This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json) Hash identifier: FGaB8IkMCwJzwmORVnZWyrdq0zCcfrMlzson445DpTo= Subject key identifier: CE:D2:B4:B0:84:AC:35:B4:54:6E:24:80:21:EA:69:13:5A:5F:E6:5D Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097 Certificate serial: 019AF50A2D8E07233643001C8B46E802B6FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft Manifest number: 03EE Signing time: Sat 06 Dec 2025 19:01:16 +0000 Manifest this update: Sat 06 Dec 2025 19:01:16 +0000 Manifest next update: Sun 07 Dec 2025 19:01:16 +0000 Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: FwB8RRwH0dJsmhpYh5d7GNtAvv+uyy+CZ0D0SB6Yf7M=) 2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:2d:8e:07:23:36:43:00:1c:8b:46:e8:02:b6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097 Validity Not Before: Dec 6 19:01:16 2025 GMT Not After : Dec 7 19:01:16 2025 GMT Subject: CN=ced2b4b084ac35b4546e248021ea69135a5fe65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:62:4d:41:a3:e3:f8:ad:59:b0:29:43:f4: 12:88:ac:4d:fb:f2:a5:a3:21:f8:20:2b:63:53:4d: 8d:bb:cc:56:51:cf:a8:94:02:a4:e5:cc:fb:9b:d6: 97:dc:2f:c6:fb:c7:4f:e2:0b:01:06:8f:5f:e9:e5: d2:75:82:47:9c:ab:69:59:83:71:75:81:a8:64:aa: a4:92:21:b5:92:8e:e3:25:68:b8:74:83:ad:8a:d3: ab:25:6e:8c:a3:7b:4f:19:f4:7e:2b:19:33:e8:fa: e6:5d:7a:03:73:5c:e7:30:80:73:ca:8c:67:82:5a: de:ba:6a:4f:17:1a:56:8e:de:f0:e9:2e:68:cf:80: f4:b7:84:b7:72:0e:d7:a8:78:c8:aa:11:78:60:c8: f9:30:0d:00:fa:35:51:0e:63:02:dd:e0:6e:2c:cc: 11:fd:ea:35:d7:94:b7:5d:89:1e:3e:f1:52:b9:b0: 92:89:30:fe:7e:c3:da:91:f1:9c:b6:5d:02:27:f2: 78:68:e6:29:fb:38:1e:aa:f4:b8:e3:36:8b:ef:31: b7:b9:7c:3b:cb:a5:a5:37:b3:99:74:8d:d4:24:cd: 0b:33:7f:2b:4b:36:f9:52:c1:e0:8b:db:63:21:7f: 9c:df:57:70:41:9a:e4:5c:5d:8a:3b:5d:b8:8d:8b: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:B4:B0:84:AC:35:B4:54:6E:24:80:21:EA:69:13:5A:5F:E6:5D X509v3 Authority Key Identifier: keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:44:7a:70:54:35:f9:8a:a5:13:b0:6d:6f:44:e9:8c:b4:42: 3d:25:ef:9d:79:7a:85:1b:0e:91:ad:21:ef:a5:c3:c7:6e:f7: 7f:b1:90:d5:4e:e8:1c:1a:65:9d:12:60:ff:5b:21:76:f9:a2: b4:ed:12:4a:0e:d4:84:41:ab:e9:ba:b7:f1:ee:fd:10:d5:32: 82:a6:dc:b6:4c:9c:28:fd:02:9f:24:7f:dd:e8:26:46:cc:77: 09:fe:89:a6:9a:5c:a0:08:1e:cc:21:c6:15:c4:bc:22:44:ba: 2d:ff:2c:60:c3:9e:c1:15:6c:d4:7b:85:68:d6:28:6a:c2:d4: f5:e1:41:44:3b:e0:16:08:1f:f7:d4:67:0e:c9:54:63:54:7a: 4d:23:dd:a6:3d:63:76:2c:83:c1:4c:a5:9a:75:c0:46:49:d3: 8a:05:8f:cd:d4:49:8a:ec:e0:f5:28:a1:e1:20:4b:45:1f:56: 6d:01:66:07:9b:17:08:66:90:ec:9b:ce:ca:9b:f6:5c:9f:b7: ac:ea:83:4b:ee:28:c4:0a:86:9f:b0:6e:d8:08:29:4d:ef:00: a4:b1:a1:bb:8b:e3:03:e7:d8:fc:06:17:96:eb:41:a6:52:1b: 37:79:8f:93:e3:14:a6:b9:8f:0e:d8:23:06:2b:4b:89:c3:93: 46:cd:1a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ci2OByM2QwAci0boArb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4 MzkwOTcwHhcNMjUxMjA2MTkwMTE2WhcNMjUxMjA3MTkwMTE2WjAzMTEwLwYDVQQD EyhjZWQyYjRiMDg0YWMzNWI0NTQ2ZTI0ODAyMWVhNjkxMzVhNWZlNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGliTUGj4/itWbApQ/QSiKxN+/Kl oyH4ICtjU02Nu8xWUc+olAKk5cz7m9aX3C/G+8dP4gsBBo9f6eXSdYJHnKtpWYNx dYGoZKqkkiG1ko7jJWi4dIOtitOrJW6Mo3tPGfR+Kxkz6PrmXXoDc1znMIBzyoxn glreumpPFxpWjt7w6S5oz4D0t4S3cg7XqHjIqhF4YMj5MA0A+jVRDmMC3eBuLMwR /eo115S3XYkePvFSubCSiTD+fsPakfGctl0CJ/J4aOYp+zgeqvS44zaL7zG3uXw7 y6WlN7OZdI3UJM0LM38rSzb5UsHgi9tjIX+c31dwQZrkXF2KO124jYubbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7StLCErDW0VG4kgCHqaRNaX+ZdMB8GA1UdIwQY MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUR6cFQ1 +YqlE7Btb0TpjLRCPSXvnXl6hRsOka0h76XDx273f7GQ1U7oHBplnRJg/1shdvmi tO0SSg7UhEGr6bq38e79ENUygqbctkycKP0CnyR/3egmRsx3Cf6JpppcoAgezCHG FcS8IkS6Lf8sYMOewRVs1HuFaNYoasLU9eFBRDvgFggf99RnDslUY1R6TSPdpj1j diyDwUylmnXARknTigWPzdRJiuzg9Sih4SBLRR9WbQFmB5sXCGaQ7JvOypv2XJ+3 rOqDS+4oxAqGn7Bu2AgpTe8ApLGhu4vjA+fY/AYXlutBplIbN3mPk+MUprmPDtgj BitLicOTRs0aGw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:03 2025 by rpki-client