This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json) Hash identifier: BpjML7Y5dE/i5c1kszu10mQbRHfNnoZbyi9ZWCadUxs= Subject key identifier: C1:E3:73:E1:6C:19:9C:2E:FF:AA:FA:C5:BA:55:5F:D1:8D:D5:20:F9 Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11 Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711 Certificate serial: 019AF1D1CF2DBD51A0623831D06BD4A8FE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: C1II1GHuo07BTA5C96xVQkv1VCOQaXaevDyybXWcwoY=) 2: J2pjS99ea6SMp7lb4ewsQffNh8c.roa (hash: 704wqH0ujui7TKq+2h1aj9AcNsB+Fn+EgZ7FOUmvebI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:2d:bd:51:a0:62:38:31:d0:6b:d4:a8:fe:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=c1e373e16c199c2effaafac5ba555fd18dd520f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8e:aa:0f:68:d0:2d:be:82:a1:c1:0e:c5:40: 4d:ef:11:fd:39:7f:a6:b8:f4:05:72:f6:1a:35:17: 61:03:71:06:df:98:fb:6c:ba:eb:58:82:ee:66:c6: 8c:a0:00:39:18:61:f8:7b:f2:5b:d1:32:9b:b5:c4: 91:87:fd:fc:86:32:2e:e9:90:15:aa:e3:86:4c:67: bd:0a:81:7f:18:4f:d0:e1:b1:e8:85:1c:61:00:1f: 60:13:64:4e:17:a5:3d:ac:fe:d7:1f:56:7a:f8:8f: bf:cf:2f:04:5d:79:2c:ad:5a:79:72:8a:10:b9:60: 18:2a:d0:1c:90:21:65:45:f1:6a:97:83:4f:e5:b3: 2b:77:88:ae:7f:b9:90:f8:04:26:36:9d:f2:9c:c7: 62:b3:1b:e2:4e:de:c2:16:cd:15:49:52:07:cf:fc: 3d:e3:b9:d0:5e:f4:25:8b:e1:4e:74:05:0a:9f:02: 42:3a:c5:fe:fe:80:2a:25:b6:40:f0:4e:bb:b4:79: 17:3d:ac:39:09:ff:4d:63:0f:cd:70:c3:9c:f2:34: c9:49:e7:7d:46:87:42:52:54:99:31:f5:98:16:25: c6:c8:ab:a2:56:43:8c:b5:e8:f8:8e:94:d1:f7:89: 3b:89:ec:ce:cd:45:72:d1:bc:0d:f7:8f:d6:59:9a: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:73:E1:6C:19:9C:2E:FF:AA:FA:C5:BA:55:5F:D1:8D:D5:20:F9 X509v3 Authority Key Identifier: keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4f:64:b8:bc:0f:47:d1:d1:31:07:0c:76:3b:31:1f:14:da: af:33:f0:cb:be:e1:d0:f3:75:54:6b:91:17:b7:87:c6:39:0f: 84:bf:0b:5a:bd:b2:7e:26:ca:08:2e:5e:00:b6:96:eb:a5:e0: 9d:12:d2:24:93:89:b3:e9:e8:26:60:44:5e:b2:a6:98:4a:00: 63:b7:73:78:44:7a:23:e9:da:5b:d8:70:6b:40:55:e8:3c:6a: 41:9b:98:ab:9a:d5:34:79:b7:47:cf:3f:97:3f:2e:d2:b8:bb: 04:0d:f2:0f:1b:eb:86:18:b9:81:05:6b:11:3c:52:76:d4:b4: 49:75:9d:53:f1:f5:b3:4c:7c:da:f7:28:31:ea:6d:35:14:de: 82:39:b9:5c:ac:9b:fb:05:f5:a5:38:9b:7c:e7:b0:10:2d:bd: a0:88:7e:29:f5:d4:18:28:97:87:ab:fe:33:32:8a:c0:a7:a1: 02:86:cb:9a:a0:17:24:42:8b:f6:d2:c3:7d:f2:ed:d0:99:36: b5:19:0f:77:38:2d:b3:4b:a7:c0:68:73:ef:87:1d:e0:6a:01: d1:9c:fd:d6:15:f5:da:f0:39:6e:8e:d3:9f:dc:3a:3e:4a:21: 89:af:cb:87:ea:63:e9:6d:e5:e8:85:5f:bb:cb:8a:a1:2e:72: b6:4d:5c:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c8tvVGgYjgx0GvUqP5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx YTY3MTEwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhjMWUzNzNlMTZjMTk5YzJlZmZhYWZhYzViYTU1NWZkMThkZDUyMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I6qD2jQLb6CocEOxUBN7xH9OX+m uPQFcvYaNRdhA3EG35j7bLrrWILuZsaMoAA5GGH4e/Jb0TKbtcSRh/38hjIu6ZAV quOGTGe9CoF/GE/Q4bHohRxhAB9gE2ROF6U9rP7XH1Z6+I+/zy8EXXksrVp5cooQ uWAYKtAckCFlRfFql4NP5bMrd4iuf7mQ+AQmNp3ynMdisxviTt7CFs0VSVIHz/w9 47nQXvQli+FOdAUKnwJCOsX+/oAqJbZA8E67tHkXPaw5Cf9NYw/NcMOc8jTJSed9 RodCUlSZMfWYFiXGyKuiVkOMtej4jpTR94k7iezOzUVy0bwN94/WWZqiyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHjc+FsGZwu/6r6xbpVX9GN1SD5MB8GA1UdIwQY MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM09kuLwP R9HRMQcMdjsxHxTarzPwy77h0PN1VGuRF7eHxjkPhL8LWr2yfibKCC5eALaW66Xg nRLSJJOJs+noJmBEXrKmmEoAY7dzeER6I+naW9hwa0BV6DxqQZuYq5rVNHm3R88/ lz8u0ri7BA3yDxvrhhi5gQVrETxSdtS0SXWdU/H1s0x82vcoMeptNRTegjm5XKyb +wX1pTibfOewEC29oIh+KfXUGCiXh6v+MzKKwKehAobLmqAXJEKL9tLDffLt0Jk2 tRkPdzgts0unwGhz74cd4GoB0Zz91hX12vA5bo7Tn9w6Pkohia/Lh+pj6W3l6IVf u8uKoS5ytk1cqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:55 2025 by rpki-client