This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json) Hash identifier: rrB0IgbVElnUwxOrHNFRXZqtuKDiqTTgSjJEMKPsoVI= Subject key identifier: 12:24:6A:89:DC:61:C1:AE:06:01:1E:DF:BB:C3:9B:2C:9F:26:C7:10 Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Certificate serial: 019B5A88B98A11BBFF97619A6676D49AD755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 12:01:08 +0000 Manifest this update: Fri 26 Dec 2025 12:01:08 +0000 Manifest next update: Sat 27 Dec 2025 12:01:08 +0000 Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: PO3dDqlRXVrvXE/14a06unYBwQ3BPPCRx2X51fx4bmY=) 2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b9:8a:11:bb:ff:97:61:9a:66:76:d4:9a:d7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332 Validity Not Before: Dec 26 12:01:08 2025 GMT Not After : Dec 27 12:01:08 2025 GMT Subject: CN=12246a89dc61c1ae06011edfbbc39b2c9f26c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:f6:3f:64:93:25:26:85:8d:51:a8:9f:f8: 19:08:8a:36:40:43:76:0b:7f:e2:c7:3d:50:f4:01: c3:41:77:80:e0:91:ea:4f:ad:70:56:82:ea:72:62: bd:68:dc:45:ba:cf:60:77:30:cd:63:43:6e:3a:04: 6a:f6:c8:7b:14:e8:96:70:2e:3a:d6:f2:27:dc:95: c7:f9:88:a5:4b:98:f3:56:88:cd:65:28:09:56:03: ef:e3:d5:b8:6c:3b:a8:9f:52:34:2a:51:53:d0:5b: 1c:97:6c:e2:0c:80:13:a4:dc:25:f2:b6:39:72:2f: ef:fe:44:56:00:a5:9a:06:39:ff:08:99:03:c3:4b: 63:74:68:d0:84:95:f6:cf:39:ad:59:e6:24:39:92: 5c:b2:68:c4:0c:1a:df:64:45:b8:1d:b9:09:1e:6a: 7d:09:06:4b:7b:d3:00:62:2d:29:17:c0:a5:e5:9e: 02:46:ab:3a:68:0a:c8:ec:71:3c:88:42:49:ce:81: 61:b7:bd:6e:67:7f:e6:ab:21:0c:f2:37:5a:c6:4d: c5:b3:24:74:86:3c:a0:37:00:83:8e:ef:ec:97:7c: 41:8e:82:3e:00:b0:7a:38:1a:ca:e5:84:42:0f:45: ae:3c:f9:82:3e:c6:1c:6e:97:47:7f:23:e0:45:73: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:24:6A:89:DC:61:C1:AE:06:01:1E:DF:BB:C3:9B:2C:9F:26:C7:10 X509v3 Authority Key Identifier: keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:82:89:94:43:a9:76:33:14:b9:85:fd:a7:40:72:07:97:a4: b7:b4:22:dd:01:bd:8e:b0:83:61:28:8b:af:66:64:a8:9e:4f: 0f:6a:bf:31:cb:7c:5e:4d:b7:38:0d:0b:5c:89:01:4a:8b:6f: ef:8e:49:f0:d2:39:fa:95:d2:e5:5b:18:e3:3b:56:02:40:55: b1:49:a9:a2:18:0f:23:31:0f:33:91:7c:bb:5e:ac:74:9e:fd: 54:75:c9:80:d5:bd:bb:fa:86:fb:c4:2f:98:0c:ec:2a:a0:78: 6e:2f:71:21:db:3b:20:d8:42:5f:d6:62:1e:fc:ca:f6:ff:e6: bd:ca:dd:11:15:44:ec:a8:e0:de:cf:95:26:c2:8b:fc:64:4b: 34:9e:29:c7:6e:0d:b0:48:13:67:5c:f4:a0:01:0a:f4:d6:9c: ab:20:0d:15:30:06:f6:59:b5:c6:2e:b0:43:fe:d6:47:34:c9: bc:36:19:32:66:88:d9:77:97:42:ca:ea:55:eb:12:be:99:5b: 84:89:8d:62:e6:f7:d3:eb:9f:a4:ce:60:bf:bc:79:93:c8:dc: ff:84:97:8a:25:74:5b:b3:c1:18:b4:b0:83:9b:18:02:35:0b: fe:a5:6b:9a:58:82:fa:d5:1f:6b:9c:31:01:8f:63:82:45:b2: 37:97:52:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaiLmKEbv/l2GaZnbUmtdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj NGMzMzIwHhcNMjUxMjI2MTIwMTA4WhcNMjUxMjI3MTIwMTA4WjAzMTEwLwYDVQQD EygxMjI0NmE4OWRjNjFjMWFlMDYwMTFlZGZiYmMzOWIyYzlmMjZjNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5r2P2STJSaFjVGon/gZCIo2QEN2 C3/ixz1Q9AHDQXeA4JHqT61wVoLqcmK9aNxFus9gdzDNY0NuOgRq9sh7FOiWcC46 1vIn3JXH+YilS5jzVojNZSgJVgPv49W4bDuon1I0KlFT0Fscl2ziDIATpNwl8rY5 ci/v/kRWAKWaBjn/CJkDw0tjdGjQhJX2zzmtWeYkOZJcsmjEDBrfZEW4HbkJHmp9 CQZLe9MAYi0pF8Cl5Z4CRqs6aArI7HE8iEJJzoFht71uZ3/mqyEM8jdaxk3FsyR0 hjygNwCDju/sl3xBjoI+ALB6OBrK5YRCD0WuPPmCPsYcbpdHfyPgRXPELQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBIkaoncYcGuBgEe37vDmyyfJscQMB8GA1UdIwQY MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0 LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY2LzMyNDQxZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgy MzMvMS8xLVg5cDdTYkM1R2g5dXJMbXhzeW9qUmZFd3pJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4KJ lEOpdjMUuYX9p0ByB5ekt7Qi3QG9jrCDYSiLr2ZkqJ5PD2q/Mct8Xk23OA0LXIkB Sotv745J8NI5+pXS5VsY4ztWAkBVsUmpohgPIzEPM5F8u16sdJ79VHXJgNW9u/qG +8QvmAzsKqB4bi9xIds7INhCX9ZiHvzK9v/mvcrdERVE7Kjg3s+VJsKL/GRLNJ4p x24NsEgTZ1z0oAEK9NacqyANFTAG9lm1xi6wQ/7WRzTJvDYZMmaI2XeXQsrqVesS vplbhImNYub30+ufpM5gv7x5k8jc/4SXiiV0W7PBGLSwg5sYAjUL/qVrmliC+tUf a5wxAY9jgkWyN5dSFw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:26 2025 by rpki-client