This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json) Hash identifier: MMv8ii1rSLSBRhOhEpxbodi3va7tJ1vZv/bJfXU/BEQ= Subject key identifier: 6A:8C:F1:73:4E:88:5F:CD:E8:1B:44:23:09:6F:52:BD:F2:92:C1:55 Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Certificate serial: 019AF1D1FE52B86B11F19EE7C172DA3DBBC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft Manifest number: 03E7 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: gdaFGmOlpB4hraLVx2T0iCdsdeOS6OvGNE3V4r5lsig=) 2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fe:52:b8:6b:11:f1:9e:e7:c1:72:da:3d:bb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0 Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=6a8cf1734e885fcde81b4423096f52bdf292c155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:15:d1:e5:df:8f:a3:2c:b4:c9:85:fb:b1: 83:c2:df:48:5a:7a:f4:09:0a:81:eb:8f:a7:b7:e5: af:ec:fb:24:14:fb:bb:5d:65:ca:7f:57:cf:1f:fe: d9:77:05:66:7b:f6:b4:ea:01:56:40:29:48:e6:7a: 2c:7b:05:01:6b:69:31:7c:ae:76:32:58:c4:51:79: 12:55:89:bf:ba:75:a2:96:c1:8e:12:ae:49:01:6c: 1f:e2:d5:9a:1b:50:7a:45:06:83:00:d2:a1:3b:68: 66:2d:51:8c:27:9c:bb:cb:61:89:7c:e1:20:b5:19: f8:f5:1f:40:0e:b1:0e:1a:1b:8d:78:96:fb:4c:d5: 2e:e8:f7:d0:60:a1:fd:94:f6:00:78:10:c1:c6:d6: a4:f2:0d:3f:5a:17:43:87:ee:2c:67:fe:41:8e:e5: 1e:42:4c:7f:05:50:81:05:5d:b5:3f:38:42:54:c4: fc:6c:1c:4e:46:ce:d2:35:97:e0:a9:fa:53:eb:04: 49:a0:f7:0a:05:1e:ed:dc:f9:6c:b6:d6:60:f1:8f: 46:67:66:a4:81:aa:81:8b:34:4c:4a:c3:fc:92:b3: 42:d3:a5:c9:ba:5a:09:73:97:85:10:9b:72:82:2b: 01:4c:21:e4:2b:c3:fd:b6:88:e4:43:9f:4d:65:1e: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8C:F1:73:4E:88:5F:CD:E8:1B:44:23:09:6F:52:BD:F2:92:C1:55 X509v3 Authority Key Identifier: keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:11:bb:a8:6f:91:b0:1f:07:41:02:86:3d:39:19:0a:31:52: 81:c9:7f:b0:ef:15:b4:81:7b:7f:24:67:e7:49:5b:5e:b1:dd: df:5d:58:f4:f2:e6:47:4f:01:1c:55:ba:52:13:a6:7e:c0:44: 0b:4a:48:3d:ec:65:d0:16:c1:37:02:14:89:0c:00:05:6a:e8: b5:fc:0f:35:eb:21:88:99:48:eb:27:7f:10:fb:cc:d0:81:21: 11:3d:aa:e0:03:66:12:21:1c:15:ee:47:1b:db:e1:25:2a:36: 5c:d4:38:87:14:2e:b6:85:03:bb:a3:13:ea:35:62:f3:a9:30: 4c:a6:16:eb:d9:40:55:0f:59:48:58:64:8b:44:d0:7d:36:15: f2:af:6b:f4:26:fb:a0:fe:ab:4f:bc:53:52:1c:c6:de:d1:2f: 42:0b:87:72:04:83:97:a4:e0:ed:e8:e5:bd:bb:fa:ae:a2:56: 13:e3:4a:a3:f5:9e:9b:99:50:ba:57:62:56:f7:53:41:1c:ed: d7:51:bb:77:f6:e8:0e:4e:5c:da:11:06:cd:fe:df:f3:d1:97: d5:94:4a:c6:5f:5b:77:82:8c:b7:a5:fd:c3:9a:12:b3:f7:1f: 15:3e:0f:04:52:86:4e:fa:8b:15:b2:c2:68:87:62:bc:0b:b0: 07:44:ff:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0f5SuGsR8Z7nwXLaPbvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjY0N2RmMjE4ZTJjNmYzZmQxY2Y1NDlkMjdkZjRlNTBj ZDZkYjAwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD Eyg2YThjZjE3MzRlODg1ZmNkZTgxYjQ0MjMwOTZmNTJiZGYyOTJjMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx8V0eXfj6MstMmF+7GDwt9IWnr0 CQqB64+nt+Wv7PskFPu7XWXKf1fPH/7ZdwVme/a06gFWQClI5nosewUBa2kxfK52 MljEUXkSVYm/unWilsGOEq5JAWwf4tWaG1B6RQaDANKhO2hmLVGMJ5y7y2GJfOEg tRn49R9ADrEOGhuNeJb7TNUu6PfQYKH9lPYAeBDBxtak8g0/WhdDh+4sZ/5BjuUe Qkx/BVCBBV21PzhCVMT8bBxORs7SNZfgqfpT6wRJoPcKBR7t3PlsttZg8Y9GZ2ak gaqBizRMSsP8krNC06XJuloJc5eFEJtygisBTCHkK8P9tojkQ59NZR7S/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGqM8XNOiF/N6BtEIwlvUr3yksFVMB8GA1UdIwQY MBaAFPr2R98hjixvP9HPVJ0n305QzW2wMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12WkgzeUdPTEc4XzBjOVVuU2ZmVGxETmJiQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNDVhNTcyLWI4MDgtNDBmNS04YjI1 LWRkY2ExNTNhMjBhYi8xLzEtdlpIM3lHT0xHOF8wYzlVblNmZlRsRE5iYkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzQ1YTU3Mi1iODA4LTQwZjUtOGIyNS1kZGNhMTUzYTIw YWIvMS8xLXZaSDN5R09MRzhfMGM5VW5TZmZUbEROYmJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRG7 qG+RsB8HQQKGPTkZCjFSgcl/sO8VtIF7fyRn50lbXrHd311Y9PLmR08BHFW6UhOm fsBEC0pIPexl0BbBNwIUiQwABWrotfwPNeshiJlI6yd/EPvM0IEhET2q4ANmEiEc Fe5HG9vhJSo2XNQ4hxQutoUDu6MT6jVi86kwTKYW69lAVQ9ZSFhki0TQfTYV8q9r 9Cb7oP6rT7xTUhzG3tEvQguHcgSDl6Tg7ejlvbv6rqJWE+NKo/Wem5lQuldiVvdT QRzt11G7d/boDk5c2hEGzf7f89GX1ZRKxl9bd4KMt6X9w5oSs/cfFT4PBFKGTvqL FbLCaIdivAuwB0T/cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:29 2025 by rpki-client