This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json) Hash identifier: LpcaGEcRHgMFm6CY9KPYopNOxuAIVzc0v37SOsekTbA= Subject key identifier: 7F:E5:7C:06:FE:CB:FB:38:64:7A:D2:61:2E:8C:8E:49:C6:9A:5B:BF Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Certificate serial: 019AF0517EA04A6D312356692B3E5EF92DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 21:01:03 +0000 Manifest this update: Fri 05 Dec 2025 21:01:03 +0000 Manifest next update: Sat 06 Dec 2025 21:01:03 +0000 Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: s/QvBItSIu/VtpDCbberFjZG30o21I5VoSGmCVkk1vI=) 2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:7e:a0:4a:6d:31:23:56:69:2b:3e:5e:f9:2d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Validity Not Before: Dec 5 21:01:03 2025 GMT Not After : Dec 6 21:01:03 2025 GMT Subject: CN=7fe57c06fecbfb38647ad2612e8c8e49c69a5bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:39:f5:24:50:29:e7:8d:2e:db:ce:e0:f7: 19:20:45:d7:26:de:92:ef:7e:3d:e9:8f:28:42:5c: 0b:44:bb:da:93:11:eb:9a:4b:a5:86:d8:53:3f:9f: 52:ce:a9:cb:83:fc:26:bd:12:59:70:f9:48:31:a9: bd:77:60:79:20:51:55:fc:87:c9:91:97:89:fe:3d: 08:21:85:9e:96:2d:d2:04:6f:da:44:72:01:c1:aa: c2:98:83:61:85:55:60:fb:ff:42:44:04:eb:a5:0f: e0:1c:a0:03:e1:81:3d:6e:35:b1:c6:69:e8:00:54: e9:f5:bd:27:83:7f:d7:2b:c4:bc:91:b8:f2:ad:49: ef:e6:28:c6:b3:b7:36:e8:73:00:2b:2f:3f:86:c5: 43:17:76:75:07:48:aa:01:aa:8b:12:a8:78:92:6e: 8e:5d:f1:8b:44:c4:d6:18:09:50:d7:ab:25:f6:22: b4:00:1a:64:6f:d2:89:0a:f5:fc:0f:4b:b4:95:d7: cc:03:12:9b:e5:0c:d6:12:e7:c0:56:f9:62:be:25: fe:a6:e3:55:8b:5e:69:29:d9:a9:88:d7:97:83:c0: e7:f5:48:b2:f3:61:b9:52:a2:2b:b4:d8:f7:8f:a4: f9:1c:83:fe:69:22:78:4d:5f:07:03:03:82:6e:ba: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:7C:06:FE:CB:FB:38:64:7A:D2:61:2E:8C:8E:49:C6:9A:5B:BF X509v3 Authority Key Identifier: keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:af:23:27:16:d3:5d:96:60:43:a0:32:bd:dc:e8:4d:6b:49: 26:bc:37:e2:51:02:de:07:5f:2e:e4:95:94:11:c3:cb:6d:4d: 66:55:4a:d8:12:84:a1:d3:9a:c0:81:e8:7b:f9:a5:92:fa:17: 15:83:b9:8b:36:f6:59:1d:c5:5c:9f:e8:b4:6c:28:19:00:cd: 64:b8:62:b8:97:b6:c8:e7:33:d7:4a:e5:47:ab:aa:64:c1:29: f0:a4:3e:d2:0a:ec:80:84:e1:78:3d:fd:cc:c7:7e:eb:b3:75: 57:3f:75:c0:fa:75:95:d1:b1:6b:7e:2c:7d:d3:c0:10:57:38: 7e:ba:ce:a6:e2:a5:27:ec:de:2a:2f:c4:52:34:db:1e:c9:f3: e8:d8:4d:73:78:17:72:92:b6:be:5c:84:76:9b:4c:ab:58:41: 26:cb:ad:65:a1:75:d8:86:ef:f2:59:4e:37:48:e6:07:01:e6: 8a:db:45:fc:54:f5:b3:bb:46:18:45:58:0e:52:6b:94:ff:97: 82:da:a5:2d:0b:24:06:72:b3:d9:46:08:e6:9d:46:df:de:46: e6:b5:8b:99:c2:75:aa:33:7d:f0:ac:22:7d:a5:57:1e:b0:90: 97:23:14:2f:29:24:28:05:5d:fe:05:27:7f:b4:26:62:63:42: 28:4b:ad:3f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwUX6gSm0xI1ZpKz5e+S2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj NGMzMzIwHhcNMjUxMjA1MjEwMTAzWhcNMjUxMjA2MjEwMTAzWjAzMTEwLwYDVQQD Eyg3ZmU1N2MwNmZlY2JmYjM4NjQ3YWQyNjEyZThjOGU0OWM2OWE1YmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwI59SRQKeeNLtvO4PcZIEXXJt6S 73496Y8oQlwLRLvakxHrmkulhthTP59SzqnLg/wmvRJZcPlIMam9d2B5IFFV/IfJ kZeJ/j0IIYWeli3SBG/aRHIBwarCmINhhVVg+/9CRATrpQ/gHKAD4YE9bjWxxmno AFTp9b0ng3/XK8S8kbjyrUnv5ijGs7c26HMAKy8/hsVDF3Z1B0iqAaqLEqh4km6O XfGLRMTWGAlQ16sl9iK0ABpkb9KJCvX8D0u0ldfMAxKb5QzWEufAVvliviX+puNV i15pKdmpiNeXg8Dn9Uiy82G5UqIrtNj3j6T5HIP+aSJ4TV8HAwOCbrp46wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH/lfAb+y/s4ZHrSYS6MjknGmlu/MB8GA1UdIwQY MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0 LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY2LzMyNDQxZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgy MzMvMS8xLVg5cDdTYkM1R2g5dXJMbXhzeW9qUmZFd3pJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq8j JxbTXZZgQ6AyvdzoTWtJJrw34lEC3gdfLuSVlBHDy21NZlVK2BKEodOawIHoe/ml kvoXFYO5izb2WR3FXJ/otGwoGQDNZLhiuJe2yOcz10rlR6uqZMEp8KQ+0grsgITh eD39zMd+67N1Vz91wPp1ldGxa34sfdPAEFc4frrOpuKlJ+zeKi/EUjTbHsnz6NhN c3gXcpK2vlyEdptMq1hBJsutZaF12Ibv8llON0jmBwHmittF/FT1s7tGGEVYDlJr lP+XgtqlLQskBnKz2UYI5p1G395G5rWLmcJ1qjN98KwifaVXHrCQlyMULykkKAVd /gUnf7QmYmNCKEutPw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:04 2025 by rpki-client