This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json) Hash identifier: OHtsn4q1zfpTa8qRXy8fEMGv3+y+W0nX3403jnpOZ6A= Subject key identifier: 1C:D6:E3:4B:59:1A:EE:F8:43:1E:54:E1:F6:96:FC:5A:88:73:4A:73 Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87 Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187 Certificate serial: 019B32D609150A8733B912509FF7B32B2FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 19:00:46 +0000 Manifest this update: Thu 18 Dec 2025 19:00:46 +0000 Manifest next update: Fri 19 Dec 2025 19:00:46 +0000 Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: rVbUFXJAFMaHf7D23UT2S1zz8aSReRLm0xuoM3RTuaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:09:15:0a:87:33:b9:12:50:9f:f7:b3:2b:2f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187 Validity Not Before: Dec 18 19:00:46 2025 GMT Not After : Dec 19 19:00:46 2025 GMT Subject: CN=1cd6e34b591aeef8431e54e1f696fc5a88734a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:63:13:67:df:e1:40:ba:b3:be:f0:c1:0d:61: d8:1a:91:0f:e0:3c:cb:8f:4e:65:db:36:ba:55:37: 81:9f:99:55:55:c9:4e:66:3b:63:9d:33:50:af:20: 97:69:d1:f9:7d:00:33:69:6b:ce:eb:e4:43:c7:d8: 2c:36:91:ff:ad:fb:78:11:67:bb:42:b8:0c:51:60: ed:e9:af:f8:b4:0c:04:26:14:2e:c2:01:8f:e0:48: ab:86:94:30:e0:e7:bb:11:93:13:bc:7c:b8:6e:00: 2a:4e:d7:e3:6f:64:64:ea:29:2a:b2:47:26:54:39: b4:a3:45:30:18:9b:f0:bb:30:1b:26:fc:65:b9:96: bd:8a:d6:d0:a8:ef:8f:8b:64:d9:f8:3e:e6:d1:11: ad:49:6a:8c:96:1c:f9:b4:b0:d6:0c:8a:77:d0:52: 6a:e9:6f:21:ba:52:5a:5c:51:84:6c:bb:98:86:0b: 9b:2a:5a:1e:d7:2d:73:bf:c0:7b:f2:cd:62:f7:fe: 3f:6d:05:70:e6:b0:b9:39:63:97:c3:e6:9f:b5:5a: 6f:d2:99:57:b2:6b:a6:26:d1:64:6d:b2:3e:22:08: 12:30:3f:03:89:8e:dd:59:c4:09:ed:da:88:43:a1: 95:60:43:f4:10:da:58:61:ee:09:43:e9:15:6e:70: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D6:E3:4B:59:1A:EE:F8:43:1E:54:E1:F6:96:FC:5A:88:73:4A:73 X509v3 Authority Key Identifier: keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:14:c7:f0:fb:bd:6e:0f:f1:01:1c:aa:d9:4d:8d:5b:f8:05: 0c:8f:21:cc:62:b0:5e:07:dc:1f:ab:0c:26:43:47:76:af:fb: 02:22:8d:ef:86:68:19:99:d8:76:04:e6:8e:3f:9c:ba:83:fb: 3d:f5:94:b4:9c:c9:83:0e:50:04:94:f9:02:74:6e:27:c2:e8: a3:84:ee:6e:55:e5:9c:73:94:7b:c3:63:c6:43:cf:52:bd:ba: 81:b9:ba:c8:90:dc:50:d2:6d:1d:84:3d:78:8a:20:0f:9d:50: 1a:4d:fb:e0:bd:a5:ad:7a:80:eb:63:b3:14:c5:9c:91:a0:3e: 25:63:4e:97:85:7f:b3:ff:45:5b:1c:91:f4:69:0a:f4:67:94: 7b:d3:1d:04:34:cf:25:4c:0f:0e:d1:0d:68:09:14:65:6d:43: c4:af:f0:2b:0e:20:8d:b4:e6:4f:38:af:16:03:35:7f:29:10: df:fd:de:0c:0a:5f:d9:12:60:9b:46:b0:0e:c6:f4:18:9c:c7: 10:d3:e3:12:73:01:93:59:68:59:ce:b8:66:f5:40:07:9d:bb: 4c:ce:d0:74:ea:1f:6f:2b:cc:8c:f9:71:10:6f:03:0d:10:60: de:54:9e:9d:37:bc:34:84:e0:13:52:6e:4f:56:25:17:01:df: e1:e4:e6:4e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsy1gkVCoczuRJQn/ezKy/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYjViMWQ2MWUwOWE0ZTRiMGRkMWIwNWNlZDhlNjUxM2Jj NjYxODcwHhcNMjUxMjE4MTkwMDQ2WhcNMjUxMjE5MTkwMDQ2WjAzMTEwLwYDVQQD EygxY2Q2ZTM0YjU5MWFlZWY4NDMxZTU0ZTFmNjk2ZmM1YTg4NzM0YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimMTZ9/hQLqzvvDBDWHYGpEP4DzL j05l2za6VTeBn5lVVclOZjtjnTNQryCXadH5fQAzaWvO6+RDx9gsNpH/rft4EWe7 QrgMUWDt6a/4tAwEJhQuwgGP4EirhpQw4Oe7EZMTvHy4bgAqTtfjb2Rk6ikqskcm VDm0o0UwGJvwuzAbJvxluZa9itbQqO+Pi2TZ+D7m0RGtSWqMlhz5tLDWDIp30FJq 6W8hulJaXFGEbLuYhgubKloe1y1zv8B78s1i9/4/bQVw5rC5OWOXw+aftVpv0plX smumJtFkbbI+IggSMD8DiY7dWcQJ7dqIQ6GVYEP0ENpYYe4JQ+kVbnCNWQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBzW40tZGu74Qx5U4faW/FqIc0pzMB8GA1UdIwQY MBaAFPu1sdYeCaTksN0bBc7Y5lE7xmGHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03V3gxaDRKcE9TdzNSc0Z6dGptVVR2R1lZYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZThhYTc5LTE1NzYtNGNmYS04OTRh LWIxZTAxMzUwNjc1Yi8xLzEtN1d4MWg0SnBPU3czUnNGenRqbVVUdkdZWWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VlL2U4YWE3OS0xNTc2LTRjZmEtODk0YS1iMWUwMTM1MDY3 NWIvMS8xLTdXeDFoNEpwT1N3M1JzRnp0am1VVHZHWVljLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxTH 8Pu9bg/xARyq2U2NW/gFDI8hzGKwXgfcH6sMJkNHdq/7AiKN74ZoGZnYdgTmjj+c uoP7PfWUtJzJgw5QBJT5AnRuJ8Loo4TublXlnHOUe8NjxkPPUr26gbm6yJDcUNJt HYQ9eIogD51QGk374L2lrXqA62OzFMWckaA+JWNOl4V/s/9FWxyR9GkK9GeUe9Md BDTPJUwPDtENaAkUZW1DxK/wKw4gjbTmTzivFgM1fykQ3/3eDApf2RJgm0awDsb0 GJzHENPjEnMBk1loWc64ZvVAB527TM7QdOofbyvMjPlxEG8DDRBg3lSenTe8NITg E1JuT1YlFwHf4eTmTg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:58 2025 by rpki-client