This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json) Hash identifier: s17qhhFxFbBnD0dFh9msv63Hdwgeicgzy+gh+EntHIM= Subject key identifier: 99:95:7D:6A:81:7C:C1:59:68:4C:77:7A:7F:C2:9C:68:A5:A3:08:83 Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd Certificate serial: 019AF1648B2716BDBED6B218404281389B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: zp6WeTkTuzNTIdekDtcW3k8pjW/2Euws/VNKMfc02ks=) 2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8b:27:16:bd:be:d6:b2:18:40:42:81:38:9b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=99957d6a817cc159684c777a7fc29c68a5a30883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:4f:36:e1:7a:5e:5f:7e:d2:e5:1e:7d:bc: a4:bf:95:2c:67:b7:bf:38:4a:7e:96:fc:b7:80:96: 60:37:58:bd:6d:d2:62:67:62:f8:dd:74:47:d3:43: 16:57:d6:06:3e:b6:41:4d:86:f1:c5:58:da:00:ce: c4:e0:c9:d9:fb:a7:89:db:4f:11:dc:6f:0a:cf:ca: c0:80:fb:b7:45:c5:47:b4:83:08:f8:8e:87:29:84: 7d:df:32:0b:91:2a:b0:20:2d:23:9d:2f:5a:30:21: 4e:7a:9f:1a:34:ed:4b:ba:73:b8:59:57:8b:92:8c: 49:9c:b7:8c:22:32:1b:0e:ca:e6:2d:30:7c:04:ff: 0d:d4:e6:3a:67:18:de:ee:d8:77:9e:60:7c:8f:ad: 79:2f:80:41:5f:53:25:1e:c2:54:e0:de:ea:be:ac: 5f:c4:93:35:1f:4f:22:4e:4c:4c:3d:73:22:07:89: 34:ca:26:16:b8:3f:fe:d2:46:de:69:30:b3:c4:ba: ed:34:26:10:c6:10:3c:57:98:53:7c:ad:1a:2d:56: f9:1f:a5:42:92:4d:31:be:8a:99:b1:ed:b1:df:3a: 2f:48:7b:16:0e:c8:6e:f9:fc:e4:e9:5e:cd:d6:a5: 32:1d:5f:b2:fb:1c:39:a9:4a:95:91:e0:7f:0a:0e: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:7D:6A:81:7C:C1:59:68:4C:77:7A:7F:C2:9C:68:A5:A3:08:83 X509v3 Authority Key Identifier: keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:ea:c5:b0:18:4d:ca:f6:a1:fb:94:55:b5:1c:4d:4e:7f: 98:21:48:d3:3e:7e:86:8b:b4:73:33:09:7b:88:6f:4b:9c:4c: 0c:7a:81:a0:fb:f8:18:77:f6:52:38:24:12:97:57:30:fe:90: ab:e2:03:9f:fe:92:94:06:34:b0:e7:5b:b5:0d:95:f7:b0:e7: ee:be:b8:90:dc:6a:ba:61:39:34:10:0a:41:36:d4:e3:46:df: 5e:89:43:bb:b3:0c:4c:2d:cf:7e:ee:9e:b5:67:80:a5:5c:bf: e1:ba:33:19:eb:f4:1f:ee:25:be:1d:2a:16:8a:60:9d:4d:97: 86:93:01:8a:83:8a:88:de:75:fc:bd:32:2c:c4:cc:12:4e:f4: 36:28:5b:3b:dd:f6:63:ff:13:5b:6c:fa:88:42:b9:b5:72:49: e6:77:dc:1f:5c:90:88:9f:b3:ba:13:f2:cc:83:a2:43:dc:29: 91:7a:3e:b8:c1:c1:30:31:50:16:eb:d2:c8:e8:23:8a:61:24: 97:1a:df:e4:3d:9d:f0:0d:3c:06:59:35:ec:34:98:48:1e:39: 36:a4:7c:5b:d3:9f:5c:52:eb:ec:e1:ac:e4:39:05:cc:e3:92: 49:c8:19:ff:6d:3e:a3:94:29:78:f6:38:08:85:17:b2:36:c3: 0d:d0:b9:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIsnFr2+1rIYQEKBOJsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MThiZjYwZDFlZjRjNzZjZDA3YTUzZjdlYzY4Mzc3MWFh YjVjZmQwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD Eyg5OTk1N2Q2YTgxN2NjMTU5Njg0Yzc3N2E3ZmMyOWM2OGE1YTMwODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZlPNuF6Xl9+0uUefbykv5UsZ7e/ OEp+lvy3gJZgN1i9bdJiZ2L43XRH00MWV9YGPrZBTYbxxVjaAM7E4MnZ+6eJ208R 3G8Kz8rAgPu3RcVHtIMI+I6HKYR93zILkSqwIC0jnS9aMCFOep8aNO1LunO4WVeL koxJnLeMIjIbDsrmLTB8BP8N1OY6Zxje7th3nmB8j615L4BBX1MlHsJU4N7qvqxf xJM1H08iTkxMPXMiB4k0yiYWuD/+0kbeaTCzxLrtNCYQxhA8V5hTfK0aLVb5H6VC kk0xvoqZse2x3zovSHsWDshu+fzk6V7N1qUyHV+y+xw5qUqVkeB/Cg4XpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmVfWqBfMFZaEx3en/CnGilowiDMB8GA1UdIwQY MBaAFNUYv2DR70x2zQelP37Gg3caq1z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWIt MjQ0ODhiMjdjYTQxLzEvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWItMjQ0ODhiMjdjYTQx LzEvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/LqxbAY Tcr2ofuUVbUcTU5/mCFI0z5+hou0czMJe4hvS5xMDHqBoPv4GHf2UjgkEpdXMP6Q q+IDn/6SlAY0sOdbtQ2V97Dn7r64kNxqumE5NBAKQTbU40bfXolDu7MMTC3Pfu6e tWeApVy/4bozGev0H+4lvh0qFopgnU2XhpMBioOKiN51/L0yLMTMEk70NihbO932 Y/8TW2z6iEK5tXJJ5nfcH1yQiJ+zuhPyzIOiQ9wpkXo+uMHBMDFQFuvSyOgjimEk lxrf5D2d8A08Blk17DSYSB45NqR8W9OfXFLr7OGs5DkFzOOSScgZ/20+o5QpePY4 CIUXsjbDDdC5uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:05 2025 by rpki-client