This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json) Hash identifier: izESev1enRVpZxe/v8NmpvsFvwtOKpA9e7ht6YO81Z0= Subject key identifier: 34:0E:C4:3F:76:B2:F1:2A:31:27:B1:46:9E:F1:66:C0:9C:B9:AC:B7 Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c Certificate serial: 019B34C4ED96BE91C114E2BD58BB26809781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft Manifest number: 0EB9 Signing time: Fri 19 Dec 2025 04:01:19 +0000 Manifest this update: Fri 19 Dec 2025 04:01:19 +0000 Manifest next update: Sat 20 Dec 2025 04:01:19 +0000 Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: 03LOtoUsuJ08Pe8XBn6EjFANFXzdHSVfwDW54MYL0eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:ed:96:be:91:c1:14:e2:bd:58:bb:26:80:97:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c Validity Not Before: Dec 19 04:01:19 2025 GMT Not After : Dec 20 04:01:19 2025 GMT Subject: CN=340ec43f76b2f12a3127b1469ef166c09cb9acb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:24:95:35:9c:dd:04:ae:a1:d2:ec:43:09: ae:19:15:c5:72:0b:7e:00:56:9e:b8:00:72:a0:da: 70:21:0c:3f:c1:45:e8:48:11:87:ac:f7:e0:6a:a2: d6:68:c2:3e:f5:48:5d:54:35:9a:9d:da:96:3a:c3: 04:ee:ce:a7:46:7b:56:d3:2d:2f:27:c2:14:c3:b2: 32:7b:63:0b:cd:81:93:27:25:15:8f:a9:37:e2:d1: 93:da:c8:52:2d:31:94:c2:c5:4f:55:9c:53:fe:85: 5d:65:4c:c9:d7:98:fc:94:e7:fe:38:f6:09:c1:8f: 14:91:1c:08:e7:a8:8c:23:e2:2f:03:dd:df:fe:e4: 43:fe:ba:62:b5:f8:98:32:60:37:fc:bc:55:46:fb: 37:f6:ee:98:e5:82:45:ec:d2:e6:21:3c:a0:38:e8: f1:74:24:7f:6d:0c:0b:f2:ee:17:31:fc:74:37:22: 44:11:35:6e:ed:ea:30:df:00:d5:17:f3:5e:03:f4: f2:80:6a:14:65:9c:18:68:23:b0:4e:13:a2:04:7a: 00:4b:2b:60:96:c9:06:7e:aa:3f:96:a6:1e:41:0e: f5:e8:6d:bb:c5:53:ca:3e:03:08:a3:56:ae:a0:17: 05:31:3c:5a:1d:85:5a:90:c8:07:e7:ba:8a:7c:81: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0E:C4:3F:76:B2:F1:2A:31:27:B1:46:9E:F1:66:C0:9C:B9:AC:B7 X509v3 Authority Key Identifier: keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b6:f6:6a:55:d5:97:27:b0:17:cd:ad:ac:c4:24:c9:16:78: 1a:4a:86:28:b6:3a:c2:ed:cb:62:99:77:93:1d:fb:9c:f1:2a: 34:2e:f3:73:1e:13:66:3a:24:52:50:b6:c3:08:03:bf:fb:f2: a6:58:9e:dc:e0:6f:e4:98:8a:11:13:18:56:6f:a8:a6:b9:d9: 18:3b:63:b2:df:4a:8f:b5:d2:fb:15:6a:08:50:0f:bf:00:8c: da:f0:f6:15:f3:87:8a:2f:f2:67:51:a9:be:ac:e8:74:a3:4c: 50:b4:4d:ef:25:75:33:61:51:b1:96:b6:0b:0d:3a:ef:a6:64: bf:84:2a:d3:17:68:6c:a4:05:93:2d:50:cf:68:ae:27:c3:17: c9:a4:10:93:5a:02:b0:eb:b3:50:8b:ba:f8:91:a8:e8:b5:cf: 52:44:30:1a:08:f8:be:21:4d:3d:24:8d:ca:d8:7d:f2:60:c0: 4f:c8:4d:41:be:24:89:7b:2c:b3:03:b5:6e:8d:3d:73:28:49: 8a:5a:ab:6b:3b:eb:d6:51:36:ec:60:8d:90:b0:b2:b6:e2:7d: 28:87:57:85:78:64:2b:29:7d:2f:55:8b:33:29:b3:c1:79:63: 1d:83:d5:b9:c0:b2:72:4b:54:10:2d:42:c2:8c:b2:43:ef:cd: a9:a4:42:50 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs0xO2WvpHBFOK9WLsmgJeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWE4M2ZiYjNlMWI5YjYzODMxYTY4MWY2YjcyMmEyNjUw MTZjOWMwHhcNMjUxMjE5MDQwMTE5WhcNMjUxMjIwMDQwMTE5WjAzMTEwLwYDVQQD EygzNDBlYzQzZjc2YjJmMTJhMzEyN2IxNDY5ZWYxNjZjMDljYjlhY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFMklTWc3QSuodLsQwmuGRXFcgt+ AFaeuAByoNpwIQw/wUXoSBGHrPfgaqLWaMI+9UhdVDWandqWOsME7s6nRntW0y0v J8IUw7Iye2MLzYGTJyUVj6k34tGT2shSLTGUwsVPVZxT/oVdZUzJ15j8lOf+OPYJ wY8UkRwI56iMI+IvA93f/uRD/rpitfiYMmA3/LxVRvs39u6Y5YJF7NLmITygOOjx dCR/bQwL8u4XMfx0NyJEETVu7eow3wDVF/NeA/TygGoUZZwYaCOwThOiBHoASytg lskGfqo/lqYeQQ716G27xVPKPgMIo1auoBcFMTxaHYVakMgH57qKfIEYOQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDQOxD92svEqMSexRp7xZsCcuay3MB8GA1UdIwQY MBaAFPoag/uz4bm2ODGmgfa3IqJlAWycMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ocUQtN1BodWJZNE1hYUI5cmNpb21VQmJKdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQzLTQwZDItNGRlYi05NmI0 LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFCOXJjaW9tVUJiSncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RlLzU5MmQ0My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3 MzMvMS8xLWhxRC03UGh1Ylk0TWFhQjlyY2lvbVVCYkp3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7b2 alXVlyewF82trMQkyRZ4GkqGKLY6wu3LYpl3kx37nPEqNC7zcx4TZjokUlC2wwgD v/vyplie3OBv5JiKERMYVm+oprnZGDtjst9Kj7XS+xVqCFAPvwCM2vD2FfOHii/y Z1GpvqzodKNMULRN7yV1M2FRsZa2Cw0676Zkv4Qq0xdobKQFky1Qz2iuJ8MXyaQQ k1oCsOuzUIu6+JGo6LXPUkQwGgj4viFNPSSNyth98mDAT8hNQb4kiXssswO1bo09 cyhJilqrazvr1lE27GCNkLCytuJ9KIdXhXhkKyl9L1WLMymzwXljHYPVucCycktU EC1CwoyyQ+/NqaRCUA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:08:15 2025 by rpki-client