This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json) Hash identifier: cW/tv9Vuvdh+m6/poLrEQ+qnrX/32j7AIOhpB96JOOo= Subject key identifier: 93:EC:C7:5B:0F:EC:3E:8B:BC:8E:E1:B0:82:49:8E:F3:67:C3:42:94 Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Certificate serial: 019AF3F7F0B467D157853E1E53835BA49C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft Manifest number: 1051 Signing time: Sat 06 Dec 2025 14:01:43 +0000 Manifest this update: Sat 06 Dec 2025 14:01:43 +0000 Manifest next update: Sun 07 Dec 2025 14:01:43 +0000 Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: /HPCUhZNTp4VrUKUrZHNdvzUppsuKk6fu3PzVlbxtXQ=) 2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=) 3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=) 4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f0:b4:67:d1:57:85:3e:1e:53:83:5b:a4:9c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Validity Not Before: Dec 6 14:01:43 2025 GMT Not After : Dec 7 14:01:43 2025 GMT Subject: CN=93ecc75b0fec3e8bbc8ee1b082498ef367c34294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:0d:8d:91:db:23:f9:a5:b8:41:bb:9a:f7: 73:8c:7c:30:13:81:b8:85:d5:06:c4:f2:18:19:55: e4:95:1c:fc:dd:1c:1a:dd:e6:0a:b3:a3:fb:66:97: dd:f7:ba:21:ca:94:3c:57:2d:c3:85:71:2a:ec:5c: 7b:08:0c:c0:56:cc:75:33:03:dd:02:66:ea:b4:b1: f7:93:04:9d:37:21:a5:6c:a8:c7:60:54:10:8d:e5: 52:6b:3d:e6:4b:fc:de:5a:e4:7d:1b:48:91:33:a6: 1b:5c:33:bb:01:d5:6f:4b:20:fe:3c:78:87:26:1b: 6f:3e:46:f3:27:e7:54:54:f5:cd:58:0a:32:ac:3a: cc:e6:02:01:61:f7:a2:5a:0c:10:7d:5e:f1:e6:94: 76:22:bb:07:e4:00:00:03:6c:89:c1:70:ae:b4:73: 51:1c:16:26:8d:f6:b2:d6:d0:c4:a6:ae:ec:76:91: be:8d:9e:35:52:af:b5:0f:4e:38:de:14:68:13:db: 13:df:4f:17:ca:d0:f8:73:b9:25:cc:54:6f:d9:e9: 02:91:06:bd:ec:a5:b2:47:47:4c:6b:21:96:1b:fb: 99:0c:45:e3:7d:6a:38:5f:c3:6a:2c:86:b0:45:26: 3d:fc:b1:5c:d8:a0:32:03:bf:88:f6:12:fd:69:8d: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EC:C7:5B:0F:EC:3E:8B:BC:8E:E1:B0:82:49:8E:F3:67:C3:42:94 X509v3 Authority Key Identifier: keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d7:87:90:49:f4:73:96:82:c3:0f:8c:e9:c3:d1:96:9c:7f: 22:39:91:96:cb:5e:e5:0b:24:82:30:96:76:bf:6b:05:93:74: d0:ba:42:bb:4d:1f:f9:ae:41:42:6d:02:c5:ea:3f:af:eb:5d: 11:a1:c2:e2:2f:6d:c0:a9:12:24:d6:39:07:76:cf:aa:1e:9c: 08:d2:dd:ef:44:e6:f9:ad:3e:da:94:66:50:e1:7b:3c:35:e3: 51:a8:cc:02:da:f6:2f:c7:a3:47:fa:a9:21:49:3d:c0:32:a7: a9:54:7f:3d:c1:82:20:3f:61:73:70:19:99:6c:41:7c:67:a7: 37:44:78:6a:f2:75:f5:bf:8b:ee:24:81:f6:f4:22:cc:01:84: 4e:a2:c8:a4:7e:37:0e:ee:11:3c:2f:ab:c7:cc:da:4d:4d:c4: 39:0e:2d:66:a1:fe:52:ed:5e:23:41:ad:30:1a:6d:22:2f:99: 07:8b:ff:9f:12:2f:29:0a:8b:51:f7:83:6a:00:12:ea:f4:4c: f7:4d:a9:2f:f0:1e:46:62:d1:77:d5:f3:9c:9e:4b:5b:58:98: ad:db:47:c4:c4:e8:b3:f2:56:f2:4c:90:b2:c8:2e:e0:82:fd: 2a:8b:fc:3c:f2:72:ca:a4:57:ab:c0:01:b6:46:a0:0a:16:23: 1d:a7:4a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/C0Z9FXhT4eU4NbpJxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5 NzM2MGEwHhcNMjUxMjA2MTQwMTQzWhcNMjUxMjA3MTQwMTQzWjAzMTEwLwYDVQQD Eyg5M2VjYzc1YjBmZWMzZThiYmM4ZWUxYjA4MjQ5OGVmMzY3YzM0Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH8NjZHbI/mluEG7mvdzjHwwE4G4 hdUGxPIYGVXklRz83Rwa3eYKs6P7Zpfd97ohypQ8Vy3DhXEq7Fx7CAzAVsx1MwPd AmbqtLH3kwSdNyGlbKjHYFQQjeVSaz3mS/zeWuR9G0iRM6YbXDO7AdVvSyD+PHiH JhtvPkbzJ+dUVPXNWAoyrDrM5gIBYfeiWgwQfV7x5pR2IrsH5AAAA2yJwXCutHNR HBYmjfay1tDEpq7sdpG+jZ41Uq+1D0443hRoE9sT308XytD4c7klzFRv2ekCkQa9 7KWyR0dMayGWG/uZDEXjfWo4X8NqLIawRSY9/LFc2KAyA7+I9hL9aY2i7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPsx1sP7D6LvI7hsIJJjvNnw0KUMB8GA1UdIwQY MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATteHkEn0 c5aCww+M6cPRlpx/IjmRlste5QskgjCWdr9rBZN00LpCu00f+a5BQm0Cxeo/r+td EaHC4i9twKkSJNY5B3bPqh6cCNLd70Tm+a0+2pRmUOF7PDXjUajMAtr2L8ejR/qp IUk9wDKnqVR/PcGCID9hc3AZmWxBfGenN0R4avJ19b+L7iSB9vQizAGETqLIpH43 Du4RPC+rx8zaTU3EOQ4tZqH+Uu1eI0GtMBptIi+ZB4v/nxIvKQqLUfeDagAS6vRM 902pL/AeRmLRd9XznJ5LW1iYrdtHxMTos/JW8kyQssgu4IL9Kov8PPJyyqRXq8AB tkagChYjHadKJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:48 2025 by rpki-client