This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json) Hash identifier: ehHkt2aaduDsPp2C5BsQbc8owbuN1jdNX0B5qDCpe5I= Subject key identifier: 50:5A:18:E0:50:BF:ED:3F:C8:F5:0A:22:0E:58:FF:CA:82:D4:F0:0D Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Certificate serial: 019AF3896425611064D77662060A39665BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft Manifest number: 10B2 Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: 7Ygf3mWR7gRLywZ6ODLMFUlilY28WDIsrY3UiqEW10k=) 2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=) 3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:64:25:61:10:64:d7:76:62:06:0a:39:66:5b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=505a18e050bfed3fc8f50a220e58ffca82d4f00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:1e:0c:7a:01:4c:03:40:f6:90:0a:98:e4: bf:26:4c:3b:07:e6:91:9f:85:df:eb:d6:56:79:c8: ab:a8:af:61:21:56:92:c7:a6:3b:33:fc:93:42:d1: 24:3a:43:7d:bc:d9:6b:e2:2b:b8:c7:44:da:05:55: ff:ee:e2:be:86:25:66:18:6b:43:79:dc:cc:94:fb: c3:89:77:2e:47:4a:52:69:72:63:16:ce:00:04:a6: 81:4c:c9:f2:79:e8:58:35:21:08:67:76:1a:64:01: 69:47:77:bd:0d:86:6e:5e:d4:40:5e:f4:64:d8:d8: 46:46:58:9e:8c:bf:d5:75:85:b0:fd:9b:d9:15:c6: ba:91:74:7d:65:80:4a:72:fc:4e:4e:24:3c:6f:f5: be:ee:40:93:fe:74:4b:27:5c:97:47:87:45:f8:10: 7a:46:bf:72:f2:1a:92:44:22:52:9d:00:51:43:53: cd:82:e8:1d:5f:fb:a5:42:03:aa:c6:c1:da:50:b1: 97:0d:46:18:0d:a5:e1:5e:b1:af:48:87:49:ce:71: e8:3c:c8:64:61:d6:53:b1:69:96:34:ef:0c:0a:72: 92:cb:07:98:10:8e:92:f4:f6:d6:86:8b:03:0b:76: 08:f1:99:88:92:ff:94:35:4a:c2:3f:91:b7:8f:ab: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5A:18:E0:50:BF:ED:3F:C8:F5:0A:22:0E:58:FF:CA:82:D4:F0:0D X509v3 Authority Key Identifier: keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:cd:9a:d3:68:76:33:5c:93:3b:d8:6b:76:1d:d9:c4:e4:35: 17:dd:b2:1b:17:bb:71:b9:b1:c5:db:a8:c0:19:06:1f:ac:7b: cb:5c:aa:2e:2f:64:40:b0:75:27:10:1a:eb:71:8d:bb:7d:68: e1:81:8d:47:a4:5c:65:35:e0:87:25:57:f0:85:d7:ef:ae:2a: 50:63:50:d8:a7:10:55:94:20:13:6b:0b:cb:11:17:c3:2f:25: dc:f1:68:69:39:4b:01:3d:16:e6:c6:28:25:93:1e:d4:66:f6: c7:06:cc:f9:05:49:ef:49:68:8b:c8:83:20:f9:74:ed:86:83: 7f:f3:24:0f:e4:c3:dd:a2:e2:b9:3c:59:0e:42:12:a3:93:0e: 9f:34:af:15:c9:5a:fb:f2:2a:df:39:20:54:31:03:ac:b2:ac: c2:9e:ab:3c:54:be:78:ae:58:db:5b:5e:de:5d:f5:e8:1f:a3: 06:8c:c1:16:68:c7:ff:f8:d9:2b:a6:3d:50:55:33:a1:8d:23: 00:5d:7b:f4:3b:68:43:07:5b:63:16:b1:6d:d0:c4:ef:aa:c8: e2:fd:c8:43:8c:86:d6:72:7a:51:bd:18:af:e7:5f:d9:0b:fb: 4b:62:9e:c3:f1:94:67:7b:dc:f8:92:fb:86:ff:b6:b4:63:44: b2:c2:fe:3d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrziWQlYRBk13ZiBgo5ZlvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2 ODdiZDEwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD Eyg1MDVhMThlMDUwYmZlZDNmYzhmNTBhMjIwZTU4ZmZjYTgyZDRmMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9EeDHoBTANA9pAKmOS/Jkw7B+aR n4Xf69ZWecirqK9hIVaSx6Y7M/yTQtEkOkN9vNlr4iu4x0TaBVX/7uK+hiVmGGtD edzMlPvDiXcuR0pSaXJjFs4ABKaBTMnyeehYNSEIZ3YaZAFpR3e9DYZuXtRAXvRk 2NhGRliejL/VdYWw/ZvZFca6kXR9ZYBKcvxOTiQ8b/W+7kCT/nRLJ1yXR4dF+BB6 Rr9y8hqSRCJSnQBRQ1PNgugdX/ulQgOqxsHaULGXDUYYDaXhXrGvSIdJznHoPMhk YdZTsWmWNO8MCnKSyweYEI6S9PbWhosDC3YI8ZmIkv+UNUrCP5G3j6vQFQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFBaGOBQv+0/yPUKIg5Y/8qC1PANMB8GA1UdIwQY MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM2a 02h2M1yTO9hrdh3ZxOQ1F92yGxe7cbmxxduowBkGH6x7y1yqLi9kQLB1JxAa63GN u31o4YGNR6RcZTXghyVX8IXX764qUGNQ2KcQVZQgE2sLyxEXwy8l3PFoaTlLAT0W 5sYoJZMe1Gb2xwbM+QVJ70loi8iDIPl07YaDf/MkD+TD3aLiuTxZDkISo5MOnzSv Fcla+/Iq3zkgVDEDrLKswp6rPFS+eK5Y21te3l316B+jBozBFmjH//jZK6Y9UFUz oY0jAF179DtoQwdbYxaxbdDE76rI4v3IQ4yG1nJ6Ub0Yr+df2Qv7S2Kew/GUZ3vc +JL7hv+2tGNEssL+PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:03:59 2025 by rpki-client