This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json) Hash identifier: bM9U8xudDo8bttoZKCim1c+Z3MzgLAi5TRxSgLOiFsw= Subject key identifier: CC:FD:11:4B:FD:79:EF:8F:47:BF:F8:E4:61:1D:F0:31:43:4D:0F:A1 Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e Certificate serial: 019AF61CACEAF1778B94F9F0147F8F650825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft Manifest number: 0146 Signing time: Sun 07 Dec 2025 00:01:05 +0000 Manifest this update: Sun 07 Dec 2025 00:01:05 +0000 Manifest next update: Mon 08 Dec 2025 00:01:05 +0000 Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: OdC986p/BZQJoEGp5T71zhKI30J0rprsk0DSbmlvFk4=) 2: qoiIuGZpsZyjR8YLAPW0kfgioQM.roa (hash: Bdnsy6A3scDmTAkeEHQfOrfRTQ0txD1RF6hmP7OF1Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:ac:ea:f1:77:8b:94:f9:f0:14:7f:8f:65:08:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e Validity Not Before: Dec 7 00:01:05 2025 GMT Not After : Dec 8 00:01:05 2025 GMT Subject: CN=ccfd114bfd79ef8f47bff8e4611df031434d0fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:cc:e7:47:f3:57:48:3e:55:5b:71:6c:5f: 67:ac:80:09:f2:65:29:83:ef:6e:a9:8f:9b:75:e4: 3c:09:5a:4b:8b:2a:cd:04:d6:6d:7b:82:92:8d:87: 92:c9:2c:e0:ee:95:55:95:86:5d:a4:86:44:d5:69: 7f:ef:6d:e2:24:a7:02:ed:93:c9:05:6d:e8:a8:ea: a2:dd:d7:d4:50:78:dd:9e:43:62:c7:43:dd:c7:f9: 7c:3c:3a:16:1f:cf:5e:9c:80:db:a6:d6:1e:09:1c: a9:40:b0:68:c7:ba:98:13:8c:f4:f0:2c:0d:eb:18: 61:49:f1:30:50:da:fb:cb:c5:88:f5:8b:de:af:34: b7:40:2f:f7:38:ff:42:6f:0a:17:a9:0b:7d:50:87: 3e:1b:bd:50:36:33:25:f6:3e:36:ce:9f:d8:a1:71: 49:07:cc:6e:20:d6:41:1a:87:4a:6e:b5:81:f6:6c: 34:a6:e7:24:07:52:50:09:49:cd:63:aa:ba:ed:a9: 51:7e:ff:6e:cc:af:dd:13:c8:e2:eb:3c:a2:a0:7d: bf:96:b0:42:5e:49:03:b2:15:24:a6:13:8d:f4:8e: 69:10:8a:33:f4:20:86:28:16:38:cc:68:21:72:87: df:69:93:ff:4b:78:5f:9e:b1:27:aa:4d:94:2f:59: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FD:11:4B:FD:79:EF:8F:47:BF:F8:E4:61:1D:F0:31:43:4D:0F:A1 X509v3 Authority Key Identifier: keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:35:80:b9:d5:d9:4c:81:fd:dd:d8:ad:e4:5c:6f:6c:a1:a6: 85:db:2a:ca:f1:a5:b2:39:ae:12:b3:8a:af:05:9d:90:2a:39: 4d:a5:f6:7d:e3:55:15:61:85:60:57:f1:6e:d9:a1:44:0e:e3: 83:90:41:a7:a8:ec:ed:ff:ed:e2:ce:2a:c2:66:6f:71:14:44: cb:1c:e0:50:60:81:9b:e1:fd:c4:d5:b5:2e:eb:82:24:6d:1a: 39:b5:9f:e3:89:e3:c9:1e:58:49:3b:5b:7e:83:64:0a:d2:9a: 8e:6e:7a:cb:a7:d6:af:87:26:e8:46:44:f2:74:f4:23:bb:50: 3d:ca:80:ff:96:70:2d:ef:ec:f2:e2:91:27:0a:fc:e5:46:1e: 34:de:a8:1b:d1:89:1e:ef:83:5c:74:98:9b:dd:db:a3:1f:b2: 44:a3:9e:47:2b:a5:3c:ff:6a:30:1c:35:ce:9b:6c:05:7d:c1: b9:10:28:08:54:04:12:6e:03:d7:c1:61:83:95:78:b5:16:45: 82:55:3b:59:74:21:99:6e:5c:11:a4:77:1a:d4:7c:0c:94:95: da:67:33:8a:b3:4b:70:f7:4c:dd:77:7d:17:cb:b7:76:49:20: 1c:e9:1e:06:65:82:72:0f:19:00:a9:11:5e:18:b6:dd:c9:a2: 49:c3:6d:cc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr2HKzq8XeLlPnwFH+PZQglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTc5MThiYmY1YWE4MGYxNDQ5MzdhZDE5NjVlYTAzZjAy NWMyMmUwHhcNMjUxMjA3MDAwMTA1WhcNMjUxMjA4MDAwMTA1WjAzMTEwLwYDVQQD EyhjY2ZkMTE0YmZkNzllZjhmNDdiZmY4ZTQ2MTFkZjAzMTQzNGQwZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZzM50fzV0g+VVtxbF9nrIAJ8mUp g+9uqY+bdeQ8CVpLiyrNBNZte4KSjYeSySzg7pVVlYZdpIZE1Wl/723iJKcC7ZPJ BW3oqOqi3dfUUHjdnkNix0Pdx/l8PDoWH89enIDbptYeCRypQLBox7qYE4z08CwN 6xhhSfEwUNr7y8WI9YverzS3QC/3OP9CbwoXqQt9UIc+G71QNjMl9j42zp/YoXFJ B8xuINZBGodKbrWB9mw0puckB1JQCUnNY6q67alRfv9uzK/dE8ji6zyioH2/lrBC XkkDshUkphON9I5pEIoz9CCGKBY4zGghcoffaZP/S3hfnrEnqk2UL1nkcQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMz9EUv9ee+PR7/45GEd8DFDTQ+hMB8GA1UdIwQY MBaAFPunkYu/WqgPFEk3rRll6gPwJcIuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02ZVJpNzlhcUE4VVNUZXRHV1hxQV9BbHdpNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUy LWE0MzFkN2FkNjhkZC8xLzEtNmVSaTc5YXFBOFVTVGV0R1dYcUFfQWx3aTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg4LzgyMjIyMS03N2ZmLTQyZjQtYjA1Mi1hNDMxZDdhZDY4 ZGQvMS8xLTZlUmk3OWFxQThVU1RldEdXWHFBX0Fsd2k0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzWA udXZTIH93dit5FxvbKGmhdsqyvGlsjmuErOKrwWdkCo5TaX2feNVFWGFYFfxbtmh RA7jg5BBp6js7f/t4s4qwmZvcRREyxzgUGCBm+H9xNW1LuuCJG0aObWf44njyR5Y STtbfoNkCtKajm56y6fWr4cm6EZE8nT0I7tQPcqA/5ZwLe/s8uKRJwr85UYeNN6o G9GJHu+DXHSYm93box+yRKOeRyulPP9qMBw1zptsBX3BuRAoCFQEEm4D18Fhg5V4 tRZFglU7WXQhmW5cEaR3GtR8DJSV2mczirNLcPdM3Xd9F8u3dkkgHOkeBmWCcg8Z AKkRXhi23cmiScNtzA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:55 2025 by rpki-client