This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json) Hash identifier: +hyLtHf/e07pOfKMX+Qg8bsjvYXerIAQBVWoOLl6v9E= Subject key identifier: 9B:50:48:3D:EC:CB:27:15:00:B7:4A:27:7E:59:8F:DB:69:92:E8:47 Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Certificate serial: 019AF12E1529E07BEC8403E7C81973F15C31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft Manifest number: 0B0B Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: 0fBJyfgQofYfcZjk0Rh4FdWJXB+HpXDuo7z9Y4WyXfo=) 2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:15:29:e0:7b:ec:84:03:e7:c8:19:73:f1:5c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=9b50483deccb271500b74a277e598fdb6992e847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:0b:0a:3b:11:9c:77:11:36:cf:98:ab:65: a9:60:ea:01:4c:f2:3b:65:a5:6a:f8:73:5f:f8:40: b6:cc:76:d9:f6:08:10:db:6b:00:74:ba:f2:3b:a1: 21:db:71:69:f6:ab:46:4a:cc:20:a1:da:24:c5:68: 2a:53:16:5a:1e:33:80:f7:54:f3:73:06:b8:40:57: df:f4:68:ae:cc:4f:a6:6b:88:89:fe:be:ec:15:0c: 26:78:74:67:3b:95:c0:b9:07:e0:5f:92:26:9d:a2: fa:cc:a7:e8:1a:22:01:5a:0f:de:95:49:6b:ee:fc: c5:4c:1f:3e:2d:9e:23:1a:cc:1f:70:50:8c:84:66: 94:d3:30:dd:33:70:91:16:ee:22:b0:5b:e5:34:b7: 4b:4f:a1:22:81:00:8a:db:35:ca:b0:ec:4f:49:08: b9:e0:7c:16:4e:87:82:19:c9:b9:e7:7f:1b:cb:5c: a4:d8:61:27:f9:42:a0:18:44:93:cb:6e:3d:53:27: 92:d9:12:75:c3:87:e4:58:a9:41:f3:ac:8c:ad:a8: 7c:c2:97:80:8a:91:a4:60:b6:bc:72:57:6d:7b:d7: 64:8c:98:ec:0d:52:b2:09:7c:d5:ab:78:8f:5f:a4: 0d:a4:57:8c:e4:b0:62:39:af:eb:8a:47:ca:d5:56: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:48:3D:EC:CB:27:15:00:B7:4A:27:7E:59:8F:DB:69:92:E8:47 X509v3 Authority Key Identifier: keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:77:54:c3:1b:e6:0b:c8:e8:24:69:b0:f3:e2:3e:fa:64:a1: f0:3b:22:e2:ed:ef:13:e1:3b:b2:f8:eb:7c:3b:a9:eb:57:cf: 2c:c1:fa:65:2e:fa:da:b0:7b:5f:34:0c:f5:2a:3f:35:2d:d2: 5d:f6:dd:a3:0f:0a:ea:db:8d:40:e6:75:f6:12:07:30:cf:2e: 97:53:d8:46:06:ad:10:43:d8:9d:2a:e1:cf:e5:33:a4:64:9a: b1:bc:13:84:81:9e:36:af:c8:d1:01:d8:b9:e5:b0:e3:48:41: ac:c3:76:61:2a:02:10:2a:7b:da:34:9d:6d:d1:cd:b2:0b:83: d9:fc:e2:95:b2:a7:76:3b:2b:16:a5:c7:3b:71:99:bc:2b:81: 18:4e:69:22:98:87:1b:e2:ee:46:10:f9:18:f9:9d:0e:1a:f4: 90:48:a2:3d:ad:0a:2e:0e:0c:b1:e9:43:e0:bc:d0:bd:ec:e9: ca:c1:14:6a:cd:9a:d0:48:d9:e4:e8:eb:5a:29:4d:12:26:6b: a8:b7:47:de:c3:46:b5:19:d5:73:88:77:e9:a1:8d:ae:f9:99: 90:82:81:3d:29:9f:43:7b:3c:a4:ee:12:6f:83:42:b4:3f:7e: e0:73:5d:e1:fa:5d:66:61:52:fa:51:f8:66:55:7d:11:c2:41: 61:93:bb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhUp4HvshAPnyBlz8VwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi NWNhNzkwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD Eyg5YjUwNDgzZGVjY2IyNzE1MDBiNzRhMjc3ZTU5OGZkYjY5OTJlODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfQLCjsRnHcRNs+Yq2WpYOoBTPI7 ZaVq+HNf+EC2zHbZ9ggQ22sAdLryO6Eh23Fp9qtGSswgodokxWgqUxZaHjOA91Tz cwa4QFff9GiuzE+ma4iJ/r7sFQwmeHRnO5XAuQfgX5ImnaL6zKfoGiIBWg/elUlr 7vzFTB8+LZ4jGswfcFCMhGaU0zDdM3CRFu4isFvlNLdLT6EigQCK2zXKsOxPSQi5 4HwWToeCGcm5538by1yk2GEn+UKgGESTy249UyeS2RJ1w4fkWKlB86yMrah8wpeA ipGkYLa8cldte9dkjJjsDVKyCXzVq3iPX6QNpFeM5LBiOa/rikfK1VZuZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtQSD3syycVALdKJ35Zj9tpkuhHMB8GA1UdIwQY MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHdUwxvm C8joJGmw8+I++mSh8Dsi4u3vE+E7svjrfDup61fPLMH6ZS762rB7XzQM9So/NS3S Xfbdow8K6tuNQOZ19hIHMM8ul1PYRgatEEPYnSrhz+UzpGSasbwThIGeNq/I0QHY ueWw40hBrMN2YSoCECp72jSdbdHNsguD2fzilbKndjsrFqXHO3GZvCuBGE5pIpiH G+LuRhD5GPmdDhr0kEiiPa0KLg4MselD4LzQvezpysEUas2a0EjZ5OjrWilNEiZr qLdH3sNGtRnVc4h36aGNrvmZkIKBPSmfQ3s8pO4Sb4NCtD9+4HNd4fpdZmFS+lH4 ZlV9EcJBYZO73w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:32 2025 by rpki-client