This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft File: 1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json) Hash identifier: ZN6tZUVQro4OopPiPBzAU1D1c+ig+jO45koELbA/LLQ= Subject key identifier: 9F:40:A1:F8:B5:F6:A1:8F:F0:B8:86:47:4F:9C:6B:E6:9D:D4:DF:B6 Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0 Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0 Certificate serial: 019AF2097571B772A1F16D1144E8DBB2A9FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: b/sp2A7zv+vm08kYpJrurXXYJXnXnpfrLhWlNxZybFo=) 2: qSALXGZS-mStlLpg8jjf75z_AxA.roa (hash: JTmyN1Wglwwaiz8Y4z1qxOyBmB8F9ra5LEBRhnN+ctY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:75:71:b7:72:a1:f1:6d:11:44:e8:db:b2:a9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=9f40a1f8b5f6a18ff0b886474f9c6be69dd4dfb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:24:56:f7:42:02:97:c5:0f:6a:8e:cf:55: 64:50:95:03:42:f2:2b:28:ab:b6:d2:39:0b:e3:52: 1a:d0:ec:28:1d:0c:78:73:07:70:4f:39:a8:80:1d: c9:b8:72:e3:89:9f:70:4c:fc:6b:3b:e1:f6:42:ee: 94:01:31:c2:12:8b:21:9b:3b:9b:79:00:b0:6a:c6: c6:a3:3e:bb:cd:fc:29:37:4f:ad:da:26:e9:7b:85: a8:44:61:cf:a5:7b:60:c7:d6:fc:a1:14:e1:57:fa: e6:15:98:64:76:60:3c:52:a7:25:2a:28:82:86:46: 66:e2:23:b7:3f:ab:18:be:22:86:c9:3c:76:f4:fa: be:af:2b:88:71:dd:ac:97:aa:e6:0e:c5:cb:19:1b: 77:2b:a0:1e:bd:3f:4e:0f:ed:32:a7:3e:7c:c9:ba: 92:5a:a6:39:08:5d:18:d1:be:8e:dd:33:f8:05:81: fb:e3:81:d8:25:dd:f8:ba:b7:b8:6e:1a:8c:05:d9: e3:7f:e5:a5:84:68:da:bc:53:b9:85:74:da:a9:f8: 12:af:dc:3f:ad:39:9f:00:d2:01:bd:94:0a:b4:e3: c1:a9:e9:ba:71:8c:88:b2:f3:2a:ab:91:89:69:f9: e0:f7:fb:6a:3b:0f:9a:3f:29:62:2c:d9:4b:ed:f9: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:A1:F8:B5:F6:A1:8F:F0:B8:86:47:4F:9C:6B:E6:9D:D4:DF:B6 X509v3 Authority Key Identifier: keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f5:57:42:91:b3:06:23:14:21:0f:5b:89:04:c7:48:16:32: f3:1e:4e:9a:9e:fa:92:86:02:ec:f1:61:8d:0f:a0:77:f5:8c: ab:98:04:b1:4a:df:0b:02:ff:2c:7f:d4:15:35:f2:4d:e2:cb: df:f9:9f:5d:35:87:c2:0a:a2:90:60:c5:9d:25:1e:8f:dd:d4: 14:0e:83:03:00:18:93:4e:f4:7c:5a:0c:46:1a:b5:ab:1b:a9: c5:47:7a:51:be:56:d6:76:24:59:ca:4c:47:11:d5:55:aa:e3: 73:0d:d3:f0:93:1d:21:59:24:24:18:6d:11:1c:0f:a6:15:f4: 2d:57:2d:7b:32:c1:cd:a8:80:40:12:80:be:9a:cb:af:f8:96: 17:e2:29:a6:ba:2d:0d:52:9e:13:1a:9d:be:7c:e0:f7:6e:7a: af:ca:ca:54:ab:87:ee:14:44:d6:bb:b5:4e:82:ab:54:b7:b3: f3:07:ba:95:a3:44:4a:ce:2c:36:46:6d:31:05:96:3a:81:6d: 36:ea:9b:0e:f4:ff:0a:7f:64:ed:92:f7:05:a2:0e:d3:74:77: 26:95:b2:0a:64:42:e5:af:41:44:c2:b5:2d:ee:70:31:ca:91: 7c:d2:8c:b0:01:6c:9a:aa:13:30:0e:1d:03:1a:8f:40:b6:37: e7:1f:98:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXVxt3Kh8W0RROjbsqn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzQ4MGJhYzk3MjYwN2ZkYWI2MDU1OTNhODRiODM2NGM2 YWIxYjAwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD Eyg5ZjQwYTFmOGI1ZjZhMThmZjBiODg2NDc0ZjljNmJlNjlkZDRkZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH0kVvdCApfFD2qOz1VkUJUDQvIr KKu20jkL41Ia0OwoHQx4cwdwTzmogB3JuHLjiZ9wTPxrO+H2Qu6UATHCEoshmzub eQCwasbGoz67zfwpN0+t2ibpe4WoRGHPpXtgx9b8oRThV/rmFZhkdmA8UqclKiiC hkZm4iO3P6sYviKGyTx29Pq+ryuIcd2sl6rmDsXLGRt3K6AevT9OD+0ypz58ybqS WqY5CF0Y0b6O3TP4BYH744HYJd34ure4bhqMBdnjf+WlhGjavFO5hXTaqfgSr9w/ rTmfANIBvZQKtOPBqem6cYyIsvMqq5GJafng9/tqOw+aPyliLNlL7fkPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Aofi19qGP8LiGR0+ca+ad1N+2MB8GA1UdIwQY MBaAFNbEgLrJcmB/2rYFWTqEuDZMarGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMt OTdjNzNiZTkzYmNkLzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMtOTdjNzNiZTkzYmNk LzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/VXQpGz BiMUIQ9biQTHSBYy8x5Omp76koYC7PFhjQ+gd/WMq5gEsUrfCwL/LH/UFTXyTeLL 3/mfXTWHwgqikGDFnSUej93UFA6DAwAYk070fFoMRhq1qxupxUd6Ub5W1nYkWcpM RxHVVarjcw3T8JMdIVkkJBhtERwPphX0LVctezLBzaiAQBKAvprLr/iWF+Ipprot DVKeExqdvnzg9256r8rKVKuH7hRE1ru1ToKrVLez8we6laNESs4sNkZtMQWWOoFt NuqbDvT/Cn9k7ZL3BaIO03R3JpWyCmRC5a9BRMK1Le5wMcqRfNKMsAFsmqoTMA4d AxqPQLY35x+Yqg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:57 2025 by rpki-client