This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json) Hash identifier: c9jBKzxlIOkrd1amr8GBJCjLywvOo7dd4ROWsEXls9I= Subject key identifier: B7:BB:D5:D8:08:CC:D1:E6:1E:D8:BD:FB:A8:5D:AB:94:75:AF:B3:BB Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Certificate serial: 019AF541114C01C71855928EAA4FCDE4F17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:01:13 +0000 Manifest this update: Sat 06 Dec 2025 20:01:13 +0000 Manifest next update: Sun 07 Dec 2025 20:01:13 +0000 Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: SiHUa0gggYu2ph8xzMZHyu7gqDVVVQvYlfYaBzOgBpc=) 2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:11:4c:01:c7:18:55:92:8e:aa:4f:cd:e4:f1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Validity Not Before: Dec 6 20:01:13 2025 GMT Not After : Dec 7 20:01:13 2025 GMT Subject: CN=b7bbd5d808ccd1e61ed8bdfba85dab9475afb3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:a5:e8:e4:7a:93:2e:87:65:9d:b4:2a:3b: e5:c9:25:78:4a:4d:89:f1:2f:04:70:e6:7e:42:31: a1:ad:0a:7a:15:76:4f:eb:c2:21:37:c4:95:db:e9: 84:4b:cd:68:bc:ef:93:d5:3f:d0:63:be:f6:42:30: d3:a5:f1:76:67:70:63:ed:53:db:31:11:3e:e7:53: 9f:32:c7:dd:c4:0b:fa:c5:f3:a4:3e:61:3e:b4:7e: 03:42:28:e5:0b:7e:3d:d9:ce:f6:29:5b:65:00:e2: b4:a9:32:00:2c:31:eb:ae:db:43:39:88:49:d8:ce: ba:8d:8e:a5:2a:44:95:91:1b:4a:14:60:56:1f:1b: 0a:ae:23:db:da:6f:84:01:79:33:67:40:91:5b:0d: f9:9d:fd:5d:ba:b6:e1:16:7c:be:a7:49:10:c2:11: b7:fb:8d:7d:b8:d1:5a:53:28:77:a2:c1:d5:44:30: d0:37:21:7c:b2:34:90:c3:8f:31:ab:39:36:0d:73: 2d:5b:d5:e2:5d:50:7c:3e:20:54:ad:fb:67:3c:ba: 23:ab:47:77:a2:9a:a3:fc:0f:0f:d7:f1:dc:d6:40: da:57:6c:6b:94:fb:2a:fc:71:c1:e6:ad:69:1f:f0: 7c:04:7f:83:d1:a9:83:92:2f:6e:6b:6e:b2:5f:99: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:D5:D8:08:CC:D1:E6:1E:D8:BD:FB:A8:5D:AB:94:75:AF:B3:BB X509v3 Authority Key Identifier: keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b4:95:5e:1f:89:e7:d5:0f:c9:c7:f8:30:df:fe:f9:99:f9: de:b9:ec:28:d6:44:16:70:8a:dc:31:90:8d:8f:2d:52:ef:36: 17:5a:e9:44:9f:ed:aa:7b:e0:60:d2:7e:4a:e4:c7:b4:68:b1: 36:cb:5b:f8:44:e5:13:4f:c1:89:48:31:b7:82:7a:e6:e5:95: b7:fc:37:e6:1a:b8:68:63:9a:4b:42:25:eb:83:8e:1a:a3:48: 80:b9:4f:99:f7:ca:b6:c5:6f:bc:e3:f3:24:0f:3b:49:20:b8: ee:10:65:ff:e2:6d:1c:54:00:27:e7:8a:28:0a:d7:8e:73:70: f4:6b:89:00:96:ad:46:61:a1:12:6b:61:0f:43:4b:8a:87:7c: 52:a3:36:0f:fa:09:02:6d:35:d0:fe:05:b9:ca:99:74:08:e4: 2e:76:3a:b9:7b:0a:47:cf:3f:8a:05:71:7d:22:80:10:51:91: 28:05:7a:cc:f1:a0:dc:3f:e4:c4:42:ea:ff:48:5f:bd:d5:3d: 9d:00:f9:75:94:2f:9b:92:5b:5a:99:34:b7:76:4a:c5:bb:05: d6:f2:38:f3:1f:7d:dc:a3:24:ee:a7:1a:bb:0c:23:ab:7d:c3: d4:48:d0:23:fa:28:79:7f:40:90:2b:ee:b1:a3:c8:a1:04:05: be:b9:da:ee -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1QRFMAccYVZKOqk/N5PF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1 YmJkNzcwHhcNMjUxMjA2MjAwMTEzWhcNMjUxMjA3MjAwMTEzWjAzMTEwLwYDVQQD EyhiN2JiZDVkODA4Y2NkMWU2MWVkOGJkZmJhODVkYWI5NDc1YWZiM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mql6OR6ky6HZZ20KjvlySV4Sk2J 8S8EcOZ+QjGhrQp6FXZP68IhN8SV2+mES81ovO+T1T/QY772QjDTpfF2Z3Bj7VPb MRE+51OfMsfdxAv6xfOkPmE+tH4DQijlC3492c72KVtlAOK0qTIALDHrrttDOYhJ 2M66jY6lKkSVkRtKFGBWHxsKriPb2m+EAXkzZ0CRWw35nf1durbhFny+p0kQwhG3 +419uNFaUyh3osHVRDDQNyF8sjSQw48xqzk2DXMtW9XiXVB8PiBUrftnPLojq0d3 opqj/A8P1/Hc1kDaV2xrlPsq/HHB5q1pH/B8BH+D0amDki9ua26yX5kwFwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLe71dgIzNHmHti9+6hdq5R1r7O7MB8GA1UdIwQY MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3 LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0 MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbSV Xh+J59UPycf4MN/++Zn53rnsKNZEFnCK3DGQjY8tUu82F1rpRJ/tqnvgYNJ+SuTH tGixNstb+ETlE0/BiUgxt4J65uWVt/w35hq4aGOaS0Il64OOGqNIgLlPmffKtsVv vOPzJA87SSC47hBl/+JtHFQAJ+eKKArXjnNw9GuJAJatRmGhEmthD0NLiod8UqM2 D/oJAm010P4FucqZdAjkLnY6uXsKR88/igVxfSKAEFGRKAV6zPGg3D/kxELq/0hf vdU9nQD5dZQvm5JbWpk0t3ZKxbsF1vI48x993KMk7qcauwwjq33D1EjQI/ooeX9A kCvusaPIoQQFvrna7g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:28 2025 by rpki-client