This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json) Hash identifier: fX8WUBcoWOG30dTaAyKXPGRy2UW2w3oPaG/awY0VHiY= Subject key identifier: EB:1D:B5:7F:E3:1E:C0:96:2E:84:EA:28:FD:EF:E0:D2:28:71:31:D4 Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Certificate serial: 019B4393346FC3879A0690CABD15E9666F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 01:01:19 +0000 Manifest this update: Mon 22 Dec 2025 01:01:19 +0000 Manifest next update: Tue 23 Dec 2025 01:01:19 +0000 Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: uKsXHKdzBDpYcUoPYxuvqwQAzeehNW3qHBBJCcaud00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:34:6f:c3:87:9a:06:90:ca:bd:15:e9:66:6f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974 Validity Not Before: Dec 22 01:01:19 2025 GMT Not After : Dec 23 01:01:19 2025 GMT Subject: CN=eb1db57fe31ec0962e84ea28fdefe0d2287131d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:da:2d:6c:bd:80:da:06:a6:22:4a:dd:21: f6:b5:ca:e1:85:c0:2f:90:16:1c:69:d3:a1:7d:b3: 65:d6:a1:0c:f4:3f:28:62:5c:81:d9:b6:25:c7:c4: 9c:6b:32:fe:64:6b:4b:d8:18:61:da:e5:a9:23:78: 3d:ab:23:0b:70:d1:da:7c:78:64:55:b7:34:6f:37: d4:2f:ca:a0:73:1e:b5:76:57:af:34:68:d4:7c:29: 3d:fb:9b:0f:a0:1b:ef:cb:c7:5d:7c:34:53:a3:ac: 2e:ac:0a:b5:e1:f5:d8:3c:b9:96:11:9b:86:f7:ce: c4:23:da:2b:cc:73:06:4c:8c:98:a0:b6:29:1a:d6: f8:5b:15:68:18:9b:ea:c6:53:4c:45:74:6e:22:92: dd:5e:25:93:4a:02:25:d6:c8:2b:9d:85:7b:4d:d0: 59:13:27:ef:ed:23:07:84:3c:48:7a:f0:24:e7:02: 03:a0:a6:20:82:fb:ad:a0:87:e2:4f:fb:e9:1a:40: 43:9d:5a:38:da:58:a2:ed:83:43:f5:cb:35:16:52: 3d:76:af:64:2f:43:db:c2:2c:d9:c4:d9:c5:04:c6: 8b:05:27:0f:70:c5:33:a2:f0:32:13:ce:9c:ed:bb: b3:64:89:b3:fe:66:08:9b:ea:ec:58:65:9b:d9:aa: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1D:B5:7F:E3:1E:C0:96:2E:84:EA:28:FD:EF:E0:D2:28:71:31:D4 X509v3 Authority Key Identifier: keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:5d:af:53:b0:ee:b6:50:25:6d:c8:56:6c:6e:bc:5c:14: 74:6a:b0:8d:5f:d2:18:a2:5f:b5:6a:ff:64:21:43:f9:9d:86: 50:a8:8c:7a:a9:8e:ad:9b:9b:f8:c9:cc:f1:62:a8:2b:22:d8: 16:3a:c6:9f:6e:2c:b2:85:56:ef:d6:0f:b0:79:80:ac:2a:90: 37:88:27:46:ef:a4:2b:41:f6:7c:4b:c4:bf:17:25:a6:b5:a6: d8:55:b3:64:6d:51:9a:b8:47:46:d6:01:3d:7d:74:fc:f5:3d: 00:fa:a5:91:83:72:75:4d:d5:1d:16:74:74:88:3f:01:9f:25: ec:7d:4b:0d:a2:7d:e4:6b:f6:dd:53:14:b7:b5:ed:3e:33:b2: 07:70:a2:c7:eb:b4:b2:e9:4d:10:6b:bf:29:cb:00:c4:29:9e: f3:2b:34:19:3a:92:8c:61:a9:17:ad:2c:77:d2:42:9a:8d:e6: 99:c3:68:f2:73:71:ef:52:5a:cf:f4:e9:6c:37:b8:ed:0f:52: e5:5d:08:0a:90:af:a3:42:bd:35:7b:02:51:a2:bd:a0:3a:75: e9:12:c4:cd:8c:7c:e3:c8:a7:ca:0d:06:9e:68:d3:57:fc:70: 20:12:13:fa:4d:e1:05:18:34:ef:fc:52:da:54:70:17:a4:d9: 24:10:16:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzRvw4eaBpDKvRXpZm+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NmZlMmMwY2ZkNzY5MTA0NGVlMzc4NDVjZmNmNTRlMWE4 NDk5NzQwHhcNMjUxMjIyMDEwMTE5WhcNMjUxMjIzMDEwMTE5WjAzMTEwLwYDVQQD EyhlYjFkYjU3ZmUzMWVjMDk2MmU4NGVhMjhmZGVmZTBkMjI4NzEzMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXfaLWy9gNoGpiJK3SH2tcrhhcAv kBYcadOhfbNl1qEM9D8oYlyB2bYlx8ScazL+ZGtL2Bhh2uWpI3g9qyMLcNHafHhk Vbc0bzfUL8qgcx61dlevNGjUfCk9+5sPoBvvy8ddfDRTo6wurAq14fXYPLmWEZuG 987EI9orzHMGTIyYoLYpGtb4WxVoGJvqxlNMRXRuIpLdXiWTSgIl1sgrnYV7TdBZ Eyfv7SMHhDxIevAk5wIDoKYggvutoIfiT/vpGkBDnVo42lii7YND9cs1FlI9dq9k L0PbwizZxNnFBMaLBScPcMUzovAyE86c7buzZImz/mYIm+rsWGWb2ao5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsdtX/jHsCWLoTqKP3v4NIocTHUMB8GA1UdIwQY MBaAFNVv4sDP12kQRO43hFz89U4ahJl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYt MDEwN2VjMzNlNWI3LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYtMDEwN2VjMzNlNWI3 LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuBdr1Ow 7rZQJW3IVmxuvFwUdGqwjV/SGKJftWr/ZCFD+Z2GUKiMeqmOrZub+MnM8WKoKyLY FjrGn24ssoVW79YPsHmArCqQN4gnRu+kK0H2fEvEvxclprWm2FWzZG1RmrhHRtYB PX10/PU9APqlkYNydU3VHRZ0dIg/AZ8l7H1LDaJ95Gv23VMUt7XtPjOyB3Cix+u0 sulNEGu/KcsAxCme8ys0GTqSjGGpF60sd9JCmo3mmcNo8nNx71Jaz/TpbDe47Q9S 5V0ICpCvo0K9NXsCUaK9oDp16RLEzYx848inyg0GnmjTV/xwIBIT+k3hBRg07/xS 2lRwF6TZJBAWDQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:41 2025 by rpki-client