This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json) Hash identifier: WgVbuBVc1Vb0EH1fhhgJN6/6QHAmQuckd8PrmpBlPFc= Subject key identifier: 7C:39:F0:C0:E2:67:2B:2A:11:24:36:7B:32:C6:1C:95:16:6D:5D:11 Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Certificate serial: 019AF276FB7D96455FC0CB6E30C3F4B42930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft Manifest number: 112A Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: KJ4fgOjXXRUmUDTVpp3EwqzgoOBOH4U8rQ6x4stED8o=) 2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fb:7d:96:45:5f:c0:cb:6e:30:c3:f4:b4:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=7c39f0c0e2672b2a1124367b32c61c95166d5d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:0d:e1:a3:1f:8b:11:a1:04:40:10:89:f8: 33:f6:8a:18:ff:13:78:18:ce:52:8c:0f:d5:fb:f6: a3:60:27:34:f0:3c:9b:09:74:5f:00:25:07:9a:c5: 15:46:d6:77:db:c1:2d:c2:5d:4e:5d:f7:e5:60:23: e3:e6:ed:fa:b8:b8:21:50:f4:f4:bb:c9:e9:1d:e2: 96:73:ef:aa:7d:39:16:b0:05:dc:2a:6e:8e:bd:89: e6:81:fb:ab:62:0e:e3:f6:8d:90:2f:23:50:c1:56: db:c2:bf:d6:69:43:2e:6f:f8:50:88:c3:10:9e:3c: 13:cb:e7:bf:a3:dd:bf:14:74:61:c9:42:b2:76:22: db:c1:4c:80:6e:ac:1d:7f:1d:11:85:e2:03:c0:e1: 83:8d:7a:6b:23:68:af:b9:51:45:50:44:88:5e:7a: 5c:ac:66:ad:48:a8:a5:ce:a2:5b:1d:8e:54:bc:77: 3f:bd:49:75:9e:d1:09:ec:c4:50:ed:72:13:4c:22: d4:52:43:48:93:9a:6a:fc:79:c8:69:ad:82:06:cd: 1b:87:e4:2b:c0:94:9f:92:8c:a2:07:c9:cb:63:ab: b0:c2:e4:0c:4c:46:66:c1:e5:15:f8:2d:5f:42:78: 7b:d8:f8:a7:de:e2:75:6f:a6:e7:7d:3b:cb:8e:5d: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:F0:C0:E2:67:2B:2A:11:24:36:7B:32:C6:1C:95:16:6D:5D:11 X509v3 Authority Key Identifier: keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:16:5d:37:a5:ae:e0:94:ba:85:cf:04:67:f6:af:c2:ef:90: 6d:d7:b4:c1:e0:81:7c:36:e3:e1:2c:6f:42:65:bf:89:a2:cd: 7f:db:fa:0c:c9:18:2d:cc:69:bc:c8:b0:fc:71:13:9c:81:09: ab:ab:97:8b:9f:fa:e0:a4:cf:25:77:ff:72:f7:53:57:87:a3: 25:3a:4d:6c:18:28:89:c3:70:54:89:8d:dd:95:ac:7a:3f:67: 10:4f:fa:7b:ee:40:34:25:e3:0a:e0:6a:c0:d7:cd:ba:24:b0: 94:00:27:e9:6c:ba:68:10:6b:bf:cd:ab:b0:05:a7:96:27:ba: 0c:99:5e:b7:55:8f:df:ee:e3:7d:6f:eb:22:a4:59:c6:fe:f1: 31:65:7e:96:dd:1f:82:f4:f1:bb:64:a0:35:80:92:5e:ab:62: 74:6c:5e:b7:5b:14:17:f5:f2:01:d7:26:c5:f9:0b:08:0c:9e: e9:96:e8:e0:8b:d2:70:df:7f:d3:8e:ad:68:35:15:e5:06:a9: 81:dc:4e:fb:67:81:c8:4e:e6:56:39:ff:39:e6:8b:4f:dc:1f: e4:fe:df:ff:89:a2:5d:86:24:3b:aa:3f:2e:ff:e3:bc:8f:eb: 40:d5:b3:6c:22:d0:98:3b:cd:ea:c8:eb:ba:dc:92:37:0d:72: 63:6a:bb:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvt9lkVfwMtuMMP0tCkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm MmRhZDAwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD Eyg3YzM5ZjBjMGUyNjcyYjJhMTEyNDM2N2IzMmM2MWM5NTE2NmQ1ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8IN4aMfixGhBEAQifgz9ooY/xN4 GM5SjA/V+/ajYCc08DybCXRfACUHmsUVRtZ328Etwl1OXfflYCPj5u36uLghUPT0 u8npHeKWc++qfTkWsAXcKm6OvYnmgfurYg7j9o2QLyNQwVbbwr/WaUMub/hQiMMQ njwTy+e/o92/FHRhyUKydiLbwUyAbqwdfx0RheIDwOGDjXprI2ivuVFFUESIXnpc rGatSKilzqJbHY5UvHc/vUl1ntEJ7MRQ7XITTCLUUkNIk5pq/HnIaa2CBs0bh+Qr wJSfkoyiB8nLY6uwwuQMTEZmweUV+C1fQnh72Pin3uJ1b6bnfTvLjl2ctwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw58MDiZysqESQ2ezLGHJUWbV0RMB8GA1UdIwQY MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRZdN6Wu 4JS6hc8EZ/avwu+Qbde0weCBfDbj4SxvQmW/iaLNf9v6DMkYLcxpvMiw/HETnIEJ q6uXi5/64KTPJXf/cvdTV4ejJTpNbBgoicNwVImN3ZWsej9nEE/6e+5ANCXjCuBq wNfNuiSwlAAn6Wy6aBBrv82rsAWnlie6DJlet1WP3+7jfW/rIqRZxv7xMWV+lt0f gvTxu2SgNYCSXqtidGxet1sUF/XyAdcmxfkLCAye6Zbo4IvScN9/046taDUV5Qap gdxO+2eByE7mVjn/OeaLT9wf5P7f/4miXYYkO6o/Lv/jvI/rQNWzbCLQmDvN6sjr utySNw1yY2q7aA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:25:12 2025 by rpki-client