This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json) Hash identifier: 01mqBEJ5YGlFKJYu/X6B1k2urbaXcMUlZmWiFD3uSf4= Subject key identifier: E9:91:EF:45:B2:6F:85:8B:65:F1:4A:C7:3E:C8:53:B1:0B:5B:9D:C6 Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced Certificate serial: 019AF31BABFCCFCD01283D58376FDB4B6718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft Manifest number: 158B Signing time: Sat 06 Dec 2025 10:01:08 +0000 Manifest this update: Sat 06 Dec 2025 10:01:08 +0000 Manifest next update: Sun 07 Dec 2025 10:01:08 +0000 Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: Ki1L6m8wsbASmmFqHEt0KuClcKwIsDbfUqbQmnKVAvg=) 2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ab:fc:cf:cd:01:28:3d:58:37:6f:db:4b:67:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced Validity Not Before: Dec 6 10:01:08 2025 GMT Not After : Dec 7 10:01:08 2025 GMT Subject: CN=e991ef45b26f858b65f14ac73ec853b10b5b9dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:c6:8c:81:29:88:88:b9:be:3c:8b:1f:ad: cf:2e:c2:29:fa:d8:0a:67:45:6e:5a:be:a0:f8:32: c9:61:cc:f4:02:1d:d3:22:a1:1d:f9:6b:c4:17:ac: a2:c6:e5:9c:ff:b5:80:93:af:43:82:fc:e1:86:58: 25:8d:23:a0:27:b8:16:80:07:ea:4e:84:21:01:db: 48:60:f7:9d:71:2d:fd:28:d7:fb:f8:43:d8:19:7d: f6:e4:91:05:95:78:b5:dd:00:47:ed:0d:01:a0:62: 11:fb:52:de:2b:a3:bd:28:19:8b:77:db:76:b5:fe: 67:9d:ba:87:bd:b7:ae:cc:ab:04:c9:2f:ca:48:3e: 93:18:cb:2c:b5:09:95:1d:14:ce:7a:75:a4:60:63: 70:ee:9e:d7:9c:4b:b1:0a:51:54:79:4e:68:8b:ae: 85:79:89:97:af:57:06:e0:62:a9:db:51:51:e3:d6: 9c:ee:e2:63:e2:64:db:c0:25:b1:fe:ec:df:1e:99: 50:8b:05:b7:68:40:97:b1:a2:04:ce:f0:88:2f:cc: ab:12:34:22:e2:3c:75:c1:8c:29:33:61:9b:1d:b7: 25:2c:b8:92:2b:65:85:62:d9:f7:43:c1:dc:00:82: 50:29:c6:e0:36:ec:bb:ea:65:13:63:b0:9d:7a:df: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:EF:45:B2:6F:85:8B:65:F1:4A:C7:3E:C8:53:B1:0B:5B:9D:C6 X509v3 Authority Key Identifier: keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:60:56:11:02:c6:e9:79:df:57:63:90:14:f8:42:5e:18:d9: cd:0d:3b:a7:eb:dd:ed:c0:6e:cf:b2:52:5c:c5:a3:36:fb:33: fd:ca:d1:bd:8f:84:4e:e6:1b:a5:1d:e6:72:68:c1:1b:86:7b: 06:f0:53:4d:12:d4:7f:00:3b:79:7b:6f:eb:43:2b:e5:3d:40: 87:3a:bf:6d:ad:5e:85:60:f3:89:6c:f3:96:5a:d6:f5:99:1b: 2f:20:39:6c:80:23:7a:b3:53:6c:ca:98:fd:b8:23:e6:30:c0: c7:0c:44:00:d3:cb:7a:46:e6:30:ac:6e:b4:d5:92:8d:17:e4: 93:e6:b8:43:06:84:df:c5:1e:b0:4a:81:b4:b6:d6:be:6d:d8: c2:f2:2e:c7:88:71:33:d1:a6:84:d8:c2:2a:de:17:3f:12:d5: d5:e7:f1:ad:80:c3:a7:23:3e:36:0f:72:a4:ff:33:f7:e7:cd: a4:a4:f5:22:b9:ff:80:a1:77:21:81:67:cc:49:50:96:18:0a: 04:1d:fa:6e:fa:a8:aa:91:41:74:18:28:24:56:3c:3a:04:5d: 97:52:e6:89:97:2f:66:59:b5:c8:a9:45:a3:0a:60:ed:db:5f: 6a:7a:b6:f2:d2:10:72:39:f3:c2:3d:a0:54:85:15:7a:5f:1b: e7:61:f6:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6v8z80BKD1YN2/bS2cYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODRlMGNlZTU3NWM2MTkwNTNmOGVlMmIxMDA0Y2M0NDJm ZDJjZWQwHhcNMjUxMjA2MTAwMTA4WhcNMjUxMjA3MTAwMTA4WjAzMTEwLwYDVQQD EyhlOTkxZWY0NWIyNmY4NThiNjVmMTRhYzczZWM4NTNiMTBiNWI5ZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtHGjIEpiIi5vjyLH63PLsIp+tgK Z0VuWr6g+DLJYcz0Ah3TIqEd+WvEF6yixuWc/7WAk69DgvzhhlgljSOgJ7gWgAfq ToQhAdtIYPedcS39KNf7+EPYGX325JEFlXi13QBH7Q0BoGIR+1LeK6O9KBmLd9t2 tf5nnbqHvbeuzKsEyS/KSD6TGMsstQmVHRTOenWkYGNw7p7XnEuxClFUeU5oi66F eYmXr1cG4GKp21FR49ac7uJj4mTbwCWx/uzfHplQiwW3aECXsaIEzvCIL8yrEjQi 4jx1wYwpM2GbHbclLLiSK2WFYtn3Q8HcAIJQKcbgNuy76mUTY7Cdet/NfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmR70Wyb4WLZfFKxz7IU7ELW53GMB8GA1UdIwQY MBaAFNSE4M7ldcYZBT+O4rEATMRC/SztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEt ZWMwMjYyYWIzM2YxLzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEtZWMwMjYyYWIzM2Yx LzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2BWEQLG 6XnfV2OQFPhCXhjZzQ07p+vd7cBuz7JSXMWjNvsz/crRvY+ETuYbpR3mcmjBG4Z7 BvBTTRLUfwA7eXtv60Mr5T1Ahzq/ba1ehWDziWzzllrW9ZkbLyA5bIAjerNTbMqY /bgj5jDAxwxEANPLekbmMKxutNWSjRfkk+a4QwaE38UesEqBtLbWvm3YwvIux4hx M9GmhNjCKt4XPxLV1efxrYDDpyM+Ng9ypP8z9+fNpKT1Irn/gKF3IYFnzElQlhgK BB36bvqoqpFBdBgoJFY8OgRdl1LmiZcvZlm1yKlFowpg7dtfanq28tIQcjnzwj2g VIUVel8b52H29A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:23 2025 by rpki-client