This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json) Hash identifier: jIAd+kpiFv08JRsn9eGjZaNEn2J7X63517rn1DPF1pA= Subject key identifier: 5D:1D:30:C9:F8:EF:0B:79:94:87:96:39:12:DD:37:79:D9:59:CB:9A Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4 Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4 Certificate serial: 019AF31BB4B4D24D4BE587AD8681B7ABC364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: yeFMI/v+eFPMp/uxjlV9nZe5XFBlejjheeyVFZ7uh2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b4:b4:d2:4d:4b:e5:87:ad:86:81:b7:ab:c3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4 Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=5d1d30c9f8ef0b799487963912dd3779d959cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:76:87:99:63:71:56:d2:79:ab:f9:dc:82: 37:a8:22:fb:ee:49:0d:7f:5e:da:35:a6:e8:2c:54: 2e:41:2c:0d:76:f0:b0:b3:a9:e5:a9:20:ba:01:90: f9:02:40:61:03:6c:8f:a6:ac:b8:94:74:74:84:8d: 5f:b2:cc:29:48:d5:b0:ce:38:a8:81:2f:65:5a:ed: 2f:df:f7:ed:50:2a:33:2f:d4:e6:03:a4:61:2e:ad: ea:41:7a:70:db:0c:e7:23:0a:c0:ab:a1:12:da:5e: 98:2f:ed:58:fc:3b:36:a7:03:6f:ce:a7:12:0c:47: 8f:8b:39:06:17:ff:fb:d0:ea:7a:06:a9:22:c3:df: 97:ea:34:db:0b:84:9c:44:19:e2:88:c3:db:cf:0b: e0:11:f8:a7:01:e9:12:ac:12:b1:28:d8:e1:ee:d4: e0:ff:89:a6:d4:0e:a2:9e:67:4e:1a:da:09:51:b8: 37:e9:fb:10:74:a1:0b:a9:88:f3:c1:88:e3:d9:6f: 0e:ca:cd:63:c1:d7:f1:f5:22:80:97:2e:18:ad:5a: ba:63:36:1c:94:65:c4:62:72:e9:3f:8b:05:44:d0: 3d:47:dd:c4:51:8f:ac:1e:51:10:4a:3c:9f:99:35: ec:b4:a6:36:be:fc:a2:c4:d8:30:d2:69:b9:31:d4: 10:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1D:30:C9:F8:EF:0B:79:94:87:96:39:12:DD:37:79:D9:59:CB:9A X509v3 Authority Key Identifier: keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2d:b2:12:31:d9:04:cf:3a:e3:41:a2:7d:91:a7:37:02:d5: 96:cf:bc:2b:6b:2d:a3:77:e9:88:59:76:4f:ac:b6:23:18:ec: e3:cf:ae:f7:d3:9c:e3:2c:2c:ff:de:99:7f:c2:4c:7c:7f:7c: 95:e9:9a:f1:00:ba:f4:6c:18:24:3f:97:3e:6b:fd:c2:e7:99: d5:cd:d4:b3:f0:99:fe:0f:89:2c:b0:42:3f:68:f9:21:b0:25: 0d:98:5c:9d:9a:09:b5:9e:0c:17:4a:76:d7:ec:53:b6:f8:3b: 0b:d9:6a:0a:95:42:53:03:89:57:f3:57:83:71:d7:de:76:d5: 4e:85:e8:ac:40:2f:08:4c:64:40:14:ae:97:f5:07:ff:16:72: 3d:74:31:da:b5:c1:05:bf:f7:ee:0a:4d:7b:2b:ee:49:74:83: 92:91:f6:d0:aa:27:cd:0e:39:91:aa:fd:c3:9e:a5:7f:97:09: ee:a5:7d:be:a3:56:be:0f:dd:88:3e:13:35:f4:82:ef:e4:eb: 53:d5:8a:60:52:90:2a:12:72:d7:fb:a8:04:9c:5b:08:54:63: 37:63:7b:74:2b:f9:02:ff:1f:6d:85:8a:04:7f:38:d4:35:5f: 41:64:89:a0:7a:85:c4:ac:1b:f2:e6:d0:c4:09:2a:e4:93:32: 30:ca:99:1e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG7S00k1L5YethoG3q8NkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx Nzk4YzQwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD Eyg1ZDFkMzBjOWY4ZWYwYjc5OTQ4Nzk2MzkxMmRkMzc3OWQ5NTljYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jJ2h5ljcVbSeav53II3qCL77kkN f17aNaboLFQuQSwNdvCws6nlqSC6AZD5AkBhA2yPpqy4lHR0hI1fsswpSNWwzjio gS9lWu0v3/ftUCozL9TmA6RhLq3qQXpw2wznIwrAq6ES2l6YL+1Y/Ds2pwNvzqcS DEePizkGF//70Op6Bqkiw9+X6jTbC4ScRBniiMPbzwvgEfinAekSrBKxKNjh7tTg /4mm1A6inmdOGtoJUbg36fsQdKELqYjzwYjj2W8Oys1jwdfx9SKAly4YrVq6YzYc lGXEYnLpP4sFRNA9R93EUY+sHlEQSjyfmTXstKY2vvyixNgw0mm5MdQQfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF0dMMn47wt5lIeWORLdN3nZWcuaMB8GA1UdIwQY MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC2y EjHZBM8640GifZGnNwLVls+8K2sto3fpiFl2T6y2Ixjs48+u99Oc4yws/96Zf8JM fH98lema8QC69GwYJD+XPmv9wueZ1c3Us/CZ/g+JLLBCP2j5IbAlDZhcnZoJtZ4M F0p21+xTtvg7C9lqCpVCUwOJV/NXg3HX3nbVToXorEAvCExkQBSul/UH/xZyPXQx 2rXBBb/37gpNeyvuSXSDkpH20KonzQ45kar9w56lf5cJ7qV9vqNWvg/diD4TNfSC 7+TrU9WKYFKQKhJy1/uoBJxbCFRjN2N7dCv5Av8fbYWKBH841DVfQWSJoHqFxKwb 8ubQxAkq5JMyMMqZHg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:03 2025 by rpki-client