This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json) Hash identifier: uukdV0jehatlXlxRGzy6ujN/fUYWQkBIkh3Q0qylL3c= Subject key identifier: A1:52:0F:AE:7A:DD:D7:FC:B9:8D:30:EE:84:96:73:C5:00:29:28:51 Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81 Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081 Certificate serial: 019AF5776DC8C2733D58778305B707DB53EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft Manifest number: 07FD Signing time: Sat 06 Dec 2025 21:00:36 +0000 Manifest this update: Sat 06 Dec 2025 21:00:36 +0000 Manifest next update: Sun 07 Dec 2025 21:00:36 +0000 Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: cOhFFTl2gs1+1A4A933KvykJ3fNfnbEzBduc7/tcsys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:6d:c8:c2:73:3d:58:77:83:05:b7:07:db:53:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081 Validity Not Before: Dec 6 21:00:36 2025 GMT Not After : Dec 7 21:00:36 2025 GMT Subject: CN=a1520fae7addd7fcb98d30ee849673c500292851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:db:1e:e2:96:20:a4:80:f0:30:62:c1:9f: 7c:53:4d:d2:a8:54:e2:27:a9:f4:ae:f8:39:bc:1a: df:7a:75:99:f2:11:fc:36:7f:1a:cf:71:0a:07:f4: 56:2f:68:c2:38:f2:a6:da:26:f6:78:7d:99:7e:a8: d6:6c:45:80:7a:f9:00:63:7c:8b:84:ed:53:c2:2e: 76:a7:6c:c3:cf:41:18:ab:cd:02:25:d3:e8:8c:6f: 40:96:44:7d:fe:52:43:5a:e1:f5:1e:8d:88:cf:19: 8c:e4:c5:79:bb:95:d6:32:be:5c:af:8d:cf:b4:92: 16:ef:5b:79:2a:3a:26:68:11:b0:b8:40:69:44:e9: 3e:3e:6e:6b:93:10:41:8e:78:ec:a4:77:72:b4:77: 7c:3d:1f:03:ce:1c:77:66:c6:8f:1f:34:b8:c5:dc: 94:01:b1:76:2b:04:89:70:7f:8a:47:96:76:98:0d: d3:df:93:a3:77:09:b1:1a:41:5f:f3:47:b5:db:0a: 34:cb:2b:61:61:cd:45:f9:40:0b:53:9c:3d:e0:12: 11:0d:77:3f:b6:20:ba:f4:1e:7e:88:76:89:08:79: 9c:77:3a:a5:23:e6:d8:07:3f:5c:25:fe:72:ee:c3: f0:a0:d2:c6:70:b9:8c:07:75:77:d9:ae:b3:aa:66: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:0F:AE:7A:DD:D7:FC:B9:8D:30:EE:84:96:73:C5:00:29:28:51 X509v3 Authority Key Identifier: keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:95:b4:4d:4f:69:f3:da:19:0a:6c:e7:48:dc:cc:0d:e4:29: 8c:73:b5:e6:9d:51:20:d2:cb:df:2d:26:b2:4c:fc:c1:a5:10: 6e:3b:e7:a0:7b:f0:24:cb:95:84:3c:bc:6b:18:46:42:76:7c: 18:5d:26:3e:f7:a3:98:81:42:81:a1:12:33:d8:b0:64:a0:66: bd:7b:4f:3e:37:74:b4:1d:99:15:d3:f7:d1:dd:20:52:01:f9: fc:85:5c:5c:68:86:de:d3:70:b7:a2:00:7c:72:45:41:77:94: 78:9f:2c:ae:53:01:6a:32:d3:07:05:54:b3:bf:37:32:f0:c3: 4e:7c:94:bf:b6:e3:a4:00:40:27:07:3d:a3:f8:e0:a4:49:9f: 9c:fa:3f:94:f7:da:fd:5e:77:84:c4:55:b7:23:7c:82:2f:e3: 10:63:d4:f9:a4:1e:92:91:76:9f:22:17:e9:bf:ef:f5:09:31: 4c:47:dd:6d:38:c6:d2:d9:ed:50:b9:d3:f0:ef:dd:76:77:7d: e8:7d:05:d0:42:db:b7:3b:e2:c0:f5:2f:df:80:96:8c:a4:2c: 38:51:25:98:0f:fd:dc:c7:b4:4c:f3:ae:5f:42:b5:04:72:3b: af:d6:32:82:ac:fe:45:57:df:66:e5:b8:03:b7:24:da:d9:e4: fa:7f:04:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1d23IwnM9WHeDBbcH21PqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2 NDQwODEwHhcNMjUxMjA2MjEwMDM2WhcNMjUxMjA3MjEwMDM2WjAzMTEwLwYDVQQD EyhhMTUyMGZhZTdhZGRkN2ZjYjk4ZDMwZWU4NDk2NzNjNTAwMjkyODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8XbHuKWIKSA8DBiwZ98U03SqFTi J6n0rvg5vBrfenWZ8hH8Nn8az3EKB/RWL2jCOPKm2ib2eH2ZfqjWbEWAevkAY3yL hO1Twi52p2zDz0EYq80CJdPojG9AlkR9/lJDWuH1Ho2IzxmM5MV5u5XWMr5cr43P tJIW71t5KjomaBGwuEBpROk+Pm5rkxBBjnjspHdytHd8PR8Dzhx3ZsaPHzS4xdyU AbF2KwSJcH+KR5Z2mA3T35OjdwmxGkFf80e12wo0yythYc1F+UALU5w94BIRDXc/ tiC69B5+iHaJCHmcdzqlI+bYBz9cJf5y7sPwoNLGcLmMB3V32a6zqmahKQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKFSD6563df8uY0w7oSWc8UAKShRMB8GA1UdIwQY MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ZW0 TU9p89oZCmznSNzMDeQpjHO15p1RINLL3y0mskz8waUQbjvnoHvwJMuVhDy8axhG QnZ8GF0mPvejmIFCgaESM9iwZKBmvXtPPjd0tB2ZFdP30d0gUgH5/IVcXGiG3tNw t6IAfHJFQXeUeJ8srlMBajLTBwVUs783MvDDTnyUv7bjpABAJwc9o/jgpEmfnPo/ lPfa/V53hMRVtyN8gi/jEGPU+aQekpF2nyIX6b/v9QkxTEfdbTjG0tntULnT8O/d dnd96H0F0ELbtzviwPUv34CWjKQsOFElmA/93Me0TPOuX0K1BHI7r9Yygqz+RVff ZuW4A7ck2tnk+n8ERg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:07:11 2025 by rpki-client