This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft File: m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json) Hash identifier: O6BUVx4j0NTL2ACj1p9UF5kqjGuLF/i3h9+6UaBs4Tg= Subject key identifier: 67:36:0B:BD:2B:42:D6:20:01:DE:9B:A7:D6:43:76:4D:3A:8C:49:BF Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0 Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0 Certificate serial: 019AF1D1E9A5C20CDE8876908A555DDD1BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: MtxFMTPTNbYqbwhsDWEZNNwteH1YH2/UoH1ZDEl9z+U=) 2: rT8y0BCfTCAABxNQ5qnQez4Fr8I.roa (hash: zR6w/3gh7WRxc5V8iDYO22idpuoYZT3WfKeiyZYkIzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e9:a5:c2:0c:de:88:76:90:8a:55:5d:dd:1b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=67360bbd2b42d62001de9ba7d643764d3a8c49bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:8e:24:78:e5:be:ee:46:ea:38:b8:07:f7: 7f:31:33:f9:1e:1e:37:f6:a4:36:60:85:89:d0:42: 5a:8d:79:b7:cf:d1:7b:fc:41:9e:d2:06:9c:ab:16: c3:b5:e1:e8:57:51:ce:0e:b7:09:c2:ff:0e:eb:94: 61:23:20:f3:0c:a4:01:a1:f1:79:ff:e4:b5:ee:90: 48:88:36:08:82:fa:f5:a5:d1:ad:a0:e6:da:1a:17: 8c:45:ae:24:9d:9a:7f:93:59:40:d2:44:83:ab:e0: ae:3e:9c:47:1b:e8:aa:af:11:84:82:c1:ef:16:a1: 18:83:aa:1a:b2:e0:4b:49:27:f6:33:5b:c4:5a:80: ee:bd:3f:10:95:5a:01:48:94:bc:ff:a9:58:f1:4b: ee:24:bb:5f:4b:a5:70:30:56:1c:2a:b8:93:38:84: 0c:63:5f:8c:42:e0:c0:89:fa:91:07:85:c0:de:5a: 0e:2e:35:d4:99:f5:7d:43:96:8a:98:96:94:6b:76: 5a:de:5f:a2:b2:74:b0:60:1b:90:64:a4:9f:90:d2: 5a:03:f8:7b:81:af:7a:f1:f3:83:df:10:8f:b4:bc: 11:62:41:a5:07:a7:98:7d:99:cd:7e:96:52:a1:bb: 73:13:12:66:b0:73:bf:0c:ea:9f:50:fd:b0:74:6f: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:36:0B:BD:2B:42:D6:20:01:DE:9B:A7:D6:43:76:4D:3A:8C:49:BF X509v3 Authority Key Identifier: keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c9:8e:2a:8b:19:a7:eb:2e:03:bf:0e:a7:26:da:6b:e3:94: 8c:5c:4c:b7:93:1d:b0:3e:7e:68:0a:e5:9d:c9:99:7e:8b:d2: 07:8d:bc:de:42:c8:84:b1:b2:cc:e6:f7:9a:aa:32:5d:9b:89: 98:a8:65:57:f5:9e:8a:c4:28:7e:c5:a4:49:91:3f:cd:98:aa: 0c:f0:3a:30:cf:c1:50:d9:f3:66:41:9b:be:0b:bf:c5:76:96: 1f:eb:0e:93:dc:6c:ae:5b:5e:63:52:b3:1e:63:4c:1d:0d:41: 1f:44:d7:a3:28:26:4d:d0:e3:f6:b6:4e:10:d5:5c:1e:b9:63: 7e:32:62:91:8c:f5:fb:a3:5e:99:bb:75:bf:d2:10:b8:2b:af: 4c:c1:7d:f7:5a:79:a2:4f:8c:2c:fa:c5:78:97:25:0c:42:5f: 99:54:94:42:da:3b:a3:80:09:25:18:dc:fc:a3:25:96:09:9e: 2f:02:28:b1:d7:c0:c9:d2:8f:c1:b2:7c:be:31:3e:f9:bf:6e: b1:b9:79:97:b0:50:dd:95:94:f4:ec:bb:4b:ac:68:53:ad:b5: 83:12:97:b0:40:db:24:c5:53:af:86:3f:f6:2c:05:5c:06:14: fd:12:99:89:3b:70:3f:82:14:1b:00:60:f6:fa:61:5a:f0:e2: 3f:b9:fb:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0emlwgzeiHaQilVd3Ru3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTg5NWU3ZjZhNmQ0YWJhOWM5NjFmNzEzYjJlNzk3MTVm MDIxZjAwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD Eyg2NzM2MGJiZDJiNDJkNjIwMDFkZTliYTdkNjQzNzY0ZDNhOGM0OWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHWOJHjlvu5G6ji4B/d/MTP5Hh43 9qQ2YIWJ0EJajXm3z9F7/EGe0gacqxbDteHoV1HODrcJwv8O65RhIyDzDKQBofF5 /+S17pBIiDYIgvr1pdGtoObaGheMRa4knZp/k1lA0kSDq+CuPpxHG+iqrxGEgsHv FqEYg6oasuBLSSf2M1vEWoDuvT8QlVoBSJS8/6lY8UvuJLtfS6VwMFYcKriTOIQM Y1+MQuDAifqRB4XA3loOLjXUmfV9Q5aKmJaUa3Za3l+isnSwYBuQZKSfkNJaA/h7 ga968fOD3xCPtLwRYkGlB6eYfZnNfpZSobtzExJmsHO/DOqfUP2wdG9vVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc2C70rQtYgAd6bp9ZDdk06jEm/MB8GA1UdIwQY MBaAFJtYlef2ptSrqclh9xOy55cV8CHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDIt ZmMyYTk3YjdkNTNlLzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDItZmMyYTk3YjdkNTNl LzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8mOKosZ p+suA78Opybaa+OUjFxMt5MdsD5+aArlncmZfovSB4283kLIhLGyzOb3mqoyXZuJ mKhlV/WeisQofsWkSZE/zZiqDPA6MM/BUNnzZkGbvgu/xXaWH+sOk9xsrlteY1Kz HmNMHQ1BH0TXoygmTdDj9rZOENVcHrljfjJikYz1+6Nembt1v9IQuCuvTMF991p5 ok+MLPrFeJclDEJfmVSUQto7o4AJJRjc/KMllgmeLwIosdfAydKPwbJ8vjE++b9u sbl5l7BQ3ZWU9Oy7S6xoU621gxKXsEDbJMVTr4Y/9iwFXAYU/RKZiTtwP4IUGwBg 9vphWvDiP7n7xw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:57 2025 by rpki-client