This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json) Hash identifier: cPA/Dn1PW/cNu+5tapaH93WUvqdYN3FW4s1+SsiywHE= Subject key identifier: D3:6E:BD:01:36:AE:E0:8A:11:0E:F5:4B:25:46:D7:5A:2D:BD:BE:B2 Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a Certificate serial: 019AF465407ED9460A199B450C4601B77EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 16:01:07 +0000 Manifest this update: Sat 06 Dec 2025 16:01:07 +0000 Manifest next update: Sun 07 Dec 2025 16:01:07 +0000 Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: 0FsQ74EkIn1Zna0DrQGxdvnvK2aiPI9SZDCmvagGMdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:40:7e:d9:46:0a:19:9b:45:0c:46:01:b7:7e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a Validity Not Before: Dec 6 16:01:07 2025 GMT Not After : Dec 7 16:01:07 2025 GMT Subject: CN=d36ebd0136aee08a110ef54b2546d75a2dbdbeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:db:91:79:12:87:41:c2:87:0d:c3:eb:c5: 2e:ba:18:7c:4b:f8:2c:13:1a:39:0c:94:d6:58:b9: 1f:c3:58:19:5b:7f:b9:ad:76:5a:a7:b9:45:cd:4e: 69:e1:48:a9:ae:66:45:b5:ac:e8:77:6e:5f:a5:08: 33:45:0b:8d:8e:9b:86:24:3a:fb:4b:c8:7d:9f:18: 4a:66:23:a7:e9:92:b6:1f:bc:20:9c:44:07:61:5d: e8:ab:16:53:a3:97:aa:6a:32:21:46:84:09:c8:17: a6:b6:17:5a:68:08:6e:2c:2f:f4:19:33:41:20:a3: 7e:78:a9:03:a7:2f:72:78:1f:29:c4:b7:13:be:e3: 63:0c:4f:4b:bf:b3:42:07:b5:1f:b2:eb:d0:bd:ea: 05:ee:bc:3d:08:22:22:73:99:16:07:f2:1a:56:1e: 06:90:e4:8f:46:1c:f0:61:85:9a:1c:41:87:0a:77: c8:a3:2a:51:b6:d2:e4:d7:bb:f7:6f:db:58:bc:5b: 75:9f:a0:ca:3e:7d:b9:51:c1:81:20:fc:61:ab:bc: 36:5b:92:a0:fa:b7:6d:2e:44:db:86:ec:57:00:31: 2e:69:b9:30:d5:74:26:af:d0:cd:e0:d5:d0:11:ae: b7:a6:ab:e2:85:8f:37:36:ed:91:14:ea:92:87:a0: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:BD:01:36:AE:E0:8A:11:0E:F5:4B:25:46:D7:5A:2D:BD:BE:B2 X509v3 Authority Key Identifier: keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:92:f9:9e:6b:6a:a7:e8:c7:64:e2:4f:5c:23:6b:79:c5:b8: 72:92:40:61:30:0b:6b:6d:31:a0:3f:3f:69:93:41:fc:3c:c6: 85:7d:0a:89:3b:aa:19:6f:6b:b1:8e:cb:cd:01:8d:59:db:6b: f0:d0:97:ec:93:04:93:59:ab:b7:50:fe:90:30:a3:fe:37:a9: 3d:aa:8c:c6:c2:6a:78:a4:e1:6e:91:41:53:ba:19:19:45:56: f3:52:26:63:62:b6:09:47:cb:69:d5:52:cd:64:c1:23:4e:82: d0:f5:75:14:48:1d:96:5c:5f:c9:af:d5:e5:b0:97:8f:9f:c0: 13:fb:1c:a6:09:ce:d9:96:c2:b3:fb:44:6d:95:f0:ef:e7:ff: 2b:f1:8f:14:40:76:2f:28:da:22:29:02:3a:26:7c:e6:3d:d4: d9:cc:b0:ae:94:31:2c:a5:b4:9b:56:39:f4:f2:5e:e4:5b:1e: ef:53:e7:27:0a:cc:38:96:2b:18:ea:8a:4a:da:c0:df:29:6e: b8:37:3c:3a:d7:a3:c8:ac:68:bb:ef:71:f1:ae:a3:12:38:d0: f9:67:fd:7e:4b:80:19:5b:2e:6f:c7:50:1f:b0:51:bf:c4:03: 56:83:b7:5e:dc:ab:38:56:04:15:aa:5d:5e:ca:ec:f8:a5:bb: 21:30:55:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUB+2UYKGZtFDEYBt370MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDU5N2I5NzNhZGExMDUyZjY1YjNlYTFkZTFlNDgyZTIz ZjNkMmEwHhcNMjUxMjA2MTYwMTA3WhcNMjUxMjA3MTYwMTA3WjAzMTEwLwYDVQQD EyhkMzZlYmQwMTM2YWVlMDhhMTEwZWY1NGIyNTQ2ZDc1YTJkYmRiZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXbkXkSh0HChw3D68Uuuhh8S/gs Exo5DJTWWLkfw1gZW3+5rXZap7lFzU5p4UiprmZFtazod25fpQgzRQuNjpuGJDr7 S8h9nxhKZiOn6ZK2H7wgnEQHYV3oqxZTo5eqajIhRoQJyBemthdaaAhuLC/0GTNB IKN+eKkDpy9yeB8pxLcTvuNjDE9Lv7NCB7UfsuvQveoF7rw9CCIic5kWB/IaVh4G kOSPRhzwYYWaHEGHCnfIoypRttLk17v3b9tYvFt1n6DKPn25UcGBIPxhq7w2W5Kg +rdtLkTbhuxXADEuabkw1XQmr9DN4NXQEa63pqvihY83Nu2RFOqSh6AFmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNuvQE2ruCKEQ71SyVG11otvb6yMB8GA1UdIwQY MBaAFNXVl7lzraEFL2Wz6h3h5ILiPz0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTIt ZjI1OGY3ZDUwZDc1LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTItZjI1OGY3ZDUwZDc1 LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZL5nmtq p+jHZOJPXCNrecW4cpJAYTALa20xoD8/aZNB/DzGhX0KiTuqGW9rsY7LzQGNWdtr 8NCX7JMEk1mrt1D+kDCj/jepPaqMxsJqeKThbpFBU7oZGUVW81ImY2K2CUfLadVS zWTBI06C0PV1FEgdllxfya/V5bCXj5/AE/scpgnO2ZbCs/tEbZXw7+f/K/GPFEB2 LyjaIikCOiZ85j3U2cywrpQxLKW0m1Y59PJe5Fse71PnJwrMOJYrGOqKStrA3ylu uDc8OtejyKxou+9x8a6jEjjQ+Wf9fkuAGVsub8dQH7BRv8QDVoO3XtyrOFYEFapd Xsrs+KW7ITBVqg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:33 2025 by rpki-client