This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json) Hash identifier: 0P6YwviiVn/qpCwhasB7Gncldmu2k9jn3JT7BcsRtyo= Subject key identifier: 93:E3:C5:41:97:1B:85:69:CB:18:8B:DB:37:8A:EA:FC:A4:83:E0:18 Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46 Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546 Certificate serial: 019AF19AB4802E1B0CDEB3C632C5B9FD45D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft Manifest number: 03ED Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: 91F5Q0LxfBlAHeSn1MmHKkzeVnusX8WvK5OuBe4PDow=) 2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b4:80:2e:1b:0c:de:b3:c6:32:c5:b9:fd:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=93e3c541971b8569cb188bdb378aeafca483e018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:f8:02:b6:04:56:eb:6b:15:b5:79:d8:1d: 42:b7:b4:40:99:87:17:23:a3:61:49:bf:92:cc:3b: 95:87:31:44:c3:99:87:cf:1b:4e:75:52:d6:a9:45: 4f:f9:3a:ee:9f:d4:10:39:69:92:cd:65:74:69:2d: da:9b:10:91:ef:b7:00:71:05:bc:74:c0:67:80:52: 57:4e:89:3a:0c:f4:53:88:77:c2:a4:05:48:af:0e: cd:38:8e:08:fa:d2:ce:3c:b2:53:ef:4e:70:fb:4b: cb:5a:60:8d:2b:1c:82:4c:a4:0c:3c:fb:60:2a:94: 06:84:f0:f8:17:42:58:80:f6:1a:fc:21:40:8f:57: a5:ca:6b:27:c0:0c:c3:71:af:aa:10:05:6c:46:25: 9e:1a:0d:51:04:8c:a4:ad:23:63:82:bb:eb:85:13: 57:c6:3c:5b:5e:a8:c2:ba:10:71:45:3e:2d:ac:6b: 07:a8:c7:43:8d:c5:c7:5a:d2:a7:bf:c5:e1:f7:46: 16:2a:0f:c9:84:eb:78:03:5d:39:8d:87:99:b5:05: 87:f9:23:c3:77:f1:06:90:3f:5b:6f:81:5a:a7:ab: a6:bd:7d:de:2b:a6:a7:24:bf:55:e4:0d:6e:6a:b6: 78:34:b4:1c:e7:3a:74:e4:cf:81:3d:58:38:7d:a4: 23:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:C5:41:97:1B:85:69:CB:18:8B:DB:37:8A:EA:FC:A4:83:E0:18 X509v3 Authority Key Identifier: keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9c:a2:c7:05:41:52:56:47:63:ee:9a:a9:c7:11:21:3d:a9: 24:e1:d5:51:25:40:62:42:3d:76:61:ca:d3:da:57:d2:b1:6f: 38:17:97:4d:65:5d:07:f6:1a:b4:8d:91:e4:9e:56:34:1b:40: de:32:57:5b:82:06:c4:08:00:cf:6a:9d:ed:3a:ea:e4:c1:40: 25:85:61:e5:22:1a:fa:93:a5:00:af:2e:c1:c5:a6:a5:31:ed: 6d:c2:28:0a:2f:23:26:54:97:e2:63:77:36:2e:cc:dc:0e:7a: 10:e2:6f:77:79:b1:79:b0:da:59:59:6f:2e:de:c5:26:09:a2: 77:cc:76:d2:ce:bc:d7:3f:fb:d0:84:09:8c:26:91:42:34:66: d8:71:a1:2f:3a:87:ae:a4:6c:e4:55:7d:ca:d6:04:1d:cc:9e: 88:d2:33:9f:49:8f:24:85:eb:ba:79:3a:d5:32:00:3f:d3:a3: ab:2a:8e:cb:f5:37:f4:2e:56:ea:21:9b:61:ca:6f:74:73:9f: 49:65:ed:00:cb:63:d5:1c:0c:28:97:1e:51:f3:af:88:d6:db: 6e:b3:06:c5:65:dc:c7:48:cb:cd:70:6e:8d:ea:14:09:03:60: 4e:86:10:89:73:51:2b:10:a6:2b:71:c2:07:91:21:04:83:c2: 67:39:8d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrSALhsM3rPGMsW5/UXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl NzU1NDYwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg5M2UzYzU0MTk3MWI4NTY5Y2IxODhiZGIzNzhhZWFmY2E0ODNlMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtD4ArYEVutrFbV52B1Ct7RAmYcX I6NhSb+SzDuVhzFEw5mHzxtOdVLWqUVP+Trun9QQOWmSzWV0aS3amxCR77cAcQW8 dMBngFJXTok6DPRTiHfCpAVIrw7NOI4I+tLOPLJT705w+0vLWmCNKxyCTKQMPPtg KpQGhPD4F0JYgPYa/CFAj1elymsnwAzDca+qEAVsRiWeGg1RBIykrSNjgrvrhRNX xjxbXqjCuhBxRT4trGsHqMdDjcXHWtKnv8Xh90YWKg/JhOt4A105jYeZtQWH+SPD d/EGkD9bb4Fap6umvX3eK6anJL9V5A1uarZ4NLQc5zp05M+BPVg4faQjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPjxUGXG4VpyxiL2zeK6vykg+AYMB8GA1UdIwQY MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt ODgwYTgxYjk5Y2M1LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1 LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJyixwVB UlZHY+6aqccRIT2pJOHVUSVAYkI9dmHK09pX0rFvOBeXTWVdB/YatI2R5J5WNBtA 3jJXW4IGxAgAz2qd7Trq5MFAJYVh5SIa+pOlAK8uwcWmpTHtbcIoCi8jJlSX4mN3 Ni7M3A56EOJvd3mxebDaWVlvLt7FJgmid8x20s681z/70IQJjCaRQjRm2HGhLzqH rqRs5FV9ytYEHcyeiNIzn0mPJIXrunk61TIAP9OjqyqOy/U39C5W6iGbYcpvdHOf SWXtAMtj1RwMKJceUfOviNbbbrMGxWXcx0jLzXBujeoUCQNgToYQiXNRKxCmK3HC B5EhBIPCZzmNIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:34 2025 by rpki-client