This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json) Hash identifier: UkokYnXBQnDAKnHuLyZzrM5QSdFyARhniePZy5E5qtQ= Subject key identifier: 16:DB:6B:95:70:01:41:61:BE:31:A3:4A:57:F7:CE:63:8C:69:F6:0A Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Certificate serial: 019B71474EABA7E27EF82D194FF3012CEF8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft Manifest number: 17A6 Signing time: Tue 30 Dec 2025 22:00:57 +0000 Manifest this update: Tue 30 Dec 2025 22:00:57 +0000 Manifest next update: Wed 31 Dec 2025 22:00:57 +0000 Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: +PkCSwc3dA93KurePiCYTg+DdHEtFDh8wzCXgvXIaUc=) 2: 8iGd8L0j6FHu_yxVIMTG7nGhl2o.roa (hash: EtgX9wLO5CJtBR8PjzUlWKaAZQPPQAmS6LoUZ8zB8hc=) 3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:4e:ab:a7:e2:7e:f8:2d:19:4f:f3:01:2c:ef:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Validity Not Before: Dec 30 22:00:57 2025 GMT Not After : Dec 31 22:00:57 2025 GMT Subject: CN=16db6b9570014161be31a34a57f7ce638c69f60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:fe:5f:f2:5b:a0:0d:5d:6c:63:21:27:55: 2e:f2:84:d0:9a:08:95:be:23:10:4d:b4:fa:df:32: ed:d8:5a:3a:f3:e6:67:5b:53:0f:c1:be:c1:8b:1b: 7a:d3:6d:49:80:08:e0:c6:98:72:c5:62:c2:1a:d5: b7:20:32:b8:2b:74:d8:ae:3c:09:4f:e9:af:03:0e: 95:43:73:7a:2a:ba:3e:42:db:6e:e0:90:bd:a4:2b: c4:fa:f0:ad:57:4a:0d:53:b3:53:3c:cb:50:1f:5b: 48:c4:6f:9b:f2:8c:fb:fe:79:93:f1:b8:2b:29:01: 51:13:b3:e2:52:81:9f:aa:b1:a7:d3:70:ec:bd:c8: 13:59:26:cd:47:28:3e:c1:d1:f4:ac:aa:a7:37:76: c1:43:58:85:ee:51:0e:ee:5c:c6:f7:ea:cc:37:ef: c8:4e:ff:5d:68:ec:27:76:a8:fc:42:c3:89:1c:ed: 95:85:14:c9:0e:81:ce:d9:dc:8b:98:bc:c4:2e:d8: e4:87:ae:7d:a9:37:b0:e2:58:c1:a9:81:f9:dd:62: eb:76:af:94:9e:2e:1f:14:75:d4:45:03:a6:57:fa: a3:de:19:92:84:fb:58:9f:70:39:ba:b8:ee:c4:18: cc:d8:4a:68:17:aa:e8:62:67:0b:e3:d3:ae:38:29: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:6B:95:70:01:41:61:BE:31:A3:4A:57:F7:CE:63:8C:69:F6:0A X509v3 Authority Key Identifier: keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:85:31:46:22:c5:33:91:fb:11:b0:2d:2a:f4:86:78:ad:09: a1:3a:35:be:1f:42:af:83:f9:e2:f0:fa:84:ef:26:c6:cc:4e: 5c:df:e8:e9:de:6e:2c:97:e8:42:58:76:0d:5e:00:f4:4c:44: af:8c:44:14:77:f1:c7:61:4b:fd:79:2e:2f:e6:78:72:c9:7e: 62:9b:6a:b3:1b:99:7d:6b:c1:70:24:5d:5d:13:f9:15:66:48: 7c:b9:93:76:34:c5:c1:4b:43:92:e4:e5:e5:32:6a:70:d6:06: f1:ce:d2:6d:1d:17:99:c2:d6:fe:6d:71:ac:18:82:b7:8c:00: fa:18:a4:d0:a7:43:ee:bb:01:33:81:1a:31:76:d3:7c:8a:be: cc:09:fc:cd:6a:fa:be:3b:f8:95:ec:45:c8:46:70:44:a9:17: 70:a0:ce:38:b2:cb:d8:2b:fd:68:37:6d:cc:0a:d4:66:1d:6b: 0f:6e:89:7f:46:ec:0e:f0:2d:1b:04:0b:3e:d7:c7:0f:2d:10: 05:fa:3f:7d:a3:48:ad:67:cd:36:bd:31:7f:b9:50:86:26:7a: ce:59:f0:13:42:35:af:1f:ab:fe:9f:84:3a:ad:14:3b:8a:57: 48:07:d6:d1:7a:75:73:21:06:4d:dd:78:c6:d3:e9:90:9e:9f: 28:98:b9:69 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtxR06rp+J++C0ZT/MBLO+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTlhZWE1NmY1MGZmOGY0MzQyY2JlZTJhZjJmMjg4YTE2 OGM5MzAwHhcNMjUxMjMwMjIwMDU3WhcNMjUxMjMxMjIwMDU3WjAzMTEwLwYDVQQD EygxNmRiNmI5NTcwMDE0MTYxYmUzMWEzNGE1N2Y3Y2U2MzhjNjlmNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hb+X/JboA1dbGMhJ1Uu8oTQmgiV viMQTbT63zLt2Fo68+ZnW1MPwb7Bixt6021JgAjgxphyxWLCGtW3IDK4K3TYrjwJ T+mvAw6VQ3N6Kro+Qttu4JC9pCvE+vCtV0oNU7NTPMtQH1tIxG+b8oz7/nmT8bgr KQFRE7PiUoGfqrGn03DsvcgTWSbNRyg+wdH0rKqnN3bBQ1iF7lEO7lzG9+rMN+/I Tv9daOwndqj8QsOJHO2VhRTJDoHO2dyLmLzELtjkh659qTew4ljBqYH53WLrdq+U ni4fFHXURQOmV/qj3hmShPtYn3A5urjuxBjM2EpoF6roYmcL49OuOCnUJwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBbba5VwAUFhvjGjSlf3zmOMafYKMB8GA1UdIwQY MBaAFPiZrqVvUP+PQ0LL7iry8oihaMkwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KbXVwVzlRXzQ5RFFzdnVLdkx5aUtGb3lUQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1 LTliZjE5ZDg0MjIwZi8xLzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2LzJjMmU2MS03Mjc5LTQ4M2MtODQ3NS05YmYxOWQ4NDIy MGYvMS8xLUptdXBXOVFfNDlEUXN2dUt2THlpS0ZveVRBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYUx RiLFM5H7EbAtKvSGeK0JoTo1vh9Cr4P54vD6hO8mxsxOXN/o6d5uLJfoQlh2DV4A 9ExEr4xEFHfxx2FL/XkuL+Z4csl+YptqsxuZfWvBcCRdXRP5FWZIfLmTdjTFwUtD kuTl5TJqcNYG8c7SbR0XmcLW/m1xrBiCt4wA+hik0KdD7rsBM4EaMXbTfIq+zAn8 zWr6vjv4lexFyEZwRKkXcKDOOLLL2Cv9aDdtzArUZh1rD26Jf0bsDvAtGwQLPtfH Dy0QBfo/faNIrWfNNr0xf7lQhiZ6zlnwE0I1rx+r/p+EOq0UO4pXSAfW0Xp1cyEG Td14xtPpkJ6fKJi5aQ== -----END CERTIFICATE-----Generated at Wed Dec 31 08:01:10 2025 by rpki-client