This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json) Hash identifier: 3T0z7ShltDrZ3GksvksAld1nwBOkCeSFAlGjUHzYQHQ= Subject key identifier: 7A:39:25:0B:03:40:12:ED:32:97:BC:FB:A5:87:37:F5:D3:6A:DE:72 Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4 Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4 Certificate serial: 019B36B498FA09E69F3F04005897377FF178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 13:02:43 +0000 Manifest this update: Fri 19 Dec 2025 13:02:43 +0000 Manifest next update: Sat 20 Dec 2025 13:02:43 +0000 Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: ZxiEOKnfENp0O9C8lpezHJlxi4eNVQ5p7o4zlaOmfZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:98:fa:09:e6:9f:3f:04:00:58:97:37:7f:f1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4 Validity Not Before: Dec 19 13:02:43 2025 GMT Not After : Dec 20 13:02:43 2025 GMT Subject: CN=7a39250b034012ed3297bcfba58737f5d36ade72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:86:27:24:7b:0d:80:25:6b:ec:a3:85:ec: 78:2f:71:1f:c6:81:ab:d5:0b:c5:fb:06:7c:c4:b9: f7:c0:44:78:b9:9d:e4:7f:4c:4e:99:8f:65:da:9b: 8f:1a:fc:9a:1c:16:a4:fb:6f:a4:07:7f:c1:bf:b9: fd:08:5e:ae:72:38:c7:b8:b8:c9:3d:98:cc:97:91: 99:78:ad:fb:af:12:2d:89:fd:eb:c5:7c:6e:d7:19: 4e:58:07:a7:f4:a0:c0:ad:1e:66:ad:18:f4:eb:81: 21:d1:b7:0a:24:ed:82:ba:95:16:88:90:54:1b:96: 50:65:c8:49:b8:24:34:36:e0:4b:32:c7:93:25:17: cb:8b:6f:56:49:89:00:b8:c1:6b:f3:4b:56:b7:b5: 03:97:b0:68:8d:94:4f:2b:25:3f:d8:bd:89:0b:7a: dd:d4:78:b0:8c:64:b3:07:ca:97:f7:42:b9:d4:6e: af:66:18:99:95:8a:3e:0a:00:dc:9b:aa:e1:88:22: f0:7c:6e:b9:f3:72:ea:61:7c:65:76:c0:a7:0a:7a: 9e:c3:ca:ab:d2:3f:82:fe:1b:90:05:a8:94:be:84: c1:46:df:10:b9:bc:be:98:c6:db:99:cc:2f:31:bc: 02:74:c4:b5:8c:66:4f:8e:18:5f:7a:e6:85:7a:c1: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:39:25:0B:03:40:12:ED:32:97:BC:FB:A5:87:37:F5:D3:6A:DE:72 X509v3 Authority Key Identifier: keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9e:0b:ac:b3:5b:1f:1a:4e:f9:af:0f:3d:53:07:94:f4:db: b8:aa:a9:48:a1:35:b9:b6:fc:f8:86:ef:fb:27:89:56:d9:75: f6:c7:bb:65:0d:db:2d:ed:42:a7:e5:89:2b:07:6a:4d:90:96: ca:42:f3:70:ad:87:f2:49:e6:bf:10:53:e7:cd:2f:84:1e:dc: 70:44:6d:bb:f4:ef:77:c0:6e:44:52:df:e4:f2:7c:0f:af:6b: 0d:95:90:1a:38:ea:46:ce:34:ba:33:79:73:20:1f:26:db:8f: 14:56:09:41:6a:23:0e:0d:bc:6a:f3:07:22:7c:54:d8:69:0f: 52:55:77:64:fe:bb:1e:74:9e:90:6c:dc:53:da:c7:bc:b6:38: 15:4c:d2:ad:c8:ca:10:d0:21:43:b0:f1:c5:d4:a0:e7:0d:22: d0:ed:e8:d3:52:fc:bf:11:4d:45:9a:13:4c:2f:ed:51:57:6a: 69:62:d7:85:9d:59:ad:1f:43:76:7b:18:0e:9c:af:6c:09:4f: 51:8b:34:0d:cd:56:04:01:7d:3c:2a:91:c7:d2:3e:11:ba:34: 33:c3:c2:1c:1a:4f:b7:90:9c:9f:74:95:2e:e1:08:93:0f:77: a6:f1:be:70:e6:af:6c:8a:e4:32:4a:e1:2c:af:b0:84:0f:28: d7:3a:ff:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs2tJj6CeafPwQAWJc3f/F4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx Nzk4YzQwHhcNMjUxMjE5MTMwMjQzWhcNMjUxMjIwMTMwMjQzWjAzMTEwLwYDVQQD Eyg3YTM5MjUwYjAzNDAxMmVkMzI5N2JjZmJhNTg3MzdmNWQzNmFkZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O6GJyR7DYAla+yjhex4L3EfxoGr 1QvF+wZ8xLn3wER4uZ3kf0xOmY9l2puPGvyaHBak+2+kB3/Bv7n9CF6ucjjHuLjJ PZjMl5GZeK37rxItif3rxXxu1xlOWAen9KDArR5mrRj064Eh0bcKJO2CupUWiJBU G5ZQZchJuCQ0NuBLMseTJRfLi29WSYkAuMFr80tWt7UDl7BojZRPKyU/2L2JC3rd 1HiwjGSzB8qX90K51G6vZhiZlYo+CgDcm6rhiCLwfG6583LqYXxldsCnCnqew8qr 0j+C/huQBaiUvoTBRt8Quby+mMbbmcwvMbwCdMS1jGZPjhhfeuaFesGGOwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHo5JQsDQBLtMpe8+6WHN/XTat5yMB8GA1UdIwQY MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP54L rLNbHxpO+a8PPVMHlPTbuKqpSKE1ubb8+Ibv+yeJVtl19se7ZQ3bLe1Cp+WJKwdq TZCWykLzcK2H8knmvxBT580vhB7ccERtu/Tvd8BuRFLf5PJ8D69rDZWQGjjqRs40 ujN5cyAfJtuPFFYJQWojDg28avMHInxU2GkPUlV3ZP67HnSekGzcU9rHvLY4FUzS rcjKENAhQ7DxxdSg5w0i0O3o01L8vxFNRZoTTC/tUVdqaWLXhZ1ZrR9DdnsYDpyv bAlPUYs0Dc1WBAF9PCqRx9I+Ebo0M8PCHBpPt5Ccn3SVLuEIkw93pvG+cOavbIrk MkrhLK+whA8o1zr/3A== -----END CERTIFICATE-----Generated at Fri Dec 19 20:32:51 2025 by rpki-client