This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft File: 1FRz0ejN9J49mPjXcKrBSNLyiyM.mft (raw, json) Hash identifier: rGpN3eJd3F8Di9PCW4yqmgtxn8XBv0P1MZh6bWGFcVs= Subject key identifier: 3A:D7:8C:34:DA:6E:A4:C7:AE:F9:F3:0F:3F:BC:72:54:6B:B0:3B:40 Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23 Certificate issuer: /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23 Certificate serial: 019AF23FD9E25AC7EF4C9ED4D75359336233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft Manifest number: 10DF Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: 1FRz0ejN9J49mPjXcKrBSNLyiyM.crl (hash: Feq0Gm79JDHz7PuNRuWI1c7MXbNh/K7twVTdX8W10zM=) 2: xmpcwINBwhfOQ2qyibBKWtgFhyc.roa (hash: RM0GiW910PS4/kJDIOZ/RJgcd9jsdiuKg4ZQlvkwZTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d9:e2:5a:c7:ef:4c:9e:d4:d7:53:59:33:62:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=3ad78c34da6ea4c7aef9f30f3fbc72546bb03b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:49:7b:b3:d9:87:cd:e4:81:a6:07:04:64: bb:77:37:bc:a2:52:68:86:8e:20:e7:d2:01:18:02: bc:70:09:2c:dd:8d:55:eb:fe:e9:32:75:47:10:4e: c3:27:33:2f:01:e8:28:59:f9:46:d1:80:47:34:0f: 55:56:ff:76:38:6a:47:f5:25:b7:68:3e:3e:a6:36: c8:cc:6c:de:ec:16:85:da:83:1e:c4:60:44:e0:aa: 12:ed:d9:c2:24:f0:2a:f6:7c:39:d8:cc:06:0a:59: 01:6d:df:cb:d8:d1:2e:b1:00:b8:54:6a:94:fc:75: ba:58:22:f9:59:5f:0c:d8:0f:8c:13:39:4c:08:48: a2:5e:e3:bc:77:b3:ef:45:46:d6:e4:0b:22:68:d6: f3:a9:19:d2:a5:99:2d:0f:36:39:4a:93:26:4f:e4: 97:a4:7d:60:6d:b6:eb:4f:86:54:cd:c2:39:18:2d: 14:32:94:df:b1:a9:56:cb:83:1b:c4:f5:28:69:8d: e3:13:28:9a:ca:41:30:a9:1e:c1:c6:c3:43:aa:09: f4:f6:1d:66:a4:c3:c1:08:6c:80:4d:ad:9c:43:ba: 4d:bc:53:e3:2a:3f:f5:76:9a:6f:57:27:6c:e7:c1: 21:04:2e:be:0e:47:9e:dd:55:1b:d5:85:41:6d:37: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:8C:34:DA:6E:A4:C7:AE:F9:F3:0F:3F:BC:72:54:6B:B0:3B:40 X509v3 Authority Key Identifier: keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:fa:21:29:9a:95:c7:9e:0e:3b:0f:df:d6:e4:f8:5a:60: cb:b3:8c:f9:6b:7c:4b:a3:49:fc:c7:7a:56:b6:b8:cd:c3:54: 81:c4:a8:54:b7:4b:77:62:28:0e:9f:ff:9b:15:0d:46:d2:01: 29:70:c5:8c:fd:b8:d1:3c:91:a1:a3:5b:4d:d3:81:c7:6c:c2: b6:56:7d:05:1a:1d:74:1b:55:fe:7b:1b:1a:46:36:59:17:96: 2d:a7:a1:a3:23:e8:00:cd:8d:66:a7:28:6f:a3:90:14:c4:34: 1b:3b:95:30:ed:54:28:07:54:7c:62:cc:d5:b9:0e:f9:e4:53: e2:7d:4f:3c:eb:ab:b1:d3:68:c5:b4:1c:16:09:30:fa:7d:bf: f9:92:a6:a3:b6:02:d7:c2:09:5c:04:69:93:a3:c6:8a:e3:91: 40:cf:10:17:6c:5b:d1:78:6e:e9:25:56:cf:bb:22:26:a8:88: e9:0a:f6:b3:15:80:a1:7e:d4:79:39:ce:6f:26:50:91:c0:7f: 47:14:5c:9a:29:7e:e9:3d:59:4f:a7:f3:1b:af:e3:a4:c9:a7: bd:06:53:20:c0:9a:68:46:b5:2c:2d:83:2e:81:fa:b3:fe:b6: 84:24:24:a2:70:2d:f2:81:76:f7:54:6c:99:f1:f2:b1:d4:55: 2a:2f:bc:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9niWsfvTJ7U11NZM2IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NTQ3M2QxZThjZGY0OWUzZDk4ZjhkNzcwYWFjMTQ4ZDJm MjhiMjMwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EygzYWQ3OGMzNGRhNmVhNGM3YWVmOWYzMGYzZmJjNzI1NDZiYjAzYjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQpJe7PZh83kgaYHBGS7dze8olJo ho4g59IBGAK8cAks3Y1V6/7pMnVHEE7DJzMvAegoWflG0YBHNA9VVv92OGpH9SW3 aD4+pjbIzGze7BaF2oMexGBE4KoS7dnCJPAq9nw52MwGClkBbd/L2NEusQC4VGqU /HW6WCL5WV8M2A+MEzlMCEiiXuO8d7PvRUbW5AsiaNbzqRnSpZktDzY5SpMmT+SX pH1gbbbrT4ZUzcI5GC0UMpTfsalWy4MbxPUoaY3jEyiaykEwqR7BxsNDqgn09h1m pMPBCGyATa2cQ7pNvFPjKj/1dppvVyds58EhBC6+Dkee3VUb1YVBbTe4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrXjDTabqTHrvnzDz+8clRrsDtAMB8GA1UdIwQY MBaAFNRUc9HozfSePZj413CqwUjS8osjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZSejBlak45SjQ5bVBqWGNLckJTTkx5aXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85MWQ2Y2UtMWE2YS00ZDEzLWEyZTIt YTdlYjQ2YjM3ZDcyLzEvMUZSejBlak45SjQ5bVBqWGNLckJTTkx5aXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85MWQ2Y2UtMWE2YS00ZDEzLWEyZTItYTdlYjQ2YjM3ZDcy LzEvMUZSejBlak45SjQ5bVBqWGNLckJTTkx5aXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOX6ISma lceeDjsP39bk+Fpgy7OM+Wt8S6NJ/Md6Vra4zcNUgcSoVLdLd2IoDp//mxUNRtIB KXDFjP240TyRoaNbTdOBx2zCtlZ9BRoddBtV/nsbGkY2WReWLaehoyPoAM2NZqco b6OQFMQ0GzuVMO1UKAdUfGLM1bkO+eRT4n1PPOursdNoxbQcFgkw+n2/+ZKmo7YC 18IJXARpk6PGiuORQM8QF2xb0Xhu6SVWz7siJqiI6Qr2sxWAoX7UeTnObyZQkcB/ RxRcmil+6T1ZT6fzG6/jpMmnvQZTIMCaaEa1LC2DLoH6s/62hCQkonAt8oF291Rs mfHysdRVKi+8HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:53 2025 by rpki-client