This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json) Hash identifier: zxX1aou3xZ06U7SwV5ySf3SRN/lTK2uHVLjMF9uwXqs= Subject key identifier: AD:7E:44:93:7E:9D:68:8D:6F:1F:0E:D2:0F:E6:02:53:7E:B6:63:2B Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11 Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11 Certificate serial: 019AF276E39D8C01B1C5993312974209AD73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft Manifest number: 07EC Signing time: Sat 06 Dec 2025 07:01:08 +0000 Manifest this update: Sat 06 Dec 2025 07:01:08 +0000 Manifest next update: Sun 07 Dec 2025 07:01:08 +0000 Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 1VGQnejXKF/SmrrxFazZpg6lIh+ghmbr7G1rw0O39so=) 2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e3:9d:8c:01:b1:c5:99:33:12:97:42:09:ad:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11 Validity Not Before: Dec 6 07:01:08 2025 GMT Not After : Dec 7 07:01:08 2025 GMT Subject: CN=ad7e44937e9d688d6f1f0ed20fe602537eb6632b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:62:37:ee:cb:91:b6:80:18:2d:2b:0d:3e: de:5b:a8:6c:53:20:2e:79:2d:90:3b:00:64:b9:0d: 42:15:ef:2d:06:0d:90:84:19:1f:11:18:60:80:ba: 36:e7:6e:79:da:50:73:d0:54:7e:52:cd:f4:7c:a0: d2:1f:66:77:df:85:31:fd:f3:79:af:1d:9a:98:61: c2:21:20:92:dd:34:6c:0c:d7:4d:b5:de:1c:0f:76: 6a:60:08:92:ba:7d:0b:f4:44:f2:e7:7e:20:14:b1: 1c:0d:ae:3e:77:92:1e:56:ae:52:09:d0:28:f9:f0: 6d:b6:1d:9a:e5:13:5a:be:71:c2:67:c9:51:bf:87: 9c:04:da:5f:72:85:94:2f:8b:46:80:92:64:68:a6: 3d:24:ae:4b:c2:b3:ab:d9:9a:69:2a:32:27:ef:89: 2a:1f:b4:9f:8c:d5:5f:75:1a:62:ec:f5:e2:b6:87: f7:41:58:51:64:86:1b:0e:da:d7:a8:06:12:86:00: af:8d:49:3a:60:42:57:3f:87:db:fe:7f:07:c9:54: a9:d1:6d:cc:3a:7f:6d:a0:b7:0c:b6:48:dd:5c:0c: 7a:e5:36:63:51:f1:31:69:f9:8a:d4:e0:ca:12:62: 48:06:5c:3a:0d:0c:32:c6:25:df:68:ac:27:ef:9d: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7E:44:93:7E:9D:68:8D:6F:1F:0E:D2:0F:E6:02:53:7E:B6:63:2B X509v3 Authority Key Identifier: keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fd:d8:0e:74:68:a4:c6:3e:72:69:bc:1f:8d:37:1e:a5:2e: 24:6f:09:c1:ba:0b:1e:75:5d:6e:16:54:db:60:49:11:7f:3e: c1:11:cf:cb:67:75:7b:cc:4a:fe:eb:98:bc:8c:a2:6c:9d:89: 15:45:fc:66:76:5d:5f:23:8d:33:64:db:fe:fa:4d:c7:d8:5d: e0:78:3e:b9:47:4d:31:c5:39:a6:35:0c:a1:26:12:44:9f:d1: 1a:5e:7c:10:7e:2b:67:16:41:06:1e:51:7a:2a:46:21:a5:31: 8d:9a:f4:e4:e2:03:15:53:49:7f:9c:13:2a:c2:f7:0e:12:44: e8:67:47:7f:54:66:8d:e3:8a:4a:ea:94:2f:71:a0:db:ba:cc: a9:ae:6e:94:c7:be:9d:42:db:fc:c1:1b:ee:bc:dc:c2:92:c7: ca:07:de:e0:0b:8b:07:d6:13:94:71:3d:c1:30:63:bc:62:3b: f4:e4:d2:49:f6:fc:b0:26:d7:14:f6:c1:76:62:e5:fb:59:cb: b3:56:ad:c8:67:c3:46:de:f5:76:76:64:98:31:20:45:2c:16: 3a:ad:e8:04:bf:d3:b4:c9:ac:85:7c:06:88:0e:98:8f:17:3c: 73:81:53:f8:a3:9f:07:3c:54:20:c5:89:fd:bd:f4:2c:67:2b: d2:59:30:ec -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryduOdjAGxxZkzEpdCCa1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDViNTczZmIwZDI2OTk5MmE3OWE5ZTZiNDVjZGQ2MjBk ZWNjMTEwHhcNMjUxMjA2MDcwMTA4WhcNMjUxMjA3MDcwMTA4WjAzMTEwLwYDVQQD EyhhZDdlNDQ5MzdlOWQ2ODhkNmYxZjBlZDIwZmU2MDI1MzdlYjY2MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy85iN+7LkbaAGC0rDT7eW6hsUyAu eS2QOwBkuQ1CFe8tBg2QhBkfERhggLo252552lBz0FR+Us30fKDSH2Z334Ux/fN5 rx2amGHCISCS3TRsDNdNtd4cD3ZqYAiSun0L9ETy534gFLEcDa4+d5IeVq5SCdAo +fBtth2a5RNavnHCZ8lRv4ecBNpfcoWUL4tGgJJkaKY9JK5LwrOr2ZppKjIn74kq H7SfjNVfdRpi7PXitof3QVhRZIYbDtrXqAYShgCvjUk6YEJXP4fb/n8HyVSp0W3M On9toLcMtkjdXAx65TZjUfExafmK1ODKEmJIBlw6DQwyxiXfaKwn751tRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK1+RJN+nWiNbx8O0g/mAlN+tmMrMB8GA1UdIwQY MBaAFPvVtXP7DSaZkqeanmtFzdYg3swRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05VzFjX3NOSnBtU3A1cWVhMFhOMWlEZXpCRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAy LTUwZjNkMWFlOTQ0Mi8xLzEtOVcxY19zTkpwbVNwNXFlYTBYTjFpRGV6QkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRiLzY0MzhjMC01NGU1LTRiMzMtOTUwMi01MGYzZDFhZTk0 NDIvMS8xLTlXMWNfc05KcG1TcDVxZWEwWE4xaURlekJFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZf3Y DnRopMY+cmm8H403HqUuJG8JwboLHnVdbhZU22BJEX8+wRHPy2d1e8xK/uuYvIyi bJ2JFUX8ZnZdXyONM2Tb/vpNx9hd4Hg+uUdNMcU5pjUMoSYSRJ/RGl58EH4rZxZB Bh5ReipGIaUxjZr05OIDFVNJf5wTKsL3DhJE6GdHf1RmjeOKSuqUL3Gg27rMqa5u lMe+nULb/MEb7rzcwpLHygfe4AuLB9YTlHE9wTBjvGI79OTSSfb8sCbXFPbBdmLl +1nLs1atyGfDRt71dnZkmDEgRSwWOq3oBL/TtMmshXwGiA6Yjxc8c4FT+KOfBzxU IMWJ/b30LGcr0lkw7A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:57 2025 by rpki-client