This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json) Hash identifier: k8G8fwczZLTIzy1uTxwDbfQecHFaYGgxc90HCvImNpE= Subject key identifier: 53:BD:51:7D:FB:59:74:DD:9C:CA:16:24:AB:7A:E5:D1:5D:27:25:28 Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Certificate serial: 019B4701C5DC0F3473226AA77EAD87E41323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 17:00:57 +0000 Manifest this update: Mon 22 Dec 2025 17:00:57 +0000 Manifest next update: Tue 23 Dec 2025 17:00:57 +0000 Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: IIQNEKFjl1G59szmjO4mDrhbrtlx/Pvs/kqqhPbj6jc=) 2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:c5:dc:0f:34:73:22:6a:a7:7e:ad:87:e4:13:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041 Validity Not Before: Dec 22 17:00:57 2025 GMT Not After : Dec 23 17:00:57 2025 GMT Subject: CN=53bd517dfb5974dd9cca1624ab7ae5d15d272528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:38:de:86:4a:ce:01:53:b5:3c:a7:18:58: ec:0e:ca:fc:5f:15:87:c3:f5:8f:7a:d4:9e:fa:18: c9:60:d4:26:87:a9:34:bb:b6:04:d9:7c:2a:dd:cb: 62:33:c2:82:d2:17:af:62:f8:96:72:e6:c7:36:14: 6d:32:3f:b8:90:d1:64:a2:32:43:13:c2:90:77:10: 93:b5:5d:41:8f:08:b8:d3:f3:69:6a:3d:26:3d:67: ff:03:ed:fd:f8:cf:2f:bc:83:69:ef:78:c5:e3:7a: 5b:e1:55:b4:26:67:b8:ad:6e:d3:b8:2b:f1:8e:ac: 83:4c:2f:1a:5f:73:ff:25:0f:10:47:f4:f8:90:27: 75:28:fd:4c:da:56:a8:06:01:f7:d9:f6:30:f7:66: da:36:4d:79:bc:c6:fc:cd:c5:fd:d1:1d:dc:f8:46: 0b:81:8d:94:e7:16:b1:e3:98:85:7a:23:dd:17:7d: 9e:79:c5:cb:64:5a:5a:54:91:bc:82:b6:c0:69:93: dc:88:22:3d:f8:8b:7a:25:86:5e:92:3e:8e:8e:06: 7d:b5:4a:b5:b3:de:9e:da:ec:16:0a:a7:d0:a5:46: d0:b2:56:a5:96:11:e1:aa:a4:a8:bf:41:af:49:77: ae:04:d0:e3:bc:f5:57:4d:4a:8c:18:58:c3:57:4a: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BD:51:7D:FB:59:74:DD:9C:CA:16:24:AB:7A:E5:D1:5D:27:25:28 X509v3 Authority Key Identifier: keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9f:e7:d1:5c:52:fe:11:c6:ee:c5:d0:45:05:66:9e:b4:4b: e0:5c:2c:f1:9e:63:96:a5:c1:cb:0b:03:a9:4c:93:a2:11:ac: 95:b7:57:23:7a:9b:cd:d3:ed:15:8f:b9:17:28:a1:20:a0:ed: eb:aa:c0:d7:83:2e:95:5c:9f:90:a4:f5:78:ce:99:17:bd:a4: f4:c4:91:6e:e3:c3:06:87:5a:25:83:d7:e8:47:ee:a9:2e:6d: 7b:8f:ef:dc:2c:7d:86:8c:69:90:17:39:c3:e8:59:51:36:ef: ea:9d:4c:1d:e1:de:8f:44:de:a8:40:62:52:b5:7f:55:c5:74: 18:e5:1f:bf:e9:e7:a2:a4:79:89:18:74:44:f6:c6:96:00:47: e9:75:6e:82:ce:0d:c6:02:67:55:c8:e6:ef:9a:14:5e:98:06: c1:97:4e:94:04:bd:ba:10:f1:23:25:e9:5c:fc:d3:17:a1:a1: 79:92:b2:4f:11:1c:fc:21:38:0b:af:eb:30:58:28:bd:19:ab: b5:1a:de:48:cc:e4:83:11:c4:48:3e:58:0d:8a:4e:c1:46:38: 6f:02:75:8d:56:2e:56:ae:ac:f5:40:e3:55:d5:b3:fb:d7:35: 06:f9:67:f5:b8:0a:59:02:24:ed:6e:fc:36:a6:76:b4:03:d8: 7e:72:9f:fb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtHAcXcDzRzImqnfq2H5BMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5 MDMwNDEwHhcNMjUxMjIyMTcwMDU3WhcNMjUxMjIzMTcwMDU3WjAzMTEwLwYDVQQD Eyg1M2JkNTE3ZGZiNTk3NGRkOWNjYTE2MjRhYjdhZTVkMTVkMjcyNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw443oZKzgFTtTynGFjsDsr8XxWH w/WPetSe+hjJYNQmh6k0u7YE2Xwq3ctiM8KC0hevYviWcubHNhRtMj+4kNFkojJD E8KQdxCTtV1Bjwi40/Npaj0mPWf/A+39+M8vvINp73jF43pb4VW0Jme4rW7TuCvx jqyDTC8aX3P/JQ8QR/T4kCd1KP1M2laoBgH32fYw92baNk15vMb8zcX90R3c+EYL gY2U5xax45iFeiPdF32eecXLZFpaVJG8grbAaZPciCI9+It6JYZekj6OjgZ9tUq1 s96e2uwWCqfQpUbQslallhHhqqSov0GvSXeuBNDjvPVXTUqMGFjDV0p6LwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFO9UX37WXTdnMoWJKt65dFdJyUoMB8GA1UdIwQY MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3 LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5/n 0VxS/hHG7sXQRQVmnrRL4Fws8Z5jlqXBywsDqUyTohGslbdXI3qbzdPtFY+5Fyih IKDt66rA14MulVyfkKT1eM6ZF72k9MSRbuPDBodaJYPX6EfuqS5te4/v3Cx9hoxp kBc5w+hZUTbv6p1MHeHej0TeqEBiUrV/VcV0GOUfv+nnoqR5iRh0RPbGlgBH6XVu gs4NxgJnVcjm75oUXpgGwZdOlAS9uhDxIyXpXPzTF6GheZKyTxEc/CE4C6/rMFgo vRmrtRreSMzkgxHESD5YDYpOwUY4bwJ1jVYuVq6s9UDjVdWz+9c1Bvln9bgKWQIk 7W78NqZ2tAPYfnKf+w== -----END CERTIFICATE-----Generated at Mon Dec 22 22:35:18 2025 by rpki-client