This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json) Hash identifier: zh7LVxxlonOyzFz6i5K9CNrDOnVZDV/MQie+0s9k7ZA= Subject key identifier: 0D:A7:CD:CB:52:A5:71:92:09:E1:B9:33:AB:6E:49:4D:83:88:09:8B Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b Certificate serial: 019AF2AD80FD05996AFF839A24E0FBD0DB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft Manifest number: 0FDF Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: fNJpqCqnMMb6xPKWSUTe1MnLwxOnwOJ1Pe1f9rhOvQk=) 2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:80:fd:05:99:6a:ff:83:9a:24:e0:fb:d0:db:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=0da7cdcb52a5719209e1b933ab6e494d8388098b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:89:1d:df:80:f7:91:0a:4c:80:6d:0b:92: 68:c1:bd:af:a0:c6:11:ca:31:2d:e3:28:fb:88:3e: b5:24:94:bf:3b:f3:44:9d:61:0f:c3:ce:85:2d:c8: c3:be:68:d4:f5:6d:45:55:bd:8f:3d:c4:27:be:5d: cb:51:cd:86:a3:13:79:13:f8:b8:0b:58:30:4b:3c: 58:02:3e:58:3e:a7:1b:40:0a:ae:84:ee:c6:98:0c: ca:c4:e8:1b:23:38:7e:f0:58:1c:6c:e4:1b:d8:d8: eb:f5:28:35:c1:ed:77:ac:a7:63:e5:03:ad:e4:e1: b4:fd:69:ff:29:08:37:82:3e:7e:9a:5c:ae:e7:d2: 2b:6f:25:03:5c:ad:8d:9f:9a:06:82:e5:01:a9:d7: d7:0a:25:a4:e1:e2:7a:a0:cb:6f:e6:b8:98:b1:4c: a5:7d:74:71:c9:ac:7e:8a:07:5a:f9:d9:12:45:82: e1:b9:f6:ca:5f:47:fd:29:89:de:3b:d0:60:8a:23: d9:ae:d0:1a:87:28:5d:1c:b7:df:4e:25:7b:aa:f2: 3d:96:ba:67:14:c0:f6:8e:ff:4a:c0:4c:43:b8:fd: 0e:36:f5:93:b1:35:9c:aa:29:76:c0:84:4b:64:fc: b5:dd:02:c9:95:f2:dc:e7:3a:43:ca:b9:67:6b:b8: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A7:CD:CB:52:A5:71:92:09:E1:B9:33:AB:6E:49:4D:83:88:09:8B X509v3 Authority Key Identifier: keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d8:45:f5:2e:6f:48:cb:f6:a4:cc:3f:6a:95:eb:15:e6:6b: 4f:0c:01:5c:5f:79:07:b2:3b:66:d7:dc:89:2a:43:06:c4:87: 39:df:f8:ab:cf:f8:ff:67:f5:f6:51:e3:0c:89:02:bb:b2:2d: b3:b3:72:44:23:b8:3e:29:0b:b5:44:11:80:aa:05:53:01:87: 3b:0c:a1:4e:e2:c6:84:98:d2:c1:11:bf:1a:e8:68:fb:8d:78: da:3d:58:ac:2b:93:f0:17:61:be:c6:39:eb:1b:42:20:8a:2b: 43:ae:b4:b1:23:5c:68:37:f2:34:1e:d4:95:a2:28:7b:c7:08: 53:c2:1c:b9:64:0f:7c:16:fc:a5:5c:01:59:54:f2:ee:b9:c2: 85:59:32:db:00:6b:fb:99:51:f8:c1:0d:52:c7:27:13:9b:50: f3:21:b6:f1:16:83:a5:82:3d:9c:08:b4:76:b3:46:a5:cb:f7: 2b:39:fc:db:d5:ad:ce:65:2c:e9:a8:53:30:42:62:b7:5a:e7: bf:c3:d2:6a:4d:94:e6:40:27:bc:12:f7:57:c0:cd:ab:b3:d1: e4:2f:8d:df:6e:fc:66:4d:11:3e:e8:29:db:b9:03:cc:36:fc: 0c:d8:ad:1b:63:9b:2c:ae:ef:67:45:f0:58:66:a7:97:c6:74: 7d:cb:a9:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYD9BZlq/4OaJOD70NswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk MWExOWIwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD EygwZGE3Y2RjYjUyYTU3MTkyMDllMWI5MzNhYjZlNDk0ZDgzODgwOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySWJHd+A95EKTIBtC5Jowb2voMYR yjEt4yj7iD61JJS/O/NEnWEPw86FLcjDvmjU9W1FVb2PPcQnvl3LUc2GoxN5E/i4 C1gwSzxYAj5YPqcbQAquhO7GmAzKxOgbIzh+8FgcbOQb2Njr9Sg1we13rKdj5QOt 5OG0/Wn/KQg3gj5+mlyu59IrbyUDXK2Nn5oGguUBqdfXCiWk4eJ6oMtv5riYsUyl fXRxyax+igda+dkSRYLhufbKX0f9KYneO9BgiiPZrtAahyhdHLffTiV7qvI9lrpn FMD2jv9KwExDuP0ONvWTsTWcqil2wIRLZPy13QLJlfLc5zpDyrlna7holQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2nzctSpXGSCeG5M6tuSU2DiAmLMB8GA1UdIwQY MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct YzA5NTZhODAxMzJkLzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdhF9S5v SMv2pMw/apXrFeZrTwwBXF95B7I7ZtfciSpDBsSHOd/4q8/4/2f19lHjDIkCu7It s7NyRCO4PikLtUQRgKoFUwGHOwyhTuLGhJjSwRG/Guho+4142j1YrCuT8BdhvsY5 6xtCIIorQ660sSNcaDfyNB7UlaIoe8cIU8IcuWQPfBb8pVwBWVTy7rnChVky2wBr +5lR+MENUscnE5tQ8yG28RaDpYI9nAi0drNGpcv3Kzn829WtzmUs6ahTMEJit1rn v8PSak2U5kAnvBL3V8DNq7PR5C+N3278Zk0RPugp27kDzDb8DNitG2ObLK7vZ0Xw WGanl8Z0fcupJw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:56 2025 by rpki-client