This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json) Hash identifier: 1zSrny2Sju8sqJO+KG+rA+ln8pkX4SIf91C0pBNvh7A= Subject key identifier: 4E:17:31:8C:77:0B:AE:56:59:9B:1C:D6:5E:57:8F:67:EB:FD:9B:57 Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54 Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54 Certificate serial: 019AF31D022E3975DFB143475AC10396C806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft Manifest number: 1784 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: rmpJNimrIe2JnWWOkWu9hM/bfGIDi+RDgarndH9XjzY=) 2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:02:2e:39:75:df:b1:43:47:5a:c1:03:96:c8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=4e17318c770bae56599b1cd65e578f67ebfd9b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:4d:8f:73:07:1d:6e:1d:b1:00:c0:ec:29: 79:c5:7a:7b:dd:5d:a0:64:3d:12:34:46:ec:70:80: 06:66:af:9b:9d:81:82:30:ac:43:ed:63:e5:01:d1: ae:b8:9b:7b:98:48:ee:14:14:18:e0:7e:9b:2e:a2: f9:c7:ca:b9:b9:d0:bd:03:61:5f:e8:4e:64:cf:22: 4b:22:47:ce:a6:ee:f5:16:f6:2b:56:4c:a0:aa:8d: 5c:bc:a5:bc:ef:b3:40:f6:74:d0:7d:92:93:f7:66: c8:7b:0f:e6:8a:5a:60:15:3d:8a:c9:13:57:43:05: f1:39:87:96:ff:28:d3:65:8b:57:a0:d0:c1:1c:83: b7:b6:f6:74:39:4d:3b:75:23:09:2b:f4:31:fa:0e: 6a:e6:d6:24:fe:5e:7e:a9:65:04:19:d8:b1:93:7f: bc:b1:6b:4c:28:87:26:c2:2c:a0:21:69:95:4c:c7: c0:a6:56:dd:4e:2d:d0:37:ca:2b:69:fc:a0:7a:7b: ac:6d:7f:91:37:f6:0a:e7:cc:0c:88:0b:55:10:eb: 5f:cc:14:1b:61:ba:c2:c1:02:24:3b:29:36:2a:0c: d4:f1:f6:a5:57:8f:21:ed:d8:2a:34:29:5c:06:ba: 28:ad:0b:ce:24:72:0a:b0:d2:36:e2:be:36:4f:ad: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:17:31:8C:77:0B:AE:56:59:9B:1C:D6:5E:57:8F:67:EB:FD:9B:57 X509v3 Authority Key Identifier: keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:61:01:58:2f:d0:af:9e:d3:39:10:a6:3a:15:1b:f5:7a:67: 1f:94:74:5c:f2:f4:9b:86:9f:9a:f7:b9:e8:bc:1e:18:70:a5: 1e:56:22:7e:06:90:5c:b7:6b:4b:04:ec:6e:95:11:c5:06:a3: f7:ff:91:89:3f:5d:91:e6:cd:03:d6:2f:f0:70:19:ef:ea:1d: 5f:26:33:90:ea:bd:46:87:06:50:b5:bf:81:94:26:e5:b7:e9: 4c:93:bc:13:f4:7f:ec:5b:91:fa:a5:04:56:55:dd:5f:8a:88: 16:e7:20:6d:cb:95:ec:dd:28:2c:b4:25:dc:72:18:38:60:49: 5f:a3:47:58:7f:65:13:bd:9a:a0:34:14:a8:03:7a:a7:16:19: b7:fd:34:11:e5:d3:c5:98:58:ab:60:73:72:b9:f4:57:96:8f: c1:3e:04:aa:dc:32:6f:24:08:23:7e:94:ef:04:1c:5e:77:7a: 0c:ed:07:c1:bf:0e:0d:fa:71:f5:78:5a:b4:6c:89:7c:7f:93: 32:e0:ea:d2:67:d7:b6:7d:65:57:fa:db:f2:e6:d1:74:f7:f9: d3:8e:6f:f3:eb:ad:b3:34:af:ed:0f:a8:9b:a1:98:71:7d:94: cb:af:ae:05:0d:7f:45:b5:da:af:21:45:a5:76:57:67:c4:91: 67:1c:ce:a8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHQIuOXXfsUNHWsEDlsgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjYyZjc2MDYyNzNmNDFhNmNjYzhlMjk1NjA3NmYzYzBh MWViNTQwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD Eyg0ZTE3MzE4Yzc3MGJhZTU2NTk5YjFjZDY1ZTU3OGY2N2ViZmQ5YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1clNj3MHHW4dsQDA7Cl5xXp73V2g ZD0SNEbscIAGZq+bnYGCMKxD7WPlAdGuuJt7mEjuFBQY4H6bLqL5x8q5udC9A2Ff 6E5kzyJLIkfOpu71FvYrVkygqo1cvKW877NA9nTQfZKT92bIew/milpgFT2KyRNX QwXxOYeW/yjTZYtXoNDBHIO3tvZ0OU07dSMJK/Qx+g5q5tYk/l5+qWUEGdixk3+8 sWtMKIcmwiygIWmVTMfAplbdTi3QN8orafygenusbX+RN/YK58wMiAtVEOtfzBQb YbrCwQIkOyk2KgzU8falV48h7dgqNClcBroorQvOJHIKsNI24r42T6157wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE4XMYx3C65WWZsc1l5Xj2fr/ZtXMB8GA1UdIwQY MBaAFPv2L3YGJz9BpszI4pVgdvPAoetUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fWXZkZ1luUDBHbXpNamlsV0IyODhDaDYxUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvOTVlZWJiLTBhOWQtNGY3MS1iM2Y5 LTU2NDllMWIxOTJiYi8xLzEtX1l2ZGdZblAwR216TWppbFdCMjg4Q2g2MVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIzLzk1ZWViYi0wYTlkLTRmNzEtYjNmOS01NjQ5ZTFiMTky YmIvMS8xLV9ZdmRnWW5QMEdtek1qaWxXQjI4OENoNjFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWEB WC/Qr57TORCmOhUb9XpnH5R0XPL0m4afmve56LweGHClHlYifgaQXLdrSwTsbpUR xQaj9/+RiT9dkebNA9Yv8HAZ7+odXyYzkOq9RocGULW/gZQm5bfpTJO8E/R/7FuR +qUEVlXdX4qIFucgbcuV7N0oLLQl3HIYOGBJX6NHWH9lE72aoDQUqAN6pxYZt/00 EeXTxZhYq2Bzcrn0V5aPwT4EqtwybyQII36U7wQcXnd6DO0Hwb8ODfpx9XhatGyJ fH+TMuDq0mfXtn1lV/rb8ubRdPf5045v8+utszSv7Q+om6GYcX2Uy6+uBQ1/RbXa ryFFpXZXZ8SRZxzOqA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:42 2025 by rpki-client