This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json) Hash identifier: icPJpmi1ObI51d7xcKNyr6i/bFXrPPDU3Imt3gbNBbM= Subject key identifier: F1:AB:59:C4:11:63:9E:51:13:12:B4:98:F3:EA:B9:D0:B4:4B:FE:39 Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23 Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23 Certificate serial: 019AF31B8A692CBF4C60C01B86B81B6FA42E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft Manifest number: 10BB Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: Ln65HqYqVCeBP7uhVc6FjrQctFjbI/Mx0DfnATIp3QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8a:69:2c:bf:4c:60:c0:1b:86:b8:1b:6f:a4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=f1ab59c411639e511312b498f3eab9d0b44bfe39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:9c:ce:95:e8:a1:4f:4c:57:99:21:2b:29: 0c:93:06:4c:e7:f6:ab:30:5e:60:d2:80:3a:64:5d: 8e:7e:b9:0b:22:0d:c3:e1:da:4b:a1:f9:d2:28:86: d9:dd:85:d7:73:58:34:a4:ff:91:67:f0:6b:fb:57: 6e:c5:28:68:d1:da:9e:0a:0d:86:ce:c7:fb:9b:92: e5:9b:8f:80:15:72:59:dc:79:ff:5b:52:fb:9b:55: 19:3a:aa:00:81:0e:9d:07:b4:5b:30:3e:af:7f:e6: 0c:1c:e2:90:e4:8c:16:05:e0:ce:3a:55:07:15:72: 9c:82:2c:f2:39:8d:ac:6b:45:ed:43:5c:66:e0:8c: b1:af:36:1e:f7:ac:85:5f:e5:b3:d8:a2:a1:44:62: 0f:56:56:b2:a3:02:26:18:0c:82:06:01:47:38:ae: 23:69:b8:15:5a:d0:0b:39:d7:37:55:9b:82:c2:6e: 67:f0:b8:2c:cf:2b:7f:ee:d3:8e:7d:36:95:78:bd: 52:be:93:9f:4b:26:45:af:31:14:83:b5:19:0b:1a: 1e:a4:0d:ab:df:85:d2:48:05:fb:8d:c2:f2:3f:22: dc:88:92:5d:64:2b:a7:91:07:f2:73:ee:ee:d5:5a: 1f:b6:1d:86:ef:28:45:8b:cb:da:4e:97:f5:f3:6f: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AB:59:C4:11:63:9E:51:13:12:B4:98:F3:EA:B9:D0:B4:4B:FE:39 X509v3 Authority Key Identifier: keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:16:6b:49:d6:1e:bc:53:6a:da:a2:e6:74:23:e8:2f:bd:10: 3a:04:94:6b:bb:6a:f5:27:f6:47:a6:2d:c7:b0:67:9c:af:3c: 4f:26:89:9d:79:29:2a:5a:65:99:81:4d:31:e0:f8:7c:27:76: 12:14:78:da:ea:31:c5:98:30:75:85:5e:cf:d1:36:48:4e:b5: 6e:51:81:86:a2:8a:e7:1d:e6:f3:4e:01:b2:2f:0d:7a:b1:45: f1:a1:c6:86:bc:c4:6b:06:8e:ae:7f:42:23:db:ac:32:b1:3c: 04:d6:a5:9f:6c:19:1b:5d:68:fb:83:1b:18:74:8a:05:c5:f4: 7c:a7:cf:27:8b:c1:88:60:63:0d:96:a3:6c:8c:da:33:42:04: 21:6b:32:2f:b7:bd:bf:8a:31:02:d0:32:08:1f:12:7b:82:ba: e5:96:2e:46:bd:da:f9:d8:cc:11:79:9f:37:c1:a9:66:17:e8: d2:a4:57:0e:84:28:e0:63:19:63:08:f2:d5:ec:29:e7:0a:ab: 8c:07:68:a9:51:45:02:c4:c1:c8:e4:ec:56:cd:02:65:59:f4: 8e:c7:52:f8:8a:b3:7e:63:24:2d:d8:3b:f4:47:d6:a3:3b:47: 12:30:ce:cd:96:66:75:b1:6f:b8:69:2c:3f:b5:2a:db:ab:ed: 2c:cf:62:33 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG4ppLL9MYMAbhrgbb6QuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk YzNlMjMwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EyhmMWFiNTljNDExNjM5ZTUxMTMxMmI0OThmM2VhYjlkMGI0NGJmZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXmczpXooU9MV5khKykMkwZM5/ar MF5g0oA6ZF2OfrkLIg3D4dpLofnSKIbZ3YXXc1g0pP+RZ/Br+1duxSho0dqeCg2G zsf7m5Llm4+AFXJZ3Hn/W1L7m1UZOqoAgQ6dB7RbMD6vf+YMHOKQ5IwWBeDOOlUH FXKcgizyOY2sa0XtQ1xm4IyxrzYe96yFX+Wz2KKhRGIPVlayowImGAyCBgFHOK4j abgVWtALOdc3VZuCwm5n8Lgszyt/7tOOfTaVeL1SvpOfSyZFrzEUg7UZCxoepA2r 34XSSAX7jcLyPyLciJJdZCunkQfyc+7u1Vofth2G7yhFi8vaTpf18298EwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPGrWcQRY55RExK0mPPqudC0S/45MB8GA1UdIwQY MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRZr SdYevFNq2qLmdCPoL70QOgSUa7tq9Sf2R6Ytx7BnnK88TyaJnXkpKlplmYFNMeD4 fCd2EhR42uoxxZgwdYVez9E2SE61blGBhqKK5x3m804Bsi8NerFF8aHGhrzEawaO rn9CI9usMrE8BNaln2wZG11o+4MbGHSKBcX0fKfPJ4vBiGBjDZajbIzaM0IEIWsy L7e9v4oxAtAyCB8Se4K65ZYuRr3a+djMEXmfN8GpZhfo0qRXDoQo4GMZYwjy1ewp 5wqrjAdoqVFFAsTByOTsVs0CZVn0jsdS+IqzfmMkLdg79EfWoztHEjDOzZZmdbFv uGksP7Uq26vtLM9iMw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:37 2025 by rpki-client