This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft File: 1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json) Hash identifier: Zs/rdSLqZx746Cw3W+xrkDz7XvkmsEQmfSQn+dL1Xxw= Subject key identifier: EF:0D:75:DB:EE:B3:6A:0F:FE:65:6F:EF:79:36:D4:47:35:B8:78:93 Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 Certificate issuer: /CN=d55d0f8888edc920868c661622f643744e6e56c8 Certificate serial: 019AF42E1557C90ACED34AFEA703B8A28BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft Manifest number: 07CA Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: DZ9pxqMAGN1jIAiuGNs/2sqBBEEFxrxhFLEj6pLGhW4=) 2: A4__EnOrPLl7kNPioZRAoADCUG8.roa (hash: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:15:57:c9:0a:ce:d3:4a:fe:a7:03:b8:a2:8b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=ef0d75dbeeb36a0ffe656fef7936d44735b87893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:98:06:03:91:4e:a0:52:40:9d:d8:43:7f: 08:ef:8e:63:23:b5:6f:a9:7a:27:fa:4f:35:03:39: a9:76:70:b2:23:75:35:5f:16:be:4e:32:0c:d9:fc: 15:8c:4e:ad:a8:e4:5d:6f:dc:81:0d:d6:52:4c:2a: 83:d6:97:c4:96:0e:73:ed:76:ed:80:e9:39:bf:90: ce:3e:e5:d3:40:20:26:3d:25:dc:0b:ef:63:46:dd: b6:c8:61:3b:be:df:62:05:af:61:e3:14:73:31:b9: 3d:35:1e:a2:86:88:25:b7:c4:56:27:cb:a8:4d:b0: 01:76:d6:32:88:36:8b:c2:7e:d2:d4:6a:64:5d:07: 2f:7b:ce:81:fc:ae:7e:07:8b:1c:0b:81:7a:de:31: f4:df:d4:ea:6b:b3:73:4f:77:43:54:8a:f6:c3:bd: 3c:23:14:14:17:06:03:64:99:3b:a6:25:26:bd:6a: a9:56:4f:76:43:4d:d6:60:3c:78:68:4c:0f:c3:6a: ea:2c:73:12:fa:c4:e3:70:53:11:14:e1:cf:56:8e: 9d:ed:7c:26:1a:79:63:73:71:1d:be:85:35:b9:3b: 23:26:3a:d5:74:94:f6:a7:49:89:de:97:4d:48:74: 30:dc:10:fb:32:ec:ca:55:cc:d8:d8:24:97:3a:37: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0D:75:DB:EE:B3:6A:0F:FE:65:6F:EF:79:36:D4:47:35:B8:78:93 X509v3 Authority Key Identifier: keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d7:36:80:c9:dd:e1:7b:00:5b:e5:a3:e2:d8:5b:7b:d7:8f: fe:13:40:b5:99:1d:38:3c:c7:27:61:02:37:01:2f:d7:b0:88: 89:49:ac:0b:32:5e:af:eb:05:0a:6a:34:fb:4c:ee:6c:aa:29: 0b:cc:c8:89:41:58:4e:8b:62:cc:cc:64:d1:64:ec:9e:90:a9: d2:af:a5:e4:2d:e3:8a:3b:0b:53:bf:0e:53:09:22:c3:b3:26: 87:9a:8b:9d:57:8f:8b:d7:02:31:38:fc:f1:08:d8:d7:2e:2d: bd:46:31:12:6c:3d:56:2c:77:7b:b8:cc:00:36:72:5f:a1:6b: bd:b2:08:2a:c1:ce:ca:59:66:ab:2f:dd:22:ca:ba:f6:b6:5b: 1e:04:c1:fc:be:ee:c3:a0:5f:01:2d:16:51:ac:14:f3:96:a4: 41:9e:0c:72:91:02:0f:62:e7:5b:06:91:16:8e:0e:6d:79:4b: 19:69:c1:ad:bc:78:17:9b:2f:f1:80:bf:91:e0:ac:e8:e4:60: 94:fe:a0:26:a2:2b:06:d5:cc:8e:80:ce:97:74:52:b1:9c:0e: ec:d6:0e:58:8b:0e:a9:c1:dd:3f:d3:4a:6e:42:74:f0:68:cb: b7:31:57:3c:f0:c3:ec:a6:fa:6a:d7:be:59:b1:1f:84:08:b6: af:70:6e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhVXyQrO00r+pwO4oouvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NWQwZjg4ODhlZGM5MjA4NjhjNjYxNjIyZjY0Mzc0NGU2 ZTU2YzgwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EyhlZjBkNzVkYmVlYjM2YTBmZmU2NTZmZWY3OTM2ZDQ0NzM1Yjg3ODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BKYBgORTqBSQJ3YQ38I745jI7Vv qXon+k81AzmpdnCyI3U1Xxa+TjIM2fwVjE6tqORdb9yBDdZSTCqD1pfElg5z7Xbt gOk5v5DOPuXTQCAmPSXcC+9jRt22yGE7vt9iBa9h4xRzMbk9NR6ihoglt8RWJ8uo TbABdtYyiDaLwn7S1GpkXQcve86B/K5+B4scC4F63jH039Tqa7NzT3dDVIr2w708 IxQUFwYDZJk7piUmvWqpVk92Q03WYDx4aEwPw2rqLHMS+sTjcFMRFOHPVo6d7Xwm Gnljc3EdvoU1uTsjJjrVdJT2p0mJ3pdNSHQw3BD7MuzKVczY2CSXOjfzvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8Nddvus2oP/mVv73k21Ec1uHiTMB8GA1UdIwQY MBaAFNVdD4iI7ckghoxmFiL2Q3ROblbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgt ZGU0MGRhYTI2ODRkLzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgtZGU0MGRhYTI2ODRk LzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9c2gMnd 4XsAW+Wj4thbe9eP/hNAtZkdODzHJ2ECNwEv17CIiUmsCzJer+sFCmo0+0zubKop C8zIiUFYTotizMxk0WTsnpCp0q+l5C3jijsLU78OUwkiw7Mmh5qLnVePi9cCMTj8 8QjY1y4tvUYxEmw9Vix3e7jMADZyX6FrvbIIKsHOyllmqy/dIsq69rZbHgTB/L7u w6BfAS0WUawU85akQZ4McpECD2LnWwaRFo4ObXlLGWnBrbx4F5sv8YC/keCs6ORg lP6gJqIrBtXMjoDOl3RSsZwO7NYOWIsOqcHdP9NKbkJ08GjLtzFXPPDD7Kb6ate+ WbEfhAi2r3BumQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:58 2025 by rpki-client