This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json) Hash identifier: tPZiqCFMLbyeZwPx2MKe9HT6NSVmd0x16eyXozGh2OI= Subject key identifier: 19:BD:7E:4B:43:29:A6:80:DE:D7:67:60:3C:E3:E6:D8:A8:CC:6F:FA Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae Certificate serial: 019AF12EC2D13F7C932FCA8C894E5C3ADE13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: G5GYoIqSuB0+If49zRkuKP8iZSud8+Fu3XG4hwX9zl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c2:d1:3f:7c:93:2f:ca:8c:89:4e:5c:3a:de:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=19bd7e4b4329a680ded767603ce3e6d8a8cc6ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:9a:b4:f0:93:cb:41:a6:8e:f2:64:87:51: f8:a9:ad:3d:40:d9:0a:23:36:48:c1:d4:41:a0:dc: 8d:83:62:28:be:13:f6:f2:33:33:cd:3a:ca:b0:92: bf:0b:2b:c5:c7:11:9b:e4:44:cc:2c:5a:44:6b:67: 76:cd:ce:b4:2f:28:1b:cf:3f:91:ae:01:84:b8:a9: 5e:99:e2:95:ec:e3:7e:c6:55:d4:74:06:df:a1:0e: 17:fb:f0:8f:d5:43:37:4b:b7:a5:01:24:1b:26:6d: 5d:2c:42:04:69:c5:33:a2:5f:46:6f:51:b1:da:45: 9b:13:a0:fa:bc:04:60:33:fc:d2:47:75:db:a8:05: da:5a:6d:50:18:bc:0f:cb:59:1d:dc:a2:40:6a:40: a5:4a:c9:79:79:4c:eb:fe:af:75:0b:50:e4:f0:df: e0:46:01:20:20:35:d9:f6:7e:02:f6:03:a8:c4:18: 53:e2:41:23:6c:35:f7:46:90:fd:b5:ae:9a:39:80: 7a:83:63:78:97:74:ee:f4:42:63:62:58:a5:38:13: ec:ea:04:27:bf:f2:54:83:12:4b:91:f4:ce:52:6b: 61:38:20:d1:a3:69:b2:ed:60:ed:09:ac:ab:32:14: 6e:1a:71:64:bd:8f:f3:e0:fc:da:fb:e4:ba:43:5d: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:7E:4B:43:29:A6:80:DE:D7:67:60:3C:E3:E6:D8:A8:CC:6F:FA X509v3 Authority Key Identifier: keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ec:50:b9:6b:8c:51:b2:fc:56:00:ac:f6:47:db:11:b3:9d: 69:1c:2a:3f:78:ae:ff:63:63:76:2f:c9:34:9b:9f:d6:3a:7e: 7a:c6:75:4c:de:ff:5c:00:65:87:45:59:b0:43:60:68:3d:52: 92:5a:7f:15:ed:d0:cb:79:97:30:e9:c8:08:d8:38:bb:02:0c: 6f:d2:bd:22:d5:f9:82:6a:93:68:e1:2c:5e:88:4a:e1:a2:0b: 19:40:1d:ce:f2:d1:2a:72:8e:ef:4f:e5:91:c8:63:f9:40:a4: 73:6d:a7:9e:52:f8:28:48:df:6a:01:2f:b8:79:2b:a0:82:ce: 28:b2:e3:59:36:79:22:d9:d3:96:ff:e6:79:96:63:11:cf:94: dc:e7:4d:78:8b:ac:a4:41:b4:d7:c6:61:76:d5:45:21:48:10: 09:84:2b:32:34:66:0d:f7:61:21:21:8d:ea:af:67:f9:38:ba: 9d:a6:34:c1:b8:6b:6d:aa:9b:29:f4:d3:7b:15:a9:15:ac:54: ad:d1:db:06:14:be:3f:81:a0:07:ed:cb:70:9f:4b:29:cd:9e: 4c:f2:a1:67:f1:75:b9:78:11:8c:7f:d1:9f:7f:6c:c4:f9:93: c7:51:d4:d8:0b:90:ac:f2:b3:9d:45:cd:73:9a:ca:c5:47:dd: 0e:9e:0c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsLRP3yTL8qMiU5cOt4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2 YTViYWUwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD EygxOWJkN2U0YjQzMjlhNjgwZGVkNzY3NjAzY2UzZTZkOGE4Y2M2ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tyatPCTy0GmjvJkh1H4qa09QNkK IzZIwdRBoNyNg2IovhP28jMzzTrKsJK/CyvFxxGb5ETMLFpEa2d2zc60Lygbzz+R rgGEuKlemeKV7ON+xlXUdAbfoQ4X+/CP1UM3S7elASQbJm1dLEIEacUzol9Gb1Gx 2kWbE6D6vARgM/zSR3XbqAXaWm1QGLwPy1kd3KJAakClSsl5eUzr/q91C1Dk8N/g RgEgIDXZ9n4C9gOoxBhT4kEjbDX3RpD9ta6aOYB6g2N4l3Tu9EJjYlilOBPs6gQn v/JUgxJLkfTOUmthOCDRo2my7WDtCayrMhRuGnFkvY/z4Pza++S6Q12h7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm9fktDKaaA3tdnYDzj5tiozG/6MB8GA1UdIwQY MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOxQuWuM UbL8VgCs9kfbEbOdaRwqP3iu/2Njdi/JNJuf1jp+esZ1TN7/XABlh0VZsENgaD1S klp/Fe3Qy3mXMOnICNg4uwIMb9K9ItX5gmqTaOEsXohK4aILGUAdzvLRKnKO70/l kchj+UCkc22nnlL4KEjfagEvuHkroILOKLLjWTZ5ItnTlv/meZZjEc+U3OdNeIus pEG018ZhdtVFIUgQCYQrMjRmDfdhISGN6q9n+Ti6naY0wbhrbaqbKfTTexWpFaxU rdHbBhS+P4GgB+3LcJ9LKc2eTPKhZ/F1uXgRjH/Rn39sxPmTx1HU2AuQrPKznUXN c5rKxUfdDp4Mzw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:21 2025 by rpki-client