This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json) Hash identifier: liwMgPnJb0dLZFTTwGvV8QHUP43628n/DXvDwkU5Jco= Subject key identifier: 24:2B:34:0A:A6:5F:17:87:2D:96:84:1F:93:DD:E8:02:3D:AF:D8:4F Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26 Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926 Certificate serial: 019AF3898E5081758ADAB101DC875079A709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft Manifest number: 0950 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: t4P3CzdVifGoZ4Glk9q77Z+bMSMz7ioq732vHusEo2s=) 2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8e:50:81:75:8a:da:b1:01:dc:87:50:79:a7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926 Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=242b340aa65f17872d96841f93dde8023dafd84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:92:a1:15:41:76:d5:5e:c5:17:a3:73:82: 42:e5:ba:82:26:2d:58:19:a1:cb:b7:08:c4:69:55: c9:7a:0d:bd:78:4f:51:4e:23:6b:0b:c2:e6:d9:c5: f7:46:f8:c1:66:17:5e:cf:55:22:a7:6d:64:1b:9d: c1:89:1c:09:ba:b5:71:68:91:7b:f3:07:74:64:0e: 79:ac:c0:09:9f:44:a9:61:8b:ba:9e:49:35:3a:89: 35:59:a6:88:e5:7a:2b:60:18:d2:f2:e6:41:fc:fe: d1:5e:60:40:d5:24:0d:d1:87:b1:b0:b4:6f:d6:25: 3c:a1:30:3c:70:6e:31:39:6a:4c:67:e8:43:c2:44: 50:fc:b7:75:45:f9:b7:53:fb:2e:f1:58:50:ba:83: 7e:1a:bc:d5:7f:1f:3e:a1:72:dc:72:0e:9d:d2:f8: a9:f2:e1:3b:ff:ff:bf:b9:eb:c1:19:7b:63:43:fb: 02:ab:12:75:eb:fe:40:85:0f:e3:7b:67:a4:d4:ab: 27:13:af:92:1f:3c:d6:1c:ff:93:45:b4:aa:59:50: fa:5d:bf:71:e6:7e:3b:32:69:e3:01:11:cb:12:81: fd:b2:bc:d8:98:a8:b7:31:99:df:49:5a:db:1d:4d: 11:b5:19:1a:c3:02:04:41:ff:29:4d:53:f3:fa:cd: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2B:34:0A:A6:5F:17:87:2D:96:84:1F:93:DD:E8:02:3D:AF:D8:4F X509v3 Authority Key Identifier: keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8e:99:c0:2e:18:d9:4d:58:ae:f0:11:85:d6:80:d2:f5:ad: 2d:07:0c:29:59:b9:16:2d:fb:16:1d:08:85:b1:38:88:f8:9f: 95:94:d4:29:eb:00:14:04:ae:70:f7:dc:4d:b9:12:f5:cf:bf: d5:e9:71:37:c6:cb:d6:5b:f6:b0:03:9b:b0:52:33:d6:13:8c: 2c:b6:20:78:92:8e:dc:38:10:3b:58:2c:fc:b6:86:77:ab:87: c4:ca:34:8e:2b:66:9e:12:de:d7:c3:8a:71:69:1e:7d:95:02: be:12:31:f9:af:58:6a:66:40:8d:55:64:0d:4d:63:32:ba:58: ac:b6:3b:82:6f:e8:e7:01:59:d9:4d:39:3a:90:18:55:7f:a6: 05:36:b1:7f:8d:8f:2a:83:19:42:ec:46:ed:6b:f1:d8:04:1e: e1:b9:f8:36:26:48:9d:d6:5a:eb:ee:4b:0a:cf:86:f3:a0:91: 8f:22:c0:72:83:c1:cc:12:ed:31:42:b9:e7:a3:84:5c:4e:93: 09:06:95:de:d4:cf:a3:d7:6f:bb:a9:6f:68:0e:01:7d:e5:d4: 7a:c4:6c:73:24:1a:bc:e6:f6:03:f0:b9:6e:ea:57:0a:ba:8c: 44:dc:a7:30:13:13:61:c2:77:9e:4d:61:56:59:1d:e0:71:6e: c7:cb:8e:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziY5QgXWK2rEB3IdQeacJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk ODE5MjYwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD EygyNDJiMzQwYWE2NWYxNzg3MmQ5Njg0MWY5M2RkZTgwMjNkYWZkODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy6SoRVBdtVexRejc4JC5bqCJi1Y GaHLtwjEaVXJeg29eE9RTiNrC8Lm2cX3RvjBZhdez1Uip21kG53BiRwJurVxaJF7 8wd0ZA55rMAJn0SpYYu6nkk1Ook1WaaI5XorYBjS8uZB/P7RXmBA1SQN0YexsLRv 1iU8oTA8cG4xOWpMZ+hDwkRQ/Ld1Rfm3U/su8VhQuoN+GrzVfx8+oXLccg6d0vip 8uE7//+/uevBGXtjQ/sCqxJ16/5AhQ/je2ek1KsnE6+SHzzWHP+TRbSqWVD6Xb9x 5n47MmnjARHLEoH9srzYmKi3MZnfSVrbHU0RtRkawwIEQf8pTVPz+s0rQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQrNAqmXxeHLZaEH5Pd6AI9r9hPMB8GA1UdIwQY MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACY6ZwC4Y 2U1YrvARhdaA0vWtLQcMKVm5Fi37Fh0IhbE4iPiflZTUKesAFASucPfcTbkS9c+/ 1elxN8bL1lv2sAObsFIz1hOMLLYgeJKO3DgQO1gs/LaGd6uHxMo0jitmnhLe18OK cWkefZUCvhIx+a9YamZAjVVkDU1jMrpYrLY7gm/o5wFZ2U05OpAYVX+mBTaxf42P KoMZQuxG7Wvx2AQe4bn4NiZIndZa6+5LCs+G86CRjyLAcoPBzBLtMUK556OEXE6T CQaV3tTPo9dvu6lvaA4BfeXUesRscyQavOb2A/C5bupXCrqMRNynMBMTYcJ3nk1h Vlkd4HFux8uOHA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:07 2025 by rpki-client