This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json) Hash identifier: zjV8e6gk94Lk06y8q/R3HSEUiAcAtCeIBGAdNf1qd58= Subject key identifier: 79:F4:0D:DD:2A:26:75:0C:89:5B:54:C1:65:7D:AC:6F:69:6F:B8:A5 Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00 Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00 Certificate serial: 019AF6F972E9AE8EC68DA509AED429C614FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft Manifest number: 176A Signing time: Sun 07 Dec 2025 04:02:14 +0000 Manifest this update: Sun 07 Dec 2025 04:02:14 +0000 Manifest next update: Mon 08 Dec 2025 04:02:14 +0000 Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: t+7R7+oqLhgCObnDJrVfZnLn38oVsNxQvZgUATFHZRE=) 2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:72:e9:ae:8e:c6:8d:a5:09:ae:d4:29:c6:14:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00 Validity Not Before: Dec 7 04:02:14 2025 GMT Not After : Dec 8 04:02:14 2025 GMT Subject: CN=79f40ddd2a26750c895b54c1657dac6f696fb8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:92:b8:04:4d:08:57:44:a3:f7:ca:4a:53: 5c:f5:3e:96:bc:93:e9:ce:62:e6:5f:69:82:83:88: 94:69:7e:23:cc:d5:7b:29:50:f5:ae:47:e4:be:51: 2c:51:24:15:f0:c6:ad:8f:b2:ed:90:0b:54:64:62: c8:2f:06:8c:1d:ce:29:57:ba:b1:e3:1e:9d:9c:d9: d4:2c:fe:d1:0e:a3:dc:9b:d8:42:e2:c1:d3:e9:bc: 66:aa:ca:9c:ca:1f:28:b5:33:0c:79:f5:9b:24:a4: 4d:0c:e6:cc:6a:d5:e0:64:01:84:1b:aa:60:14:ce: d2:59:b7:1f:0e:8a:c3:d3:25:d0:a2:92:ca:07:2f: c7:db:a4:ac:bc:ba:4c:cd:7f:12:36:9c:e8:d1:b1: 53:4c:50:2e:51:23:7c:5a:69:13:65:d1:b4:ea:2a: 53:3f:6a:cb:d3:73:71:b2:17:83:dd:a1:e6:6a:79: 77:ea:b5:93:c0:40:b8:26:49:00:ec:53:5e:ad:eb: 2b:9d:e0:31:d8:4b:a7:be:2d:5b:e7:2f:47:f4:6b: 46:5c:1b:18:b1:b5:7a:d6:57:df:92:f0:8a:2b:20: 1c:75:41:61:74:ff:50:62:b1:64:b2:3d:10:83:47: 76:08:70:91:2a:8e:30:9a:7f:d3:86:3c:3c:95:b6: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F4:0D:DD:2A:26:75:0C:89:5B:54:C1:65:7D:AC:6F:69:6F:B8:A5 X509v3 Authority Key Identifier: keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:20:54:00:e8:ae:04:09:52:dc:64:3e:70:0e:b0:d9:d7:6e: 05:9e:f9:2a:88:96:fc:c1:50:ab:53:b4:d5:18:7d:1c:d3:5b: ac:19:c1:02:38:18:50:ea:9a:46:1d:f0:84:4b:f2:31:42:5f: 71:9e:59:a6:6d:c3:ac:83:28:d2:9f:1e:45:e9:91:1a:ef:52: 0f:df:69:d4:c5:8e:14:52:b2:e9:1d:b2:d7:57:39:f7:96:08: 41:b5:58:7f:fa:8c:3c:84:aa:10:2e:38:35:e5:76:04:2f:e9: 1c:40:00:2c:84:00:29:da:69:8e:38:9e:cf:b2:05:1d:d1:be: 53:72:2f:19:69:6b:1e:06:62:36:4f:23:88:e5:9e:01:b3:43: d1:7c:12:12:ac:fc:37:22:24:c5:f4:41:e4:cf:17:e6:1a:be: 3b:67:47:21:e6:2d:6a:77:74:60:aa:c3:6c:29:5b:63:8f:37: 48:e5:74:bd:4a:14:68:58:0a:11:01:7e:97:e1:ca:60:70:5f: 6b:47:44:f8:67:20:98:c1:ad:3d:d4:ac:c2:41:fd:89:e6:f6: 44:71:03:7d:9e:5e:bc:2b:9e:29:c5:cd:bd:3d:8b:f0:57:63: ee:3f:7a:f8:7c:22:61:21:dd:8c:41:10:9c:d3:d8:f9:44:6b: b1:3c:29:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+XLpro7GjaUJrtQpxhT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm ZWRlMDAwHhcNMjUxMjA3MDQwMjE0WhcNMjUxMjA4MDQwMjE0WjAzMTEwLwYDVQQD Eyg3OWY0MGRkZDJhMjY3NTBjODk1YjU0YzE2NTdkYWM2ZjY5NmZiOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BuSuARNCFdEo/fKSlNc9T6WvJPp zmLmX2mCg4iUaX4jzNV7KVD1rkfkvlEsUSQV8Matj7LtkAtUZGLILwaMHc4pV7qx 4x6dnNnULP7RDqPcm9hC4sHT6bxmqsqcyh8otTMMefWbJKRNDObMatXgZAGEG6pg FM7SWbcfDorD0yXQopLKBy/H26SsvLpMzX8SNpzo0bFTTFAuUSN8WmkTZdG06ipT P2rL03NxsheD3aHmanl36rWTwEC4JkkA7FNeresrneAx2Eunvi1b5y9H9GtGXBsY sbV61lffkvCKKyAcdUFhdP9QYrFksj0Qg0d2CHCRKo4wmn/Thjw8lbY/eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn0Dd0qJnUMiVtUwWV9rG9pb7ilMB8GA1UdIwQY MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxiBUAOiu BAlS3GQ+cA6w2dduBZ75KoiW/MFQq1O01Rh9HNNbrBnBAjgYUOqaRh3whEvyMUJf cZ5Zpm3DrIMo0p8eRemRGu9SD99p1MWOFFKy6R2y11c595YIQbVYf/qMPISqEC44 NeV2BC/pHEAALIQAKdppjjiez7IFHdG+U3IvGWlrHgZiNk8jiOWeAbND0XwSEqz8 NyIkxfRB5M8X5hq+O2dHIeYtand0YKrDbClbY483SOV0vUoUaFgKEQF+l+HKYHBf a0dE+GcgmMGtPdSswkH9ieb2RHEDfZ5evCueKcXNvT2L8Fdj7j96+HwiYSHdjEEQ nNPY+URrsTwp/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:30 2025 by rpki-client