This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json) Hash identifier: LteIwziknwzzoypJ2WwJYkVnhOLDuXjUjOxHYVS3Tgw= Subject key identifier: 18:04:9B:29:08:DC:D1:07:1B:5B:62:10:3C:AF:1A:FE:E8:16:7D:83 Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Certificate serial: 019B378EB49B887667A668B1955EBD8A4068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft Manifest number: 1427 Signing time: Fri 19 Dec 2025 17:00:57 +0000 Manifest this update: Fri 19 Dec 2025 17:00:57 +0000 Manifest next update: Sat 20 Dec 2025 17:00:57 +0000 Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: GEqsxENMxD35nC169YFa3Df41t6z7RsfkXJBbjMq6Uk=) 2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=) 3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:b4:9b:88:76:67:a6:68:b1:95:5e:bd:8a:40:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Validity Not Before: Dec 19 17:00:57 2025 GMT Not After : Dec 20 17:00:57 2025 GMT Subject: CN=18049b2908dcd1071b5b62103caf1afee8167d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:67:06:6e:2c:68:e6:18:0d:b4:e0:27:ee: eb:a3:6d:5a:60:be:7f:1b:62:39:fe:33:c9:62:cd: 42:ec:06:a5:ba:24:1b:6e:86:38:26:62:07:f4:3c: 03:4b:2d:3b:9c:90:41:16:04:fb:86:88:28:98:f7: 7e:72:63:bb:8d:ec:54:dc:7d:fd:fa:75:3a:cd:24: ae:44:9f:b9:24:19:0a:11:2b:c9:d4:ae:91:53:8b: 99:de:e8:36:9a:c3:bb:0d:e9:c5:b9:28:26:2a:a9: 45:61:01:01:3a:33:c9:4d:8f:2a:0b:b8:52:7f:d4: b1:95:81:77:4b:9a:0f:03:a7:d8:99:be:a1:57:57: 14:77:5e:64:17:57:8a:d7:0b:5a:87:51:87:58:a7: bb:29:fb:c5:bd:c7:86:9d:74:f6:fb:dd:9c:6e:4a: 0c:0e:66:5e:e2:fc:67:bc:59:91:24:32:c8:28:83: 4d:66:d2:c2:c3:1e:e2:c2:02:7f:93:0c:72:43:00: 44:c2:38:1e:d3:79:4e:7f:b4:7d:39:28:b9:9c:37: 07:62:af:52:cc:b8:ef:f4:c2:03:4e:cd:83:26:46: 7a:75:dc:4e:01:c3:61:df:6e:ef:39:55:a2:2d:24: 48:91:11:4b:14:0f:09:e8:a0:66:33:a9:55:d5:21: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:04:9B:29:08:DC:D1:07:1B:5B:62:10:3C:AF:1A:FE:E8:16:7D:83 X509v3 Authority Key Identifier: keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:d5:ef:02:63:fd:c2:35:5f:aa:e9:23:f3:0b:3f:fa:2c:22: 45:a1:e1:e2:f9:32:a0:bc:5f:fa:73:f4:e3:b2:ce:95:8b:d5: 4a:69:59:a7:f5:2a:1a:48:89:26:c4:12:42:06:d3:8d:dc:e7: 74:41:59:12:5e:8c:f2:17:34:d0:ba:eb:37:73:32:3e:99:e8: 0d:32:a6:9c:b2:12:0a:0b:f1:4b:ee:65:46:37:bd:f2:45:3c: 01:75:5b:00:be:17:b0:a6:55:3a:39:75:b6:72:48:ce:88:7b: 01:3d:32:65:06:10:f6:92:30:e4:13:d2:bd:0f:44:09:98:71: 9a:4b:1c:40:c1:98:19:ad:df:36:ee:55:8f:3c:92:d0:2c:80: 11:9e:56:34:88:48:1f:f9:7c:f3:35:e2:21:20:73:26:86:f1: 91:25:38:02:3f:60:14:ee:c6:e2:7f:ff:81:b6:99:69:7b:ad: ae:f2:a3:17:af:bd:9c:33:63:ce:01:61:ec:e3:2a:f7:21:e6: 3f:2b:d0:90:ae:30:85:a1:90:53:2e:ef:3e:98:52:6d:86:5d: 49:45:d2:26:47:86:7b:5b:f2:33:bd:81:1b:c1:e9:0d:9d:bc: 28:f5:83:09:ae:10:1f:b7:7a:d4:48:c4:9e:08:c5:17:64:96: 14:9b:99:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs3jrSbiHZnpmixlV69ikBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy MjI4YTQwHhcNMjUxMjE5MTcwMDU3WhcNMjUxMjIwMTcwMDU3WjAzMTEwLwYDVQQD EygxODA0OWIyOTA4ZGNkMTA3MWI1YjYyMTAzY2FmMWFmZWU4MTY3ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdNnBm4saOYYDbTgJ+7ro21aYL5/ G2I5/jPJYs1C7AaluiQbboY4JmIH9DwDSy07nJBBFgT7hogomPd+cmO7jexU3H39 +nU6zSSuRJ+5JBkKESvJ1K6RU4uZ3ug2msO7DenFuSgmKqlFYQEBOjPJTY8qC7hS f9SxlYF3S5oPA6fYmb6hV1cUd15kF1eK1wtah1GHWKe7KfvFvceGnXT2+92cbkoM DmZe4vxnvFmRJDLIKINNZtLCwx7iwgJ/kwxyQwBEwjge03lOf7R9OSi5nDcHYq9S zLjv9MIDTs2DJkZ6ddxOAcNh327vOVWiLSRIkRFLFA8J6KBmM6lV1SF66QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBgEmykI3NEHG1tiEDyvGv7oFn2DMB8GA1UdIwQY MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8dXv AmP9wjVfqukj8ws/+iwiRaHh4vkyoLxf+nP047LOlYvVSmlZp/UqGkiJJsQSQgbT jdzndEFZEl6M8hc00LrrN3MyPpnoDTKmnLISCgvxS+5lRje98kU8AXVbAL4XsKZV Ojl1tnJIzoh7AT0yZQYQ9pIw5BPSvQ9ECZhxmkscQMGYGa3fNu5VjzyS0CyAEZ5W NIhIH/l88zXiISBzJobxkSU4Aj9gFO7G4n//gbaZaXutrvKjF6+9nDNjzgFh7OMq 9yHmPyvQkK4whaGQUy7vPphSbYZdSUXSJkeGe1vyM72BG8HpDZ28KPWDCa4QH7d6 1EjEngjFF2SWFJuZVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:14:05 2025 by rpki-client