This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json) Hash identifier: jqpID6ViGQbOxSL7BXQmbOECqt3fPJLc5bwdviCkkh4= Subject key identifier: E5:C3:86:F9:61:24:75:C4:80:EB:3F:4A:62:2E:F1:EF:B7:9C:DC:B9 Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf Certificate serial: 019B39467FF14F7D183E6C40E1E8033CFA2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft Manifest number: 1402 Signing time: Sat 20 Dec 2025 01:01:19 +0000 Manifest this update: Sat 20 Dec 2025 01:01:19 +0000 Manifest next update: Sun 21 Dec 2025 01:01:19 +0000 Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: 7mGhED1GJLYIrTlrwq1PQiTBjglEajOU17aw6bOjXiA=) 2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:7f:f1:4f:7d:18:3e:6c:40:e1:e8:03:3c:fa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf Validity Not Before: Dec 20 01:01:19 2025 GMT Not After : Dec 21 01:01:19 2025 GMT Subject: CN=e5c386f9612475c480eb3f4a622ef1efb79cdcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:7a:05:97:f2:17:9c:31:60:e8:d4:50:bb: d5:9d:5d:e0:a7:85:47:2d:c3:1a:3a:12:d2:40:b2: 26:de:c8:26:5b:00:d2:97:40:32:01:ad:38:17:ef: 0c:11:48:c6:0f:3e:73:01:f4:c6:3e:88:05:c5:69: 89:db:2b:05:7e:cf:83:0d:f0:86:8e:f1:2c:ce:1a: 16:19:8a:c4:7c:98:75:fc:96:a0:4b:b8:17:22:89: b5:52:14:10:b0:03:24:36:e7:4f:6b:db:f6:04:26: 95:ba:f7:3d:4e:7d:97:e5:c7:17:9a:56:11:8a:39: bc:ad:39:da:b6:56:a5:d3:1a:4b:c0:be:6f:e4:f6: 88:9a:cb:1d:ab:0f:39:56:a0:db:6f:84:1f:1f:c8: f9:68:14:a5:2b:22:2f:c4:27:7c:c9:d8:5e:5f:14: 8a:7c:8c:95:c9:1a:d9:3e:ac:d2:fb:f9:ce:fb:be: 53:72:a8:3c:c9:a8:1b:e7:7a:78:21:56:19:1c:a6: 43:5c:4e:82:5e:49:c0:53:48:58:7a:79:03:ef:4c: d8:1f:27:aa:bf:ef:ab:98:3f:3f:e2:0b:79:35:32: af:0b:e0:bc:77:35:c9:42:58:3b:7e:23:e8:99:3e: 26:43:a7:95:62:08:dd:1c:fa:50:b3:32:a8:3b:f2: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:86:F9:61:24:75:C4:80:EB:3F:4A:62:2E:F1:EF:B7:9C:DC:B9 X509v3 Authority Key Identifier: keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:60:73:90:3b:f1:83:e9:e6:ca:77:e4:b0:d1:a2:a3:48:d1: b4:51:0a:33:29:29:ef:91:bd:41:aa:90:13:0d:68:df:6e:52: 43:de:e0:92:4b:4c:24:1a:ba:dc:7e:f1:ee:ba:22:c9:30:00: e5:dd:aa:02:0b:1b:bb:e6:55:d3:b9:72:51:ee:4c:97:5f:a8: d9:99:31:30:6f:fc:4c:be:b6:b4:90:0e:7d:3e:71:37:6d:b0: bb:c3:2f:9d:89:17:fd:4f:8c:dd:5d:48:27:4b:c6:d8:bf:01: 8e:ce:a0:0f:e8:5b:7f:b2:f4:43:be:89:29:25:7a:d8:d4:56: 0a:48:4d:a6:ca:6b:cb:87:16:36:74:9c:32:9f:a0:aa:cd:ff: 7f:50:1a:c1:35:e1:18:27:70:91:30:b8:7e:08:8d:63:1f:8f: b1:65:1b:72:54:32:17:e8:8a:30:d3:c5:2e:2d:b4:3c:db:84: ec:0f:ee:f8:d4:c7:05:e7:ba:5d:e7:85:20:c5:a1:0c:4d:a4: e3:16:db:7b:83:85:d3:1b:c4:8c:40:9b:49:81:5f:28:b0:50: d4:8a:06:71:e5:20:a1:08:04:0e:e5:e5:ef:49:cf:da:aa:15: f4:1a:dc:0b:fd:6d:44:3b:09:1b:55:bb:a7:ea:c9:35:1c:b4: e8:50:f1:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rn/xT30YPmxA4egDPPotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz ZGY4YmYwHhcNMjUxMjIwMDEwMTE5WhcNMjUxMjIxMDEwMTE5WjAzMTEwLwYDVQQD EyhlNWMzODZmOTYxMjQ3NWM0ODBlYjNmNGE2MjJlZjFlZmI3OWNkY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDF6BZfyF5wxYOjUULvVnV3gp4VH LcMaOhLSQLIm3sgmWwDSl0AyAa04F+8MEUjGDz5zAfTGPogFxWmJ2ysFfs+DDfCG jvEszhoWGYrEfJh1/JagS7gXIom1UhQQsAMkNudPa9v2BCaVuvc9Tn2X5ccXmlYR ijm8rTnatlal0xpLwL5v5PaImssdqw85VqDbb4QfH8j5aBSlKyIvxCd8ydheXxSK fIyVyRrZPqzS+/nO+75Tcqg8yagb53p4IVYZHKZDXE6CXknAU0hYenkD70zYHyeq v++rmD8/4gt5NTKvC+C8dzXJQlg7fiPomT4mQ6eVYgjdHPpQszKoO/KN+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXDhvlhJHXEgOs/SmIu8e+3nNy5MB8GA1UdIwQY MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3 LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWBzkDvx g+nmynfksNGio0jRtFEKMykp75G9QaqQEw1o325SQ97gkktMJBq63H7x7roiyTAA 5d2qAgsbu+ZV07lyUe5Ml1+o2ZkxMG/8TL62tJAOfT5xN22wu8MvnYkX/U+M3V1I J0vG2L8Bjs6gD+hbf7L0Q76JKSV62NRWCkhNpspry4cWNnScMp+gqs3/f1AawTXh GCdwkTC4fgiNYx+PsWUbclQyF+iKMNPFLi20PNuE7A/u+NTHBee6XeeFIMWhDE2k 4xbbe4OF0xvEjECbSYFfKLBQ1IoGceUgoQgEDuXl70nP2qoV9BrcC/1tRDsJG1W7 p+rJNRy06FDxNA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:01:04 2025 by rpki-client