This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json) Hash identifier: P0WXJ9xukoD3AmF/Wl5NzWP3l25KnwS9jKmcuFS0v5Q= Subject key identifier: 0D:A9:20:47:8B:72:4E:78:BC:0E:5C:EE:31:D1:3F:28:89:FA:8D:1F Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Certificate serial: 019B397D8AC0552B51D1A694BBD92421245E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 02:01:27 +0000 Manifest this update: Sat 20 Dec 2025 02:01:27 +0000 Manifest next update: Sun 21 Dec 2025 02:01:27 +0000 Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: 5lDDXgDyMCp6KWwt0x5efLFoiSRXFBp73t48guX4Lxw=) 2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=) 3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:8a:c0:55:2b:51:d1:a6:94:bb:d9:24:21:24:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Validity Not Before: Dec 20 02:01:27 2025 GMT Not After : Dec 21 02:01:27 2025 GMT Subject: CN=0da920478b724e78bc0e5cee31d13f2889fa8d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:e8:a6:26:5b:3a:0b:15:b3:41:a0:ae:8b: d8:fa:18:2b:80:bf:88:22:72:98:8f:8f:5f:f8:7a: 26:ff:ad:c9:1f:4f:63:94:36:4b:d9:76:33:e0:e0: e6:9e:0b:d8:4a:40:1d:17:54:f0:a4:16:ee:94:32: d5:86:dd:99:db:ef:2a:ff:37:55:bb:2f:8a:9e:b0: 03:d8:d5:62:98:b9:41:0d:eb:38:d3:cd:4f:74:61: 2c:a6:d9:0f:be:cd:4d:1e:dc:ef:14:8e:33:a9:e7: 29:a8:ca:b4:93:f3:5d:fa:0b:85:0f:9e:ee:65:0a: 04:84:c0:51:bb:1e:c3:4e:b5:30:fd:b6:9a:29:b6: a6:df:98:8b:dd:33:00:39:08:71:50:d9:a3:d6:20: f8:92:08:92:38:13:26:18:d3:5c:29:a1:63:9e:d0: 32:0d:5f:04:00:6c:11:65:d6:73:96:25:c3:fe:55: f1:47:39:e9:5b:c0:c1:6d:21:86:f2:21:64:4f:61: 32:0b:0c:5f:ea:ab:b0:d6:c8:01:12:6e:8d:bb:b4: 8f:b1:72:d3:9f:ed:88:54:7a:84:08:f1:95:e7:94: 01:5d:56:9c:6a:db:b9:26:d5:82:0e:80:9e:56:d7: 03:7c:10:c4:52:8a:a2:f2:37:8f:e1:b9:2d:bf:ca: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:20:47:8B:72:4E:78:BC:0E:5C:EE:31:D1:3F:28:89:FA:8D:1F X509v3 Authority Key Identifier: keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4d:cc:fb:6d:cc:6f:96:56:12:51:97:63:f4:2b:15:7f:e3: 58:9b:70:31:f2:fd:3e:1d:59:ea:6d:c7:cd:88:ef:2a:90:3a: 04:cc:42:ef:56:da:19:cd:d0:ec:10:97:6b:45:34:8f:19:29: 4f:b2:70:30:9c:46:2e:9a:80:9b:50:02:f9:91:21:68:b1:18: 90:20:aa:81:0c:dd:52:ab:5a:15:d2:ed:de:d6:0c:3a:69:f0: 62:f0:50:f4:49:9b:28:42:82:90:9e:5a:c4:56:ac:e2:e6:fe: 0d:78:c7:a5:da:3e:5f:ec:08:b7:4e:bd:55:57:fc:6d:50:62: e9:8d:47:41:3c:18:7b:ff:0a:3e:11:1a:b2:e6:49:57:26:07: ca:1b:9a:dc:db:40:d5:c3:25:91:2e:4f:94:dc:95:4f:22:92: 10:bc:ae:4c:d4:af:f6:91:87:00:71:90:9c:62:5c:59:37:f0: e2:72:20:f4:34:c9:ec:60:16:19:c3:a5:00:7a:21:d4:3a:93: 8a:3b:a9:34:14:c5:e4:6b:b4:52:ea:cc:bf:e3:44:fd:b4:4a: e8:3b:6b:f4:41:2b:4f:34:53:d6:bc:4c:c1:36:59:ed:b5:8d: a4:23:38:20:5d:02:7a:24:ef:49:01:b4:48:75:06:d0:15:80: 07:d5:8b:0c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5fYrAVStR0aaUu9kkISReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWRmNTYyNDhmOTc3N2ZhMjJkNWRhNmMwNGI1ZmIzMzJh NGIzNTAwHhcNMjUxMjIwMDIwMTI3WhcNMjUxMjIxMDIwMTI3WjAzMTEwLwYDVQQD EygwZGE5MjA0NzhiNzI0ZTc4YmMwZTVjZWUzMWQxM2YyODg5ZmE4ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm/opiZbOgsVs0GgrovY+hgrgL+I InKYj49f+Hom/63JH09jlDZL2XYz4ODmngvYSkAdF1TwpBbulDLVht2Z2+8q/zdV uy+KnrAD2NVimLlBDes4081PdGEsptkPvs1NHtzvFI4zqecpqMq0k/Nd+guFD57u ZQoEhMBRux7DTrUw/baaKbam35iL3TMAOQhxUNmj1iD4kgiSOBMmGNNcKaFjntAy DV8EAGwRZdZzliXD/lXxRznpW8DBbSGG8iFkT2EyCwxf6quw1sgBEm6Nu7SPsXLT n+2IVHqECPGV55QBXVacatu5JtWCDoCeVtcDfBDEUoqi8jeP4bktv8pfXQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA2pIEeLck54vA5c7jHRPyiJ+o0fMB8GA1UdIwQY MBaAFPid9WJI+Xd/oi1dpsBLX7MypLNQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KMzFZa2o1ZDMtaUxWMm13RXRmc3pLa3MxQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3 LWMxNmJhZWRmNmZhNi8xLzEtSjMxWWtqNWQzLWlMVjJtd0V0ZnN6S2tzMUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M1L2Q0NmQyNS01ZDhmLTQ5ODktYjU1Ny1jMTZiYWVkZjZm YTYvMS8xLUozMVlrajVkMy1pTFYybXdFdGZzektrczFBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk3M +23Mb5ZWElGXY/QrFX/jWJtwMfL9Ph1Z6m3HzYjvKpA6BMxC71baGc3Q7BCXa0U0 jxkpT7JwMJxGLpqAm1AC+ZEhaLEYkCCqgQzdUqtaFdLt3tYMOmnwYvBQ9EmbKEKC kJ5axFas4ub+DXjHpdo+X+wIt069VVf8bVBi6Y1HQTwYe/8KPhEasuZJVyYHyhua 3NtA1cMlkS5PlNyVTyKSELyuTNSv9pGHAHGQnGJcWTfw4nIg9DTJ7GAWGcOlAHoh 1DqTijupNBTF5Gu0UurMv+NE/bRK6Dtr9EErTzRT1rxMwTZZ7bWNpCM4IF0CeiTv SQG0SHUG0BWAB9WLDA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:27:02 2025 by rpki-client