This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json) Hash identifier: pWo3FrUiGLwVr72ODVr5BPFTo9+x4+sQ9eWRfbwGg8I= Subject key identifier: 35:09:40:DF:A3:5A:2E:3F:F4:F7:AD:E1:FA:B4:81:86:C3:38:E5:D0 Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Certificate serial: 019B10144DF778709A994F7FF82496E91199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft Manifest number: 0B1B Signing time: Fri 12 Dec 2025 01:02:04 +0000 Manifest this update: Fri 12 Dec 2025 01:02:04 +0000 Manifest next update: Sat 13 Dec 2025 01:02:04 +0000 Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: itqDRP+k+9TqQD8fZhoR5ZN2h/5ZKFXHC9ibqH3dH2w=) 2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:4d:f7:78:70:9a:99:4f:7f:f8:24:96:e9:11:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Validity Not Before: Dec 12 01:02:04 2025 GMT Not After : Dec 13 01:02:04 2025 GMT Subject: CN=350940dfa35a2e3ff4f7ade1fab48186c338e5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:fd:8a:45:b7:ff:2c:61:c7:76:94:39:4b: 1d:1a:64:4c:6f:61:c6:17:3a:d0:41:58:bb:69:aa: 4b:34:d9:c2:84:61:b4:22:b0:65:26:a0:54:0e:12: d0:6f:cd:08:79:3e:7c:ed:f5:56:d0:e3:e7:ce:b4: 69:d3:17:db:71:00:df:42:f9:c5:02:05:0c:62:88: b7:b9:72:24:b6:d2:55:21:73:61:a3:33:10:87:42: 2d:b6:eb:e3:77:17:4a:86:dd:92:35:90:1f:34:5a: 41:01:88:a3:1b:ea:03:2e:2d:65:d4:5c:82:18:24: d2:ed:7e:89:ca:a4:22:1b:8a:6d:f3:d1:44:01:d8: 8f:39:c8:f0:26:1a:01:8d:16:7c:20:fa:88:03:2e: d0:fe:01:dd:e5:07:76:10:6d:90:b6:f1:71:05:08: e8:79:57:93:94:4f:59:b1:a2:3e:e9:72:55:74:62: dc:62:91:e0:66:6a:4a:c9:f2:86:7d:63:17:c7:37: 51:57:88:1a:c7:f0:06:14:e5:a1:98:4a:da:ee:c3: dc:fb:63:9c:eb:4b:8e:82:cf:ad:15:67:76:23:b2: 09:05:8c:44:ae:c9:5a:38:f3:95:19:5e:c3:9c:e1: f1:35:0d:f0:e2:a6:d5:c4:25:18:d8:1c:ee:b8:8c: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:09:40:DF:A3:5A:2E:3F:F4:F7:AD:E1:FA:B4:81:86:C3:38:E5:D0 X509v3 Authority Key Identifier: keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:9c:20:8f:78:f0:c5:4d:0c:99:ca:86:7d:b9:a8:7b:82: 2a:fe:35:5d:c6:13:0e:19:d4:a4:43:b4:6d:94:9b:91:c3:aa: cf:81:f8:b5:7d:8f:e4:a5:22:b5:26:cf:2e:c9:b1:79:ee:90: 79:5d:6a:a0:3e:a8:f5:80:4b:23:2d:2e:72:4a:1f:8b:49:17: 03:a2:54:bb:e3:40:ae:58:00:9e:2b:11:05:ec:71:10:8d:75: f5:4a:ad:2e:2b:16:b6:92:92:b6:e8:9a:f5:82:cc:ae:10:8d: 29:75:2f:0a:99:f0:b6:a4:f1:83:2f:0e:14:b7:f6:b2:0b:5b: 7f:42:34:22:6e:c7:13:52:df:e5:04:5b:f7:56:ca:54:4c:96: 19:fc:6b:c8:7e:33:ca:02:d4:16:e9:bc:4a:1a:eb:be:83:d3: fa:b9:47:3c:0d:97:27:b3:a9:cf:db:c7:73:6e:de:20:43:be: 12:51:f2:6c:b3:e0:19:15:1c:ff:6d:da:b0:1f:93:a9:8f:dc: 41:7b:e6:69:2a:85:eb:3f:f4:71:72:80:05:50:e0:ab:8e:a9: 28:1f:50:66:c7:18:5b:71:11:ac:f2:82:89:6e:e2:d2:d9:bc: 9a:51:00:52:00:78:fa:3c:f0:81:d4:15:ac:5d:a9:a3:58:a2: 1f:66:42:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFE33eHCamU9/+CSW6RGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi NWNhNzkwHhcNMjUxMjEyMDEwMjA0WhcNMjUxMjEzMDEwMjA0WjAzMTEwLwYDVQQD EygzNTA5NDBkZmEzNWEyZTNmZjRmN2FkZTFmYWI0ODE4NmMzMzhlNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyX9ikW3/yxhx3aUOUsdGmRMb2HG FzrQQVi7aapLNNnChGG0IrBlJqBUDhLQb80IeT587fVW0OPnzrRp0xfbcQDfQvnF AgUMYoi3uXIkttJVIXNhozMQh0IttuvjdxdKht2SNZAfNFpBAYijG+oDLi1l1FyC GCTS7X6JyqQiG4pt89FEAdiPOcjwJhoBjRZ8IPqIAy7Q/gHd5Qd2EG2QtvFxBQjo eVeTlE9ZsaI+6XJVdGLcYpHgZmpKyfKGfWMXxzdRV4gax/AGFOWhmEra7sPc+2Oc 60uOgs+tFWd2I7IJBYxErslaOPOVGV7DnOHxNQ3w4qbVxCUY2BzuuIz/JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUJQN+jWi4/9Pet4fq0gYbDOOXQMB8GA1UdIwQY MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwqcII94 8MVNDJnKhn25qHuCKv41XcYTDhnUpEO0bZSbkcOqz4H4tX2P5KUitSbPLsmxee6Q eV1qoD6o9YBLIy0uckofi0kXA6JUu+NArlgAnisRBexxEI119UqtLisWtpKStuia 9YLMrhCNKXUvCpnwtqTxgy8OFLf2sgtbf0I0Im7HE1Lf5QRb91bKVEyWGfxryH4z ygLUFum8ShrrvoPT+rlHPA2XJ7Opz9vHc27eIEO+ElHybLPgGRUc/23asB+TqY/c QXvmaSqF6z/0cXKABVDgq46pKB9QZscYW3ERrPKCiW7i0tm8mlEAUgB4+jzwgdQV rF2po1iiH2ZCPg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:34 2025 by rpki-client