This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json) Hash identifier: lLbHhG8LdW3kfxk9GcXBNDNAkAGOCN0sIbjcLeNgCfo= Subject key identifier: E2:67:9D:E4:F3:13:8C:36:81:47:84:8E:AB:10:24:1E:3E:E5:2B:8A Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Certificate serial: 019AF38982B045AEC36A10932AB2500E83FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft Manifest number: 09CC Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: f3pdYw0k21gLQEW3VEkLGx6gmEeLBUPxUfIoxUzTfTg=) 2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:82:b0:45:ae:c3:6a:10:93:2a:b2:50:0e:83:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=e2679de4f3138c368147848eab10241e3ee52b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:a9:a4:66:e6:5a:ac:3b:b5:d3:a2:21:b7: da:3d:71:c8:03:43:50:91:d0:2a:67:b4:34:cf:cf: 36:2a:6a:b3:c9:8a:16:c1:1a:c0:64:c4:e0:80:a2: fa:2c:3d:77:8a:9c:21:d8:46:82:e7:b6:5a:fa:bb: 95:a4:1b:1b:15:d9:72:b6:49:9a:70:41:44:5b:f4: 18:c9:cf:02:4d:38:c4:af:e2:2b:43:56:f0:a0:de: 89:dd:ff:69:f7:18:d8:1b:ca:86:6f:62:e4:90:2f: 8a:d7:a8:87:bf:d6:9a:28:8e:8e:2e:7c:42:cf:5d: 39:3a:73:a9:b3:e8:af:8b:6f:37:44:a9:15:8c:d0: b6:67:c0:8a:64:dc:04:11:28:bd:b9:53:0c:37:14: 48:b5:3c:92:4c:82:57:42:e1:01:2c:78:15:2e:ed: 5f:40:ad:f7:e7:2f:17:90:6c:8a:27:22:bc:68:28: 30:e8:d6:b8:16:1f:84:91:33:4c:7c:03:5d:d7:09: 9b:05:a4:77:22:22:45:1b:ac:24:5f:4b:34:56:e2: 8a:76:b9:cd:0c:33:d2:73:99:a0:f5:53:ff:ee:5d: 02:1a:aa:21:74:b0:96:c7:71:d3:4d:26:e4:6f:b8: f7:39:09:c6:3f:ae:67:cc:15:c0:7f:79:01:5e:4e: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:9D:E4:F3:13:8C:36:81:47:84:8E:AB:10:24:1E:3E:E5:2B:8A X509v3 Authority Key Identifier: keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ea:b0:7f:ec:67:79:42:9f:13:61:cd:78:34:2a:92:3f:29: f1:6d:87:96:6e:4b:bd:d7:d3:c1:96:e1:21:46:f5:a3:db:40: 37:59:19:02:00:d9:f5:33:07:e5:d1:ab:9c:b9:51:98:41:bf: 19:7a:cb:12:11:c0:28:b9:01:57:1f:92:2d:ce:6f:50:2e:f6: cc:55:0e:57:6a:73:b1:83:76:e5:9c:d4:58:52:7c:b2:ef:62: d8:07:24:1a:61:66:48:95:bc:af:2c:f4:3c:10:e0:17:fc:1c: 20:55:94:1f:73:52:8e:f3:40:c5:12:0d:7b:82:07:20:f5:4a: b3:8f:53:b2:ba:c4:c5:50:a7:7d:a6:9f:e9:0b:e6:c5:d5:86: 7b:ff:4b:80:42:e0:c9:6f:44:c7:51:80:12:12:83:15:d6:12: 6c:c6:3a:4d:5e:8c:1d:d3:85:87:80:25:92:b1:e8:d8:86:db: 7e:fd:ca:3e:66:59:4d:79:17:3d:00:22:a8:d4:69:5a:3e:e1: 3a:a4:38:33:68:3d:48:5c:a7:fd:45:cd:b2:99:fd:36:b5:1c: f3:50:96:e4:28:90:f8:19:09:29:cb:b7:69:60:d5:81:d0:45: 90:f8:33:1d:ee:3e:b6:57:ed:ac:49:d8:07:26:a0:15:c0:6f: c5:e2:bd:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYKwRa7DahCTKrJQDoP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2 ZTJjNDAwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EyhlMjY3OWRlNGYzMTM4YzM2ODE0Nzg0OGVhYjEwMjQxZTNlZTUyYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTyppGbmWqw7tdOiIbfaPXHIA0NQ kdAqZ7Q0z882KmqzyYoWwRrAZMTggKL6LD13ipwh2EaC57Za+ruVpBsbFdlytkma cEFEW/QYyc8CTTjEr+IrQ1bwoN6J3f9p9xjYG8qGb2LkkC+K16iHv9aaKI6OLnxC z105OnOps+ivi283RKkVjNC2Z8CKZNwEESi9uVMMNxRItTySTIJXQuEBLHgVLu1f QK335y8XkGyKJyK8aCgw6Na4Fh+EkTNMfANd1wmbBaR3IiJFG6wkX0s0VuKKdrnN DDPSc5mg9VP/7l0CGqohdLCWx3HTTSbkb7j3OQnGP65nzBXAf3kBXk6l7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJnneTzE4w2gUeEjqsQJB4+5SuKMB8GA1UdIwQY MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt MGU5ZDNlY2E0NGMyLzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeqwf+xn eUKfE2HNeDQqkj8p8W2Hlm5LvdfTwZbhIUb1o9tAN1kZAgDZ9TMH5dGrnLlRmEG/ GXrLEhHAKLkBVx+SLc5vUC72zFUOV2pzsYN25ZzUWFJ8su9i2AckGmFmSJW8ryz0 PBDgF/wcIFWUH3NSjvNAxRINe4IHIPVKs49TsrrExVCnfaaf6QvmxdWGe/9LgELg yW9Ex1GAEhKDFdYSbMY6TV6MHdOFh4AlkrHo2Ibbfv3KPmZZTXkXPQAiqNRpWj7h OqQ4M2g9SFyn/UXNspn9NrUc81CW5CiQ+BkJKcu3aWDVgdBFkPgzHe4+tlftrEnY ByagFcBvxeK9zA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:10 2025 by rpki-client