This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json) Hash identifier: LjH9vUyBG9ZgpGTq3KkUz+RxIH6i0deS2zyp+rRZHBo= Subject key identifier: BF:1A:87:F0:CC:6D:DD:3D:CC:49:B5:1D:77:DF:87:C6:14:DF:89:1B Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18 Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18 Certificate serial: 019AF2098688491DFCAFE7A53C4B41FF286D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft Manifest number: 0F19 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=) 2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: XSA+9RnEOBJXV8+U+ozwDpYKcXgDqKKd7ZrtvtGqHUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:86:88:49:1d:fc:af:e7:a5:3c:4b:41:ff:28:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=bf1a87f0cc6ddd3dcc49b51d77df87c614df891b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:1a:80:63:84:9a:c8:ab:c7:1e:1f:e6:ff: 6f:07:c6:34:1e:9c:af:c7:4a:34:e7:24:6d:de:e3: 58:0e:30:a9:e6:87:ff:d5:28:de:9f:08:26:26:54: 04:52:44:95:0a:10:30:e0:b6:d8:65:71:6f:7c:83: f1:fc:0a:3a:67:78:06:b8:1c:aa:07:76:a9:24:fa: e9:70:f0:81:11:84:23:b4:48:04:73:2b:38:fd:45: ce:7b:9f:d6:51:da:fd:8f:ea:58:c7:a9:fa:ce:12: b1:3b:55:27:7b:fc:ed:02:64:f8:a8:89:75:4d:b6: ca:d4:89:25:82:40:9e:98:1f:00:74:36:23:f5:1b: be:72:51:57:5a:06:7d:f5:59:88:9b:69:7b:e5:12: e1:bd:c8:4a:1f:a5:b3:34:ca:1b:bf:b1:83:be:15: c5:96:ca:eb:3f:e9:6f:62:b8:4d:24:a4:d2:19:ad: 9e:60:64:43:bd:1b:40:96:25:28:e4:d5:43:33:c5: 80:2f:09:bc:71:43:64:3d:24:b0:c8:cd:db:7f:9f: 2b:7a:56:de:e4:6f:8c:6e:84:93:b3:c9:8b:9b:83: 3d:a4:3e:96:e9:93:61:1e:ad:7e:57:10:7e:62:5c: b0:76:0b:1c:fc:5e:1a:ee:37:2c:21:3a:58:29:e0: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:87:F0:CC:6D:DD:3D:CC:49:B5:1D:77:DF:87:C6:14:DF:89:1B X509v3 Authority Key Identifier: keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2b:c7:b1:b1:bb:0e:ac:5e:4d:1c:5b:f1:ed:4c:d3:5e:ad: 21:18:7a:19:51:ad:1c:36:d8:8a:66:02:8a:58:f1:cb:40:3c: 5c:3d:8e:64:82:e5:93:01:63:73:18:63:cc:8d:ce:9a:91:30: 9c:d7:13:9a:da:64:fa:a2:67:de:3f:50:38:f8:25:84:2e:0d: 62:89:de:0f:fe:4d:7a:4c:e5:8e:9f:80:46:3d:52:3f:40:9a: ca:f7:e2:c5:87:0c:e7:a0:49:29:e1:a4:04:59:37:0e:cf:b9: f3:63:52:3d:9b:7a:36:88:33:e6:63:b1:3e:13:a2:c5:e4:f6: 8c:74:b6:dc:d7:a3:61:78:e8:28:48:a1:a8:30:6a:d1:63:4c: 78:6d:aa:0c:25:eb:4e:8c:af:47:3e:b5:6d:0a:c8:13:30:a2: 9a:bc:80:88:2f:82:f0:89:4d:7c:7d:5d:80:14:5f:4c:e7:a4: 34:ba:fa:81:5b:1e:e7:1e:5f:96:30:3c:ef:a4:a4:31:67:d3: f5:94:e8:e8:de:2d:c4:1a:f7:1b:be:4d:46:d3:36:55:57:88: 2a:f0:54:36:9e:96:c6:b6:53:4f:2e:43:d4:73:c6:a6:0a:12: 2e:38:99:0c:56:6a:b3:84:a2:5d:f3:67:cf:99:12:be:41:15: a7:df:6e:01 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCYaISR38r+elPEtB/yhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz MDdkMTgwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhiZjFhODdmMGNjNmRkZDNkY2M0OWI1MWQ3N2RmODdjNjE0ZGY4OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/oagGOEmsirxx4f5v9vB8Y0Hpyv x0o05yRt3uNYDjCp5of/1SjenwgmJlQEUkSVChAw4LbYZXFvfIPx/Ao6Z3gGuByq B3apJPrpcPCBEYQjtEgEcys4/UXOe5/WUdr9j+pYx6n6zhKxO1Une/ztAmT4qIl1 TbbK1IklgkCemB8AdDYj9Ru+clFXWgZ99VmIm2l75RLhvchKH6WzNMobv7GDvhXF lsrrP+lvYrhNJKTSGa2eYGRDvRtAliUo5NVDM8WALwm8cUNkPSSwyM3bf58relbe 5G+MboSTs8mLm4M9pD6W6ZNhHq1+VxB+Ylywdgsc/F4a7jcsITpYKeCSiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL8ah/DMbd09zEm1HXffh8YU34kbMB8GA1UdIwQY MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0 LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSvH sbG7DqxeTRxb8e1M016tIRh6GVGtHDbYimYCiljxy0A8XD2OZILlkwFjcxhjzI3O mpEwnNcTmtpk+qJn3j9QOPglhC4NYoneD/5Nekzljp+ARj1SP0CayvfixYcM56BJ KeGkBFk3Ds+582NSPZt6Nogz5mOxPhOixeT2jHS23NejYXjoKEihqDBq0WNMeG2q DCXrToyvRz61bQrIEzCimryAiC+C8IlNfH1dgBRfTOekNLr6gVse5x5fljA876Sk MWfT9ZTo6N4txBr3G75NRtM2VVeIKvBUNp6WxrZTTy5D1HPGpgoSLjiZDFZqs4Si XfNnz5kSvkEVp99uAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:27 2025 by rpki-client