This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json) Hash identifier: 8I3GvXFqz8gMwWxJc6BpURJgadB/flO0ycQ3GYHd/AI= Subject key identifier: 44:27:4B:49:32:A3:7E:62:54:4C:D1:A7:12:34:14:1E:A6:95:58:6B Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65 Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65 Certificate serial: 019B3A908E7702BA7001A80F12502296313E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 07:01:50 +0000 Manifest this update: Sat 20 Dec 2025 07:01:50 +0000 Manifest next update: Sun 21 Dec 2025 07:01:50 +0000 Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: 9NN9RDyIqhFdBxn8A5G2/tAC6w8y6l14Y6qAkuYVQFw=) 2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:8e:77:02:ba:70:01:a8:0f:12:50:22:96:31:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f915588ef805468928c63dab08630085e5d08f65 Validity Not Before: Dec 20 07:01:50 2025 GMT Not After : Dec 21 07:01:50 2025 GMT Subject: CN=44274b4932a37e62544cd1a71234141ea695586b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:32:6c:a5:fa:36:f7:6a:06:09:71:3a:6f: ce:ce:3c:20:06:4a:45:4e:f7:df:71:a5:9a:bb:c5: 64:20:fb:91:4d:45:32:93:a5:74:85:8c:05:f5:3a: f8:84:04:c3:f5:df:4b:ba:fe:4d:2a:28:89:2b:ba: d6:7b:1b:8e:43:39:56:c3:7e:19:7e:81:d8:fc:b4: 86:3e:05:09:38:53:e0:07:c5:54:a6:39:e0:ae:5b: b1:f5:6b:28:80:2f:31:b7:8f:27:77:39:46:40:97: 50:9e:26:23:35:84:73:ce:00:c6:77:1a:57:80:dc: 6f:ef:a8:aa:ef:e3:2c:27:5c:ba:f7:5a:30:94:07: fc:5d:bf:10:96:97:28:c6:08:13:51:1c:34:b3:91: 42:82:70:c3:56:fd:98:2f:9f:37:71:b4:28:e8:4b: f5:b0:b6:f3:0d:ab:e3:f4:33:98:49:39:7e:46:d6: 64:ea:43:df:31:34:82:30:9b:18:0d:52:f3:0c:66: f1:c6:14:d0:f8:0a:22:17:b0:00:1f:31:62:5f:30: 4c:10:16:63:50:8f:f7:31:ea:90:91:8b:3f:ab:d7: d2:92:93:c1:25:f2:4e:27:73:ff:d8:42:8e:48:b3: aa:ab:81:9f:2d:c4:3c:f2:b2:8c:7b:88:30:75:0a: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:27:4B:49:32:A3:7E:62:54:4C:D1:A7:12:34:14:1E:A6:95:58:6B X509v3 Authority Key Identifier: keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bd:71:a9:f8:0e:00:7b:6e:36:76:d6:46:39:22:d5:14:9e: d1:09:60:74:46:db:77:ef:e5:f7:59:e9:48:d7:99:7f:34:f2: 4b:00:a8:10:f4:9f:56:4d:a9:a5:94:2a:5e:93:65:df:6c:af: 28:1d:21:ab:4a:e3:62:80:38:14:5f:6b:79:86:33:fc:2f:6e: db:71:86:ab:3c:61:9d:84:a8:93:fc:65:2d:a7:52:e1:e1:b6: 53:58:ed:11:7b:46:70:a7:e1:f3:c0:06:64:05:0e:44:c9:a3: ab:ca:75:26:a4:d4:ec:f1:ac:cd:65:3d:35:3f:9e:72:ca:4f: 67:62:68:9b:84:6b:08:68:c8:54:48:94:e7:7b:3d:dd:bd:77: a8:4f:8e:7e:ba:06:16:a3:71:fe:6b:10:bd:16:e8:71:0c:a5: a1:c5:9b:35:68:d3:37:c4:0b:78:ff:3e:e1:54:c5:29:08:38: 2a:75:ad:3e:53:34:3c:92:e4:66:65:3c:1b:32:f1:dc:4f:8b: 98:20:27:77:96:da:e8:6a:6d:f9:58:63:c4:a6:46:40:b4:9d: 53:43:c9:fd:72:33:c3:3f:12:a1:84:27:57:ac:17:94:45:0d: 4c:40:e5:48:2c:80:8b:a2:d1:0a:5f:08:1d:61:1d:83:08:f5: 8b:74:85:4d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6kI53ArpwAagPElAiljE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk MDhmNjUwHhcNMjUxMjIwMDcwMTUwWhcNMjUxMjIxMDcwMTUwWjAzMTEwLwYDVQQD Eyg0NDI3NGI0OTMyYTM3ZTYyNTQ0Y2QxYTcxMjM0MTQxZWE2OTU1ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HEybKX6NvdqBglxOm/OzjwgBkpF TvffcaWau8VkIPuRTUUyk6V0hYwF9Tr4hATD9d9Luv5NKiiJK7rWexuOQzlWw34Z foHY/LSGPgUJOFPgB8VUpjngrlux9WsogC8xt48ndzlGQJdQniYjNYRzzgDGdxpX gNxv76iq7+MsJ1y691owlAf8Xb8QlpcoxggTURw0s5FCgnDDVv2YL583cbQo6Ev1 sLbzDavj9DOYSTl+RtZk6kPfMTSCMJsYDVLzDGbxxhTQ+AoiF7AAHzFiXzBMEBZj UI/3MeqQkYs/q9fSkpPBJfJOJ3P/2EKOSLOqq4GfLcQ88rKMe4gwdQp1ywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEQnS0kyo35iVEzRpxI0FB6mlVhrMB8GA1UdIwQY MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx LWJjODI3N2U3NWUwYy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0LzdiOTIyNC1hYmYxLTRjYTMtYjAwMS1iYzgyNzdlNzVl MGMvMS8xLVJWWWp2Z0ZSb2tveGoyckNHTUFoZVhRajJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL1x qfgOAHtuNnbWRjki1RSe0QlgdEbbd+/l91npSNeZfzTySwCoEPSfVk2ppZQqXpNl 32yvKB0hq0rjYoA4FF9reYYz/C9u23GGqzxhnYSok/xlLadS4eG2U1jtEXtGcKfh 88AGZAUORMmjq8p1JqTU7PGszWU9NT+ecspPZ2Jom4RrCGjIVEiU53s93b13qE+O froGFqNx/msQvRbocQylocWbNWjTN8QLeP8+4VTFKQg4KnWtPlM0PJLkZmU8GzLx 3E+LmCAnd5ba6Gpt+VhjxKZGQLSdU0PJ/XIzwz8SoYQnV6wXlEUNTEDlSCyAi6LR Cl8IHWEdgwj1i3SFTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:39:35 2025 by rpki-client