This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json) Hash identifier: +4oKVhG4IJyhV9h5oG+K1YzzUGDYdwF2Wq+DdK2LwGw= Subject key identifier: 38:25:99:0C:62:54:B0:3F:D3:14:07:E6:5E:26:AE:07:BF:D8:63:56 Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf Certificate serial: 019AACF08E55D724ED1865DC5DA895202434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft Manifest number: 173F Signing time: Sat 22 Nov 2025 19:00:37 +0000 Manifest this update: Sat 22 Nov 2025 19:00:37 +0000 Manifest next update: Sun 23 Nov 2025 19:00:37 +0000 Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: KlIOCBXPJ7v7rq4Xq4WZSbE/wUza6RJlmPqThTwmyDs=) 2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=) 3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f0:8e:55:d7:24:ed:18:65:dc:5d:a8:95:20:24:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf Validity Not Before: Nov 22 19:00:37 2025 GMT Not After : Nov 23 19:00:37 2025 GMT Subject: CN=3825990c6254b03fd31407e65e26ae07bfd86356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:f3:65:e0:e1:e0:c8:30:38:e1:87:44:ea: 10:e7:6f:f2:44:89:11:c4:64:20:18:0f:ce:f9:51: 76:91:d3:34:b4:53:c8:d1:dc:c0:c0:96:de:6f:7b: 07:15:c5:67:f2:00:1d:9f:99:7a:a4:cd:e7:2c:cc: fe:90:02:13:eb:0e:6b:32:c0:6b:0c:59:81:7e:58: 80:2b:96:3c:85:66:96:93:99:df:f1:bb:46:0c:8a: b3:a3:25:d7:25:b4:bb:c9:35:82:44:6a:7c:fc:da: 63:4b:45:dd:c8:76:6b:98:06:9f:80:dd:f9:ac:3f: 30:b1:ba:d0:4e:b2:d3:3c:b2:a2:54:fd:c7:ed:b8: 63:e8:52:ce:8f:f1:01:e5:91:da:b2:1c:ba:69:85: ee:2c:dd:e6:8e:22:92:f2:7d:24:f8:c1:6c:f6:5a: 87:f1:49:2e:44:1a:c2:da:96:1b:9f:30:3a:bf:eb: 61:3f:ab:47:35:85:e3:6a:f6:82:e7:00:3d:69:6c: f4:4a:f2:f7:ce:6c:c2:b5:1d:84:94:f8:24:e7:b9: eb:1f:03:5f:26:bc:cc:b9:7f:a4:b3:2e:08:36:15: 63:20:ff:40:e6:fe:af:19:12:30:d0:43:7f:00:98: a8:ac:c8:3c:c8:4b:92:5d:93:3a:21:0e:38:ba:4e: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:25:99:0C:62:54:B0:3F:D3:14:07:E6:5E:26:AE:07:BF:D8:63:56 X509v3 Authority Key Identifier: keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:46:ea:ee:27:90:41:23:fd:50:f7:bf:8e:6d:ea:75:b0:6d: 9a:21:62:ae:bb:63:c0:cd:cc:66:bc:4b:6d:48:8c:e5:31:41: c6:2c:6f:ab:46:1c:c3:cd:d9:0e:89:87:e7:4c:84:07:19:11: b2:65:d7:51:3a:ce:13:aa:6d:ed:6c:9c:8d:4d:3f:63:93:f2: 33:32:3b:0f:a4:dc:7f:7d:0a:4f:e2:99:8a:73:10:7c:89:a2: 05:be:b9:0f:09:84:ff:4f:f0:3d:3e:0e:46:8f:d0:0e:2f:c7: 93:04:c1:2f:9e:28:04:61:7d:50:71:6c:d3:1f:58:97:7c:49: 74:58:de:9f:38:a6:5c:65:04:c0:2b:fe:bf:6a:fe:3f:87:ff: a9:36:aa:92:e9:18:77:02:3c:73:17:f3:f6:d7:42:b7:5c:10: 3e:9b:ae:12:52:b1:aa:0f:72:2c:4c:40:a4:7c:13:b9:68:be: 3f:98:4b:48:f0:e8:bd:56:b7:03:c8:bf:66:00:3d:14:6f:4f: b4:cb:39:6f:da:79:19:33:ef:ff:ee:73:47:b6:60:a8:8f:93: a9:7f:a1:93:81:1e:97:38:c9:25:79:26:85:f4:d4:aa:06:15: fb:7d:dd:86:90:0e:4e:1f:38:c2:38:8a:a9:3d:2c:3a:72:69: 57:b3:16:32 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZqs8I5V1yTtGGXcXaiVICQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw MGViY2YwHhcNMjUxMTIyMTkwMDM3WhcNMjUxMTIzMTkwMDM3WjAzMTEwLwYDVQQD EygzODI1OTkwYzYyNTRiMDNmZDMxNDA3ZTY1ZTI2YWUwN2JmZDg2MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QzzZeDh4MgwOOGHROoQ52/yRIkR xGQgGA/O+VF2kdM0tFPI0dzAwJbeb3sHFcVn8gAdn5l6pM3nLMz+kAIT6w5rMsBr DFmBfliAK5Y8hWaWk5nf8btGDIqzoyXXJbS7yTWCRGp8/NpjS0XdyHZrmAafgN35 rD8wsbrQTrLTPLKiVP3H7bhj6FLOj/EB5ZHashy6aYXuLN3mjiKS8n0k+MFs9lqH 8UkuRBrC2pYbnzA6v+thP6tHNYXjavaC5wA9aWz0SvL3zmzCtR2ElPgk57nrHwNf JrzMuX+ksy4INhVjIP9A5v6vGRIw0EN/AJiorMg8yEuSXZM6IQ44uk4vKwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDglmQxiVLA/0xQH5l4mrge/2GNWMB8GA1UdIwQY MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1 NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0bq 7ieQQSP9UPe/jm3qdbBtmiFirrtjwM3MZrxLbUiM5TFBxixvq0Ycw83ZDomH50yE BxkRsmXXUTrOE6pt7WycjU0/Y5PyMzI7D6Tcf30KT+KZinMQfImiBb65DwmE/0/w PT4ORo/QDi/HkwTBL54oBGF9UHFs0x9Yl3xJdFjenzimXGUEwCv+v2r+P4f/qTaq kukYdwI8cxfz9tdCt1wQPpuuElKxqg9yLExApHwTuWi+P5hLSPDovVa3A8i/ZgA9 FG9PtMs5b9p5GTPv/+5zR7ZgqI+TqX+hk4EelzjJJXkmhfTUqgYV+33dhpAOTh84 wjiKqT0sOnJpV7MWMg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:59 2025 by rpki-client