This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json) Hash identifier: GfTa8wc5kipO9Al5/bsSwXEUfbtdbzq4YlM2iBRTmBw= Subject key identifier: 02:99:DB:39:71:B8:20:23:21:60:85:B0:31:DD:E1:08:4F:A7:07:E1 Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Certificate serial: 019B2F3068DBD1CA7F35AD97503A0CBDB9E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 02:01:00 +0000 Manifest this update: Thu 18 Dec 2025 02:01:00 +0000 Manifest next update: Fri 19 Dec 2025 02:01:00 +0000 Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: /zot26fD/GwEXSVYBX3w0Jcw7MP/1mFIuOlAA6aSpg8=) 2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:68:db:d1:ca:7f:35:ad:97:50:3a:0c:bd:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Validity Not Before: Dec 18 02:01:00 2025 GMT Not After : Dec 19 02:01:00 2025 GMT Subject: CN=0299db3971b82023216085b031dde1084fa707e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:da:d5:de:f1:91:ee:86:30:98:74:65:9b: 5d:6f:0d:79:21:ba:0a:58:bc:79:d8:3f:ad:66:4b: 1a:40:be:c2:ec:af:c8:20:18:2a:b2:55:99:01:c2: c0:1a:42:72:9c:dd:72:15:11:44:00:f8:d9:ef:ec: 0f:f5:45:d8:6f:c6:8f:17:42:d7:78:de:c5:4c:85: 97:f6:07:e6:fc:9e:a0:35:3b:9d:1d:b0:76:aa:48: 09:53:b5:9e:f6:94:78:79:94:0d:68:9b:22:64:5d: 5c:04:8e:18:f4:58:ac:98:80:e7:32:88:c9:e7:bf: 8b:61:f8:a9:17:67:7d:26:62:37:ef:a7:3e:f5:ea: a8:e6:15:83:09:69:74:30:fe:d9:62:fd:17:dd:f0: 82:47:c0:2e:34:52:48:c3:b1:50:d8:93:44:f8:dd: 9d:b9:69:5e:f5:6e:48:39:59:48:20:6b:00:f9:14: 8c:4c:71:a1:80:90:38:5e:bb:cc:05:44:46:37:c8: 84:96:9d:6d:8a:e3:c8:75:75:bd:b4:73:79:86:18: 2c:a5:bd:e8:5d:f9:a7:1e:1d:12:c4:53:22:41:df: 0f:6c:fb:5d:c2:01:e5:9a:84:a2:db:ba:1d:80:a9: c3:4d:61:e7:52:ae:a0:5c:a9:72:9d:67:e0:2a:b1: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:99:DB:39:71:B8:20:23:21:60:85:B0:31:DD:E1:08:4F:A7:07:E1 X509v3 Authority Key Identifier: keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a2:fe:47:3f:4f:07:ec:97:f3:c0:84:85:4c:8f:b1:98:ec: 15:d8:1a:e0:b8:3c:a7:c0:b2:15:b2:b5:8e:76:40:89:fd:21: 53:d4:f6:61:f8:eb:28:43:bd:de:53:bd:8c:9e:2f:f2:b4:0c: 3b:c3:f8:dd:83:79:4b:de:3b:63:06:6c:ea:b2:e2:6f:21:bb: f5:dc:c8:27:fd:95:67:6b:fa:4e:de:e7:b3:a2:57:aa:6f:a4: c1:d2:9c:c2:68:85:c7:f2:46:e4:1c:42:ca:14:7a:f2:68:5b: 7c:3e:d8:53:ed:72:6e:a8:00:20:df:bb:1d:12:9f:26:4d:44: 46:cf:f4:51:c3:fa:b3:bc:ca:92:a4:bd:38:09:4c:4e:41:39: 2f:8c:2e:27:6b:3b:92:65:a2:72:7d:df:b8:27:42:ba:6b:df: db:39:b9:09:38:7e:81:8b:42:eb:1c:63:f7:72:94:08:02:4a: 5d:6f:3e:b9:67:51:99:59:9a:0f:e5:65:f4:e3:77:d1:51:72: 31:a1:9f:05:cb:60:54:53:ef:37:7e:25:a7:cb:e2:cf:98:2d: b2:4c:14:a1:4f:9c:b4:cc:65:01:4e:e0:f0:f1:ec:65:be:67: ff:18:b4:97:b9:2a:e3:ab:40:0b:8f:ea:fa:9a:80:75:af:68: d8:63:8b:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMGjb0cp/Na2XUDoMvbnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5 MWMxOTYwHhcNMjUxMjE4MDIwMTAwWhcNMjUxMjE5MDIwMTAwWjAzMTEwLwYDVQQD EygwMjk5ZGIzOTcxYjgyMDIzMjE2MDg1YjAzMWRkZTEwODRmYTcwN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0va1d7xke6GMJh0ZZtdbw15IboK WLx52D+tZksaQL7C7K/IIBgqslWZAcLAGkJynN1yFRFEAPjZ7+wP9UXYb8aPF0LX eN7FTIWX9gfm/J6gNTudHbB2qkgJU7We9pR4eZQNaJsiZF1cBI4Y9FismIDnMojJ 57+LYfipF2d9JmI376c+9eqo5hWDCWl0MP7ZYv0X3fCCR8AuNFJIw7FQ2JNE+N2d uWle9W5IOVlIIGsA+RSMTHGhgJA4XrvMBURGN8iElp1tiuPIdXW9tHN5hhgspb3o XfmnHh0SxFMiQd8PbPtdwgHlmoSi27odgKnDTWHnUq6gXKlynWfgKrGhPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKZ2zlxuCAjIWCFsDHd4QhPpwfhMB8GA1UdIwQY MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqL+Rz9P B+yX88CEhUyPsZjsFdga4Lg8p8CyFbK1jnZAif0hU9T2YfjrKEO93lO9jJ4v8rQM O8P43YN5S947YwZs6rLibyG79dzIJ/2VZ2v6Tt7ns6JXqm+kwdKcwmiFx/JG5BxC yhR68mhbfD7YU+1ybqgAIN+7HRKfJk1ERs/0UcP6s7zKkqS9OAlMTkE5L4wuJ2s7 kmWicn3fuCdCumvf2zm5CTh+gYtC6xxj93KUCAJKXW8+uWdRmVmaD+Vl9ON30VFy MaGfBctgVFPvN34lp8viz5gtskwUoU+ctMxlAU7g8PHsZb5n/xi0l7kq46tAC4/q +pqAda9o2GOLEQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:09 2025 by rpki-client