This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json) Hash identifier: 78ZITYdWLSSZRCNwHR23kC+3Ys64+DBiC3B0prbfnyk= Subject key identifier: 21:FB:F1:2A:71:35:38:79:33:86:3E:E2:FB:E9:9E:8B:AD:9D:2E:33 Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd Certificate serial: 019B183A52D348149A0D5D7449A2D77AF1A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft Manifest number: 115A Signing time: Sat 13 Dec 2025 15:00:34 +0000 Manifest this update: Sat 13 Dec 2025 15:00:34 +0000 Manifest next update: Sun 14 Dec 2025 15:00:34 +0000 Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: 1jDhsmJEBegB/cpzANqes+hd94FK1hJBw6iXoP659UE=) 2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:52:d3:48:14:9a:0d:5d:74:49:a2:d7:7a:f1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd Validity Not Before: Dec 13 15:00:34 2025 GMT Not After : Dec 14 15:00:34 2025 GMT Subject: CN=21fbf12a7135387933863ee2fbe99e8bad9d2e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:7c:2e:78:0e:a5:f7:f2:fa:83:3c:d4:f2: 8b:64:48:62:e9:5c:36:a8:1f:19:b4:a0:e0:cf:fc: 40:1d:01:0f:17:28:85:2e:f2:4c:85:42:66:32:90: f3:af:e9:22:e4:bd:58:1a:be:7c:cf:98:9b:08:f0: 83:8c:59:29:17:24:52:a5:c9:7d:b6:ef:19:54:42: 65:65:bf:22:66:c2:07:f7:ae:ad:44:e0:8e:04:ad: 28:1c:d3:83:e4:a3:8c:9a:a0:46:09:09:d2:d1:2e: 94:8a:b2:b3:ea:7d:3f:f2:35:4c:f5:a7:6c:15:20: eb:c4:61:5a:1a:37:76:80:a6:74:4c:70:e0:12:8f: fd:27:25:6c:11:bf:6e:28:61:11:f0:bb:41:47:e1: fb:90:fc:6c:d1:33:4d:5b:01:e6:18:5b:7d:5c:cf: 64:db:8b:37:b3:d1:01:be:28:c8:c9:b1:f8:99:d7: 63:a5:0e:96:25:81:76:ba:6e:f6:37:9b:1e:8d:08: 99:21:8b:f7:1e:de:69:01:6d:ea:ba:3e:6d:e1:94: 50:67:f2:9e:d8:0c:28:b6:dd:e3:a8:3a:12:59:e6: 76:c8:e9:ca:a4:ee:fd:9f:80:d6:9f:19:d0:a9:05: 63:56:ca:0f:25:6c:b8:4b:ca:7b:30:6c:39:a6:8c: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:F1:2A:71:35:38:79:33:86:3E:E2:FB:E9:9E:8B:AD:9D:2E:33 X509v3 Authority Key Identifier: keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:90:85:35:e0:28:8c:aa:b7:45:8a:7e:88:d8:68:b8:7c:24: a8:99:c1:17:6d:85:f6:0a:44:3c:20:22:09:54:86:e3:e1:41: 2c:69:60:46:3d:78:7c:12:01:2b:c6:60:fc:6f:e6:6c:01:43: 2c:49:64:7a:db:5d:23:84:d5:6b:b6:58:93:ef:b1:c4:e4:f8: a2:8d:13:04:82:0b:59:6e:38:b0:70:21:f3:3f:ee:c2:8d:99: 2d:8f:ba:98:69:a8:d8:40:6a:ae:30:dc:23:a8:3f:6f:09:ab: ff:cd:f5:80:c4:05:63:42:12:ac:f1:a0:0c:19:a6:3c:2e:79: 80:68:6d:44:36:72:11:68:ed:a4:36:6a:f9:05:e0:3d:9a:9c: 59:ca:8a:da:62:48:3f:00:01:f6:23:58:d7:67:99:9e:b2:d9: cb:5a:5c:8f:41:25:92:ef:3d:fb:6c:61:1d:34:69:2d:ae:5c: d6:7e:0b:8d:a2:06:4f:d4:a7:68:95:63:e1:bc:25:ce:66:a6: 39:58:55:99:a3:1e:0e:17:72:f0:f1:72:d2:95:46:3f:72:a0: 64:56:68:5a:d8:9e:3c:0b:02:42:68:f4:8d:74:67:3d:32:b0: 2e:57:ff:7c:2e:4d:a0:a0:16:93:c2:97:45:ce:1b:9b:10:ef: 36:8a:21:24 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsYOlLTSBSaDV10SaLXevGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MzI3MmMwYzMyZGIwMDRmMDc4Zjg3NGI5OWRhOWEwYjdl NjNhZmQwHhcNMjUxMjEzMTUwMDM0WhcNMjUxMjE0MTUwMDM0WjAzMTEwLwYDVQQD EygyMWZiZjEyYTcxMzUzODc5MzM4NjNlZTJmYmU5OWU4YmFkOWQyZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEh8LngOpffy+oM81PKLZEhi6Vw2 qB8ZtKDgz/xAHQEPFyiFLvJMhUJmMpDzr+ki5L1YGr58z5ibCPCDjFkpFyRSpcl9 tu8ZVEJlZb8iZsIH966tROCOBK0oHNOD5KOMmqBGCQnS0S6UirKz6n0/8jVM9ads FSDrxGFaGjd2gKZ0THDgEo/9JyVsEb9uKGER8LtBR+H7kPxs0TNNWwHmGFt9XM9k 24s3s9EBvijIybH4mddjpQ6WJYF2um72N5sejQiZIYv3Ht5pAW3quj5t4ZRQZ/Ke 2Awott3jqDoSWeZ2yOnKpO79n4DWnxnQqQVjVsoPJWy4S8p7MGw5powXeQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCH78SpxNTh5M4Y+4vvpnoutnS4zMB8GA1UdIwQY MBaAFPgycsDDLbAE8Hj4dLmdqaC35jr9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ESnl3TU10c0FUd2VQaDB1WjJwb0xmbU92MC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOTRhMWUwLWMxODAtNGJhZi05ZWEw LWY2N2U3MDc4ODc4ZS8xLzEtREp5d01NdHNBVHdlUGgwdVoycG9MZm1PdjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzkzLzk0YTFlMC1jMTgwLTRiYWYtOWVhMC1mNjdlNzA3ODg3 OGUvMS8xLURKeXdNTXRzQVR3ZVBoMHVaMnBvTGZtT3YwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZCF NeAojKq3RYp+iNhouHwkqJnBF22F9gpEPCAiCVSG4+FBLGlgRj14fBIBK8Zg/G/m bAFDLElkettdI4TVa7ZYk++xxOT4oo0TBIILWW44sHAh8z/uwo2ZLY+6mGmo2EBq rjDcI6g/bwmr/831gMQFY0ISrPGgDBmmPC55gGhtRDZyEWjtpDZq+QXgPZqcWcqK 2mJIPwAB9iNY12eZnrLZy1pcj0Elku89+2xhHTRpLa5c1n4LjaIGT9SnaJVj4bwl zmamOVhVmaMeDhdy8PFy0pVGP3KgZFZoWtiePAsCQmj0jXRnPTKwLlf/fC5NoKAW k8KXRc4bmxDvNoohJA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:36 2025 by rpki-client