOEAqGtTuRNFwtJ4I4516GREld0u8lhz D2f0z+oinKugGUT5vRedlQQzReAhvxjLPnEgRCauDwzSx6yeGQ7o+u+WB4+oLcFv Hpf251AOdAV1tgNLbs1eXXjAHPYwzj4S+Jjm+D98OYZ93cTASWQp8YrAzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSVbnsTcMjsM6+ii9X4uMqXIf1xMB8GA1UdIwQY MBaAFNTR8yW/iuaUoZ8o/UB81btQDhs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUt YjI4MmRkNjc0ODIzLzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUtYjI4MmRkNjc0ODIz LzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczsNNTv7 UBTIH9wzF1vQ7+2ga1E2G0v7qJS4Zs4XsXOMLBThoM07jb+t4WK5BvaH3ntM1buT XZai4K2f7UKTvSegXZgx+9/v+1IyqkoAsvpEml8ILYzfllPWZK4xUkGNjwQmHQY0 mRYNCf6JjeA8WrcBPWHXeTKI4qiILlfrba9YBLQB6KVwcvk+EvQViotpQxkyVf+1 VKZ4nPraO7HdJGPlEevmm93ris+lLOR9Lq3otdsxRCE/oGch79+j18e6OrFyZk5J Xl87IPy+p0LyaZcxpK2koEAW5jOQL/NZ7C/fVAZ38L9FUryxfPmG3YrsKzwPk7y3 VPRRhU0ZenHv4w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:34 2025 by rpki-client