This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json) Hash identifier: 5YiU5CJN8Yf7CqVvi12/UvmftacvftD7EFaBT3NURDU= Subject key identifier: 17:AB:DA:29:06:9B:09:A5:2E:18:81:E5:1E:CC:B4:80:8B:E3:79:E4 Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Certificate serial: 019AF12D33FFBDAF2AD8EADD77DBF25CF28C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft Manifest number: 0E7F Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: QDPhm5o1iCKywxsgxgW7mQE+JpJ6IEPXtlgUDHNY/7g=) 2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:33:ff:bd:af:2a:d8:ea:dd:77:db:f2:5c:f2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=17abda29069b09a52e1881e51eccb4808be379e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:b8:26:fb:2c:90:2f:11:f5:ad:63:f5:b8: 08:fa:f6:f3:ca:8e:e3:89:78:e2:3d:67:e0:c1:6d: 66:61:ec:04:a4:33:a7:84:3f:60:93:60:74:10:a0: ec:d6:3e:b6:dd:63:b3:20:3a:6d:2a:57:a5:1d:81: 37:13:42:8c:41:8c:49:ed:c7:43:b9:00:2d:30:28: b2:93:9a:51:3d:2a:ec:c5:ad:7d:31:2a:8a:88:9c: 8a:f9:bf:67:66:17:1a:10:5c:47:8c:a8:7b:bb:2f: 5c:9f:db:0f:09:1f:94:eb:08:6d:f9:8c:b8:95:d0: ae:a3:3f:91:f9:08:b4:d5:46:10:61:38:25:52:e6: 77:0d:7e:47:f0:b9:0b:de:16:bc:8b:61:82:a2:80: 43:ff:c6:0d:91:5b:53:1f:3b:74:55:1c:45:e7:08: 89:10:ad:aa:64:5e:a3:ef:a8:eb:a0:7e:b3:05:99: ab:90:76:40:a1:93:ed:2d:84:f6:79:e2:4e:da:f9: c5:a8:74:b1:eb:98:f3:2c:20:d6:31:b6:82:71:aa: aa:0e:ce:36:74:7b:17:3c:3c:1d:9f:66:8c:d2:15: ad:a4:65:ec:9f:5a:53:28:ff:77:aa:79:a0:a0:87: 60:85:0d:de:69:57:6e:69:90:f1:41:62:dd:46:bd: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AB:DA:29:06:9B:09:A5:2E:18:81:E5:1E:CC:B4:80:8B:E3:79:E4 X509v3 Authority Key Identifier: keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:6a:c0:31:70:8e:b4:63:a4:24:05:2c:d8:a5:52:04:67:61: ce:eb:d2:62:97:f5:ed:ce:46:7f:49:0b:0b:4e:1c:1d:1e:d8: ca:77:44:14:00:40:34:5a:ea:55:b2:4b:e6:4b:77:70:bd:4a: 29:fc:e6:3b:95:c1:e4:ab:79:17:72:8b:93:33:5f:03:f1:1c: 17:bb:34:70:57:73:9b:9d:40:5b:b4:03:b4:f0:d9:5d:e0:53: e7:ac:d3:37:18:ff:27:7a:14:86:7e:a1:2e:74:60:23:4c:6d: 6f:c4:48:fc:e5:83:8e:bd:28:a7:5f:02:ce:17:2d:d6:a3:fd: 88:ef:e1:0f:14:6b:09:77:7d:9f:40:16:45:62:e0:4c:a5:83: 06:74:4d:02:30:fc:1a:ef:7a:bd:2d:e0:03:c9:84:83:98:f6: 07:b0:c6:54:0e:e3:65:37:41:3f:f7:06:2f:c3:ee:59:a0:3d: ad:b5:db:ae:1c:f0:91:96:60:38:ae:3d:8e:af:93:3e:0c:e7: 9d:62:28:e1:7c:60:06:20:20:3a:46:d5:f6:6b:a7:9c:7c:3d: 8d:bd:68:66:19:39:46:98:80:47:97:c2:1b:d5:11:84:c3:b5: e5:95:ad:a8:cb:16:8d:43:8f:5e:0d:b2:eb:0f:4c:03:48:a7: 0c:d2:4c:da -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLTP/va8q2Ordd9vyXPKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWY2NWUxYmU0MmE2NWI0OTRjZjI2NDJhNGRkOGUzMjhk MGY5Y2UwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EygxN2FiZGEyOTA2OWIwOWE1MmUxODgxZTUxZWNjYjQ4MDhiZTM3OWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f+4JvsskC8R9a1j9bgI+vbzyo7j iXjiPWfgwW1mYewEpDOnhD9gk2B0EKDs1j623WOzIDptKlelHYE3E0KMQYxJ7cdD uQAtMCiyk5pRPSrsxa19MSqKiJyK+b9nZhcaEFxHjKh7uy9cn9sPCR+U6wht+Yy4 ldCuoz+R+Qi01UYQYTglUuZ3DX5H8LkL3ha8i2GCooBD/8YNkVtTHzt0VRxF5wiJ EK2qZF6j76jroH6zBZmrkHZAoZPtLYT2eeJO2vnFqHSx65jzLCDWMbaCcaqqDs42 dHsXPDwdn2aM0hWtpGXsn1pTKP93qnmgoIdghQ3eaVduaZDxQWLdRr1LiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBer2ikGmwmlLhiB5R7MtICL43nkMB8GA1UdIwQY MBaAFPmfZeG+QqZbSUzyZCpN2OMo0PnOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aOWw0YjVDcGx0SlRQSmtLazNZNHlqUS1jNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1 LTU0ZDE2MjI5OGZmZC8xLzEtWjlsNGI1Q3BsdEpUUEprS2szWTR5alEtYzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I2LzZkZjhiYS1kNGNiLTQ3MDUtYmY1NS01NGQxNjIyOThm ZmQvMS8xLVo5bDRiNUNwbHRKVFBKa0trM1k0eWpRLWM0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzmrA MXCOtGOkJAUs2KVSBGdhzuvSYpf17c5Gf0kLC04cHR7YyndEFABANFrqVbJL5kt3 cL1KKfzmO5XB5Kt5F3KLkzNfA/EcF7s0cFdzm51AW7QDtPDZXeBT56zTNxj/J3oU hn6hLnRgI0xtb8RI/OWDjr0op18Czhct1qP9iO/hDxRrCXd9n0AWRWLgTKWDBnRN AjD8Gu96vS3gA8mEg5j2B7DGVA7jZTdBP/cGL8PuWaA9rbXbrhzwkZZgOK49jq+T PgznnWIo4XxgBiAgOkbV9munnHw9jb1oZhk5RpiAR5fCG9URhMO15ZWtqMsWjUOP Xg2y6w9MA0inDNJM2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client