This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json) Hash identifier: b+jeZu/WMvKJ7vSwMc2HjAVUjSqZpnaz7vJfSY5HiCw= Subject key identifier: 9A:13:05:6D:43:CE:1D:8C:47:36:E0:53:EC:F8:03:FE:C0:76:21:58 Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Certificate serial: 019AF1648334CF088EAE587D86EF35B51C92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=) 2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: fbt8zolJwFfvpCA8xAZ4B01ihHjjy7hduvc2AU5PszI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:83:34:cf:08:8e:ae:58:7d:86:ef:35:b5:1c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=9a13056d43ce1d8c4736e053ecf803fec0762158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:45:1f:94:b5:22:61:af:89:6d:2a:76:6f: 9c:18:d9:23:ba:73:4e:0e:de:32:e7:bf:22:7a:83: fd:46:39:f2:b2:67:59:88:e3:8a:ed:1b:39:5a:10: 20:9b:af:04:b7:67:c1:df:93:73:52:11:be:5b:07: b0:30:8e:d0:a5:ea:6a:92:86:90:ac:1f:03:1b:28: 1c:80:8b:f8:c2:43:05:b3:df:64:eb:fc:a3:c5:35: 2c:c2:48:35:a3:6f:64:3c:29:05:9a:53:c3:02:6a: a3:a1:c3:e1:36:f3:8f:94:10:4d:b7:9b:e2:09:fa: c8:c0:fa:70:b5:13:1e:63:a1:f3:45:a9:1c:d1:f0: af:71:04:f8:d6:50:a7:54:32:14:62:6a:00:80:7a: 6b:00:09:23:c6:9f:27:95:2b:34:d6:13:a4:10:ee: 53:27:4c:69:ee:90:a3:68:39:01:90:e7:b5:45:ba: 99:b1:51:df:fd:ef:3a:8b:6a:de:93:4b:52:12:2f: e3:39:ab:53:f3:7d:ad:3d:04:bc:e5:f2:39:6c:4a: 02:8d:8c:52:11:d5:db:36:68:1e:43:f6:98:37:73: f2:4a:d8:35:d1:12:00:45:0a:ca:37:8b:ab:7f:69: 2c:03:43:a8:6d:c6:c8:ae:47:68:c8:0d:ff:9b:b2: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:05:6D:43:CE:1D:8C:47:36:E0:53:EC:F8:03:FE:C0:76:21:58 X509v3 Authority Key Identifier: keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:94:5a:c1:fb:b2:be:c3:17:a0:18:58:d9:9e:09:20:f3:c9: 57:66:68:2b:82:87:74:db:8c:27:a2:e7:cd:20:01:bb:b7:7e: aa:b2:b1:2f:8a:a6:3c:c6:2a:9b:43:d2:69:b7:29:e2:ba:63: 66:d9:3f:58:3a:b5:76:b7:d0:ad:a8:17:9a:10:de:c0:79:98: eb:4f:ab:56:1d:b3:56:08:03:64:2d:73:26:76:85:61:19:9b: 24:f8:fd:3b:b5:f6:d5:20:51:7a:a0:af:a8:11:ba:e4:80:bb: ca:f6:4c:80:7d:ea:00:7b:93:bc:6a:fe:c4:9b:b3:38:1f:53: 34:34:0d:0e:46:95:4d:1e:ce:6c:14:c7:74:93:7b:5b:d7:b9: 40:90:87:c9:e6:af:74:1a:a2:24:a7:c5:1c:79:98:4c:da:e0: ce:c2:e7:7a:28:22:9c:ea:be:1e:1f:e0:5b:98:02:8a:84:eb: b3:ed:3c:31:97:48:17:25:86:b0:f7:fb:9c:7b:52:60:37:7e: 8c:4d:a3:b2:f3:41:52:78:87:ba:f7:d1:d8:9c:21:ac:74:f6: 99:bf:dc:5b:eb:c9:31:c8:70:3d:b7:0b:8c:f1:8d:db:cd:ac: ac:d1:80:5f:6c:7f:87:50:0e:1b:aa:f9:bb:15:1d:3a:2c:a3: 4e:5a:e2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIM0zwiOrlh9hu81tRySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNWEyOWNjZGExZGM4YThhMTYzYWMyNzc4MWU4ZWM1OTdl NzZkYjkwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD Eyg5YTEzMDU2ZDQzY2UxZDhjNDczNmUwNTNlY2Y4MDNmZWMwNzYyMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusZFH5S1ImGviW0qdm+cGNkjunNO Dt4y578ieoP9RjnysmdZiOOK7Rs5WhAgm68Et2fB35NzUhG+WwewMI7QpepqkoaQ rB8DGygcgIv4wkMFs99k6/yjxTUswkg1o29kPCkFmlPDAmqjocPhNvOPlBBNt5vi CfrIwPpwtRMeY6HzRakc0fCvcQT41lCnVDIUYmoAgHprAAkjxp8nlSs01hOkEO5T J0xp7pCjaDkBkOe1RbqZsVHf/e86i2rek0tSEi/jOatT832tPQS85fI5bEoCjYxS EdXbNmgeQ/aYN3PyStg10RIARQrKN4urf2ksA0OobcbIrkdoyA3/m7JmdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoTBW1Dzh2MRzbgU+z4A/7AdiFYMB8GA1UdIwQY MBaAFP9aKczaHciooWOsJ3gejsWX5225MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQt OWJjNTVmNjJkYWJhLzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQtOWJjNTVmNjJkYWJh LzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJRawfuy vsMXoBhY2Z4JIPPJV2ZoK4KHdNuMJ6LnzSABu7d+qrKxL4qmPMYqm0PSabcp4rpj Ztk/WDq1drfQragXmhDewHmY60+rVh2zVggDZC1zJnaFYRmbJPj9O7X21SBReqCv qBG65IC7yvZMgH3qAHuTvGr+xJuzOB9TNDQNDkaVTR7ObBTHdJN7W9e5QJCHyeav dBqiJKfFHHmYTNrgzsLneiginOq+Hh/gW5gCioTrs+08MZdIFyWGsPf7nHtSYDd+ jE2jsvNBUniHuvfR2JwhrHT2mb/cW+vJMchwPbcLjPGN282srNGAX2x/h1AOG6r5 uxUdOiyjTlriPw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:06 2025 by rpki-client