This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json) Hash identifier: 4lRWerNqFWJwufSmo6h/7XN0Dym3zQzP3ktPfH0gmWU= Subject key identifier: 33:8F:FA:E0:3A:2B:9B:D4:86:CB:18:EE:E6:04:4D:08:05:B4:3D:AA Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df Certificate serial: 019AF80B47E4998934518C5C926A63626C51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft Manifest number: 14A1 Signing time: Sun 07 Dec 2025 09:01:19 +0000 Manifest this update: Sun 07 Dec 2025 09:01:19 +0000 Manifest next update: Mon 08 Dec 2025 09:01:19 +0000 Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: ojtpH5mrabjapGYPxPjLmUdAV2w+qoFmIJLE1D7tUfk=) 2: cEPjBaGbVjdPO-hNsYO67euLYpQ.roa (hash: T605woCbDSzS9CwoW3bIxK7R2PsaKmq7Bur/BezpJTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0b:47:e4:99:89:34:51:8c:5c:92:6a:63:62:6c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df Validity Not Before: Dec 7 09:01:19 2025 GMT Not After : Dec 8 09:01:19 2025 GMT Subject: CN=338ffae03a2b9bd486cb18eee6044d0805b43daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:d8:ec:ef:9b:fa:6a:19:1f:03:4b:ef:2c: 8b:e9:d3:73:a5:82:7d:a6:49:5a:62:0f:64:d1:1a: 0c:10:17:60:14:18:0f:5f:79:c7:cd:87:3a:08:ce: 07:3e:33:94:9d:58:74:34:61:eb:1f:eb:0f:5d:21: 88:85:6e:a4:64:32:e6:f5:50:32:4d:7f:ad:09:ad: 73:74:0f:e2:f8:0a:32:40:b1:15:f0:f7:42:dd:91: 11:8a:3a:be:f2:94:de:85:25:20:79:af:9f:d7:6d: 49:32:55:3d:3c:77:81:a1:06:a8:50:65:35:f3:23: 84:98:ea:1e:ff:ee:dc:8e:f9:4f:80:3b:3d:80:73: ac:5e:0c:04:0a:bf:fb:54:d4:66:a8:ae:93:30:97: 86:a3:b9:33:5d:3b:67:bc:ef:55:54:ce:e6:68:69: 73:b3:39:69:ab:17:86:b8:47:18:58:7b:49:ad:bd: 65:ed:e7:cc:84:47:20:9b:55:4c:90:46:09:a1:47: cf:67:ea:a4:cf:92:e5:e2:7c:0d:6a:e2:d7:9b:65: d1:cb:99:97:07:07:76:d3:d8:67:3e:ff:c5:52:b2: 16:47:5e:77:77:42:47:10:ea:69:ba:24:c2:b2:7d: d7:31:ee:40:02:13:c7:40:59:49:55:fc:f7:0d:8c: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8F:FA:E0:3A:2B:9B:D4:86:CB:18:EE:E6:04:4D:08:05:B4:3D:AA X509v3 Authority Key Identifier: keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:af:66:48:ee:61:c8:3b:67:bc:c1:63:57:86:7e:f4:66: b2:a7:c5:a7:17:78:82:c1:d7:2b:15:03:e1:ee:eb:d7:f5:d6: b2:c7:ec:1c:d8:63:a2:61:c1:0c:2b:ca:71:ec:d5:b9:cb:90: 3c:69:fe:8f:26:a4:7d:d3:35:f7:41:a2:c7:f1:42:f1:e9:45: 99:04:5a:0a:9a:24:ae:07:01:64:2f:57:4c:76:aa:8f:c7:29: 2f:ec:52:2f:e3:29:2f:79:98:de:21:e0:6c:ef:08:f0:7f:93: 61:07:87:fe:ab:c5:d4:f6:00:93:96:7a:ff:18:c1:a3:b0:dd: 7b:15:72:e4:be:65:c2:97:13:c6:c3:3b:27:c4:72:e5:1b:58: f7:f9:ec:ed:bc:3d:5f:7d:23:c8:5e:af:e4:c0:e4:51:0e:02: 66:39:3a:02:cd:bc:09:f2:d1:69:8f:92:60:66:a3:ff:bc:41: 37:fb:b2:bd:10:5b:bd:57:70:66:da:c3:86:76:de:cc:e3:32: ea:8d:24:c7:5a:0c:e5:80:0c:f1:59:93:2b:7d:4d:8f:7d:c4: bc:dd:0c:5a:89:0a:11:4d:8e:75:e9:9b:d7:62:8a:28:73:99: fb:41:22:c9:f4:5b:a5:c8:3b:86:8c:0b:81:a7:8a:a6:97:ba: d8:4e:4d:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4C0fkmYk0UYxckmpjYmxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx ZjgzZGYwHhcNMjUxMjA3MDkwMTE5WhcNMjUxMjA4MDkwMTE5WjAzMTEwLwYDVQQD EygzMzhmZmFlMDNhMmI5YmQ0ODZjYjE4ZWVlNjA0NGQwODA1YjQzZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodjY7O+b+moZHwNL7yyL6dNzpYJ9 pklaYg9k0RoMEBdgFBgPX3nHzYc6CM4HPjOUnVh0NGHrH+sPXSGIhW6kZDLm9VAy TX+tCa1zdA/i+AoyQLEV8PdC3ZERijq+8pTehSUgea+f121JMlU9PHeBoQaoUGU1 8yOEmOoe/+7cjvlPgDs9gHOsXgwECr/7VNRmqK6TMJeGo7kzXTtnvO9VVM7maGlz szlpqxeGuEcYWHtJrb1l7efMhEcgm1VMkEYJoUfPZ+qkz5Ll4nwNauLXm2XRy5mX Bwd209hnPv/FUrIWR153d0JHEOppuiTCsn3XMe5AAhPHQFlJVfz3DYwRkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOP+uA6K5vUhssY7uYETQgFtD2qMB8GA1UdIwQY MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0 LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjivZkju Ycg7Z7zBY1eGfvRmsqfFpxd4gsHXKxUD4e7r1/XWssfsHNhjomHBDCvKcezVucuQ PGn+jyakfdM190Gix/FC8elFmQRaCpokrgcBZC9XTHaqj8cpL+xSL+MpL3mY3iHg bO8I8H+TYQeH/qvF1PYAk5Z6/xjBo7DdexVy5L5lwpcTxsM7J8Ry5RtY9/ns7bw9 X30jyF6v5MDkUQ4CZjk6As28CfLRaY+SYGaj/7xBN/uyvRBbvVdwZtrDhnbezOMy 6o0kx1oM5YAM8VmTK31Nj33EvN0MWokKEU2Odemb12KKKHOZ+0EiyfRbpcg7howL gaeKppe62E5NhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 18:29:13 2025 by rpki-client