This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json) Hash identifier: aUDZrmDMKirTE7Dkapftt8E5WUObhI7VebALldVYF18= Subject key identifier: 83:84:4C:BB:F6:E7:47:1C:51:F7:AF:39:F3:0C:91:11:65:85:EF:D4 Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310 Certificate serial: 019AF0BF7BE27189F40AD102E8AE504E1BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft Manifest number: 04E7 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: LxR58kxWMudCqSDhijQweUiVVIWaIxZe3MWRSA++CA4=) 2: _6oTHI74z2ro3D6ku1-3IwQMDJQ.roa (hash: fv1LSUSBqvzluFwHlLJLOy0RtBrtwPS/3BKDLVcgGlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7b:e2:71:89:f4:0a:d1:02:e8:ae:50:4e:1b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=83844cbbf6e7471c51f7af39f30c91116585efd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:20:1f:a3:c2:0d:dd:57:cd:b9:60:75:8c: f8:c1:af:c7:51:18:2f:2c:90:c2:6d:08:d1:7a:fa: f5:13:49:28:60:ae:10:f6:4c:75:23:d0:d3:6f:67: 9d:bf:e5:fd:a6:56:2c:35:16:17:10:8f:41:27:fd: 7b:fc:6f:0e:e5:4d:9c:86:41:4b:0b:b6:12:d6:26: d3:70:3b:47:5d:fc:a1:d4:88:ba:f4:59:e6:58:c4: 46:97:77:c9:43:c8:d4:cf:4c:c8:26:02:20:03:b8: a3:fb:bc:98:14:9a:b1:65:c7:36:69:94:25:48:2a: 14:ca:7d:c8:e3:a1:f7:d9:16:28:ec:68:5d:f7:42: 8f:de:29:47:b7:1c:3a:a5:04:f2:e9:d8:23:88:6b: 59:f8:6e:92:e7:db:81:b1:a9:17:29:ec:a5:cb:81: c3:85:f0:37:d5:4a:ab:fa:d5:42:1a:fa:31:d1:b5: e6:0f:c0:8e:68:3c:6d:2b:4e:7e:f5:a8:ff:02:18: d5:4b:8c:ed:6a:73:f5:e6:e8:3c:ef:f7:47:be:35: ed:4a:d0:2d:cf:92:a4:ed:ba:86:29:8d:27:7e:f9: ef:30:5d:20:d8:98:c4:a8:56:a3:35:85:c4:d7:6a: ba:23:79:1e:7e:43:f7:e5:24:27:46:77:19:1f:d1: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:84:4C:BB:F6:E7:47:1C:51:F7:AF:39:F3:0C:91:11:65:85:EF:D4 X509v3 Authority Key Identifier: keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a6:49:6e:62:59:ba:4a:59:35:a9:4f:87:c7:d9:0a:27:05: aa:e5:ce:fc:93:6b:b3:32:f8:56:ff:21:3e:20:3d:02:ca:a4: bd:20:85:dd:30:ff:c7:9b:6f:ae:0e:16:bf:19:7f:c0:bc:d1: c1:c9:aa:3f:95:2e:7f:f8:13:1c:cf:58:c2:9a:1b:59:6c:aa: 27:a0:96:4e:0d:3f:cb:91:6b:ef:d9:7e:82:d7:cd:2f:be:44: 9a:cb:c2:56:79:e0:eb:59:10:d8:54:03:45:9e:25:cf:69:a3: 56:a0:f3:8d:21:70:9d:b5:28:a5:6f:c6:f9:d0:60:40:e4:35: 61:75:16:f9:18:20:a6:33:95:6e:13:42:db:8e:49:25:6b:9a: 6e:b0:94:98:de:94:b6:fe:01:56:04:fb:9f:35:5f:25:d2:25: 1a:d4:d5:29:26:78:22:af:c5:e3:1f:b7:73:92:e7:da:fb:6a: 71:31:b4:b0:7a:56:51:73:6c:a5:62:c2:1c:69:20:12:d3:48: 09:61:1a:f6:72:62:78:90:de:c9:ec:a2:97:5b:53:05:6d:cf: 57:18:c0:2e:69:dd:30:60:a7:d9:82:b0:cd:24:d4:f2:3b:08: 02:00:0d:f1:ac:3e:8a:6c:27:4d:a5:b1:da:0c:6a:a6:06:36: 7f:86:33:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3vicYn0CtEC6K5QThvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz NjczMTAwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD Eyg4Mzg0NGNiYmY2ZTc0NzFjNTFmN2FmMzlmMzBjOTExMTY1ODVlZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTogH6PCDd1XzblgdYz4wa/HURgv LJDCbQjRevr1E0koYK4Q9kx1I9DTb2edv+X9plYsNRYXEI9BJ/17/G8O5U2chkFL C7YS1ibTcDtHXfyh1Ii69FnmWMRGl3fJQ8jUz0zIJgIgA7ij+7yYFJqxZcc2aZQl SCoUyn3I46H32RYo7Ghd90KP3ilHtxw6pQTy6dgjiGtZ+G6S59uBsakXKeyly4HD hfA31Uqr+tVCGvox0bXmD8COaDxtK05+9aj/AhjVS4ztanP15ug87/dHvjXtStAt z5Kk7bqGKY0nfvnvMF0g2JjEqFajNYXE12q6I3kefkP35SQnRncZH9EKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOETLv250ccUfevOfMMkRFlhe/UMB8GA1UdIwQY MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3 LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKZJbmJZ ukpZNalPh8fZCicFquXO/JNrszL4Vv8hPiA9AsqkvSCF3TD/x5tvrg4Wvxl/wLzR wcmqP5Uuf/gTHM9YwpobWWyqJ6CWTg0/y5Fr79l+gtfNL75EmsvCVnng61kQ2FQD RZ4lz2mjVqDzjSFwnbUopW/G+dBgQOQ1YXUW+RggpjOVbhNC245JJWuabrCUmN6U tv4BVgT7nzVfJdIlGtTVKSZ4Iq/F4x+3c5Ln2vtqcTG0sHpWUXNspWLCHGkgEtNI CWEa9nJieJDeyeyil1tTBW3PVxjALmndMGCn2YKwzSTU8jsIAgAN8aw+imwnTaWx 2gxqpgY2f4Yz/g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:36 2025 by rpki-client