This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json) Hash identifier: MZ9kbKdPIz0uNc8qarYqfAATNdz/E6racfWA5SgDZLY= Subject key identifier: F0:46:31:80:54:2A:88:55:A1:5A:AC:69:91:43:B0:E9:F9:C3:39:9D Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84 Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684 Certificate serial: 019AF50986C9212189A55CF8C008BD6C197F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft Manifest number: 07B1 Signing time: Sat 06 Dec 2025 19:00:33 +0000 Manifest this update: Sat 06 Dec 2025 19:00:33 +0000 Manifest next update: Sun 07 Dec 2025 19:00:33 +0000 Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: lc/vTh/wxF2OaDCxAXJrJnDzmYQ/GrmNFJQVAsAvGJ8=) 2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:86:c9:21:21:89:a5:5c:f8:c0:08:bd:6c:19:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684 Validity Not Before: Dec 6 19:00:33 2025 GMT Not After : Dec 7 19:00:33 2025 GMT Subject: CN=f0463180542a8855a15aac699143b0e9f9c3399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:94:60:7f:2b:6d:fe:88:85:39:8b:a5:5a: d3:dc:f4:fa:73:18:c1:dc:e8:35:11:37:28:ec:f2: 26:38:0e:7f:2a:8d:27:c0:49:e4:7c:86:d3:46:cb: 3e:c4:12:61:3e:e5:b8:d9:8e:16:ac:e0:e3:a8:23: ad:18:78:db:9d:76:ae:02:fa:82:a6:d3:7a:c3:89: 25:ca:fe:31:65:97:2b:bd:c4:6e:73:75:e7:f3:1b: 94:26:77:6f:9f:94:04:80:ae:e2:27:3f:88:8d:0b: 89:c1:37:10:3d:cc:34:f6:8a:db:1f:68:4a:ee:49: dd:cb:61:f8:6f:4f:f2:29:60:7b:38:a1:0c:01:54: a8:c5:d8:90:4a:d1:b8:ff:d3:be:31:16:d1:98:4f: 37:1d:42:33:e4:d4:c5:a3:25:50:f3:13:a5:ac:aa: 5c:09:50:83:96:5a:d5:97:93:e8:2d:f2:80:ea:02: 45:4d:ae:b6:ad:8b:50:6d:c5:c2:c5:aa:7a:d7:11: 52:af:09:97:d9:94:fb:45:e9:a0:33:23:0d:cb:b1: 48:fc:a6:f7:f5:08:a6:3c:08:1a:fe:73:be:4a:e8: a9:36:e4:f2:bc:b3:49:1b:95:08:8e:da:b4:b9:71: 21:d2:89:c4:49:73:c9:9f:b2:6f:7c:d0:1a:02:c4: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:31:80:54:2A:88:55:A1:5A:AC:69:91:43:B0:E9:F9:C3:39:9D X509v3 Authority Key Identifier: keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1d:25:8a:b4:40:aa:dd:19:10:68:7f:c9:13:c4:e7:4a:52: 76:c8:5e:66:c7:cc:18:66:85:8f:ef:90:97:c7:da:98:24:a1: 59:44:44:b5:d0:55:83:8d:f5:47:77:31:52:2a:59:97:f7:b3: c2:8b:53:8a:29:88:0b:7c:08:46:68:cf:72:3f:46:07:8b:da: d2:c5:b1:2a:f3:0e:81:93:23:07:87:3d:7b:e1:5c:e9:27:92: 10:ad:07:65:7c:ed:f6:42:0c:e4:7c:35:10:ad:44:b4:a2:22: 05:86:90:3c:14:55:10:9d:db:a7:6e:53:54:d1:93:9b:46:01: 12:97:cb:06:98:3e:21:e0:89:45:17:28:8d:a0:53:c1:77:73: 8e:bd:f3:cc:28:2d:79:5b:14:5a:0a:34:73:5c:01:52:2d:69: c5:d6:b7:c5:6c:5a:b2:46:97:c0:a3:63:62:86:2e:f7:c0:7d: f5:9e:8b:54:52:11:ad:00:16:2b:21:e3:80:2e:3d:f2:19:30: 21:f7:db:4b:5e:03:b0:47:c0:8e:56:8f:41:06:4a:2c:fa:b1: 29:79:22:87:23:de:e9:cc:c7:6e:59:8f:06:18:4f:a9:61:ca: 90:69:15:a0:5b:81:2a:11:a2:49:04:ab:56:48:7b:89:52:13: 11:57:6d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYbJISGJpVz4wAi9bBl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MmFiNzhlZGE3YmYwMWQ5NWI1OTc3NGVkMzQ2YmNiZjk2 YTI2ODQwHhcNMjUxMjA2MTkwMDMzWhcNMjUxMjA3MTkwMDMzWjAzMTEwLwYDVQQD EyhmMDQ2MzE4MDU0MmE4ODU1YTE1YWFjNjk5MTQzYjBlOWY5YzMzOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUmUYH8rbf6IhTmLpVrT3PT6cxjB 3Og1ETco7PImOA5/Ko0nwEnkfIbTRss+xBJhPuW42Y4WrODjqCOtGHjbnXauAvqC ptN6w4klyv4xZZcrvcRuc3Xn8xuUJndvn5QEgK7iJz+IjQuJwTcQPcw09orbH2hK 7kndy2H4b0/yKWB7OKEMAVSoxdiQStG4/9O+MRbRmE83HUIz5NTFoyVQ8xOlrKpc CVCDllrVl5PoLfKA6gJFTa62rYtQbcXCxap61xFSrwmX2ZT7RemgMyMNy7FI/Kb3 9QimPAga/nO+SuipNuTyvLNJG5UIjtq0uXEh0onESXPJn7JvfNAaAsSGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBGMYBUKohVoVqsaZFDsOn5wzmdMB8GA1UdIwQY MBaAFNQqt47ae/AdlbWXdO00a8v5aiaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2Et OTAxMmJlYWUyODUyLzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2EtOTAxMmJlYWUyODUy LzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB0lirRA qt0ZEGh/yRPE50pSdsheZsfMGGaFj++Ql8famCShWUREtdBVg431R3cxUipZl/ez wotTiimIC3wIRmjPcj9GB4va0sWxKvMOgZMjB4c9e+Fc6SeSEK0HZXzt9kIM5Hw1 EK1EtKIiBYaQPBRVEJ3bp25TVNGTm0YBEpfLBpg+IeCJRRcojaBTwXdzjr3zzCgt eVsUWgo0c1wBUi1pxda3xWxaskaXwKNjYoYu98B99Z6LVFIRrQAWKyHjgC498hkw IffbS14DsEfAjlaPQQZKLPqxKXkihyPe6czHblmPBhhPqWHKkGkVoFuBKhGiSQSr Vkh7iVITEVdttg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:17 2025 by rpki-client