This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json) Hash identifier: NMxwuywJRu1vjY4W2+UkpZ6a6zAGs/ihPt8qCb0aG9c= Subject key identifier: 28:57:61:C1:59:13:D2:12:74:95:BA:3D:E3:40:AE:27:43:31:68:77 Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53 Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453 Certificate serial: 019AF1D2004396F4EDE32E8F2EAE703C7985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft Manifest number: 1423 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 4xuoDPwGcKHmTQKcfgwDMVOmvfSTmQXW/wTJkoedeTE=) 2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:00:43:96:f4:ed:e3:2e:8f:2e:ae:70:3c:79:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453 Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=285761c15913d2127495ba3de340ae2743316877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:a8:a4:05:57:24:d6:53:67:75:24:aa:b3: 7f:0a:44:ad:d1:19:15:1f:85:3c:a1:b8:74:e2:e3: 81:e4:b0:9d:c3:e0:5b:a4:a1:bc:0b:a0:b1:b2:f6: 5c:45:50:d7:c5:b2:01:00:3d:11:54:7d:c0:77:5e: ea:5c:54:75:37:8c:b1:20:e5:0b:e5:d5:ca:1d:10: 56:69:1a:ce:9b:3a:d3:1b:e4:6c:4d:cd:99:17:60: 67:f6:b5:51:a1:b6:eb:e6:ee:06:80:9a:a5:24:1a: 51:83:6a:93:1b:5a:35:ea:5e:6b:cd:58:b9:57:b8: a8:2c:10:11:5e:b4:9b:17:25:da:6d:d3:eb:bb:2f: 15:80:d0:5d:88:f8:25:f7:eb:53:d1:ed:4c:24:e6: 8b:20:fd:20:de:e0:2b:d9:a6:ec:48:ce:8b:da:a9: 3b:7f:5a:cd:fa:08:be:10:aa:ec:c6:0e:c2:14:32: 10:5d:41:1c:79:9c:51:f6:ce:72:97:fd:d3:c1:7e: 84:a2:1d:92:b8:eb:1b:51:be:dc:af:f1:47:9e:a1: f7:4e:42:e0:e1:22:c9:9a:05:8b:04:d3:3c:98:87: 14:3f:5a:b4:ab:51:44:0a:c1:13:b1:9d:ae:7c:6a: f6:c2:f7:f8:4c:d4:da:1a:28:a4:ea:4a:3f:9e:87: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:61:C1:59:13:D2:12:74:95:BA:3D:E3:40:AE:27:43:31:68:77 X509v3 Authority Key Identifier: keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3c:e4:34:1a:69:46:99:56:c5:7b:67:9e:4c:29:b6:76:47: fe:81:2a:bc:ca:f2:ae:1f:d8:6b:0b:54:37:98:5f:8b:53:1b: 06:a5:b3:f5:ff:0b:f7:b8:97:74:ff:85:66:7e:95:2a:bb:d0: 6e:dc:8b:02:c9:6d:54:de:70:0e:5d:ff:eb:38:e7:0d:e5:6d: 38:be:24:31:c5:a7:2b:9b:d8:ad:a3:dd:d5:e1:0a:f8:c5:27: c3:2f:35:22:e5:12:9b:34:08:5f:82:7d:36:ce:14:87:9a:4c: 43:60:0c:dd:f2:be:08:aa:9d:35:77:10:b4:c1:5a:50:66:56: 0a:04:fa:69:f6:29:29:6f:9c:f4:50:29:67:b6:a7:99:50:c7: 56:87:69:e8:c2:22:b1:ac:19:5d:e7:80:50:a1:16:53:4f:8a: 15:52:7a:41:23:87:a9:8e:ff:77:57:8d:22:3d:ad:93:6b:4d: 80:2f:8d:52:6c:a5:fb:72:19:f2:b2:c4:3c:4e:8e:51:77:52: 41:8b:d7:d8:e2:59:65:57:9c:d6:57:18:15:63:4a:f9:40:2d: 26:8a:fb:8d:dd:19:30:02:e0:c6:03:bd:eb:d9:58:47:e8:b2: 95:03:a6:c8:ac:30:65:75:98:9c:11:9d:55:9b:05:47:82:d3: fe:fc:2e:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gBDlvTt4y6PLq5wPHmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDg2ZGRkOTdiYTM4MTM4OTM1N2UwZTU2Y2ExMWU1Y2Zl OGY0NTMwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EygyODU3NjFjMTU5MTNkMjEyNzQ5NWJhM2RlMzQwYWUyNzQzMzE2ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztCopAVXJNZTZ3UkqrN/CkSt0RkV H4U8obh04uOB5LCdw+BbpKG8C6CxsvZcRVDXxbIBAD0RVH3Ad17qXFR1N4yxIOUL 5dXKHRBWaRrOmzrTG+RsTc2ZF2Bn9rVRobbr5u4GgJqlJBpRg2qTG1o16l5rzVi5 V7ioLBARXrSbFyXabdPruy8VgNBdiPgl9+tT0e1MJOaLIP0g3uAr2absSM6L2qk7 f1rN+gi+EKrsxg7CFDIQXUEceZxR9s5yl/3TwX6Eoh2SuOsbUb7cr/FHnqH3TkLg 4SLJmgWLBNM8mIcUP1q0q1FECsETsZ2ufGr2wvf4TNTaGiik6ko/nocbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChXYcFZE9ISdJW6PeNAridDMWh3MB8GA1UdIwQY MBaAFNYIbd2XujgTiTV+DlbKEeXP6PRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAt ODE1Zjk5MGJkNDMxLzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAtODE1Zjk5MGJkNDMx LzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzzkNBpp RplWxXtnnkwptnZH/oEqvMryrh/YawtUN5hfi1MbBqWz9f8L97iXdP+FZn6VKrvQ btyLAsltVN5wDl3/6zjnDeVtOL4kMcWnK5vYraPd1eEK+MUnwy81IuUSmzQIX4J9 Ns4Uh5pMQ2AM3fK+CKqdNXcQtMFaUGZWCgT6afYpKW+c9FApZ7anmVDHVodp6MIi sawZXeeAUKEWU0+KFVJ6QSOHqY7/d1eNIj2tk2tNgC+NUmyl+3IZ8rLEPE6OUXdS QYvX2OJZZVec1lcYFWNK+UAtJor7jd0ZMALgxgO969lYR+iylQOmyKwwZXWYnBGd VZsFR4LT/vwu2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:10 2025 by rpki-client