This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft File: 1-enaRkroBgtbvSosU13p0RUfeZE.mft (raw, json) Hash identifier: ZqekPbzBW5rPdBTDk65OejMdBYEkMPd8zp+Y3I6clzg= Subject key identifier: 4F:6D:A1:BE:BA:57:67:9C:89:75:08:6D:A2:65:CA:0C:56:45:0B:35 Authority key identifier: F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91 Certificate issuer: /CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991 Certificate serial: 019AF9549230014D966D8ECE5C01A8E419C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft Manifest number: 07 Signing time: Sun 07 Dec 2025 15:01:00 +0000 Manifest this update: Sun 07 Dec 2025 15:01:00 +0000 Manifest next update: Mon 08 Dec 2025 15:01:00 +0000 Files and hashes: 1: 1-enaRkroBgtbvSosU13p0RUfeZE.crl (hash: yy8NpBiR6LXdApP/ju1pBb26eA4lLVsDbvY8fLqATeU=) 2: bzyJjbuCDIW55Y1BFbRoWGv4grQ.asa (hash: +u+29vjwK80vsHlbPupPL69T+chusu3cEMS40p3pEws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:92:30:01:4d:96:6d:8e:ce:5c:01:a8:e4:19:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991 Validity Not Before: Dec 7 15:01:00 2025 GMT Not After : Dec 8 15:01:00 2025 GMT Subject: CN=4f6da1beba57679c8975086da265ca0c56450b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:d7:58:9a:3b:52:10:1f:b4:1a:cf:6c:ce: 96:64:0c:00:0c:96:d0:19:41:dd:de:6d:32:cf:0f: 28:14:8b:82:77:4e:d3:a4:b7:6f:60:44:45:82:d1: d0:90:4c:a5:56:ed:a5:70:66:98:3d:bd:ee:de:9f: 7f:15:c0:33:12:e1:da:b6:d9:00:b8:f6:ed:26:4b: 43:51:13:4e:e0:b4:bb:83:5e:0d:71:b6:d7:4e:1f: 37:5f:98:aa:fb:49:fe:0e:11:05:4d:e4:22:2d:ba: 1a:2a:b5:81:92:ae:52:4a:f8:59:e1:af:94:a9:df: d1:5c:6f:25:fc:8b:6b:c1:04:af:74:d3:20:54:40: 6a:26:a2:64:2d:4e:6f:de:c8:ba:34:6d:6b:70:fc: 5f:a1:ce:23:f6:ac:27:c1:4c:48:37:a0:cf:cd:d8: 3a:4c:5b:18:31:5f:b5:48:53:13:15:b2:15:70:28: a7:9b:74:fe:76:ad:f3:b8:77:63:ef:0b:fc:2f:db: 9c:6c:be:4b:5c:8b:91:8b:d3:a7:0e:1d:5b:f8:40: 70:23:d2:11:ae:59:20:9a:65:c0:b8:69:69:2e:22: 26:6e:26:bc:e3:aa:cb:8c:1f:60:ba:0e:d2:66:5f: de:4e:e0:51:48:02:f9:3a:ae:e0:50:e6:98:39:87: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:A1:BE:BA:57:67:9C:89:75:08:6D:A2:65:CA:0C:56:45:0B:35 X509v3 Authority Key Identifier: keyid:F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a8:3a:34:c0:e2:b1:14:fd:90:ab:0e:c3:fc:f8:13:8c:a1: 40:5e:2a:e9:a3:31:e7:fc:a7:7d:97:a1:32:81:c2:2f:b1:cd: 3a:41:0a:99:4b:f1:49:48:69:f6:4b:f3:4a:fd:04:62:93:34: 48:2f:f2:d1:6a:69:bb:bf:02:57:0f:a7:81:2b:9e:8d:dd:c1: 36:28:49:56:6a:aa:82:97:83:8b:19:6e:de:df:ad:9c:8e:80: d4:23:c0:5c:0b:ac:25:36:29:a4:d1:04:3d:90:f9:72:d6:9c: 01:b2:2f:e3:c1:23:f6:f8:23:41:f3:d7:c9:28:6f:3b:21:ef: 57:80:16:70:9b:b8:a3:a9:d8:78:71:7d:86:d8:63:8d:0e:59: 54:9f:59:2a:9b:5f:15:ed:10:e9:6a:7f:70:88:1c:71:a8:e7: c6:5c:3b:8f:b1:9e:cd:d8:1d:4e:85:d7:fa:66:41:54:16:7c: 09:49:2e:9b:cc:8f:36:fe:98:70:f4:e4:08:1d:20:e2:77:cc: 97:c4:75:4b:3b:e9:da:9c:ff:01:ef:18:63:1d:9c:cd:b0:42: 17:57:94:07:73:14:ad:99:dc:ea:ba:a6:d5:94:5a:a2:95:49: ec:8e:95:10:b0:c0:91:f5:d3:dc:a3:7b:df:85:7b:02:c4:b6: fa:42:60:fd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr5VJIwAU2WbY7OXAGo5BnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTlkYTQ2NGFlODA2MGI1YmJkMmEyYzUzNWRlOWQxMTUx Zjc5OTEwHhcNMjUxMjA3MTUwMTAwWhcNMjUxMjA4MTUwMTAwWjAzMTEwLwYDVQQD Eyg0ZjZkYTFiZWJhNTc2NzljODk3NTA4NmRhMjY1Y2EwYzU2NDUwYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArInXWJo7UhAftBrPbM6WZAwADJbQ GUHd3m0yzw8oFIuCd07TpLdvYERFgtHQkEylVu2lcGaYPb3u3p9/FcAzEuHattkA uPbtJktDURNO4LS7g14NcbbXTh83X5iq+0n+DhEFTeQiLboaKrWBkq5SSvhZ4a+U qd/RXG8l/ItrwQSvdNMgVEBqJqJkLU5v3si6NG1rcPxfoc4j9qwnwUxIN6DPzdg6 TFsYMV+1SFMTFbIVcCinm3T+dq3zuHdj7wv8L9ucbL5LXIuRi9OnDh1b+EBwI9IR rlkgmmXAuGlpLiImbia846rLjB9gug7SZl/eTuBRSAL5Oq7gUOaYOYejtwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE9tob66V2eciXUIbaJlygxWRQs1MB8GA1UdIwQY MBaAFPnp2kZK6AYLW70qLFNd6dEVH3mRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lbmFSa3JvQmd0YnZTb3NVMTNwMFJVZmVaRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvM2E4NjA0LTc2ZDktNGU5NS05ZDhi LWE0MjAxMDUxNDI5Ni8xLzEtZW5hUmtyb0JndGJ2U29zVTEzcDBSVWZlWkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2QyLzNhODYwNC03NmQ5LTRlOTUtOWQ4Yi1hNDIwMTA1MTQy OTYvMS8xLWVuYVJrcm9CZ3RidlNvc1UxM3AwUlVmZVpFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeag6 NMDisRT9kKsOw/z4E4yhQF4q6aMx5/ynfZehMoHCL7HNOkEKmUvxSUhp9kvzSv0E YpM0SC/y0Wppu78CVw+ngSuejd3BNihJVmqqgpeDixlu3t+tnI6A1CPAXAusJTYp pNEEPZD5ctacAbIv48Ej9vgjQfPXyShvOyHvV4AWcJu4o6nYeHF9hthjjQ5ZVJ9Z KptfFe0Q6Wp/cIgccajnxlw7j7GezdgdToXX+mZBVBZ8CUkum8yPNv6YcPTkCB0g 4nfMl8R1Szvp2pz/Ae8YYx2czbBCF1eUB3MUrZnc6rqm1ZRaopVJ7I6VELDAkfXT 3KN734V7AsS2+kJg/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 17:16:00 2025 by rpki-client