This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json) Hash identifier: 59mHeM/mbTERBC6sN2IsPEwpg5/+3dSJAkq3UH+4d90= Subject key identifier: 08:08:30:47:01:BD:5A:31:E5:CC:05:22:E7:BB:15:90:E3:79:4B:1E Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd Certificate serial: 019AF19B4676E7E562BC60515B088CC58B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft Manifest number: 1146 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: YZENA9+aJ+cyQhrUErmUpXo1kt8L2A3N/3EBPgJ+LHc=) 2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:46:76:e7:e5:62:bc:60:51:5b:08:8c:c5:8b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=0808304701bd5a31e5cc0522e7bb1590e3794b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:cf:02:0a:df:ae:47:b7:63:f7:34:11:00: a0:ec:bc:61:d6:5b:9e:df:41:ba:a5:60:79:18:3f: 3a:15:da:c3:43:3f:95:f2:ef:2b:9f:43:4a:a8:cb: 5a:89:05:b6:44:f1:c7:cb:0e:ce:08:74:52:14:38: e6:56:cd:30:49:44:91:a8:9d:b6:7d:0a:0c:bf:14: 8d:d8:44:17:b3:f3:7f:e1:4e:75:32:3a:45:f8:72: 55:be:94:5c:72:f2:a2:ac:70:8b:7d:28:45:db:73: e5:51:5c:8a:8a:b2:32:91:92:a0:a2:ae:bb:d3:94: 50:83:8e:ac:d0:61:cd:21:db:48:ef:16:9b:d7:03: a0:06:48:4b:e4:7d:d4:57:22:a4:a6:51:ed:72:37: 73:ce:3d:bb:be:44:20:32:51:97:48:fc:07:11:5c: 16:0f:d2:2f:d3:f2:9d:7f:f9:7f:d1:d9:aa:b3:b2: f3:06:d9:fb:23:56:b0:3f:79:c2:a8:8b:73:dc:d1: c6:3d:c9:40:ec:c6:ad:95:39:f3:16:d7:81:44:a4: b3:64:05:06:8b:73:96:2c:9e:43:3b:6e:13:7e:a4: 7e:3d:bb:e1:27:e2:39:5e:47:69:72:b9:ab:72:a0: 18:1d:ec:c1:98:8f:4d:cf:55:f7:d2:a8:1d:6e:4f: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:08:30:47:01:BD:5A:31:E5:CC:05:22:E7:BB:15:90:E3:79:4B:1E X509v3 Authority Key Identifier: keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6e:76:88:24:42:88:1e:61:79:69:e6:15:97:98:04:cd:a8: 62:2e:fd:e0:e5:87:21:7d:72:7a:26:2c:66:d1:22:da:3d:00: be:1e:55:77:0d:ad:5d:fa:e9:86:48:ff:2b:7d:9b:c5:8a:7d: 54:9c:e5:65:fb:1f:cb:9a:e7:e0:4e:58:b9:12:63:0c:62:4f: c3:ab:74:1c:b2:b5:0f:45:a6:6c:06:3b:52:a3:41:a9:59:25: c5:d2:d9:e6:39:bc:b9:d9:dd:27:23:c2:b4:79:06:55:f5:b3: 9b:c5:6b:ac:b4:ec:d1:b3:00:9e:db:4d:57:46:7b:94:b3:47: 6d:0a:f6:57:b2:16:bf:6f:3f:42:2d:55:fc:a9:3f:88:5c:3b: ee:7d:ea:65:47:1a:fe:08:7f:a1:84:0a:dd:74:79:89:57:1a: b2:06:3a:ed:44:10:c4:cb:cc:d2:cd:9c:98:09:f9:c9:4b:cb: c5:b4:2d:28:b0:a5:52:de:92:64:05:fe:bd:ee:18:7a:48:f4: f3:f5:58:74:c7:81:95:6c:ab:84:ba:ae:33:8a:15:23:db:8a: a9:c4:3e:55:36:a1:88:30:45:22:94:2e:23:ea:c2:ff:c1:ba: 4d:54:4c:22:8b:d6:1f:60:fa:a9:28:26:dd:8c:be:96:5d:d3: ef:42:5c:b3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxm0Z25+VivGBRWwiMxYt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MzI3MmMwYzMyZGIwMDRmMDc4Zjg3NGI5OWRhOWEwYjdl NjNhZmQwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EygwODA4MzA0NzAxYmQ1YTMxZTVjYzA1MjJlN2JiMTU5MGUzNzk0YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9HPAgrfrke3Y/c0EQCg7Lxh1lue 30G6pWB5GD86FdrDQz+V8u8rn0NKqMtaiQW2RPHHyw7OCHRSFDjmVs0wSUSRqJ22 fQoMvxSN2EQXs/N/4U51MjpF+HJVvpRccvKirHCLfShF23PlUVyKirIykZKgoq67 05RQg46s0GHNIdtI7xab1wOgBkhL5H3UVyKkplHtcjdzzj27vkQgMlGXSPwHEVwW D9Iv0/Kdf/l/0dmqs7LzBtn7I1awP3nCqItz3NHGPclA7MatlTnzFteBRKSzZAUG i3OWLJ5DO24TfqR+PbvhJ+I5XkdpcrmrcqAYHezBmI9Nz1X30qgdbk93GwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAgIMEcBvVox5cwFIue7FZDjeUseMB8GA1UdIwQY MBaAFPgycsDDLbAE8Hj4dLmdqaC35jr9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ESnl3TU10c0FUd2VQaDB1WjJwb0xmbU92MC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOTRhMWUwLWMxODAtNGJhZi05ZWEw LWY2N2U3MDc4ODc4ZS8xLzEtREp5d01NdHNBVHdlUGgwdVoycG9MZm1PdjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzkzLzk0YTFlMC1jMTgwLTRiYWYtOWVhMC1mNjdlNzA3ODg3 OGUvMS8xLURKeXdNTXRzQVR3ZVBoMHVaMnBvTGZtT3YwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm52 iCRCiB5heWnmFZeYBM2oYi794OWHIX1yeiYsZtEi2j0Avh5Vdw2tXfrphkj/K32b xYp9VJzlZfsfy5rn4E5YuRJjDGJPw6t0HLK1D0WmbAY7UqNBqVklxdLZ5jm8udnd JyPCtHkGVfWzm8VrrLTs0bMAnttNV0Z7lLNHbQr2V7IWv28/Qi1V/Kk/iFw77n3q ZUca/gh/oYQK3XR5iVcasgY67UQQxMvM0s2cmAn5yUvLxbQtKLClUt6SZAX+ve4Y ekj08/VYdMeBlWyrhLquM4oVI9uKqcQ+VTahiDBFIpQuI+rC/8G6TVRMIovWH2D6 qSgm3Yy+ll3T70Jcsw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:24 2025 by rpki-client