This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json) Hash identifier: tvga0/gB6hoY4qHIKucmn1izxuiOEX4MJMoCFKii1Og= Subject key identifier: 04:19:EB:E2:FB:3C:04:44:53:DC:04:EF:23:2A:2F:12:93:7F:0C:7D Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Certificate serial: 019AF5785F0B3E0F870684A6D6CEBA81C7FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft Manifest number: 10B3 Signing time: Sat 06 Dec 2025 21:01:37 +0000 Manifest this update: Sat 06 Dec 2025 21:01:37 +0000 Manifest next update: Sun 07 Dec 2025 21:01:37 +0000 Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: rdZQp9jdlX4XwyHLhHGwt0x5sRtZrQ5EFPRGZwfJblo=) 2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=) 3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:5f:0b:3e:0f:87:06:84:a6:d6:ce:ba:81:c7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Validity Not Before: Dec 6 21:01:37 2025 GMT Not After : Dec 7 21:01:37 2025 GMT Subject: CN=0419ebe2fb3c044453dc04ef232a2f12937f0c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:cc:63:7a:bf:72:bb:c1:fd:54:e2:15:f4: 37:b3:8a:15:3b:c2:88:12:d1:12:dd:b2:b8:7e:5b: 51:df:02:5c:04:ef:a7:01:be:94:6f:a5:16:91:6e: 2a:26:86:8e:69:5a:02:11:ce:8f:3b:6c:d5:64:1f: 42:14:25:93:9d:57:e1:26:8c:d1:da:2d:e1:ec:fc: 3e:b2:41:7c:87:28:df:e8:14:9f:f4:a4:92:e3:1d: a2:05:92:9f:5f:94:42:ef:64:df:d1:2d:4d:30:bc: 25:0a:88:72:26:bb:b1:c7:1f:1a:0f:87:c4:d8:ef: 26:89:18:25:ce:05:af:59:21:72:a9:fd:4e:48:16: 94:39:32:5a:38:de:0d:58:f6:b4:0c:69:17:4e:32: 4c:01:a6:05:67:01:8d:40:62:10:e1:24:7e:1a:76: d2:45:9c:51:fa:e3:0c:cb:19:e9:ef:d4:53:b2:d3: 29:b2:9d:a3:d4:d2:30:f5:40:2f:10:24:f8:14:08: 47:5f:d6:12:3a:ce:7c:a1:14:4c:b8:49:4a:df:a3: b4:5f:54:cb:6e:4f:91:5a:b5:e4:ff:31:34:5d:e9: 30:d5:6e:25:e4:82:29:4e:92:b9:b7:da:60:15:bf: 53:76:5f:88:08:a2:e0:54:20:ae:12:b6:4e:60:1f: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:EB:E2:FB:3C:04:44:53:DC:04:EF:23:2A:2F:12:93:7F:0C:7D X509v3 Authority Key Identifier: keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ba:5d:33:b0:59:6a:94:a0:d3:d8:0a:71:63:30:5e:76:b0: b0:dc:04:e5:19:77:9d:2c:86:a7:ed:f9:7e:90:2d:78:3c:b8: 5a:09:77:ec:f8:f5:5d:a1:c1:69:3c:60:f4:ef:51:da:45:ec: 4b:98:6c:7f:18:62:a3:4b:5e:a6:9a:1d:e5:9a:bc:28:c4:45: 74:81:64:cf:1d:25:f5:0f:82:95:dc:8a:2b:54:84:a5:ce:15: 27:b8:76:ff:03:6c:5b:6f:be:58:62:34:04:36:64:8c:68:07: e5:7d:23:20:9e:ca:9d:11:82:f3:b2:ac:31:71:0e:f3:95:b4: 87:e6:3c:e9:20:ad:2c:99:f6:58:22:5f:5c:be:95:d5:79:b9: 42:c0:5f:b5:3b:2d:59:2f:98:fc:6b:d9:8d:cf:4a:60:c8:aa: 3b:19:1b:07:ba:42:75:3b:0f:06:aa:ed:d8:c2:77:c5:89:dc: ac:ae:07:b2:6b:03:16:e7:ef:67:5d:67:e7:d8:30:1b:ee:25: 9e:91:a7:1b:1a:ff:ce:a1:bb:76:60:67:3d:8a:25:92:33:89: db:eb:4b:0b:5a:3f:8b:36:37:65:86:d5:f1:1a:40:62:40:b6: 8a:3e:4e:24:a3:96:b7:15:bf:00:bb:c2:da:40:15:74:ed:1f: 17:0b:d9:27 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1eF8LPg+HBoSm1s66gcf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2 ODdiZDEwHhcNMjUxMjA2MjEwMTM3WhcNMjUxMjA3MjEwMTM3WjAzMTEwLwYDVQQD EygwNDE5ZWJlMmZiM2MwNDQ0NTNkYzA0ZWYyMzJhMmYxMjkzN2YwYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWHMY3q/crvB/VTiFfQ3s4oVO8KI EtES3bK4fltR3wJcBO+nAb6Ub6UWkW4qJoaOaVoCEc6PO2zVZB9CFCWTnVfhJozR 2i3h7Pw+skF8hyjf6BSf9KSS4x2iBZKfX5RC72Tf0S1NMLwlCohyJruxxx8aD4fE 2O8miRglzgWvWSFyqf1OSBaUOTJaON4NWPa0DGkXTjJMAaYFZwGNQGIQ4SR+GnbS RZxR+uMMyxnp79RTstMpsp2j1NIw9UAvECT4FAhHX9YSOs58oRRMuElK36O0X1TL bk+RWrXk/zE0Xekw1W4l5IIpTpK5t9pgFb9Tdl+ICKLgVCCuErZOYB/l5wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAQZ6+L7PAREU9wE7yMqLxKTfwx9MB8GA1UdIwQY MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7pd M7BZapSg09gKcWMwXnawsNwE5Rl3nSyGp+35fpAteDy4Wgl37Pj1XaHBaTxg9O9R 2kXsS5hsfxhio0teppod5Zq8KMRFdIFkzx0l9Q+CldyKK1SEpc4VJ7h2/wNsW2++ WGI0BDZkjGgH5X0jIJ7KnRGC87KsMXEO85W0h+Y86SCtLJn2WCJfXL6V1Xm5QsBf tTstWS+Y/GvZjc9KYMiqOxkbB7pCdTsPBqrt2MJ3xYncrK4HsmsDFufvZ11n59gw G+4lnpGnGxr/zqG7dmBnPYolkjOJ2+tLC1o/izY3ZYbV8RpAYkC2ij5OJKOWtxW/ ALvC2kAVdO0fFwvZJw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:32 2025 by rpki-client