This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json) Hash identifier: 91VZrMFA7na3yMigEKJMfoH95dR0lBxsiVdGKZDmC0g= Subject key identifier: 12:99:C1:DF:BC:F9:B7:35:69:9A:7B:D7:05:8B:DC:AE:6C:D3:FE:1A Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7 Certificate serial: 019AF61C3ED4C1F8DE172F5B58DE19F9794F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft Manifest number: 16F6 Signing time: Sun 07 Dec 2025 00:00:37 +0000 Manifest this update: Sun 07 Dec 2025 00:00:37 +0000 Manifest next update: Mon 08 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: 6HxrlEuKjXCCBPYwUB0pgO6xuUpzpJRGRXuypF40xFQ=) 2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=) 3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3e:d4:c1:f8:de:17:2f:5b:58:de:19:f9:79:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7 Validity Not Before: Dec 7 00:00:37 2025 GMT Not After : Dec 8 00:00:37 2025 GMT Subject: CN=1299c1dfbcf9b735699a7bd7058bdcae6cd3fe1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:d2:68:3f:0f:fe:6f:fa:e1:d8:8b:eb:c3: cd:ff:a1:11:66:5f:30:11:ad:47:d7:f3:63:6c:91: 44:76:b5:b5:49:d3:1e:9d:4d:32:ec:64:72:e2:fa: 02:83:94:63:0c:db:98:a7:6b:36:04:74:df:09:7f: b0:a3:59:cf:d9:da:b6:4d:bf:72:8a:53:bd:3f:76: c0:b6:12:05:17:2d:bb:e6:93:22:7b:16:5e:82:d0: f3:1e:ce:79:a0:9d:04:5e:e1:4f:8c:42:ad:b0:0e: ff:74:3f:1a:60:5b:06:d2:c8:c1:82:e1:45:45:41: 0b:95:66:eb:8b:4e:5f:51:e7:e6:89:79:85:28:54: f2:29:46:e2:90:3d:62:5f:02:df:76:0d:b5:8b:e5: 01:d8:57:0d:0f:e8:ba:63:61:dc:4c:ea:5d:96:64: 8b:b6:08:c1:cc:ba:34:e0:f3:7f:64:18:6b:30:1d: b7:fd:0c:49:78:b1:5c:b9:bd:9c:64:16:ba:3a:75: ee:2f:23:a5:0c:cc:b4:9e:6c:ef:87:d0:02:30:47: aa:ba:dc:da:19:33:52:d6:7a:06:53:fe:86:6e:c7: 37:eb:0c:ee:bc:27:e7:7b:5b:90:9d:67:f2:36:fa: f3:d7:9a:d7:93:8d:27:54:93:79:2b:6d:bc:65:92: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:C1:DF:BC:F9:B7:35:69:9A:7B:D7:05:8B:DC:AE:6C:D3:FE:1A X509v3 Authority Key Identifier: keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:59:9b:45:0b:bd:19:3b:ac:e1:fe:78:9c:98:16:81:6a: 26:85:96:a6:ae:a4:5b:44:0b:b7:2f:3b:cf:6f:4e:f1:9e:ee: e0:ec:53:d0:0f:bd:13:25:d5:cf:13:3b:71:70:ea:fd:5d:3e: 5b:e6:15:4d:83:9a:5e:79:20:39:aa:17:1a:a9:a5:d8:78:ff: 01:d3:e5:41:d3:fe:ca:7d:96:3c:f3:99:bb:5a:f5:e3:89:13: 36:3b:99:0b:ae:02:c3:2a:c7:7c:70:64:e3:8e:19:7b:f5:12: dc:9f:36:47:da:13:8c:50:8e:53:3e:a4:92:22:15:4a:e7:92: ae:ef:a1:b3:b5:e5:0c:40:16:75:f3:bf:e5:1f:0b:00:bd:16: 6a:55:79:64:c8:52:ff:df:f0:a8:72:b6:38:ac:2c:78:b3:a4: 81:dc:04:eb:e0:ee:9a:f9:dc:b8:d6:7e:d4:88:cb:85:7f:23: 29:8f:b6:0b:92:69:66:4a:82:b6:c4:a6:10:87:3d:6e:89:67: 93:d6:6a:35:91:cb:ed:21:93:5a:15:7c:1b:d1:12:db:99:e1: 86:cb:78:63:39:49:51:50:e5:a0:b3:c9:3c:4f:fc:57:98:39: b3:26:57:28:a1:a3:d8:56:a7:3c:75:bd:da:81:22:d1:48:df: 24:11:ee:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HD7UwfjeFy9bWN4Z+XlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4 YzE4YzcwHhcNMjUxMjA3MDAwMDM3WhcNMjUxMjA4MDAwMDM3WjAzMTEwLwYDVQQD EygxMjk5YzFkZmJjZjliNzM1Njk5YTdiZDcwNThiZGNhZTZjZDNmZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCjSaD8P/m/64diL68PN/6ERZl8w Ea1H1/NjbJFEdrW1SdMenU0y7GRy4voCg5RjDNuYp2s2BHTfCX+wo1nP2dq2Tb9y ilO9P3bAthIFFy275pMiexZegtDzHs55oJ0EXuFPjEKtsA7/dD8aYFsG0sjBguFF RUELlWbri05fUefmiXmFKFTyKUbikD1iXwLfdg21i+UB2FcND+i6Y2HcTOpdlmSL tgjBzLo04PN/ZBhrMB23/QxJeLFcub2cZBa6OnXuLyOlDMy0nmzvh9ACMEequtza GTNS1noGU/6Gbsc36wzuvCfne1uQnWfyNvrz15rXk40nVJN5K228ZZJMuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKZwd+8+bc1aZp71wWL3K5s0/4aMB8GA1UdIwQY MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4 LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHixZm0UL vRk7rOH+eJyYFoFqJoWWpq6kW0QLty87z29O8Z7u4OxT0A+9EyXVzxM7cXDq/V0+ W+YVTYOaXnkgOaoXGqml2Hj/AdPlQdP+yn2WPPOZu1r144kTNjuZC64CwyrHfHBk 444Ze/US3J82R9oTjFCOUz6kkiIVSueSru+hs7XlDEAWdfO/5R8LAL0WalV5ZMhS /9/wqHK2OKwseLOkgdwE6+DumvncuNZ+1IjLhX8jKY+2C5JpZkqCtsSmEIc9boln k9ZqNZHL7SGTWhV8G9ES25nhhst4YzlJUVDloLPJPE/8V5g5syZXKKGj2FanPHW9 2oEi0UjfJBHuvA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:07 2025 by rpki-client