This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json) Hash identifier: WCB7+uibF7mYpPHbscGWHc5Oit7zH0OmB8w0Ju3kNOE= Subject key identifier: 7E:C9:FD:5E:F9:22:E0:C7:13:B9:77:09:41:B0:F1:7B:DF:4C:5F:CE Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c Certificate serial: 019AF49BB89B5AC99A9501BA6A698D99B28F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft Manifest number: 0C9B Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: UMcjlJVAck8AQAYrhWOG2f41dyFK9ErLodK/EZov//A=) 2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b8:9b:5a:c9:9a:95:01:ba:6a:69:8d:99:b2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=7ec9fd5ef922e0c713b9770941b0f17bdf4c5fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:86:67:93:32:f8:ab:e1:1a:7e:0b:12:b6: 98:e7:88:9e:50:9d:47:7c:5e:4b:17:e5:f9:40:23: a9:53:d2:48:39:aa:f9:d6:b6:bf:e4:29:8b:aa:e3: 10:5e:31:6b:46:f6:3e:2c:56:10:1d:7b:db:6a:1c: b7:48:8c:e7:49:28:20:f9:28:e3:05:87:74:f2:81: 21:a1:50:50:73:79:0f:d4:e8:c8:7b:03:51:6e:35: 39:65:fa:e2:ec:34:99:14:92:5c:3b:e0:fb:ab:32: fe:7b:99:6e:bc:9f:a9:6a:5d:28:8a:70:db:84:24: 69:00:49:2a:f6:a5:3b:a8:9e:8b:34:af:83:fb:04: 64:6d:98:8b:ca:43:1e:44:f6:e8:d1:ba:66:70:fa: 57:43:f4:16:53:87:4f:eb:55:8e:25:b1:14:7c:8c: 93:51:d3:bb:5f:2a:13:33:de:fc:49:1a:16:b8:09: fd:18:46:56:2c:95:cd:d8:71:bd:b5:fa:8d:9f:37: 2c:4f:73:4f:2f:35:89:b6:c6:00:d8:e5:44:c0:e4: fc:2f:d1:b7:cd:d3:4d:98:aa:ab:9c:4d:66:83:18: 19:fd:aa:09:21:25:b0:1c:33:3b:74:5a:f5:9c:77: d4:b5:55:71:c0:c6:7d:21:30:10:c1:57:8d:61:ab: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:FD:5E:F9:22:E0:C7:13:B9:77:09:41:B0:F1:7B:DF:4C:5F:CE X509v3 Authority Key Identifier: keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8b:fe:1e:93:f1:58:7a:a7:7d:14:27:1c:f8:85:7e:f2:7c: 94:f6:20:4f:bc:15:78:07:f3:43:41:5c:a1:ed:f4:f4:a6:5c: 7f:e1:34:6c:71:8e:c8:da:68:65:77:b2:c7:fe:40:0c:15:49: 01:7f:32:5a:4c:6d:e2:7b:1d:c4:4d:16:32:1a:eb:9a:1e:97: d5:e9:f2:f8:ef:9d:b4:06:be:6f:fd:cc:aa:eb:8a:99:05:07: e3:62:ed:0a:4e:3d:b7:dd:24:ac:ff:e6:da:1c:45:9c:98:d9: 7a:da:25:32:ca:c6:3f:d2:d2:c7:42:1a:53:6e:df:5b:4e:62: 14:3d:70:08:d8:96:7d:ed:37:d2:fe:d9:b5:67:99:e4:4b:31: 47:09:b6:67:ed:35:34:fb:8e:ff:5a:6e:24:a5:23:61:21:1c: e8:31:44:17:9b:6e:91:ea:bf:6e:97:35:e5:69:78:18:b6:ab: 70:79:a9:ec:40:59:d1:12:27:14:75:f0:94:96:2f:80:81:43: b7:15:ff:c6:94:25:83:bf:0d:a5:6e:ac:25:13:a9:af:9e:af: 0d:9c:91:d3:c2:cb:23:f8:6e:cd:4b:dd:26:30:dc:48:aa:d3: 96:9a:de:f4:1f:8b:0f:a8:b9:8f:ba:b3:3b:32:52:9a:8c:1a: 09:8e:4e:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0m7ibWsmalQG6ammNmbKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzIzNzA2ZDBlODM3NThiYTUyMTM4ZTlkYjQyMDdiNWE1 YzE4OWMwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD Eyg3ZWM5ZmQ1ZWY5MjJlMGM3MTNiOTc3MDk0MWIwZjE3YmRmNGM1ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6eGZ5My+KvhGn4LEraY54ieUJ1H fF5LF+X5QCOpU9JIOar51ra/5CmLquMQXjFrRvY+LFYQHXvbahy3SIznSSgg+Sjj BYd08oEhoVBQc3kP1OjIewNRbjU5Zfri7DSZFJJcO+D7qzL+e5luvJ+pal0oinDb hCRpAEkq9qU7qJ6LNK+D+wRkbZiLykMeRPbo0bpmcPpXQ/QWU4dP61WOJbEUfIyT UdO7XyoTM978SRoWuAn9GEZWLJXN2HG9tfqNnzcsT3NPLzWJtsYA2OVEwOT8L9G3 zdNNmKqrnE1mgxgZ/aoJISWwHDM7dFr1nHfUtVVxwMZ9ITAQwVeNYat5CwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH7J/V75IuDHE7l3CUGw8XvfTF/OMB8GA1UdIwQY MBaAFPtyNwbQ6DdYulITjp20IHtaXBicMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zSTNCdERvTjFpNlVoT09uYlFnZTFwY0dKdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMxLTgzNTYtNDMyZC1hMzRk LWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9PbmJRZ2UxcGNHSncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU5L2NmYWMzMS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2 ZmQvMS8xLTNJM0J0RG9OMWk2VWhPT25iUWdlMXBjR0p3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqov+ HpPxWHqnfRQnHPiFfvJ8lPYgT7wVeAfzQ0Fcoe309KZcf+E0bHGOyNpoZXeyx/5A DBVJAX8yWkxt4nsdxE0WMhrrmh6X1eny+O+dtAa+b/3MquuKmQUH42LtCk49t90k rP/m2hxFnJjZetolMsrGP9LSx0IaU27fW05iFD1wCNiWfe030v7ZtWeZ5EsxRwm2 Z+01NPuO/1puJKUjYSEc6DFEF5tukeq/bpc15Wl4GLarcHmp7EBZ0RInFHXwlJYv gIFDtxX/xpQlg78NpW6sJROpr56vDZyR08LLI/huzUvdJjDcSKrTlpre9B+LD6i5 j7qzOzJSmowaCY5OOw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:01 2025 by rpki-client