This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json) Hash identifier: WIVohwYmD/s6+VwoxL+ItELIu5D+0cVDmiLkQy+4o3I= Subject key identifier: 88:4D:FC:98:59:4E:56:CA:1D:9B:39:8E:A7:BC:39:6D:2C:65:02:2D Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0 Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0 Certificate serial: 019AF23FB181A7E5FAD215990E2CE4006F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft Manifest number: 0592 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: fB+dNA6kYncNznhcVqxouwqBE3EYjEOPbuZ+2GsHNoY=) 2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:81:a7:e5:fa:d2:15:99:0e:2c:e4:00:6f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=884dfc98594e56ca1d9b398ea7bc396d2c65022d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:92:21:9c:bf:dc:01:49:57:d5:39:28:06: 4e:82:ee:f2:26:e1:7a:c5:56:87:d7:ed:58:f6:c2: 6a:f5:bb:5d:20:01:ba:83:a5:0c:ac:09:c5:d6:02: 00:2b:e7:d5:85:47:c9:4f:72:e6:6f:f3:35:8e:0d: e2:b0:27:ce:bf:4e:48:e1:e1:76:dd:d5:29:c3:a0: 9d:54:a5:1e:3e:3a:49:88:76:0c:ea:25:94:b5:1d: 49:76:e9:7e:33:36:17:e3:d9:91:7c:d5:6d:f6:b8: 50:b9:05:ad:27:f2:23:c1:09:db:00:ca:d8:02:87: 30:84:25:6d:d1:71:e2:7f:f8:05:d7:7a:13:e0:5b: d4:00:35:9e:a3:09:51:cc:c0:56:ac:a7:22:bf:64: 64:af:f6:b6:15:67:62:f1:f0:d2:4d:22:1f:90:51: e0:3d:fb:71:a7:d2:5a:c3:32:13:f2:4f:6d:88:cf: d5:c0:8d:f3:7c:c7:36:32:c4:5b:0a:17:ae:dd:62: a0:9c:af:51:46:0f:e6:23:06:a4:48:e1:97:8f:05: 72:4f:99:91:80:19:f7:b8:58:07:f6:c3:4d:f1:26: a9:c5:37:ad:26:0a:44:29:df:79:ac:dd:fc:3c:8d: ea:ab:a1:3c:67:82:49:0a:be:7e:cb:f6:54:7d:d4: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4D:FC:98:59:4E:56:CA:1D:9B:39:8E:A7:BC:39:6D:2C:65:02:2D X509v3 Authority Key Identifier: keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0b:34:4c:56:50:b6:08:58:ed:2e:09:58:84:fa:a8:57:35: 46:ac:f8:85:b0:57:5a:5e:38:92:30:81:4e:03:3d:d9:17:4d: e7:51:38:51:80:96:a9:81:5a:dc:d8:46:68:e2:ae:be:6b:49: 2a:d5:9a:0e:1a:30:a7:9b:d2:b7:eb:8c:14:2e:3d:ec:21:ce: 92:6f:7e:5c:51:91:54:1e:26:d6:3c:f1:3c:27:7c:3c:db:8b: 60:fb:14:e0:35:17:13:30:b1:bb:34:23:c7:a3:34:f1:66:b4: 7e:93:5c:49:72:67:d6:51:73:86:e1:53:51:2f:fa:87:22:6b: 94:4e:0a:c1:22:9d:da:fc:1c:a8:54:9d:00:c7:2c:d1:13:36: aa:c4:e8:07:83:b4:42:ee:13:68:f5:6a:1f:79:42:c0:d9:ca: 46:dc:ae:f9:94:5b:af:e6:7d:06:fc:ee:52:94:04:5b:33:11: a0:ec:7e:8a:f1:e2:92:bd:a0:a0:f5:ef:1c:43:91:5e:a5:22: cd:5c:23:1a:fa:e5:8a:21:28:53:a7:7b:77:c9:b0:23:e7:e9: 9b:01:60:ce:50:1c:eb:af:a9:04:38:23:21:39:50:0e:55:2f: fd:6a:4a:9b:20:54:c3:3b:f1:0d:d4:d7:c1:ef:f4:f1:3e:64: 96:e1:e8:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7GBp+X60hWZDizkAG8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2VmNzVlMDk3YTYzMTg4NmIzM2M4MWY2NGFhNWViYmMw YzMyYTAwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg4ODRkZmM5ODU5NGU1NmNhMWQ5YjM5OGVhN2JjMzk2ZDJjNjUwMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqaSIZy/3AFJV9U5KAZOgu7yJuF6 xVaH1+1Y9sJq9btdIAG6g6UMrAnF1gIAK+fVhUfJT3Lmb/M1jg3isCfOv05I4eF2 3dUpw6CdVKUePjpJiHYM6iWUtR1Jdul+MzYX49mRfNVt9rhQuQWtJ/IjwQnbAMrY AocwhCVt0XHif/gF13oT4FvUADWeowlRzMBWrKciv2Rkr/a2FWdi8fDSTSIfkFHg Pftxp9JawzIT8k9tiM/VwI3zfMc2MsRbCheu3WKgnK9RRg/mIwakSOGXjwVyT5mR gBn3uFgH9sNN8SapxTetJgpEKd95rN38PI3qq6E8Z4JJCr5+y/ZUfdSBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhN/JhZTlbKHZs5jqe8OW0sZQItMB8GA1UdIwQY MBaAFNfO914JemMYhrM8gfZKpeu8DDKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTIt NWJhNTAxZTBiMzcwLzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTItNWJhNTAxZTBiMzcw LzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgs0TFZQ tghY7S4JWIT6qFc1Rqz4hbBXWl44kjCBTgM92RdN51E4UYCWqYFa3NhGaOKuvmtJ KtWaDhowp5vSt+uMFC497CHOkm9+XFGRVB4m1jzxPCd8PNuLYPsU4DUXEzCxuzQj x6M08Wa0fpNcSXJn1lFzhuFTUS/6hyJrlE4KwSKd2vwcqFSdAMcs0RM2qsToB4O0 Qu4TaPVqH3lCwNnKRtyu+ZRbr+Z9BvzuUpQEWzMRoOx+ivHikr2goPXvHEORXqUi zVwjGvrliiEoU6d7d8mwI+fpmwFgzlAc66+pBDgjITlQDlUv/WpKmyBUwzvxDdTX we/08T5kluHoOw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:57 2025 by rpki-client