This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json) Hash identifier: fkQb/FOrlPJ62h4hFDBat6sWvt9PTVH2JEOCkVf/nCM= Subject key identifier: AF:83:D3:70:CF:19:82:B9:A8:B7:E3:5C:6B:86:6A:D6:21:0F:F2:72 Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Certificate serial: 019AAC4B8BC976920669071CA1C5A2A6BA2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft Manifest number: 1137 Signing time: Sat 22 Nov 2025 16:00:23 +0000 Manifest this update: Sat 22 Nov 2025 16:00:23 +0000 Manifest next update: Sun 23 Nov 2025 16:00:23 +0000 Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: 0fcJ5bv6Hl19b9ULLXNTf0YvM3GCUJ29h4Fwp+J584A=) 2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=) 3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:8b:c9:76:92:06:69:07:1c:a1:c5:a2:a6:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Validity Not Before: Nov 22 16:00:23 2025 GMT Not After : Nov 23 16:00:23 2025 GMT Subject: CN=af83d370cf1982b9a8b7e35c6b866ad6210ff272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:15:09:39:0b:06:e2:57:d2:16:1d:8f:26:26: 5d:f6:ab:33:91:c8:0b:f2:91:e7:25:ac:3e:9a:55: db:01:1d:2e:cb:eb:e3:03:06:de:4d:8e:45:89:d0: 7f:87:3e:8c:3f:4e:f8:b8:d7:e8:37:2b:11:cf:ce: 79:3a:e1:52:8c:13:3a:d4:c2:65:d4:38:ad:a3:44: 85:f4:2a:3d:c7:18:f4:27:47:68:eb:18:67:17:6e: 9d:9f:51:17:77:79:e2:2f:ce:8d:d3:37:79:62:a2: d4:79:5a:94:c7:e9:25:d3:dc:48:ee:2f:b0:7a:a7: 4b:83:ca:84:84:fe:0a:07:d1:4e:65:b9:64:f1:c0: 40:08:5a:f0:8e:01:b1:f7:05:23:9b:08:92:bd:f9: ab:7f:93:b3:93:0d:bb:41:ea:61:db:4c:02:ed:b3: d5:96:8c:56:02:5f:f0:28:2c:2e:17:27:66:93:2c: 9d:ed:96:4c:79:af:d5:f9:ce:b4:05:47:75:f6:8a: 3e:69:c7:ab:5a:75:15:29:84:54:49:dd:20:8e:9b: be:cf:27:07:b0:ad:92:6c:f4:1f:6f:29:3f:f3:16: ce:e5:40:ee:ce:90:d0:a1:b4:3f:9d:c4:14:99:49: 2c:2f:79:ef:0f:50:b4:af:24:3e:d3:e8:44:0c:17: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:83:D3:70:CF:19:82:B9:A8:B7:E3:5C:6B:86:6A:D6:21:0F:F2:72 X509v3 Authority Key Identifier: keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ef:c3:86:95:40:f0:c6:d3:e0:a9:48:cd:16:26:9c:eb:ac: 15:d0:12:2a:9e:e3:00:92:cc:92:69:9b:32:47:f3:52:34:94: fe:2e:64:f5:fc:2c:d2:a7:c0:b8:7a:53:47:89:14:5b:d3:7b: 25:cc:f4:06:2a:01:bc:14:b9:a9:3a:cc:52:d0:10:3b:b2:0f: 82:05:ed:aa:f3:79:7f:8d:24:b7:d6:43:fa:1b:46:53:0d:6a: 0f:ff:92:d2:88:09:24:20:95:34:62:16:e7:8e:cc:cb:54:13: 7b:f5:8d:c7:6f:b3:f7:00:2a:65:04:c5:21:ae:39:db:7b:0b: e9:2d:a9:5e:61:2e:24:4a:a7:f1:c9:b3:30:00:98:77:51:6d: 6b:38:40:35:ff:95:d2:9d:c1:40:9b:50:15:76:71:80:1f:8b: 3b:f3:46:02:d6:5d:a9:4b:a8:9a:90:db:0b:78:8d:db:73:09: 9a:c6:27:25:41:23:c6:10:b8:d8:9b:92:bb:8c:12:a1:95:e7: 19:b0:bb:2b:a2:a9:56:1e:60:8b:4b:2f:c6:78:0b:91:d9:c5: cd:cd:ba:9c:a1:40:77:d7:b0:59:4b:74:72:a5:a0:40:1a:55: 00:f2:21:c2:e6:4d:82:66:25:f2:8b:c9:7c:4a:6c:33:50:88: 57:0c:85:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS4vJdpIGaQccocWiproqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh NmNhMjgwHhcNMjUxMTIyMTYwMDIzWhcNMjUxMTIzMTYwMDIzWjAzMTEwLwYDVQQD EyhhZjgzZDM3MGNmMTk4MmI5YThiN2UzNWM2Yjg2NmFkNjIxMGZmMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hUJOQsG4lfSFh2PJiZd9qszkcgL 8pHnJaw+mlXbAR0uy+vjAwbeTY5FidB/hz6MP074uNfoNysRz855OuFSjBM61MJl 1Dito0SF9Co9xxj0J0do6xhnF26dn1EXd3niL86N0zd5YqLUeVqUx+kl09xI7i+w eqdLg8qEhP4KB9FOZblk8cBACFrwjgGx9wUjmwiSvfmrf5Ozkw27Qeph20wC7bPV loxWAl/wKCwuFydmkyyd7ZZMea/V+c60BUd19oo+acerWnUVKYRUSd0gjpu+zycH sK2SbPQfbyk/8xbO5UDuzpDQobQ/ncQUmUksL3nvD1C0ryQ+0+hEDBdjJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+D03DPGYK5qLfjXGuGatYhD/JyMB8GA1UdIwQY MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme/DhpVA 8MbT4KlIzRYmnOusFdASKp7jAJLMkmmbMkfzUjSU/i5k9fws0qfAuHpTR4kUW9N7 Jcz0BioBvBS5qTrMUtAQO7IPggXtqvN5f40kt9ZD+htGUw1qD/+S0ogJJCCVNGIW 547My1QTe/WNx2+z9wAqZQTFIa4523sL6S2pXmEuJEqn8cmzMACYd1FtazhANf+V 0p3BQJtQFXZxgB+LO/NGAtZdqUuompDbC3iN23MJmsYnJUEjxhC42JuSu4wSoZXn GbC7K6KpVh5gi0svxngLkdnFzc26nKFAd9ewWUt0cqWgQBpVAPIhwuZNgmYl8ovJ fEpsM1CIVwyFlg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:21 2025 by rpki-client