This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json) Hash identifier: I1FhoxFjbNGx/Tl71iG59Be55DDZyrYrdesCfqu8Ch0= Subject key identifier: 69:A1:CF:20:53:E8:0A:AD:E9:B0:D9:5F:D3:7E:1A:0E:3C:F1:D5:6B Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019AF389DA6697B146EA9DAB114EF2170927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:28 +0000 Manifest this update: Sat 06 Dec 2025 12:01:28 +0000 Manifest next update: Sun 07 Dec 2025 12:01:28 +0000 Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: ToyTZIyT0O+4t1u3DAWbd4dyE492LO66xzYwkJMXht8=) 2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:da:66:97:b1:46:ea:9d:ab:11:4e:f2:17:09:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Dec 6 12:01:28 2025 GMT Not After : Dec 7 12:01:28 2025 GMT Subject: CN=69a1cf2053e80aade9b0d95fd37e1a0e3cf1d56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:78:bc:1e:db:95:16:03:85:c5:e6:3c:1b: cc:f4:4c:2c:ef:a7:96:39:9f:20:3e:77:fa:03:72: f2:99:4f:a9:d8:5a:37:10:bc:03:1b:42:b4:2e:d0: d3:d0:30:09:93:18:42:c3:b1:ba:31:ed:89:47:0c: e9:c2:a6:fb:88:68:16:3d:0e:b8:3e:64:5e:a5:af: 4c:52:b5:a7:df:73:16:93:6e:3c:2f:4c:f1:2e:0b: c6:33:75:b2:97:0a:db:e0:ec:05:5b:10:5c:ae:ba: 1c:3e:63:8e:0d:e7:a0:d8:f6:0d:5b:c6:0a:b0:04: 14:d9:48:f1:45:38:dd:60:3b:a6:f0:87:70:85:d4: e6:21:bc:29:cd:8b:eb:1a:72:47:00:4c:24:6c:20: 6c:f4:be:58:5a:ab:27:84:7b:f4:23:52:47:df:e7: a8:e2:37:b3:1c:23:fb:3c:e3:5e:4c:ed:e2:9c:ac: 6f:be:a8:90:d2:4a:a4:6b:94:b8:f2:f9:f2:d2:24: 5f:a2:95:23:01:cc:d9:0d:f4:3c:07:8e:cb:37:2b: 0c:92:01:5b:85:88:27:0a:65:c6:ec:06:46:44:68: 5e:7e:73:9b:fe:bf:e4:93:e7:b0:0e:6a:0d:41:a8: af:68:0e:fb:f6:eb:78:76:ac:19:0e:f8:28:11:17: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:CF:20:53:E8:0A:AD:E9:B0:D9:5F:D3:7E:1A:0E:3C:F1:D5:6B X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:92:2f:5a:3d:db:03:c4:84:a0:80:f8:10:24:15:4f:19: 80:7f:82:14:98:11:b1:88:f1:1f:62:78:32:ff:11:93:a7:a2: 67:2e:e8:a4:c6:0a:cb:4b:7a:1e:a4:f6:71:53:08:72:6c:51: 36:68:67:0d:7c:80:24:06:f2:2a:84:c9:27:ef:c0:34:93:c8: 80:3f:07:44:1e:14:87:e3:a7:6a:f8:4d:1c:ee:7a:a8:d0:87: 12:19:6e:83:5b:9d:e5:43:62:bb:98:55:4b:f3:78:10:df:0c: e9:ed:65:11:f2:88:5e:91:8d:69:d6:70:c3:f8:f5:66:2a:fe: 73:4a:f4:4a:53:ce:63:a0:68:14:49:04:9a:46:28:bb:fe:28: 73:bb:2f:18:b3:6e:cb:9d:d0:fc:89:e2:94:79:4f:8b:c7:b7: db:32:63:b4:51:2f:e6:fd:7f:07:b1:b4:81:ec:b0:2f:5b:05: 93:86:90:ee:d5:51:2f:9f:e5:63:09:94:58:37:eb:cf:77:42: 63:02:88:dd:44:da:f7:67:64:b6:68:5e:6c:1b:86:cf:22:06: f7:ab:c8:66:fb:33:18:b1:1a:f3:62:d7:fa:e9:23:63:f6:7c: 6d:eb:be:07:20:d8:6a:cc:be:54:a6:68:14:0d:74:f8:03:ed: 45:56:49:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidpml7FG6p2rEU7yFwknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjUxMjA2MTIwMTI4WhcNMjUxMjA3MTIwMTI4WjAzMTEwLwYDVQQD Eyg2OWExY2YyMDUzZTgwYWFkZTliMGQ5NWZkMzdlMWEwZTNjZjFkNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNd4vB7blRYDhcXmPBvM9Ews76eW OZ8gPnf6A3LymU+p2Fo3ELwDG0K0LtDT0DAJkxhCw7G6Me2JRwzpwqb7iGgWPQ64 PmRepa9MUrWn33MWk248L0zxLgvGM3Wylwrb4OwFWxBcrrocPmOODeeg2PYNW8YK sAQU2UjxRTjdYDum8IdwhdTmIbwpzYvrGnJHAEwkbCBs9L5YWqsnhHv0I1JH3+eo 4jezHCP7PONeTO3inKxvvqiQ0kqka5S48vny0iRfopUjAczZDfQ8B47LNysMkgFb hYgnCmXG7AZGRGhefnOb/r/kk+ewDmoNQaivaA779ut4dqwZDvgoEReIowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmhzyBT6Aqt6bDZX9N+Gg488dVrMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZuSL1o9 2wPEhKCA+BAkFU8ZgH+CFJgRsYjxH2J4Mv8Rk6eiZy7opMYKy0t6HqT2cVMIcmxR NmhnDXyAJAbyKoTJJ+/ANJPIgD8HRB4Uh+OnavhNHO56qNCHEhlug1ud5UNiu5hV S/N4EN8M6e1lEfKIXpGNadZww/j1Zir+c0r0SlPOY6BoFEkEmkYou/4oc7svGLNu y53Q/InilHlPi8e32zJjtFEv5v1/B7G0geywL1sFk4aQ7tVRL5/lYwmUWDfrz3dC YwKI3UTa92dktmhebBuGzyIG96vIZvszGLEa82LX+ukjY/Z8beu+ByDYasy+VKZo FA10+APtRVZJWg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:18 2025 by rpki-client