This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json) Hash identifier: GkI8HDS/RvF1BZHT6KLLIDRizPcImkamtw0FdV0lO6s= Subject key identifier: 3F:AF:BE:AA:36:41:4D:ED:3D:8D:4B:96:DE:44:48:C0:08:3D:37:81 Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Certificate serial: 019AF1644C317041FB5D2A7CF41295D4614D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft Manifest number: 084A Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: whytZ6FAWbVnXAktPAsexJr3OTlBqQ6E6nB4s/+mQKg=) 2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4c:31:70:41:fb:5d:2a:7c:f4:12:95:d4:61:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=3fafbeaa36414ded3d8d4b96de4448c0083d3781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:de:42:bc:8b:0f:ec:9e:81:a2:93:f3:06:4f: ec:80:bf:31:f2:87:b9:7e:01:96:77:ba:49:b8:8b: a2:a3:aa:32:20:cb:50:85:d1:4f:71:7d:5f:10:b8: 93:1c:6e:d1:ee:91:d9:f3:0b:d2:3e:ee:f5:d0:a4: 8a:8c:de:57:ad:17:10:81:e4:91:b2:f8:90:ab:19: 8f:5d:c9:ed:98:74:56:f1:0c:a5:bb:0c:15:9f:26: 14:3a:74:83:b8:35:66:f5:3b:a3:ad:d5:9a:be:9a: 2f:23:94:42:86:ef:b2:11:cc:1b:ad:1a:13:e9:c3: df:3a:fd:7d:10:63:59:ba:d3:a9:19:b9:fb:82:8b: 33:e1:ac:d0:71:cc:4c:eb:50:fe:f7:c4:87:72:f4: a6:2b:ca:31:21:5a:58:1c:6e:0a:93:27:df:09:7d: 15:1d:71:16:bf:c3:33:a2:40:be:37:09:9d:f7:9d: dc:ee:04:53:e2:1b:89:ec:b4:bc:4c:f7:9f:8c:ae: 12:07:44:7f:9c:03:55:84:55:8f:56:fd:dc:1b:ee: ae:4f:5a:fd:52:00:4f:93:a4:52:cc:76:1f:02:1a: ed:87:68:e9:e8:77:a7:e3:39:9c:3a:b7:aa:07:99: 63:34:a3:3a:31:1f:b3:9a:95:4b:27:22:fa:c9:0b: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AF:BE:AA:36:41:4D:ED:3D:8D:4B:96:DE:44:48:C0:08:3D:37:81 X509v3 Authority Key Identifier: keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6f:15:18:d9:6a:f7:08:58:14:57:91:4d:8c:d8:df:a6:fb: 15:ab:8f:1c:26:38:a8:62:00:3a:a7:7d:9a:81:13:d0:3c:d9: a9:a2:56:b2:65:1e:a5:0e:ed:3d:68:f4:a0:3b:c4:96:2b:8b: 49:be:f3:ab:6d:30:7f:a4:40:30:85:c9:13:2a:1b:11:f7:95: 2b:2c:bf:99:70:6b:42:a1:4b:6d:ad:4a:ed:71:da:ad:70:70: 1e:4f:cf:c4:fa:c2:3a:75:d0:4c:93:cd:e5:1d:f8:e7:72:fb: a8:4a:fc:1c:d4:03:f6:96:cb:96:3a:55:d5:f9:c6:bd:77:00: ce:8b:a8:43:48:ad:14:35:0d:6e:3a:26:6a:29:8f:d9:c3:9c: 03:de:c0:e2:e2:d3:be:54:e1:eb:a7:d0:0f:8a:63:a9:fb:81: 19:99:b3:e1:a0:7d:c2:8e:05:28:40:8b:a6:31:7a:ad:c4:7c: 70:cc:40:20:5a:00:b1:02:82:9e:7d:38:eb:42:de:f2:f7:7d: 33:10:27:44:41:67:06:2a:4e:77:83:bd:4b:1e:5c:d0:f4:33: 50:dd:a3:8a:da:e9:8b:62:de:b5:35:8a:8b:6e:16:dd:88:d3: 43:b4:52:87:1d:8e:c3:83:d2:33:e8:2b:de:12:af:dd:b9:dd: 13:dc:a5:a9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZEwxcEH7XSp89BKV1GFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4 NDgzZmMwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD EygzZmFmYmVhYTM2NDE0ZGVkM2Q4ZDRiOTZkZTQ0NDhjMDA4M2QzNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA495CvIsP7J6BopPzBk/sgL8x8oe5 fgGWd7pJuIuio6oyIMtQhdFPcX1fELiTHG7R7pHZ8wvSPu710KSKjN5XrRcQgeSR sviQqxmPXcntmHRW8QyluwwVnyYUOnSDuDVm9TujrdWavpovI5RChu+yEcwbrRoT 6cPfOv19EGNZutOpGbn7gosz4azQccxM61D+98SHcvSmK8oxIVpYHG4KkyffCX0V HXEWv8MzokC+Nwmd953c7gRT4huJ7LS8TPefjK4SB0R/nANVhFWPVv3cG+6uT1r9 UgBPk6RSzHYfAhrth2jp6Hen4zmcOreqB5ljNKM6MR+zmpVLJyL6yQtaRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD+vvqo2QU3tPY1Llt5ESMAIPTeBMB8GA1UdIwQY MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3 LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm8V GNlq9whYFFeRTYzY36b7FauPHCY4qGIAOqd9moET0DzZqaJWsmUepQ7tPWj0oDvE liuLSb7zq20wf6RAMIXJEyobEfeVKyy/mXBrQqFLba1K7XHarXBwHk/PxPrCOnXQ TJPN5R3453L7qEr8HNQD9pbLljpV1fnGvXcAzouoQ0itFDUNbjomaimP2cOcA97A 4uLTvlTh66fQD4pjqfuBGZmz4aB9wo4FKECLpjF6rcR8cMxAIFoAsQKCnn0460Le 8vd9MxAnREFnBipOd4O9Sx5c0PQzUN2jitrpi2LetTWKi24W3YjTQ7RShx2Ow4PS M+gr3hKv3bndE9ylqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:24 2025 by rpki-client