This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json) Hash identifier: dW24MQLGmncRbHtoWqiDqL9ld9ec/gCniDwL33AyIPQ= Subject key identifier: 7D:CB:63:51:7D:F4:5B:7C:33:D0:76:FE:B0:FE:66:F3:15:06:09:6B Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Certificate serial: 019AF3524209DB9140AE76B02C76C542A7FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: bdWOWwIfK5rmN9lidnIcN0ASFPdTxdzXjaiDUu5+KTY=) 2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:42:09:db:91:40:ae:76:b0:2c:76:c5:42:a7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=7dcb63517df45b7c33d076feb0fe66f31506096b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:ef:43:38:0e:f7:d8:73:4a:da:50:ba:52: b3:38:bf:8d:f5:c2:6f:28:d3:32:9a:14:07:e4:62: 6f:b0:c3:f0:9e:7b:9c:1b:0b:aa:8d:22:a9:2f:2c: f6:47:04:e8:74:3b:4a:a4:3d:24:eb:cb:97:e0:72: 56:97:9e:74:60:45:52:ab:c4:db:e2:ec:19:f1:be: b7:cc:28:27:45:4c:48:42:e0:58:11:67:75:eb:71: ff:92:be:dc:b5:20:75:1f:ac:cd:62:5d:f3:6c:50: 57:9a:b3:25:0c:4f:ac:28:9e:dc:f1:26:76:8d:d5: 9c:ab:72:cc:ae:a3:9d:a4:7d:91:eb:fc:16:9c:50: 9d:6a:db:c5:90:35:75:15:8f:a1:a5:d4:63:8a:58: 15:fd:c2:68:14:6e:9b:28:55:90:80:bb:3c:43:90: 16:cb:4a:26:0e:62:27:43:58:04:de:f8:9d:92:31: a3:99:23:6f:04:33:2c:01:92:e1:0b:a5:f4:e9:59: 2c:fd:28:07:09:a9:60:9d:32:d2:7f:be:af:bf:02: e4:43:7d:2c:56:26:0c:6b:4d:91:83:eb:46:5b:86: 88:61:4f:cb:ee:56:36:bd:3e:20:df:e6:4f:70:b1: f7:93:08:eb:3f:02:ab:c6:d7:a7:de:5e:f1:ae:a2: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:63:51:7D:F4:5B:7C:33:D0:76:FE:B0:FE:66:F3:15:06:09:6B X509v3 Authority Key Identifier: keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9f:18:d2:cd:9a:07:e9:d9:97:4f:38:18:cd:4c:c0:35:93: c9:83:7a:94:7b:62:48:6d:e0:7c:32:7c:b1:29:54:50:38:55: ce:69:48:d1:92:08:b7:59:71:71:3a:23:d3:e7:3d:61:f8:67: 78:8e:2c:eb:fb:48:29:9f:0d:33:28:cb:18:49:4c:aa:15:f2: b9:24:ac:fe:ce:48:cd:f7:ae:3b:f8:65:e4:43:be:4f:64:c0: 29:13:7c:7e:04:f0:dc:27:41:64:bf:31:50:a0:3a:5f:c3:d5: 7a:76:a4:7d:02:5f:7e:33:20:ac:61:7c:f3:5d:77:51:a8:89: a9:ef:cb:26:1a:ed:7c:38:d8:d8:e6:67:1e:30:7b:68:ca:5b: b0:3d:32:53:a1:e2:64:ca:e0:b0:df:96:83:0c:3f:e2:92:dc: 9e:d5:2d:9e:bc:27:a6:80:c0:e6:92:31:c2:78:9c:8c:d2:7c: 63:ae:72:39:41:63:4a:07:bc:3d:a7:4f:ab:49:01:39:4d:42: c4:ff:11:29:d3:49:8b:af:cf:ed:bf:17:5e:fa:23:2f:6e:46: a8:1d:1c:f2:e7:84:34:85:f6:43:6b:fc:59:70:1d:d0:19:18: 00:fa:dc:33:92:e2:86:8f:15:86:4d:64:e4:5a:4b:fe:70:95: 8e:c1:57:10 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzUkIJ25FArnawLHbFQqf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm NWZjYjIwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD Eyg3ZGNiNjM1MTdkZjQ1YjdjMzNkMDc2ZmViMGZlNjZmMzE1MDYwOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUDvQzgO99hzStpQulKzOL+N9cJv KNMymhQH5GJvsMPwnnucGwuqjSKpLyz2RwTodDtKpD0k68uX4HJWl550YEVSq8Tb 4uwZ8b63zCgnRUxIQuBYEWd163H/kr7ctSB1H6zNYl3zbFBXmrMlDE+sKJ7c8SZ2 jdWcq3LMrqOdpH2R6/wWnFCdatvFkDV1FY+hpdRjilgV/cJoFG6bKFWQgLs8Q5AW y0omDmInQ1gE3vidkjGjmSNvBDMsAZLhC6X06Vks/SgHCalgnTLSf76vvwLkQ30s ViYMa02Rg+tGW4aIYU/L7lY2vT4g3+ZPcLH3kwjrPwKrxten3l7xrqLBoQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH3LY1F99Ft8M9B2/rD+ZvMVBglrMB8GA1UdIwQY MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2 LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ8Y 0s2aB+nZl084GM1MwDWTyYN6lHtiSG3gfDJ8sSlUUDhVzmlI0ZIIt1lxcToj0+c9 YfhneI4s6/tIKZ8NMyjLGElMqhXyuSSs/s5IzfeuO/hl5EO+T2TAKRN8fgTw3CdB ZL8xUKA6X8PVenakfQJffjMgrGF88113UaiJqe/LJhrtfDjY2OZnHjB7aMpbsD0y U6HiZMrgsN+Wgww/4pLcntUtnrwnpoDA5pIxwnicjNJ8Y65yOUFjSge8PadPq0kB OU1CxP8RKdNJi6/P7b8XXvojL25GqB0c8ueENIX2Q2v8WXAd0BkYAPrcM5Liho8V hk1k5FpL/nCVjsFXEA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:30 2025 by rpki-client