This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json) Hash identifier: XsnG1XaFMNtKjtE4hQPOOkfszSs5cQvS+PWHK/jWbU8= Subject key identifier: F6:99:95:AD:AD:C7:BC:E7:17:15:E7:07:CF:F9:97:DA:92:57:F2:CB Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Certificate serial: 019B48821F31C670B128A98BB7A351835637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft Manifest number: 028F Signing time: Tue 23 Dec 2025 00:00:45 +0000 Manifest this update: Tue 23 Dec 2025 00:00:45 +0000 Manifest next update: Wed 24 Dec 2025 00:00:45 +0000 Files and hashes: 1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: 0+kkLIx/KPJITl6Y4aNp7UIHUY9ITrhO4DwG7QYnOFs=) 2: EOs1OcIjU7QpGNyQW0WAVHDhwZk.roa (hash: GhAzKLkw2PqF2q1j22FlhKv8LsjLpt0qx1W6/h0p4Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:1f:31:c6:70:b1:28:a9:8b:b7:a3:51:83:56:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56 Validity Not Before: Dec 23 00:00:45 2025 GMT Not After : Dec 24 00:00:45 2025 GMT Subject: CN=f69995adadc7bce71715e707cff997da9257f2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:5d:74:20:d9:82:8c:07:c4:6f:b0:23:df: 91:42:1d:ca:91:18:fb:85:4e:fa:f0:eb:94:bd:c7: 89:c2:32:f1:61:b6:e2:5e:92:63:52:9f:4d:fe:d0: de:b5:61:0b:bd:72:75:53:ce:20:52:5a:e0:b5:f6: a0:6a:90:3d:3a:4c:b3:61:6c:ed:88:a5:3a:c5:bc: 18:5d:b9:3b:e4:66:7c:35:34:a0:55:60:3d:ad:fd: 19:b7:98:59:60:bd:b0:8b:0e:fb:5f:2f:1d:56:95: 3a:31:72:e5:bc:df:66:16:6c:74:a3:2e:85:1d:a8: ff:34:ca:19:13:2e:db:16:bb:e6:ae:7d:94:7a:37: 89:10:04:8f:aa:f5:b5:cc:d2:c0:c4:14:9a:4c:c6: 72:b1:2f:9c:e9:7d:a9:a3:52:87:98:3c:63:88:a1: 93:5b:46:d4:17:f4:e2:4d:67:35:87:52:6e:c8:3a: 06:6a:3f:60:29:8e:8c:11:57:ca:d1:c4:d2:60:d4: 6f:5b:ad:03:a5:7c:43:d1:49:0d:ea:8d:54:21:79: 49:f3:1e:68:8f:60:d3:6b:95:9d:84:6d:6b:d5:35: 57:8a:38:d7:39:2a:39:20:fe:a6:51:ef:35:6a:52: 95:5c:1a:7d:c0:a6:6f:93:fb:b5:5e:79:a5:93:f3: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:99:95:AD:AD:C7:BC:E7:17:15:E7:07:CF:F9:97:DA:92:57:F2:CB X509v3 Authority Key Identifier: keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:49:47:79:db:55:88:6f:9d:13:da:a6:1f:9d:70:33:b4:f3: 36:9e:35:ea:d2:a0:85:9a:89:70:41:76:9b:11:a7:c2:93:ab: b4:6e:39:af:c9:83:23:81:1f:f7:40:da:50:ab:89:bb:31:75: 27:c1:56:9c:11:fd:d3:70:a2:99:57:33:94:94:d0:45:ff:1b: 80:23:13:f8:45:d6:27:be:66:2e:de:fc:f7:0c:a2:1b:c0:bb: f0:01:00:25:b8:64:74:95:db:fc:3a:04:4f:49:56:95:83:e3: c1:6b:db:da:b7:bd:4a:ee:bc:1f:56:fd:10:a8:5a:fc:33:e0: 3c:b2:15:bc:58:d8:14:b7:66:3c:66:1c:97:1c:a1:42:aa:21: 64:b2:39:4d:79:0a:4e:9b:75:75:12:45:64:80:e4:1e:cd:a4: 11:8a:4f:3e:d0:86:70:81:52:69:2b:1d:06:54:21:12:01:71: d5:13:02:f1:c3:91:a3:59:19:01:ce:c4:c4:d7:32:74:28:ad: a5:07:2f:8d:9b:06:4f:2f:ac:24:5c:48:2d:07:08:21:13:24: 92:52:56:d6:29:44:f4:2f:30:76:68:3f:12:ae:77:70:2f:2e: bb:32:67:0f:67:b3:15:5a:80:97:43:27:58:3f:af:24:4f:ac: 24:d3:a2:1f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtIgh8xxnCxKKmLt6NRg1Y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhN2NmYWM2YWYxMDg2NjBkOTRlMmZjZWQ2MWU2MWZmMjE5 YzBhNTYwHhcNMjUxMjIzMDAwMDQ1WhcNMjUxMjI0MDAwMDQ1WjAzMTEwLwYDVQQD EyhmNjk5OTVhZGFkYzdiY2U3MTcxNWU3MDdjZmY5OTdkYTkyNTdmMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvURddCDZgowHxG+wI9+RQh3KkRj7 hU768OuUvceJwjLxYbbiXpJjUp9N/tDetWELvXJ1U84gUlrgtfagapA9OkyzYWzt iKU6xbwYXbk75GZ8NTSgVWA9rf0Zt5hZYL2wiw77Xy8dVpU6MXLlvN9mFmx0oy6F Haj/NMoZEy7bFrvmrn2UejeJEASPqvW1zNLAxBSaTMZysS+c6X2po1KHmDxjiKGT W0bUF/TiTWc1h1JuyDoGaj9gKY6MEVfK0cTSYNRvW60DpXxD0UkN6o1UIXlJ8x5o j2DTa5WdhG1r1TVXijjXOSo5IP6mUe81alKVXBp9wKZvk/u1Xnmlk/NFMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPaZla2tx7znFxXnB8/5l9qSV/LLMB8GA1UdIwQY MBaAFPp8+savEIZg2U4vztYeYf8hnApWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uejZ4cThRaG1EWlRpX08xaDVoX3lHY0NsWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjgyMjMwLWI0Y2QtNDU5NS1iZDFl LTMyYTQxYmEzZTNjNS8xLzEtbno2eHE4UWhtRFpUaV9PMWg1aF95R2NDbFkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZkLzY4MjIzMC1iNGNkLTQ1OTUtYmQxZS0zMmE0MWJhM2Uz YzUvMS8xLW56NnhxOFFobURaVGlfTzFoNWhfeUdjQ2xZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnklH edtViG+dE9qmH51wM7TzNp416tKghZqJcEF2mxGnwpOrtG45r8mDI4Ef90DaUKuJ uzF1J8FWnBH903CimVczlJTQRf8bgCMT+EXWJ75mLt789wyiG8C78AEAJbhkdJXb /DoET0lWlYPjwWvb2re9Su68H1b9EKha/DPgPLIVvFjYFLdmPGYclxyhQqohZLI5 TXkKTpt1dRJFZIDkHs2kEYpPPtCGcIFSaSsdBlQhEgFx1RMC8cORo1kZAc7ExNcy dCitpQcvjZsGTy+sJFxILQcIIRMkklJW1ilE9C8wdmg/Eq53cC8uuzJnD2ezFVqA l0MnWD+vJE+sJNOiHw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:00:35 2025 by rpki-client