This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json) Hash identifier: mFd5MHhBoHNrEbRY1o6aIUCZHvMzwhpOl5wyA2BIkiQ= Subject key identifier: D0:66:8B:47:9B:F9:C0:06:EE:DA:41:7D:7F:ED:68:3E:CE:2B:31:D3 Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019B0E933546E661E8D091C68BB4BE95CDDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 18:01:26 +0000 Manifest this update: Thu 11 Dec 2025 18:01:26 +0000 Manifest next update: Fri 12 Dec 2025 18:01:26 +0000 Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: jYjuHX5zewex4RIxk6rxWmiz81NScedNu1W5yB+Yf4g=) 2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:35:46:e6:61:e8:d0:91:c6:8b:b4:be:95:cd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Dec 11 18:01:26 2025 GMT Not After : Dec 12 18:01:26 2025 GMT Subject: CN=d0668b479bf9c006eeda417d7fed683ece2b31d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:09:37:19:88:e0:ec:02:76:fd:02:99:9a: 2c:b9:db:1d:52:8b:b0:77:40:ff:8b:79:27:72:67: f7:a0:54:c8:dd:28:65:e9:13:e7:3a:ae:3a:e0:50: 80:a2:17:ba:78:2c:78:15:02:45:4c:86:93:9e:61: a6:48:ae:eb:42:90:52:be:4e:03:03:3f:e8:a2:57: e3:04:87:af:12:13:f3:c5:1e:f7:a9:0d:3c:2b:d0: 7c:c0:cf:c8:33:25:34:4f:99:a0:b2:e4:c1:8b:98: 4b:67:01:56:f2:54:61:67:cb:de:ae:db:52:4a:42: 75:4b:88:87:17:c1:06:98:22:06:fd:83:4f:1b:17: 20:7c:7b:a8:5a:e5:e2:48:5b:60:0f:02:99:b0:0f: 26:73:62:b9:c4:85:ae:d3:fc:83:6c:b7:51:44:8c: 31:2c:06:2c:82:dc:3b:ed:dd:b0:f1:b4:d1:5d:c3: d6:03:a0:37:4f:3d:1e:f9:b3:24:5e:d5:d0:c6:cb: 51:3b:29:78:16:ab:72:dc:d9:01:e8:2a:06:33:cf: 97:e8:27:d8:fd:00:b5:f9:5f:0d:ce:7f:91:74:00: e8:a5:08:f6:ad:f1:83:40:b0:51:cd:a9:ca:ce:d5: ab:78:f3:54:6b:95:1d:99:65:78:c2:82:ac:d2:6b: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:66:8B:47:9B:F9:C0:06:EE:DA:41:7D:7F:ED:68:3E:CE:2B:31:D3 X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fb:24:7a:e4:f2:ce:62:55:3d:3c:73:b7:17:a1:db:b5:f6: 32:d5:2e:67:19:6f:ef:12:5b:be:24:8d:0e:e5:4f:65:c5:2f: 08:c0:1e:67:6b:fb:3c:90:e6:90:b5:51:eb:2a:1d:1b:b1:9a: d3:e7:6c:e4:a0:a6:9e:d6:fd:1d:31:6c:8e:eb:cb:f4:34:b8: 06:3c:d0:62:d7:41:fe:17:a2:2c:de:61:6c:1a:c5:b9:54:46: 86:89:63:11:cf:a8:22:a8:b4:dc:38:f7:22:f9:ed:37:c6:25: 80:98:94:58:25:de:f4:b8:e8:f4:29:c6:46:11:59:a4:00:4e: 6c:04:21:6e:09:da:19:a3:e0:35:cd:2c:a0:68:83:b9:f8:68: 3d:16:97:ab:c7:42:81:00:70:f5:d3:f8:e4:68:9e:14:65:10: 98:c4:2c:eb:7c:18:07:e1:16:53:a7:ed:1c:25:34:6f:fa:d6: e2:1d:e1:e3:58:f9:92:8d:6c:40:61:9f:f0:fb:e1:0d:8b:ea: 4d:8d:e6:c0:62:fe:1d:01:00:f0:a5:86:f9:d9:a0:31:d5:bb: 7b:36:2c:5d:df:23:30:26:d8:ac:ef:32:f4:3b:84:c6:ba:ba: f2:9c:67:26:bc:a6:b1:5e:0c:12:52:4f:6b:07:34:bf:e1:c9: d0:b7:f9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzVG5mHo0JHGi7S+lc3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjUxMjExMTgwMTI2WhcNMjUxMjEyMTgwMTI2WjAzMTEwLwYDVQQD EyhkMDY2OGI0NzliZjljMDA2ZWVkYTQxN2Q3ZmVkNjgzZWNlMmIzMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTQJNxmI4OwCdv0CmZosudsdUouw d0D/i3kncmf3oFTI3Shl6RPnOq464FCAohe6eCx4FQJFTIaTnmGmSK7rQpBSvk4D Az/oolfjBIevEhPzxR73qQ08K9B8wM/IMyU0T5mgsuTBi5hLZwFW8lRhZ8verttS SkJ1S4iHF8EGmCIG/YNPGxcgfHuoWuXiSFtgDwKZsA8mc2K5xIWu0/yDbLdRRIwx LAYsgtw77d2w8bTRXcPWA6A3Tz0e+bMkXtXQxstROyl4Fqty3NkB6CoGM8+X6CfY /QC1+V8Nzn+RdADopQj2rfGDQLBRzanKztWrePNUa5UdmWV4woKs0mtnPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBmi0eb+cAG7tpBfX/taD7OKzHTMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvskeuTy zmJVPTxztxeh27X2MtUuZxlv7xJbviSNDuVPZcUvCMAeZ2v7PJDmkLVR6yodG7Ga 0+ds5KCmntb9HTFsjuvL9DS4BjzQYtdB/heiLN5hbBrFuVRGholjEc+oIqi03Dj3 IvntN8YlgJiUWCXe9Ljo9CnGRhFZpABObAQhbgnaGaPgNc0soGiDufhoPRaXq8dC gQBw9dP45GieFGUQmMQs63wYB+EWU6ftHCU0b/rW4h3h41j5ko1sQGGf8PvhDYvq TY3mwGL+HQEA8KWG+dmgMdW7ezYsXd8jMCbYrO8y9DuExrq68pxnJrymsV4MElJP awc0v+HJ0Lf5Hw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:23 2025 by rpki-client