This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft File: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json) Hash identifier: GJmQKV+Wa2qYkf+0dPD20QHEWh3sTz3zfgbebUaND7g= Subject key identifier: C6:99:DB:C6:AF:0F:95:A7:E2:A5:BE:82:82:B3:54:F7:64:44:6F:91 Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Certificate serial: 019AF2765908D8A806E03FCC44A2162FA66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft Manifest number: 1387 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=) 2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: yvXNgv+UzusAvwywE4gejMf3rBmeFzom7QJDB11slHM=) 3: 9eH4i0p6oCfS5Co6koOAWFXm7Jw.roa (hash: tsyzy52lOJrhyfRNf4yeW+R41ItQLxSE8ed3yFpy/I0=) 4: F1oHARDbb0413dSyEGLjEDHpSFU.roa (hash: /vKh5/kgPMeg0YH31fC61X6lQFd8cqgLCdJuYa3DtJo=) 5: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=) 6: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:59:08:d8:a8:06:e0:3f:cc:44:a2:16:2f:a6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=c699dbc6af0f95a7e2a5be8282b354f764446f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:e9:69:9a:d6:7f:38:91:cc:de:08:ea:2d: 6e:f8:c2:13:06:b1:c0:d9:b8:74:fa:16:8e:5a:be: 45:ea:c8:41:4a:b9:b9:d9:11:af:37:0e:1c:43:c0: ce:8c:64:6b:e0:71:d9:56:fc:da:c5:89:ea:bc:b4: e4:80:02:64:da:e4:2d:48:fd:14:83:77:d2:8e:95: 5c:13:f9:90:96:32:cc:de:71:97:b1:cc:e6:c4:a2: 2e:68:f7:17:d6:ef:a2:4f:c9:11:d9:78:6f:4e:72: 71:77:1f:64:0e:66:45:53:08:7a:62:f2:e2:60:b0: 7d:ff:5e:c0:d2:5e:78:44:47:11:9b:4e:c9:00:21: e9:f6:a3:d3:26:f6:99:5a:3d:3b:ec:5a:b9:09:e2: 95:92:dc:78:32:00:73:97:55:48:76:47:d1:c0:ad: d8:77:8e:ca:23:4b:5b:12:cf:81:6d:50:22:90:ad: 37:7c:ef:9c:45:61:07:17:db:7a:c1:d9:f1:76:c1: 7c:3d:51:21:65:b1:0e:69:6a:d3:0e:2b:cc:f1:bb: e6:3e:e2:97:73:83:24:69:40:2c:f3:24:b0:5e:dc: 79:a0:7e:b8:2c:fa:a8:d0:54:94:4c:e9:44:77:fa: 76:6e:37:26:72:97:c8:59:11:e0:3e:fd:c4:15:05: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:DB:C6:AF:0F:95:A7:E2:A5:BE:82:82:B3:54:F7:64:44:6F:91 X509v3 Authority Key Identifier: keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:aa:4a:4f:54:3a:ab:e1:02:7e:36:db:23:8f:79:46:92:c7: 45:66:fe:25:ef:95:80:dd:cd:31:a6:28:81:86:9f:58:1b:8f: 8a:4b:f5:a3:e0:46:04:b7:fc:39:38:98:f1:34:fb:e4:4e:ae: fa:a1:07:c7:01:60:b2:c3:24:d3:34:16:65:c6:03:37:30:89: e0:04:31:75:be:bc:1b:d8:7e:40:cc:a1:de:e9:ae:27:bf:e3: 1b:52:ba:24:8b:c1:7d:49:12:4a:fc:3f:34:46:d3:2c:94:a8: 41:d7:6e:d6:32:d5:d7:9f:db:57:95:48:c9:19:ba:39:ee:d0: 20:34:dd:b5:b1:33:a9:c2:53:9c:c9:42:65:1c:75:1f:1b:ed: ec:89:c4:c7:f1:79:67:17:a4:41:8f:6b:3e:05:41:dc:98:08: fd:c0:ad:f8:ad:f4:0a:fa:48:17:99:8c:8c:e4:d3:75:27:33: e7:64:27:04:1e:d1:65:44:93:fa:d4:42:c4:2c:07:bf:1b:e3: ac:f6:ce:79:ea:f5:1b:b1:73:69:79:f5:0c:12:79:f8:06:d5: 27:3d:ac:5a:e9:5f:6c:bd:09:d9:86:5f:e6:11:85:0f:df:b1: 79:de:27:62:0e:48:8f:8c:da:9c:25:cf:4f:ce:be:2f:7a:ef: ac:ec:92:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlkI2KgG4D/MRKIWL6ZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0 NzhjYjEwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EyhjNjk5ZGJjNmFmMGY5NWE3ZTJhNWJlODI4MmIzNTRmNzY0NDQ2ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1fpaZrWfziRzN4I6i1u+MITBrHA 2bh0+haOWr5F6shBSrm52RGvNw4cQ8DOjGRr4HHZVvzaxYnqvLTkgAJk2uQtSP0U g3fSjpVcE/mQljLM3nGXsczmxKIuaPcX1u+iT8kR2XhvTnJxdx9kDmZFUwh6YvLi YLB9/17A0l54REcRm07JACHp9qPTJvaZWj077Fq5CeKVktx4MgBzl1VIdkfRwK3Y d47KI0tbEs+BbVAikK03fO+cRWEHF9t6wdnxdsF8PVEhZbEOaWrTDivM8bvmPuKX c4MkaUAs8ySwXtx5oH64LPqo0FSUTOlEd/p2bjcmcpfIWRHgPv3EFQVV7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaZ28avD5Wn4qW+goKzVPdkRG+RMB8GA1UdIwQY MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt YTM4YjY3OTVmYjI0LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0 LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFapKT1Q6 q+ECfjbbI495RpLHRWb+Je+VgN3NMaYogYafWBuPikv1o+BGBLf8OTiY8TT75E6u +qEHxwFgssMk0zQWZcYDNzCJ4AQxdb68G9h+QMyh3umuJ7/jG1K6JIvBfUkSSvw/ NEbTLJSoQddu1jLV15/bV5VIyRm6Oe7QIDTdtbEzqcJTnMlCZRx1Hxvt7InEx/F5 ZxekQY9rPgVB3JgI/cCt+K30CvpIF5mMjOTTdScz52QnBB7RZUST+tRCxCwHvxvj rPbOeer1G7FzaXn1DBJ5+AbVJz2sWulfbL0J2YZf5hGFD9+xed4nYg5Ij4zanCXP T86+L3rvrOyS1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:34 2025 by rpki-client