This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json) Hash identifier: v0065zLCk1GrDHKF1WFIjAeGPZxObjnIwQme4QYg9L8= Subject key identifier: B9:37:CD:96:34:E8:5F:16:F7:AE:D1:72:0B:97:A5:CB:F8:E9:8C:89 Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Certificate serial: 019AAC14E8B4B475A384433AF2F21F4ECEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft Manifest number: 108D Signing time: Sat 22 Nov 2025 15:00:42 +0000 Manifest this update: Sat 22 Nov 2025 15:00:42 +0000 Manifest next update: Sun 23 Nov 2025 15:00:42 +0000 Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: o8nuH8L+gdq4pJEdy9245ODc/Y5bFjM7PyIpg1C7nlM=) 2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=) 3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:e8:b4:b4:75:a3:84:43:3a:f2:f2:1f:4e:ce:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1 Validity Not Before: Nov 22 15:00:42 2025 GMT Not After : Nov 23 15:00:42 2025 GMT Subject: CN=b937cd9634e85f16f7aed1720b97a5cbf8e98c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:49:09:3a:48:35:0e:47:5e:54:dd:b1:88: 9a:64:e5:e0:58:96:1b:ef:d0:d1:d6:c8:58:ca:8f: b2:38:9e:95:58:d8:58:26:47:ed:bf:4d:d6:21:d9: bd:d0:5e:46:6d:b7:c7:77:1b:e1:8a:7d:ec:aa:dd: 11:11:ae:57:f3:be:08:a6:97:33:a7:f0:82:5a:b6: 2e:24:ef:be:f9:a3:60:e4:53:3f:c0:20:27:83:9a: 52:10:07:8d:78:e5:fb:c0:e1:a3:78:ed:69:8d:0c: 10:3a:79:13:04:4a:03:df:54:2f:7a:9f:34:5b:ea: de:50:27:ae:1d:b2:86:f8:a7:18:41:81:d6:5e:e8: cf:68:f7:08:4c:1b:75:64:ca:9b:c6:61:e1:1c:3e: 92:fe:6b:90:e0:50:93:d4:96:11:d1:02:0c:8b:44: ed:dd:c0:29:e6:80:7e:13:35:67:93:ce:31:49:10: 4a:e9:a3:ec:00:e9:d9:3c:dc:70:e8:33:a8:23:48: 18:58:f3:a0:f0:eb:6f:ba:5e:e1:e8:ad:2a:ed:1a: 9c:e0:13:9e:87:0a:f7:df:95:fa:d3:af:2a:b8:40: 64:9a:e9:96:43:dd:28:08:0a:83:b6:17:77:51:45: b6:7d:1c:07:7a:ad:0e:07:4b:20:c1:6b:3b:f7:e5: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:37:CD:96:34:E8:5F:16:F7:AE:D1:72:0B:97:A5:CB:F8:E9:8C:89 X509v3 Authority Key Identifier: keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:25:d7:57:26:18:92:ab:4f:be:65:13:c2:2a:25:57:5d:f5: 25:1f:68:cd:48:d1:5d:16:98:22:77:1f:5e:e4:66:e9:ad:a8: ef:3a:90:be:6e:50:ea:5b:04:10:d4:d7:17:53:1a:4b:25:c3: 09:83:21:1d:f8:49:24:8e:f7:c2:ff:43:b1:32:7b:f4:58:aa: f8:8c:3e:ec:1a:63:64:c2:3f:29:b7:cd:e3:e2:fb:94:32:14: b5:4f:52:f4:37:d1:d7:26:21:78:0f:fb:07:b8:ee:0e:4b:8a: 67:b0:2c:cd:4e:ed:6a:70:1b:26:40:45:c9:be:76:b6:e6:a7: fa:77:b8:d9:b5:66:a8:b5:f7:70:42:6d:4f:14:06:68:ba:2d: 88:82:42:d2:b7:ec:43:11:da:83:ab:73:5f:a9:be:93:a0:94: b4:28:39:41:6c:bc:3e:36:f7:2d:a5:84:57:7c:04:b4:38:12: 87:2d:15:11:54:54:e2:a8:f2:04:99:f7:21:54:31:19:b3:b1: 7e:fe:a2:56:04:ac:45:b9:a4:06:3d:af:7c:1f:56:27:88:06: 84:03:1d:b0:93:df:bf:22:4f:e5:45:a1:82:98:c9:08:f2:71: 07:93:05:e4:a3:e9:9b:ad:e8:93:f2:95:dc:9b:e6:17:bb:ed: 57:2f:89:ba -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZqsFOi0tHWjhEM68vIfTs7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2 ODdiZDEwHhcNMjUxMTIyMTUwMDQyWhcNMjUxMTIzMTUwMDQyWjAzMTEwLwYDVQQD EyhiOTM3Y2Q5NjM0ZTg1ZjE2ZjdhZWQxNzIwYjk3YTVjYmY4ZTk4Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7dJCTpINQ5HXlTdsYiaZOXgWJYb 79DR1shYyo+yOJ6VWNhYJkftv03WIdm90F5GbbfHdxvhin3sqt0REa5X874Ippcz p/CCWrYuJO+++aNg5FM/wCAng5pSEAeNeOX7wOGjeO1pjQwQOnkTBEoD31Qvep80 W+reUCeuHbKG+KcYQYHWXujPaPcITBt1ZMqbxmHhHD6S/muQ4FCT1JYR0QIMi0Tt 3cAp5oB+EzVnk84xSRBK6aPsAOnZPNxw6DOoI0gYWPOg8Otvul7h6K0q7Rqc4BOe hwr335X6068quEBkmumWQ90oCAqDthd3UUW2fRwHeq0OB0sgwWs79+XJbwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLk3zZY06F8W967RcguXpcv46YyJMB8GA1UdIwQY MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSXX VyYYkqtPvmUTwiolV131JR9ozUjRXRaYIncfXuRm6a2o7zqQvm5Q6lsEENTXF1Ma SyXDCYMhHfhJJI73wv9DsTJ79Fiq+Iw+7BpjZMI/KbfN4+L7lDIUtU9S9DfR1yYh eA/7B7juDkuKZ7AszU7tanAbJkBFyb52tuan+ne42bVmqLX3cEJtTxQGaLotiIJC 0rfsQxHag6tzX6m+k6CUtCg5QWy8Pjb3LaWEV3wEtDgShy0VEVRU4qjyBJn3IVQx GbOxfv6iVgSsRbmkBj2vfB9WJ4gGhAMdsJPfvyJP5UWhgpjJCPJxB5MF5KPpm63o k/KV3JvmF7vtVy+Jug== -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:22 2025 by rpki-client