This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json) Hash identifier: k7g7pyA7tfND+uNGzKfvzYuS/0uWkLa+fek5MQO7GiA= Subject key identifier: DA:68:8B:5C:37:8A:37:B8:D2:47:3B:C2:75:36:96:93:35:B3:A1:5B Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Certificate serial: 019B1F866C5C8B99007877C018C62B4D5045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft Manifest number: 0E97 Signing time: Mon 15 Dec 2025 01:01:01 +0000 Manifest this update: Mon 15 Dec 2025 01:01:01 +0000 Manifest next update: Tue 16 Dec 2025 01:01:01 +0000 Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: 91n8n/Doju9cX22r0IoNsH/6OM6E1IuLIVopl3f4LNQ=) 2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:6c:5c:8b:99:00:78:77:c0:18:c6:2b:4d:50:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Validity Not Before: Dec 15 01:01:01 2025 GMT Not After : Dec 16 01:01:01 2025 GMT Subject: CN=da688b5c378a37b8d2473bc27536969335b3a15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:ee:91:91:d2:81:4f:83:c4:a0:22:0b:db: 4d:e8:d7:96:fb:08:c0:54:2e:3b:de:fd:89:f4:d3: 0e:90:9e:34:fc:6e:6b:06:d2:cb:0a:c1:09:ed:69: c3:b5:9a:a1:f2:56:43:9b:6b:13:fc:54:29:8c:23: 81:dc:59:3b:85:88:b9:1a:be:80:c3:eb:1c:7b:b4: cd:27:83:c3:aa:26:bb:2c:80:09:28:9c:b0:78:1d: de:e6:22:ca:2b:48:c9:09:b2:be:fe:b6:17:67:c3: 89:ea:41:1c:c6:09:77:55:3a:2b:03:73:de:dc:e4: c4:0e:b3:34:4e:b7:25:71:a8:25:ae:8a:25:38:3b: d5:f0:72:56:85:a9:69:3e:8d:f3:a2:aa:48:de:a4: 3b:0b:5c:d7:fb:7a:32:e3:cd:5d:47:4c:d1:7f:75: c9:00:01:84:61:9d:16:1a:96:ad:d1:60:43:1c:fa: 9e:c7:96:77:79:c9:d2:6b:fe:dc:41:20:64:83:49: d9:21:48:c0:c8:87:b1:06:16:fb:7d:aa:48:c4:03: 03:3c:02:c9:22:24:8c:18:90:a9:ce:f0:02:53:38: 49:24:9b:6b:f6:ca:3f:d3:9c:a4:81:61:d6:0a:f9: 9b:89:f0:59:a4:be:55:f0:64:41:f5:24:97:30:88: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:8B:5C:37:8A:37:B8:D2:47:3B:C2:75:36:96:93:35:B3:A1:5B X509v3 Authority Key Identifier: keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5a:ac:5c:8f:4b:73:68:f2:39:f4:de:14:44:f6:9f:b6:f6: 78:dd:32:14:c4:bb:e3:cc:4f:75:35:05:1b:f5:09:bb:75:ad: 10:f3:52:e1:13:8f:d1:ae:67:ed:cf:9f:61:4f:e9:c7:af:89: 8e:3a:c8:29:2f:7e:3d:a2:0b:41:55:ba:21:6f:a0:d4:07:12: 1a:e5:bf:dc:30:25:1c:16:be:f7:1d:8c:e6:70:62:15:7f:07: d7:f1:da:97:fe:cc:96:d9:70:d7:fc:6d:9a:6f:bf:be:5f:ad: 7c:00:7e:59:8f:fb:26:74:c2:5f:6a:67:56:4d:dc:1f:c1:f8: 13:8c:51:10:ec:c8:83:71:22:ec:76:1c:7f:78:6f:2e:ad:f6: d0:b0:3b:60:6b:be:fa:43:46:01:67:31:86:98:ab:59:6b:42: 80:99:4c:2f:fd:4d:72:bd:b6:ba:cc:45:af:56:61:c6:03:79: 9d:03:09:a1:81:2a:46:3f:63:ad:6d:e6:00:7f:5d:56:6b:d9: 29:81:44:01:4e:eb:66:66:5e:83:22:34:b5:83:62:39:e5:5a: 51:33:e8:d2:44:42:13:62:2c:c2:7b:bd:aa:01:50:66:8c:bf: 8d:fc:55:d0:7b:98:df:e2:8b:bf:5e:be:cd:8b:2e:21:ff:67: 8b:09:11:a4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsfhmxci5kAeHfAGMYrTVBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWY2NWUxYmU0MmE2NWI0OTRjZjI2NDJhNGRkOGUzMjhk MGY5Y2UwHhcNMjUxMjE1MDEwMTAxWhcNMjUxMjE2MDEwMTAxWjAzMTEwLwYDVQQD EyhkYTY4OGI1YzM3OGEzN2I4ZDI0NzNiYzI3NTM2OTY5MzM1YjNhMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S3ukZHSgU+DxKAiC9tN6NeW+wjA VC473v2J9NMOkJ40/G5rBtLLCsEJ7WnDtZqh8lZDm2sT/FQpjCOB3Fk7hYi5Gr6A w+sce7TNJ4PDqia7LIAJKJyweB3e5iLKK0jJCbK+/rYXZ8OJ6kEcxgl3VTorA3Pe 3OTEDrM0TrclcaglroolODvV8HJWhalpPo3zoqpI3qQ7C1zX+3oy481dR0zRf3XJ AAGEYZ0WGpat0WBDHPqex5Z3ecnSa/7cQSBkg0nZIUjAyIexBhb7fapIxAMDPALJ IiSMGJCpzvACUzhJJJtr9so/05ykgWHWCvmbifBZpL5V8GRB9SSXMIhkIQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNpoi1w3ije40kc7wnU2lpM1s6FbMB8GA1UdIwQY MBaAFPmfZeG+QqZbSUzyZCpN2OMo0PnOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aOWw0YjVDcGx0SlRQSmtLazNZNHlqUS1jNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1 LTU0ZDE2MjI5OGZmZC8xLzEtWjlsNGI1Q3BsdEpUUEprS2szWTR5alEtYzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I2LzZkZjhiYS1kNGNiLTQ3MDUtYmY1NS01NGQxNjIyOThm ZmQvMS8xLVo5bDRiNUNwbHRKVFBKa0trM1k0eWpRLWM0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFqs XI9Lc2jyOfTeFET2n7b2eN0yFMS748xPdTUFG/UJu3WtEPNS4ROP0a5n7c+fYU/p x6+JjjrIKS9+PaILQVW6IW+g1AcSGuW/3DAlHBa+9x2M5nBiFX8H1/Hal/7Mltlw 1/xtmm+/vl+tfAB+WY/7JnTCX2pnVk3cH8H4E4xREOzIg3Ei7HYcf3hvLq320LA7 YGu++kNGAWcxhpirWWtCgJlML/1Ncr22usxFr1ZhxgN5nQMJoYEqRj9jrW3mAH9d VmvZKYFEAU7rZmZegyI0tYNiOeVaUTPo0kRCE2Iswnu9qgFQZoy/jfxV0HuY3+KL v16+zYsuIf9niwkRpA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:20 2025 by rpki-client