This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json) Hash identifier: cG54KB4VilOVtqHBOyi8hfljzVlHuYJTU7QZ4pjt00A= Subject key identifier: 7A:A0:FC:7A:EF:E1:08:F3:A2:B2:12:A7:99:01:F3:01:98:99:75:D0 Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37 Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37 Certificate serial: 019AF1D1C7FC325BE6730096BB4900F200FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft Manifest number: 0EEA Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: WG7ox/IZCxpSF1KiHa5gnImldKnaDs9RW2nxjBsqZqg=) 2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c7:fc:32:5b:e6:73:00:96:bb:49:00:f2:00:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=7aa0fc7aefe108f3a2b212a79901f301989975d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:c1:dc:7a:d1:ad:7a:a1:c3:bd:4f:56:eb: 86:4a:c6:9a:87:08:f8:b8:f3:76:f7:69:f1:ac:f1: 5a:26:42:5f:a1:22:e3:08:88:f6:c7:9a:00:0d:93: 6d:f0:57:a0:48:1e:e9:45:4f:97:98:87:ce:38:c3: ac:ab:af:e6:23:42:b7:be:7b:5d:87:4a:30:50:95: 9d:db:0f:f8:e2:ce:a3:0b:1c:76:a2:24:19:73:92: 03:64:92:12:e1:36:9e:48:95:91:a2:70:3d:1b:1e: 35:46:3b:ec:2f:3c:78:c2:54:4f:c2:73:bf:8f:d6: 93:37:3f:2c:8d:0e:1e:60:0c:ba:02:bf:60:67:4d: b7:62:a4:3a:48:79:28:7b:e5:67:51:87:e1:17:0e: 5a:0c:14:c1:7e:73:ec:08:26:19:72:fa:ad:a8:79: 5f:da:2d:2c:bb:d1:35:5a:da:1f:e7:1f:22:1a:a3: 7f:38:77:ac:b0:59:42:0f:76:b8:04:91:42:72:a8: 99:b2:27:ad:55:b1:a7:48:3c:c8:04:d3:59:c5:0d: ff:28:0f:8c:71:6a:79:19:77:ff:b5:04:89:54:4d: bc:80:c0:ed:8d:db:27:cb:e5:d1:99:23:a5:07:42: be:6a:47:f1:a7:34:4c:31:1c:c9:ad:a8:ea:16:5d: 70:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:FC:7A:EF:E1:08:F3:A2:B2:12:A7:99:01:F3:01:98:99:75:D0 X509v3 Authority Key Identifier: keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9d:cf:72:be:3e:9e:3c:ae:58:da:04:0e:ca:a3:79:f8:82: fe:e1:da:10:08:83:d5:8d:b1:c9:a8:34:ba:cc:6c:3e:a8:ac: 36:4f:96:33:5d:41:ef:b3:ee:02:e9:64:ea:c4:3a:ea:dd:37: 6a:72:b3:5a:35:27:0c:e2:6e:40:68:8a:a9:88:55:4d:09:df: bc:79:fd:d7:0d:2c:7c:7b:1b:f2:1d:27:cf:34:a8:9b:11:3e: db:f0:67:8b:cd:14:7b:65:d8:a2:f7:19:53:e0:71:53:c0:c3: 85:2b:46:a7:31:d6:6e:56:ed:b5:2a:cc:1b:3a:84:65:a7:4c: c7:46:07:62:d7:bc:26:2e:d5:37:5f:52:fb:cd:b0:83:74:a4: 0f:36:df:97:fa:8d:9c:e5:75:eb:b9:5c:7d:44:21:ae:26:68: 69:06:06:c1:3c:8e:fd:e9:4b:10:66:7d:82:9a:4a:68:be:35: f9:83:9f:4b:ae:d0:d0:39:d0:2f:52:49:cb:bb:23:ff:65:bc: 6e:75:60:eb:31:79:c1:f5:d3:91:37:62:c5:2c:f8:f4:e3:57: 6d:e0:db:35:50:12:f9:da:18:8a:7b:97:73:60:37:35:ce:75: 5c:1a:e2:2c:5f:37:25:e6:d8:95:a7:d3:c2:49:82:ac:66:7b: e5:8e:71:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cf8MlvmcwCWu0kA8gD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MjRhODNmZmYyZjAwMGU5OWMxZjI4ZWMxOTY0ODk4NmY4 ZGRjMzcwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD Eyg3YWEwZmM3YWVmZTEwOGYzYTJiMjEyYTc5OTAxZjMwMTk4OTk3NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEjB3HrRrXqhw71PVuuGSsaahwj4 uPN292nxrPFaJkJfoSLjCIj2x5oADZNt8FegSB7pRU+XmIfOOMOsq6/mI0K3vntd h0owUJWd2w/44s6jCxx2oiQZc5IDZJIS4TaeSJWRonA9Gx41RjvsLzx4wlRPwnO/ j9aTNz8sjQ4eYAy6Ar9gZ023YqQ6SHkoe+VnUYfhFw5aDBTBfnPsCCYZcvqtqHlf 2i0su9E1Wtof5x8iGqN/OHessFlCD3a4BJFCcqiZsietVbGnSDzIBNNZxQ3/KA+M cWp5GXf/tQSJVE28gMDtjdsny+XRmSOlB0K+akfxpzRMMRzJrajqFl1weQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqg/Hrv4QjzorISp5kB8wGYmXXQMB8GA1UdIwQY MBaAFNUkqD//LwAOmcHyjsGWSJhvjdw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDct NDRkNDBkMWM0NmQ1LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDctNDRkNDBkMWM0NmQ1 LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJ3Pcr4+ njyuWNoEDsqjefiC/uHaEAiD1Y2xyag0usxsPqisNk+WM11B77PuAulk6sQ66t03 anKzWjUnDOJuQGiKqYhVTQnfvHn91w0sfHsb8h0nzzSomxE+2/Bni80Ue2XYovcZ U+BxU8DDhStGpzHWblbttSrMGzqEZadMx0YHYte8Ji7VN19S+82wg3SkDzbfl/qN nOV167lcfUQhriZoaQYGwTyO/elLEGZ9gppKaL41+YOfS67Q0DnQL1JJy7sj/2W8 bnVg6zF5wfXTkTdixSz49ONXbeDbNVAS+doYinuXc2A3Nc51XBriLF83JebYlafT wkmCrGZ75Y5xiw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:40 2025 by rpki-client