This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json) Hash identifier: 3z/j7tr1jRErptWLiAibSAxe45wkn5U5QY0cwdSG6Ps= Subject key identifier: E4:AB:14:5D:09:89:C4:E0:95:47:D9:CF:66:F4:C2:74:7E:50:3E:C6 Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Certificate serial: 019AF16428695084EB672AF1F28ADAEE9395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: 0h6EKkOggz97fCA5imztMV3ywBal1gELAevrGDyIAGo=) 2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:28:69:50:84:eb:67:2a:f1:f2:8a:da:ee:93:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=e4ab145d0989c4e09547d9cf66f4c2747e503ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:8b:f6:76:f3:f9:5b:48:06:47:c6:1f:57: cd:f0:19:2c:d3:98:2f:22:4b:ff:76:68:f2:e1:8e: 99:85:31:eb:fc:7d:31:87:8f:a2:e4:c1:64:66:9b: 4a:9b:a3:89:14:c9:8f:e9:6e:1b:b6:54:5c:51:b9: 25:dd:4f:d2:64:56:c7:eb:85:2b:e0:1b:79:c4:ff: ad:45:ac:a1:93:9f:b7:b8:42:4a:7e:1f:76:3b:68: 44:0e:10:37:39:bc:12:ed:9f:7c:93:a2:8e:51:1f: c8:d9:dc:d1:43:25:49:30:3c:71:d7:9b:7f:67:ca: 3e:8e:11:ed:1e:21:c3:1a:14:20:05:4b:cf:2f:29: a3:83:52:bb:c0:4c:30:0f:01:a6:b3:1b:e3:b9:10: 81:9a:07:db:f1:5b:e9:0b:93:29:61:a0:23:9b:df: e8:5d:a8:a0:b4:91:af:2a:a7:b4:ae:a3:0d:17:83: 5d:1a:ea:f1:e3:8e:b0:de:f2:88:7d:04:fd:6a:8f: 20:6c:e8:c2:00:c8:0a:bc:cc:1b:79:8f:ab:21:23: c7:2c:15:d0:91:22:b2:c4:c4:e6:11:87:48:cc:e9: 2a:d4:37:bc:9b:4a:91:a8:b9:9a:2f:35:6e:1c:c4: b2:77:de:c6:e7:0e:03:62:29:de:c9:04:1c:50:4f: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AB:14:5D:09:89:C4:E0:95:47:D9:CF:66:F4:C2:74:7E:50:3E:C6 X509v3 Authority Key Identifier: keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:15:03:4b:5a:66:3e:6b:3b:5a:69:f0:ad:20:24:17:64:91: 87:88:49:b4:40:34:2a:1b:a2:ce:0a:c9:28:0b:75:64:6f:b9: 47:60:57:2d:b4:08:61:f6:1b:6c:df:7f:9e:7d:39:9b:fb:40: 99:5d:d2:76:ed:06:2a:7c:65:b7:4c:bf:7c:1f:30:30:11:61: 0e:78:cd:51:bd:0e:2f:ea:05:32:02:42:a1:c1:9a:10:c5:05: dc:43:eb:5d:12:7a:9b:e4:27:e7:cd:dd:da:a4:f3:de:c2:c6: a3:bb:d9:e0:9d:04:cd:e0:fe:8a:69:75:d8:5d:33:98:74:4f: 02:49:d2:b9:9e:3d:94:e0:95:ec:73:ad:2f:bf:62:89:16:70: 06:e0:a0:76:a3:f5:02:b3:6d:e3:41:e9:fb:99:fc:e5:80:d2: 22:71:97:4a:fe:d7:a3:9a:df:f1:f6:90:16:72:e2:d1:76:77: c5:ef:fc:53:67:88:09:ad:d4:ed:13:bb:1e:c3:28:4f:a2:ff: 18:bf:5d:b4:a2:43:3a:06:04:06:d8:ff:75:fa:50:dd:a6:f7: eb:d2:b6:15:17:73:f8:33:ad:f2:5a:f6:1d:09:05:cb:71:ce: 69:5b:b8:ef:56:3c:00:fc:de:d6:82:58:ec:cc:88:55:2d:9b: 04:7c:8d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZChpUITrZyrx8ora7pOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw YTZjYjYwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhlNGFiMTQ1ZDA5ODljNGUwOTU0N2Q5Y2Y2NmY0YzI3NDdlNTAzZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL+L9nbz+VtIBkfGH1fN8Bks05gv Ikv/dmjy4Y6ZhTHr/H0xh4+i5MFkZptKm6OJFMmP6W4btlRcUbkl3U/SZFbH64Ur 4Bt5xP+tRayhk5+3uEJKfh92O2hEDhA3ObwS7Z98k6KOUR/I2dzRQyVJMDxx15t/ Z8o+jhHtHiHDGhQgBUvPLymjg1K7wEwwDwGmsxvjuRCBmgfb8VvpC5MpYaAjm9/o XaigtJGvKqe0rqMNF4NdGurx446w3vKIfQT9ao8gbOjCAMgKvMwbeY+rISPHLBXQ kSKyxMTmEYdIzOkq1De8m0qRqLmaLzVuHMSyd97G5w4DYineyQQcUE+CJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSrFF0JicTglUfZz2b0wnR+UD7GMB8GA1UdIwQY MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxUDS1pm Pms7WmnwrSAkF2SRh4hJtEA0KhuizgrJKAt1ZG+5R2BXLbQIYfYbbN9/nn05m/tA mV3Sdu0GKnxlt0y/fB8wMBFhDnjNUb0OL+oFMgJCocGaEMUF3EPrXRJ6m+Qn583d 2qTz3sLGo7vZ4J0EzeD+iml12F0zmHRPAknSuZ49lOCV7HOtL79iiRZwBuCgdqP1 ArNt40Hp+5n85YDSInGXSv7Xo5rf8faQFnLi0XZ3xe/8U2eICa3U7RO7HsMoT6L/ GL9dtKJDOgYEBtj/dfpQ3ab369K2FRdz+DOt8lr2HQkFy3HOaVu471Y8APze1oJY 7MyIVS2bBHyNSw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:22 2025 by rpki-client