This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json) Hash identifier: EuzfAMTrIbNK1ca1eNPaIMVXxP63C6Iq3QxFaY1Igiw= Subject key identifier: 0C:FA:3B:E6:10:25:6B:E0:76:18:D0:89:09:D7:30:2E:23:50:76:0C Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Certificate serial: 019B0F373DAA9BAA8F215ADE6BD892CF2BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft Manifest number: 1643 Signing time: Thu 11 Dec 2025 21:00:36 +0000 Manifest this update: Thu 11 Dec 2025 21:00:36 +0000 Manifest next update: Fri 12 Dec 2025 21:00:36 +0000 Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: aC4xKPvLiIjmWlWsp8/PYMecFRaUm19ynK3Bz4KLejw=) 2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=) 3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:3d:aa:9b:aa:8f:21:5a:de:6b:d8:92:cf:2b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Validity Not Before: Dec 11 21:00:36 2025 GMT Not After : Dec 12 21:00:36 2025 GMT Subject: CN=0cfa3be610256be07618d08909d7302e2350760c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ce:e9:b4:af:52:e0:3a:03:6a:1b:02:b5:fa: 70:70:0e:64:be:cd:b5:b7:05:a8:23:fa:db:3e:8d: 3b:27:dc:96:ce:a2:17:e8:21:84:5e:f0:dc:63:7c: b9:2f:df:55:37:f5:6d:65:c1:13:e2:37:34:14:f7: 6c:d0:e5:d9:f7:2a:70:3a:93:f0:45:8e:b8:26:64: ae:45:d1:92:1e:c8:70:13:cd:29:7b:9f:b0:c8:b6: e4:80:47:21:a8:98:ea:45:10:51:5f:6b:62:08:1b: b2:86:10:80:9d:5c:a7:9d:c1:96:b2:f8:71:c9:d6: 82:db:39:e8:4a:74:61:77:dd:9f:32:dd:6c:55:b3: ca:78:74:c0:88:92:7e:c6:b7:31:dc:43:06:40:b0: 5b:23:79:b6:e1:dc:dd:47:38:79:71:25:3b:c4:30: 22:6b:d5:52:3b:98:db:2f:d8:b6:27:53:7e:bd:86: b3:dd:3f:c0:17:5f:d7:6c:6b:9e:3b:43:bf:2d:ec: c2:0b:a8:b0:73:2b:7c:75:2b:61:6f:86:d0:a2:70: 5b:12:43:89:d6:e5:83:31:c3:71:59:ed:e9:88:e2: 06:77:b9:af:ea:aa:3a:0e:ff:a2:03:04:64:a2:68: eb:2e:16:2d:12:17:d3:25:70:7d:02:58:4e:bc:9a: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FA:3B:E6:10:25:6B:E0:76:18:D0:89:09:D7:30:2E:23:50:76:0C X509v3 Authority Key Identifier: keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4d:51:04:e0:b3:fc:80:0f:4b:0e:7a:d5:73:b1:53:43:41: e7:8d:e1:19:43:b6:25:a6:ba:87:29:97:42:da:30:9e:4d:ed: e1:66:19:59:1a:fd:af:07:40:1f:ef:67:44:64:fc:a3:84:41: e6:9f:8f:95:39:39:9f:f5:29:e9:7d:e6:6d:21:ce:49:ce:59: bb:34:00:ce:0b:a9:1d:cb:33:20:8d:75:b1:c3:6f:61:9f:72: 96:d8:53:0e:06:51:8e:b0:92:41:74:0d:d5:8b:bd:45:d9:05: 7c:3d:07:59:b4:90:19:57:d0:44:ed:d2:64:3b:99:79:5c:67: 3a:f7:6e:9c:a8:bd:6c:29:fd:11:ca:f8:22:97:ac:fd:24:f2: 06:01:54:bc:33:bd:60:84:d0:c5:bd:6c:2b:08:d1:4d:c8:3e: 88:a2:99:fc:50:ab:0d:f3:76:a0:fb:d2:76:e3:43:2a:31:7e: b9:23:07:a4:df:60:18:36:f9:a0:8d:68:76:8a:41:77:c9:aa: bd:fc:39:f5:c3:e6:35:e5:69:48:14:6d:db:92:1e:a1:8a:e5: 9d:c3:5f:a0:ae:0e:78:be:ed:c6:60:76:7a:ea:da:6e:ce:64: a3:11:00:b5:1a:b2:55:55:16:cb:09:fd:9b:92:db:7d:99:e8: 36:cf:36:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsPNz2qm6qPIVrea9iSzyv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy YTdiZGUwHhcNMjUxMjExMjEwMDM2WhcNMjUxMjEyMjEwMDM2WjAzMTEwLwYDVQQD EygwY2ZhM2JlNjEwMjU2YmUwNzYxOGQwODkwOWQ3MzAyZTIzNTA3NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA387ptK9S4DoDahsCtfpwcA5kvs21 twWoI/rbPo07J9yWzqIX6CGEXvDcY3y5L99VN/VtZcET4jc0FPds0OXZ9ypwOpPw RY64JmSuRdGSHshwE80pe5+wyLbkgEchqJjqRRBRX2tiCBuyhhCAnVynncGWsvhx ydaC2znoSnRhd92fMt1sVbPKeHTAiJJ+xrcx3EMGQLBbI3m24dzdRzh5cSU7xDAi a9VSO5jbL9i2J1N+vYaz3T/AF1/XbGueO0O/LezCC6iwcyt8dSthb4bQonBbEkOJ 1uWDMcNxWe3piOIGd7mv6qo6Dv+iAwRkomjrLhYtEhfTJXB9AlhOvJpKYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAz6O+YQJWvgdhjQiQnXMC4jUHYMMB8GA1UdIwQY MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf01R BOCz/IAPSw561XOxU0NB543hGUO2Jaa6hymXQtownk3t4WYZWRr9rwdAH+9nRGT8 o4RB5p+PlTk5n/Up6X3mbSHOSc5ZuzQAzgupHcszII11scNvYZ9ylthTDgZRjrCS QXQN1Yu9RdkFfD0HWbSQGVfQRO3SZDuZeVxnOvdunKi9bCn9Ecr4Ipes/STyBgFU vDO9YITQxb1sKwjRTcg+iKKZ/FCrDfN2oPvSduNDKjF+uSMHpN9gGDb5oI1odopB d8mqvfw59cPmNeVpSBRt25IeoYrlncNfoK4OeL7txmB2eurabs5koxEAtRqyVVUW ywn9m5LbfZnoNs82ww== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:22 2025 by rpki-client