This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json) Hash identifier: FP0x42GeMNfwwGq/B1xiHjtoLVhUeLpjGyBjkR2csbE= Subject key identifier: 1C:AB:74:23:73:3E:11:B8:8E:0D:34:C6:D6:4B:FB:70:AC:37:8F:62 Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2 Certificate serial: 019B0E25BD9CBF17A50F25400E219700F775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:01:52 +0000 Manifest this update: Thu 11 Dec 2025 16:01:52 +0000 Manifest next update: Fri 12 Dec 2025 16:01:52 +0000 Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: wLgDUF9f3EZ7iodVQFZYu8I2PfkIZ2cCWloe0XhSZZs=) 2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:bd:9c:bf:17:a5:0f:25:40:0e:21:97:00:f7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2 Validity Not Before: Dec 11 16:01:52 2025 GMT Not After : Dec 12 16:01:52 2025 GMT Subject: CN=1cab7423733e11b88e0d34c6d64bfb70ac378f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:a2:82:d7:51:09:0e:66:f7:91:14:69:bc: 03:07:58:c1:db:f1:b9:44:c8:6e:a5:3b:1b:cc:e8: b2:e3:8c:9f:1d:3e:6d:52:f5:23:f3:1c:17:0d:b0: 7e:7a:7c:b2:12:a0:6b:16:42:1e:75:01:57:f9:23: 3c:78:82:01:4a:48:68:08:6b:fb:5a:b9:a7:e7:ed: c7:b1:d8:b5:71:83:57:4a:ad:28:1b:93:5a:1c:05: eb:79:80:c8:95:02:96:1d:fc:97:e6:e9:2a:37:a7: 36:3e:11:9c:ab:44:ca:ca:9d:28:6c:7b:06:38:81: ef:41:4d:61:96:1a:79:d2:73:b1:35:5f:8f:70:74: fe:a7:2a:61:e8:da:6d:3d:1e:cc:8d:b1:4b:f4:3d: 02:fe:f4:19:e2:7e:49:c1:5a:14:21:27:79:2a:e1: bc:cd:7c:3d:7e:ea:42:ce:6c:c2:c7:9a:41:95:2a: f6:a9:a4:16:77:f0:e6:f7:41:3b:eb:6c:9a:68:ea: ff:49:44:23:ff:dd:ef:00:03:90:dd:7b:ce:1f:f7: 25:51:80:d5:af:0b:bb:0d:7b:23:bb:2b:35:f5:cc: e9:44:23:00:d2:16:6e:c8:c8:88:10:41:73:dc:4d: bc:79:ab:d4:23:66:ca:87:a5:92:f5:9a:99:a5:1d: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:74:23:73:3E:11:B8:8E:0D:34:C6:D6:4B:FB:70:AC:37:8F:62 X509v3 Authority Key Identifier: keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2c:53:54:7a:11:78:67:40:7c:a2:16:9a:bd:28:8a:15:4c: 14:06:bf:de:18:2c:8a:5f:e6:17:41:9c:4b:7f:13:a3:0d:0e: c9:8c:c6:d5:a5:0b:5b:1b:46:62:a1:d3:7e:34:b1:6c:13:cb: 02:a5:88:d2:66:95:c7:f1:1d:83:b8:33:1e:29:01:3d:81:3a: da:cc:36:b8:6b:36:8c:2c:f5:94:c5:e3:0b:6e:f0:4b:e5:30: b7:8f:26:0b:b6:dc:ce:3a:62:31:6c:f4:5a:3a:1b:e9:85:ce: 15:15:34:55:e6:51:60:9b:42:7e:f9:a2:8f:49:fa:c1:a5:e0: d6:73:36:73:64:92:d7:57:24:49:7e:6f:ea:d6:e4:49:9b:f6: 70:7a:26:45:55:82:6c:f7:93:5a:ee:8e:e7:3a:be:29:5f:0e: fc:a6:42:9d:81:7b:c2:25:c2:b6:80:0f:cc:d3:ac:26:8b:16: 94:82:6d:df:79:10:f6:c1:7a:17:57:dc:54:2d:eb:c9:de:79: 31:41:7a:51:97:c3:c7:39:a0:e5:e4:71:e9:57:27:42:42:96: 8d:7e:8b:a2:e1:04:e2:99:fd:26:2d:bf:35:39:e0:82:83:ab: 3e:95:ed:cc:69:6a:9f:3b:a8:8e:09:d4:68:27:09:51:58:dd: 4f:f3:26:15 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOJb2cvxelDyVADiGXAPd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZGY4MGY3YzY5MmU4NmQzY2Q2Yjc1NWQwNmNmN2NlOWMx MzdmZjIwHhcNMjUxMjExMTYwMTUyWhcNMjUxMjEyMTYwMTUyWjAzMTEwLwYDVQQD EygxY2FiNzQyMzczM2UxMWI4OGUwZDM0YzZkNjRiZmI3MGFjMzc4ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo2igtdRCQ5m95EUabwDB1jB2/G5 RMhupTsbzOiy44yfHT5tUvUj8xwXDbB+enyyEqBrFkIedQFX+SM8eIIBSkhoCGv7 Wrmn5+3Hsdi1cYNXSq0oG5NaHAXreYDIlQKWHfyX5ukqN6c2PhGcq0TKyp0obHsG OIHvQU1hlhp50nOxNV+PcHT+pyph6NptPR7MjbFL9D0C/vQZ4n5JwVoUISd5KuG8 zXw9fupCzmzCx5pBlSr2qaQWd/Dm90E762yaaOr/SUQj/93vAAOQ3XvOH/clUYDV rwu7DXsjuys19czpRCMA0hZuyMiIEEFz3E28eavUI2bKh6WS9ZqZpR0ndQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFByrdCNzPhG4jg00xtZL+3CsN49iMB8GA1UdIwQY MBaAFPnfgPfGkuhtPNa3VdBs986cE3/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1kLUE5OGFTNkcwODFyZFYwR3ozenB3VGZfSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVm LTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRWMEd6M3pwd1RmX0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU3LzY3MWVlNC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVh ZWIvMS8xLWQtQTk4YVM2RzA4MXJkVjBHejN6cHdUZl9JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCxT VHoReGdAfKIWmr0oihVMFAa/3hgsil/mF0GcS38Tow0OyYzG1aULWxtGYqHTfjSx bBPLAqWI0maVx/Edg7gzHikBPYE62sw2uGs2jCz1lMXjC27wS+Uwt48mC7bczjpi MWz0Wjob6YXOFRU0VeZRYJtCfvmij0n6waXg1nM2c2SS11ckSX5v6tbkSZv2cHom RVWCbPeTWu6O5zq+KV8O/KZCnYF7wiXCtoAPzNOsJosWlIJt33kQ9sF6F1fcVC3r yd55MUF6UZfDxzmg5eRx6VcnQkKWjX6LouEE4pn9Ji2/NTnggoOrPpXtzGlqnzuo jgnUaCcJUVjdT/MmFQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:48 2025 by rpki-client