This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json) Hash identifier: FtL2KrHrtbUqo73l6rBWMCKXDQeefQKAkbjoItIVZw0= Subject key identifier: 9B:FD:85:7E:87:4A:B1:33:F6:02:26:D4:FC:3D:DE:69:69:28:27:40 Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b Certificate serial: 019B34569BF3A453823AD3C4DEEBF051361A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft Manifest number: 1001 Signing time: Fri 19 Dec 2025 02:00:49 +0000 Manifest this update: Fri 19 Dec 2025 02:00:49 +0000 Manifest next update: Sat 20 Dec 2025 02:00:49 +0000 Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: HqqmUDLCKNYV5GZjRKM+5zUnUodujg/4Duqsx33W4KQ=) 2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:9b:f3:a4:53:82:3a:d3:c4:de:eb:f0:51:36:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b Validity Not Before: Dec 19 02:00:49 2025 GMT Not After : Dec 20 02:00:49 2025 GMT Subject: CN=9bfd857e874ab133f60226d4fc3dde6969282740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:67:32:77:71:be:36:92:71:3a:dd:3e:d3: ef:1c:a6:89:27:87:71:c9:6a:58:27:44:ba:74:1e: be:53:26:dc:81:d3:ac:ce:fb:82:d0:77:47:0a:03: 8a:07:aa:bd:99:ae:bd:13:dd:d9:49:5a:5a:a2:fe: cb:ba:62:2d:f2:b4:5c:34:06:4e:2e:d4:f0:53:2d: df:f2:e6:8b:53:fe:d7:8e:02:e8:d9:a5:73:04:3c: 39:cb:f8:d3:ed:f0:02:0a:22:5f:94:b2:68:aa:b2: 0c:98:84:03:8b:fc:f4:05:23:0d:e2:b5:02:b6:66: f0:47:ae:03:61:b9:5c:40:c7:61:8b:20:80:16:5d: aa:6c:c2:59:7c:e1:ad:ab:e9:9b:52:39:cb:0a:70: bf:f0:1f:15:50:fb:1e:7c:d9:b0:bf:03:55:4f:f7: a5:c6:8c:6c:90:0c:9f:83:cc:3a:c4:65:5f:23:96: 84:80:eb:76:5f:98:96:5b:ca:74:46:57:18:85:11: 78:55:aa:4c:d5:42:8c:81:99:f9:ae:b8:53:cd:42: 05:bd:ae:18:81:b0:f5:fa:57:07:2f:34:86:2f:41: 31:58:e6:bc:b5:d1:32:74:00:23:77:a6:84:8b:d5: 30:81:7f:61:ca:1c:4d:28:f1:9a:1d:dc:66:51:b6: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FD:85:7E:87:4A:B1:33:F6:02:26:D4:FC:3D:DE:69:69:28:27:40 X509v3 Authority Key Identifier: keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:06:e7:f7:48:ac:0c:bb:8f:4b:a9:fc:51:a3:63:09:f2:69: 17:9f:b4:ba:3d:1c:ae:3d:b8:44:2e:84:41:01:40:00:74:f3: cc:11:89:cf:7d:53:3d:e4:d7:07:9c:06:6c:87:aa:30:4f:a1: df:c7:19:c4:38:f9:35:48:d5:7b:03:46:04:36:fe:d1:cf:1d: 09:a0:f1:85:01:6b:f2:20:98:0a:60:03:34:c3:8d:31:d6:01: e7:bc:f4:04:e9:4e:cd:98:68:4d:ca:af:20:bc:6d:3a:ec:3b: 46:a7:ab:6b:2b:f7:88:6b:45:6d:df:46:e8:96:93:75:47:71: 0e:38:b8:8f:7d:b5:d9:32:a7:3d:4a:bd:e1:16:53:b5:9b:8e: 9f:79:f2:37:e7:1f:63:13:31:81:19:37:de:2b:4a:56:93:19: 91:ab:2d:0f:3d:75:af:42:5a:d6:f5:2f:22:f8:04:4a:5d:3f: 2c:2c:e2:ae:5c:c7:62:ef:0a:67:61:56:35:43:0e:a8:79:5e: cc:b0:4f:5c:50:22:8d:db:09:a1:03:b7:5f:c3:5e:80:63:b5: 88:65:b8:9a:9c:8e:c8:91:15:8f:30:c9:ed:f8:3d:b7:d9:f1: 45:8f:82:95:77:ea:73:2a:4e:be:9b:e1:19:d4:ed:54:1f:ce: 84:17:f5:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpvzpFOCOtPE3uvwUTYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk MWExOWIwHhcNMjUxMjE5MDIwMDQ5WhcNMjUxMjIwMDIwMDQ5WjAzMTEwLwYDVQQD Eyg5YmZkODU3ZTg3NGFiMTMzZjYwMjI2ZDRmYzNkZGU2OTY5MjgyNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeRnMndxvjaScTrdPtPvHKaJJ4dx yWpYJ0S6dB6+UybcgdOszvuC0HdHCgOKB6q9ma69E93ZSVpaov7LumIt8rRcNAZO LtTwUy3f8uaLU/7XjgLo2aVzBDw5y/jT7fACCiJflLJoqrIMmIQDi/z0BSMN4rUC tmbwR64DYblcQMdhiyCAFl2qbMJZfOGtq+mbUjnLCnC/8B8VUPsefNmwvwNVT/el xoxskAyfg8w6xGVfI5aEgOt2X5iWW8p0RlcYhRF4VapM1UKMgZn5rrhTzUIFva4Y gbD1+lcHLzSGL0ExWOa8tdEydAAjd6aEi9UwgX9hyhxNKPGaHdxmUbaMSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv9hX6HSrEz9gIm1Pw93mlpKCdAMB8GA1UdIwQY MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct YzA5NTZhODAxMzJkLzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwbn90is DLuPS6n8UaNjCfJpF5+0uj0crj24RC6EQQFAAHTzzBGJz31TPeTXB5wGbIeqME+h 38cZxDj5NUjVewNGBDb+0c8dCaDxhQFr8iCYCmADNMONMdYB57z0BOlOzZhoTcqv ILxtOuw7Rqerayv3iGtFbd9G6JaTdUdxDji4j3212TKnPUq94RZTtZuOn3nyN+cf YxMxgRk33itKVpMZkastDz11r0Ja1vUvIvgESl0/LCzirlzHYu8KZ2FWNUMOqHle zLBPXFAijdsJoQO3X8NegGO1iGW4mpyOyJEVjzDJ7fg9t9nxRY+ClXfqcypOvpvh GdTtVB/OhBf1Wg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:36 2025 by rpki-client