This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json) Hash identifier: iXtMw6Ou5JeZ/v3qVTpbVXE9OjcBYGy7JY3h0yTtyIE= Subject key identifier: CD:41:40:4C:73:E8:4D:F4:1E:95:C9:4D:A5:BB:64:2E:34:09:B0:7A Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc Certificate serial: 019AF163F6EF1A0028CEF39EF6F5CC2F5740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft Manifest number: 11AD Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: NAXM9h6kuiGRPfgD4tU9B0dJnVJt8wR0JWegHZ8FCRQ=) 2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f6:ef:1a:00:28:ce:f3:9e:f6:f5:cc:2f:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=cd41404c73e84df41e95c94da5bb642e3409b07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:2c:1c:e7:84:6c:c5:e6:8d:38:fc:45:87: a8:ca:87:82:85:8a:13:b4:27:7f:e5:09:57:e3:bc: b5:99:b0:0b:91:6a:eb:75:f9:e9:f4:75:96:66:c9: 28:8e:77:43:b9:46:ca:3c:c7:9c:79:cb:01:58:c2: 73:2a:f3:f0:37:28:45:94:7d:7b:be:37:80:88:7a: 93:6a:f4:1d:fc:ed:e9:00:5b:af:9a:36:af:30:68: 43:cc:cc:8e:5e:4d:4e:17:79:4e:3c:e3:15:8c:bf: c8:fa:e2:2e:91:aa:03:1c:70:ef:0e:72:4a:74:d5: f5:aa:70:b0:59:76:2f:cc:e9:40:7c:d4:c7:e6:3e: 16:a8:1c:df:70:35:f1:43:f2:df:48:c6:d2:1b:e0: d1:6e:e5:74:1c:95:aa:b9:c9:10:42:f4:a7:78:b7: e5:54:21:66:f6:dc:c5:01:24:f4:df:7a:4a:07:d5: 20:43:3b:ea:e7:40:9d:1f:41:dd:ef:88:a1:e1:6a: 97:40:ae:a7:49:59:27:7a:97:2d:94:fe:8a:7c:97: de:01:2a:6f:4d:8e:fa:58:19:7a:72:4f:8b:a3:d0: 27:18:d3:27:ee:92:20:9b:da:88:6b:f4:c7:14:cc: 37:c2:f4:2b:88:a5:8e:3e:23:c7:ed:c8:8d:96:5d: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:40:4C:73:E8:4D:F4:1E:95:C9:4D:A5:BB:64:2E:34:09:B0:7A X509v3 Authority Key Identifier: keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8f:bd:78:07:1b:da:30:b2:e7:27:e7:6f:91:0c:93:27:32: db:fa:a6:eb:db:be:c3:4a:98:7a:de:28:9a:fd:7f:e4:62:de: 9b:be:e5:15:53:e3:3c:67:53:aa:ae:d9:32:83:c3:bc:f2:ee: f5:f3:c8:93:91:4b:3b:85:1b:e0:73:bd:35:d8:68:f5:ba:8e: eb:86:3b:13:83:7a:84:d7:ae:5c:d1:35:4b:5b:bd:4f:7b:c0: ea:53:27:17:eb:ea:0e:b4:26:65:6f:99:bc:4f:7c:c4:d4:30: 6a:24:a1:7a:fc:22:36:f7:79:32:22:84:09:b3:f7:6e:d6:aa: 0a:2d:34:02:9d:72:8c:21:e2:a2:de:e0:10:2a:f3:92:a9:f2: 35:c3:06:e7:f6:71:c8:67:09:22:d0:84:d9:e9:0b:47:f9:06: 80:94:e3:c0:27:39:ff:62:6c:d6:b5:df:99:07:da:98:ad:9b: ca:22:78:84:40:4d:c2:19:c4:b2:c8:6e:f3:c3:a7:a5:8d:72: 59:0e:1b:43:e4:11:e4:66:89:6e:b0:f2:69:31:8f:93:5b:55: 30:2c:68:49:7f:72:13:0d:58:49:62:cb:e5:d9:96:7a:d1:13: f4:da:af:28:af:30:51:46:8e:33:c2:d0:6e:74:64:c3:1b:b4: dd:a5:33:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxY/bvGgAozvOe9vXML1dAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzUxMzAyYWY3YjVjZDZiZWYzNzE3YjY4MzY3ZTAyYjYx N2QyZGMwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhjZDQxNDA0YzczZTg0ZGY0MWU5NWM5NGRhNWJiNjQyZTM0MDliMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfEsHOeEbMXmjTj8RYeoyoeChYoT tCd/5QlX47y1mbALkWrrdfnp9HWWZskojndDuUbKPMececsBWMJzKvPwNyhFlH17 vjeAiHqTavQd/O3pAFuvmjavMGhDzMyOXk1OF3lOPOMVjL/I+uIukaoDHHDvDnJK dNX1qnCwWXYvzOlAfNTH5j4WqBzfcDXxQ/LfSMbSG+DRbuV0HJWquckQQvSneLfl VCFm9tzFAST033pKB9UgQzvq50CdH0Hd74ih4WqXQK6nSVknepctlP6KfJfeASpv TY76WBl6ck+Lo9AnGNMn7pIgm9qIa/THFMw3wvQriKWOPiPH7ciNll0yuQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM1BQExz6E30HpXJTaW7ZC40CbB6MB8GA1UdIwQY MBaAFPt1EwKve1zWvvNxe2g2fgK2F9LcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zVVRBcTk3WE5hLTgzRjdhRFotQXJZWDB0dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNWQ0MDA0LWFhYzAtNGVhZC1hNTgw LWM2NjRiNGU4NmFiNS8xLzEtM1VUQXE5N1hOYS04M0Y3YURaLUFyWVgwdHcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I1LzVkNDAwNC1hYWMwLTRlYWQtYTU4MC1jNjY0YjRlODZh YjUvMS8xLTNVVEFxOTdYTmEtODNGN2FEWi1BcllYMHR3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsI+9 eAcb2jCy5yfnb5EMkycy2/qm69u+w0qYet4omv1/5GLem77lFVPjPGdTqq7ZMoPD vPLu9fPIk5FLO4Ub4HO9Ndho9bqO64Y7E4N6hNeuXNE1S1u9T3vA6lMnF+vqDrQm ZW+ZvE98xNQwaiShevwiNvd5MiKECbP3btaqCi00Ap1yjCHiot7gECrzkqnyNcMG 5/ZxyGcJItCE2ekLR/kGgJTjwCc5/2Js1rXfmQfamK2byiJ4hEBNwhnEsshu88On pY1yWQ4bQ+QR5GaJbrDyaTGPk1tVMCxoSX9yEw1YSWLL5dmWetET9NqvKK8wUUaO M8LQbnRkwxu03aUz3A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:38 2025 by rpki-client