This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json) Hash identifier: 2R8jIhqLi7IJVZ2v/webkvR8adbP7V9YzrcGLMz0jcM= Subject key identifier: B3:39:D1:FF:2E:9C:79:76:FD:4C:69:7D:29:5C:03:69:88:07:51:86 Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38 Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438 Certificate serial: 019AF20935B439A2C8375A6B5DC93A9B9730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft Manifest number: 1638 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: /kVEKPM3wWHQmq0cuP21Bu5vh8fP2T5vFmVE2bGvbRo=) 2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:35:b4:39:a2:c8:37:5a:6b:5d:c9:3a:9b:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=b339d1ff2e9c7976fd4c697d295c036988075186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:3a:88:ed:aa:d5:70:2f:21:61:7d:4b:d1: 74:b0:d4:cc:ab:ae:2d:0a:bb:68:ac:f5:45:dd:5a: d2:08:87:0b:b9:73:27:8e:a5:03:92:30:f8:db:72: 09:0c:3d:dd:15:61:ab:2a:b0:b8:e2:68:50:d9:9f: bf:fa:d6:3e:0d:74:a3:ee:65:3f:35:8e:81:52:0b: 9e:05:dd:a1:13:63:18:33:ca:24:67:ae:95:78:a2: fa:94:5f:6f:c3:86:d8:b0:27:f4:44:7e:a7:84:74: 33:94:4c:7d:7c:54:c9:de:a2:91:27:8c:69:53:57: 6a:a6:a5:f7:fe:da:ce:5d:0f:00:e2:5e:ed:74:29: 2d:db:88:ab:62:50:58:bd:ff:3c:d4:63:93:da:53: 21:3e:d3:a7:13:ad:56:a9:1a:b0:2d:2b:a1:1b:36: c3:17:30:de:d3:7e:de:46:78:e7:60:c0:3e:47:d7: 05:1e:55:91:44:43:69:87:e9:ba:37:fe:81:0b:02: f6:d1:c9:e2:c1:d8:8c:a5:23:84:5d:ac:f7:35:f8: 62:44:19:36:be:31:e5:5c:75:54:30:29:9d:fc:1d: 92:39:23:2a:f9:36:e3:35:c2:39:e8:9a:84:00:ab: 50:7a:49:3c:de:03:6b:9b:8d:fe:5a:b2:45:ba:b7: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:39:D1:FF:2E:9C:79:76:FD:4C:69:7D:29:5C:03:69:88:07:51:86 X509v3 Authority Key Identifier: keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c3:db:5f:91:52:47:08:73:70:a0:41:76:8e:4b:e0:1e:3f: 53:cf:c1:6a:74:10:8f:80:d9:e5:ac:2f:5f:f6:e7:e6:0a:66: 46:fb:28:76:da:55:2b:af:3a:10:1c:ec:68:bf:32:96:9c:c2: 72:32:4e:de:bb:4f:d0:b5:52:d4:af:b1:02:1b:4e:f4:34:83: 55:fc:30:2c:a3:bf:9a:2c:90:c2:c9:01:b4:98:b5:65:df:c8: aa:45:3e:8a:45:d3:d3:32:72:7a:60:bc:c1:b3:27:d4:eb:2e: d9:fa:2e:50:ed:ed:35:eb:2a:86:87:35:e2:b6:9c:86:b6:68: ad:54:2e:fc:78:0a:59:bb:fe:10:dc:e9:6b:04:22:2d:94:f7: ea:d3:49:06:a4:9f:f9:09:86:d5:81:f6:be:d8:bd:63:ab:28: ff:fd:b4:76:64:26:f5:7a:7f:b9:01:7c:76:39:88:e6:16:58: 9e:fe:60:96:f4:e6:e1:7d:12:cb:eb:81:ad:04:6b:44:4a:f1: 3b:01:a8:a0:1c:8c:a3:3c:d2:b1:0c:4f:7c:b2:9d:61:fb:be: 35:c5:d3:2d:33:9d:5e:7e:0c:c8:98:69:67:62:29:bf:40:f3: 7b:92:dc:4b:3f:42:10:c2:a0:69:da:34:bc:4f:06:2d:ea:f0: ae:6e:06:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTW0OaLIN1prXck6m5cwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3M2I0MGFlYmY4OGMxN2IxYjU2MjEyOGE1NmY0MjQ1ZjJm MTU0MzgwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EyhiMzM5ZDFmZjJlOWM3OTc2ZmQ0YzY5N2QyOTVjMDM2OTg4MDc1MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5I6iO2q1XAvIWF9S9F0sNTMq64t CrtorPVF3VrSCIcLuXMnjqUDkjD423IJDD3dFWGrKrC44mhQ2Z+/+tY+DXSj7mU/ NY6BUgueBd2hE2MYM8okZ66VeKL6lF9vw4bYsCf0RH6nhHQzlEx9fFTJ3qKRJ4xp U1dqpqX3/trOXQ8A4l7tdCkt24irYlBYvf881GOT2lMhPtOnE61WqRqwLSuhGzbD FzDe037eRnjnYMA+R9cFHlWRRENph+m6N/6BCwL20cniwdiMpSOEXaz3NfhiRBk2 vjHlXHVUMCmd/B2SOSMq+TbjNcI56JqEAKtQekk83gNrm43+WrJFurd+iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLM50f8unHl2/UxpfSlcA2mIB1GGMB8GA1UdIwQY MBaAFNc7QK6/iMF7G1YhKKVvQkXy8VQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUt YjlkN2Y0MWZjMTg5LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUtYjlkN2Y0MWZjMTg5 LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsPbX5FS RwhzcKBBdo5L4B4/U8/BanQQj4DZ5awvX/bn5gpmRvsodtpVK686EBzsaL8ylpzC cjJO3rtP0LVS1K+xAhtO9DSDVfwwLKO/miyQwskBtJi1Zd/IqkU+ikXT0zJyemC8 wbMn1Osu2fouUO3tNesqhoc14rachrZorVQu/HgKWbv+ENzpawQiLZT36tNJBqSf +QmG1YH2vti9Y6so//20dmQm9Xp/uQF8djmI5hZYnv5glvTm4X0Sy+uBrQRrRErx OwGooByMozzSsQxPfLKdYfu+NcXTLTOdXn4MyJhpZ2Ipv0Dze5LcSz9CEMKgado0 vE8GLerwrm4GVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:25 2025 by rpki-client