This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json) Hash identifier: naBmGyf9wVWh9qOoyeXRJSE03v6jkPIL1Oe2m9+c87k= Subject key identifier: F5:00:6C:92:E9:F0:2A:94:48:23:CB:0F:C3:42:E3:3A:05:73:99:14 Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Certificate serial: 019B563E2328C5226E66D6EB1EA65A10B2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft Manifest number: 0755 Signing time: Thu 25 Dec 2025 16:01:11 +0000 Manifest this update: Thu 25 Dec 2025 16:01:11 +0000 Manifest next update: Fri 26 Dec 2025 16:01:11 +0000 Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: P4ayGiInPgrYNGA0JZcit79UxMfMrixcCrmwmI8Ds5g=) 2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3e:23:28:c5:22:6e:66:d6:eb:1e:a6:5a:10:b2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Validity Not Before: Dec 25 16:01:11 2025 GMT Not After : Dec 26 16:01:11 2025 GMT Subject: CN=f5006c92e9f02a944823cb0fc342e33a05739914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:2f:93:3d:8d:bd:82:d5:e2:ec:6e:de:00: 78:c5:0c:3d:be:af:76:14:32:cb:e7:26:81:c1:2a: 5d:08:86:f5:ed:b4:5d:8d:66:ae:45:79:78:35:a0: 31:45:87:bf:38:7a:cf:b8:c7:ed:4e:f9:f3:41:e4: 44:5d:f5:9f:15:b1:cc:27:2b:d7:c5:d1:cb:78:46: 49:28:1a:cd:1b:7c:18:8d:bf:52:6f:e3:29:6c:db: 75:92:63:44:f8:0b:d9:34:4f:49:28:f6:a7:8a:ee: 72:77:8e:e4:29:31:6a:50:ca:52:91:85:c1:4c:38: 16:4f:04:04:a5:62:14:cc:90:f1:bd:d0:07:c1:3c: 40:6a:30:e8:93:f3:a0:8e:ca:3d:67:3a:72:0f:f6: d1:4b:7e:cd:89:e7:a7:d0:d5:05:c8:fb:ff:87:d9: de:df:0c:8a:86:bb:4a:4a:ef:0f:69:32:2e:c4:40: ba:dc:ae:ac:15:b0:71:fd:7e:66:d5:78:40:db:13: 67:92:d7:5d:b7:4f:f2:a0:ae:5a:84:35:44:1c:41: f5:19:a4:94:d5:54:48:6e:27:5f:27:e4:52:2d:45: ac:20:bf:6d:db:89:0b:b7:22:4d:6a:9e:44:83:cc: 25:58:4b:cc:f2:d9:eb:b3:8d:ec:64:04:b9:87:fa: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:00:6C:92:E9:F0:2A:94:48:23:CB:0F:C3:42:E3:3A:05:73:99:14 X509v3 Authority Key Identifier: keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:9c:e3:70:b7:bf:35:b5:f6:0b:e4:ba:b2:00:c3:7a:5e:27: df:de:d2:c6:01:64:7e:1c:32:67:11:83:7d:ca:63:dc:48:32: 60:97:64:f4:07:d7:e0:34:3e:d6:3a:8d:40:a6:6c:9f:90:3a: cd:40:69:82:cf:a6:fa:7f:7c:9a:8d:b4:d1:b8:bd:41:ff:d2: ef:b8:26:ad:3c:f2:11:53:b5:ea:18:ef:52:3f:32:f2:42:5b: 01:c7:f4:bc:eb:e9:a8:10:9d:b2:2a:9f:a0:0b:52:63:84:29: 66:8b:e6:6a:e2:3a:34:df:c2:c8:99:df:64:bd:f2:99:2f:9b: e3:37:60:32:37:01:42:35:ae:11:fd:8c:92:18:69:a6:01:3d: 7f:2a:2d:a0:76:73:98:9c:5b:73:f0:3a:5d:13:1e:df:91:83: a0:b2:56:27:8b:b6:1f:01:47:ed:e0:b3:a3:47:d1:e4:1e:b7: d0:8f:eb:03:b5:cd:d6:ee:d7:97:f9:c5:ce:6b:48:95:03:18: 66:ec:7f:9e:54:9e:30:da:17:b4:af:38:8b:45:f8:d9:c1:9a: 75:fe:20:f8:e2:58:85:f9:32:79:a4:41:7a:63:83:e7:ee:e6: a1:c1:a6:46:af:9e:3b:a5:38:77:fc:d8:25:9d:38:48:7c:14: cf:94:bd:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPiMoxSJuZtbrHqZaELLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy ZjMyMWIwHhcNMjUxMjI1MTYwMTExWhcNMjUxMjI2MTYwMTExWjAzMTEwLwYDVQQD EyhmNTAwNmM5MmU5ZjAyYTk0NDgyM2NiMGZjMzQyZTMzYTA1NzM5OTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dEvkz2NvYLV4uxu3gB4xQw9vq92 FDLL5yaBwSpdCIb17bRdjWauRXl4NaAxRYe/OHrPuMftTvnzQeREXfWfFbHMJyvX xdHLeEZJKBrNG3wYjb9Sb+MpbNt1kmNE+AvZNE9JKPaniu5yd47kKTFqUMpSkYXB TDgWTwQEpWIUzJDxvdAHwTxAajDok/Ogjso9ZzpyD/bRS37Nieen0NUFyPv/h9ne 3wyKhrtKSu8PaTIuxEC63K6sFbBx/X5m1XhA2xNnktddt0/yoK5ahDVEHEH1GaSU 1VRIbidfJ+RSLUWsIL9t24kLtyJNap5Eg8wlWEvM8tnrs43sZAS5h/rwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUAbJLp8CqUSCPLD8NC4zoFc5kUMB8GA1UdIwQY MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1JzjcLe/ NbX2C+S6sgDDel4n397SxgFkfhwyZxGDfcpj3EgyYJdk9AfX4DQ+1jqNQKZsn5A6 zUBpgs+m+n98mo200bi9Qf/S77gmrTzyEVO16hjvUj8y8kJbAcf0vOvpqBCdsiqf oAtSY4QpZovmauI6NN/CyJnfZL3ymS+b4zdgMjcBQjWuEf2MkhhppgE9fyotoHZz mJxbc/A6XRMe35GDoLJWJ4u2HwFH7eCzo0fR5B630I/rA7XN1u7Xl/nFzmtIlQMY Zux/nlSeMNoXtK84i0X42cGadf4g+OJYhfkyeaRBemOD5+7mocGmRq+eO6U4d/zY JZ04SHwUz5S93g== -----END CERTIFICATE-----Generated at Thu Dec 25 22:14:00 2025 by rpki-client