This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json) Hash identifier: /HsF/0/P158lalpneFHx0XZL0gLeQpqUH9d+nFdPdNo= Subject key identifier: 69:1B:84:81:EC:B8:6F:C8:B9:64:C4:B6:AC:F8:3A:26:A3:A1:A9:B5 Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Certificate serial: 019B337B2BF3AA3A9BA611EA81EE0CB68147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft Manifest number: 0743 Signing time: Thu 18 Dec 2025 22:01:08 +0000 Manifest this update: Thu 18 Dec 2025 22:01:08 +0000 Manifest next update: Fri 19 Dec 2025 22:01:08 +0000 Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: s9q0Za7Fo1UF0VdEy55Do5R8z/6+1xRYxTK5VZI14Og=) 2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:2b:f3:aa:3a:9b:a6:11:ea:81:ee:0c:b6:81:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Validity Not Before: Dec 18 22:01:08 2025 GMT Not After : Dec 19 22:01:08 2025 GMT Subject: CN=691b8481ecb86fc8b964c4b6acf83a26a3a1a9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:34:28:90:8b:5d:10:8c:30:19:2d:cc:42: bd:39:09:82:41:84:7d:6e:21:77:53:ac:cd:f0:b7: 49:65:57:ac:88:11:83:a6:1c:e2:6e:22:45:7b:26: 65:1a:17:15:2d:6a:c1:69:0e:86:24:d2:92:0a:25: b2:c9:ea:d4:14:8a:dd:eb:65:eb:12:e4:4c:2b:7c: ee:e5:da:96:8d:6d:eb:ac:18:23:5e:d1:a5:bf:1e: e6:2e:62:55:e4:a6:77:d3:35:00:4e:18:da:28:5e: 71:2a:d3:42:ab:29:43:56:93:98:77:7b:c4:cf:9a: f3:e5:a7:c2:00:37:0c:bd:7f:59:f6:e3:a7:4f:84: 52:8c:4b:90:dd:6d:09:3f:75:ee:a0:e8:50:93:cb: 17:e4:39:fd:bb:8f:b9:7d:c2:4c:10:58:e6:94:13: f8:88:e4:93:07:c7:43:ff:ae:cd:08:51:77:ae:8f: cf:cb:68:be:74:fb:f7:0d:39:d5:19:8a:42:65:9a: c6:4c:19:7d:a3:12:80:8f:a4:a9:ae:ed:1e:22:c0: e3:eb:22:da:35:40:de:51:16:cd:fc:94:4c:38:f0: 53:f6:a3:31:ec:bc:49:31:5b:bf:cf:01:22:58:31: 9a:e1:1f:e0:0f:ff:c3:7f:5e:65:37:d9:13:a2:f8: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:84:81:EC:B8:6F:C8:B9:64:C4:B6:AC:F8:3A:26:A3:A1:A9:B5 X509v3 Authority Key Identifier: keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:cb:1a:90:e5:af:64:db:03:ee:18:05:1e:84:c6:a8:d7:e3: 20:da:ef:5e:5f:54:52:a2:b0:73:c4:b0:2f:95:33:4a:d0:84: d8:04:69:57:a0:96:2a:fc:e3:74:7a:fa:79:dd:0a:ff:54:e7: d4:a6:da:fe:54:94:35:17:cc:7d:ad:80:c8:c6:ec:02:21:89: b1:3c:28:cd:54:d6:f3:bc:e4:33:41:d2:99:e3:1c:84:8d:6e: 0e:fa:0c:e2:cc:a3:e4:e7:0b:df:fa:e2:f5:c3:2e:8e:99:ed: 94:c7:57:f3:9a:82:51:9d:ea:31:3c:85:6a:36:1d:ea:e7:43: ee:1c:07:f5:9a:ab:8d:6f:49:d8:1c:25:ba:1c:e9:95:6e:d4: 66:c4:73:14:49:12:74:8e:10:03:60:2b:52:d3:40:ba:f1:64: b0:74:fc:11:57:e1:f8:68:e0:38:16:47:40:ba:5d:bb:3c:b6: 96:0f:eb:be:b8:39:aa:df:6c:82:ee:a3:c3:2f:97:da:9d:69: 97:98:4f:77:46:15:43:35:53:07:72:41:cf:9b:8e:55:5e:ed: 60:9c:28:8f:72:04:bc:e2:21:ac:27:5e:f9:02:13:27:23:a7: 7e:7c:69:55:5f:28:d7:40:5e:a8:ab:1e:5e:ba:b7:de:f6:02: bd:03:2b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeyvzqjqbphHqge4MtoFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy ZjMyMWIwHhcNMjUxMjE4MjIwMTA4WhcNMjUxMjE5MjIwMTA4WjAzMTEwLwYDVQQD Eyg2OTFiODQ4MWVjYjg2ZmM4Yjk2NGM0YjZhY2Y4M2EyNmEzYTFhOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNo0KJCLXRCMMBktzEK9OQmCQYR9 biF3U6zN8LdJZVesiBGDphzibiJFeyZlGhcVLWrBaQ6GJNKSCiWyyerUFIrd62Xr EuRMK3zu5dqWjW3rrBgjXtGlvx7mLmJV5KZ30zUAThjaKF5xKtNCqylDVpOYd3vE z5rz5afCADcMvX9Z9uOnT4RSjEuQ3W0JP3XuoOhQk8sX5Dn9u4+5fcJMEFjmlBP4 iOSTB8dD/67NCFF3ro/Py2i+dPv3DTnVGYpCZZrGTBl9oxKAj6Spru0eIsDj6yLa NUDeURbN/JRMOPBT9qMx7LxJMVu/zwEiWDGa4R/gD//Df15lN9kTovjKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkbhIHsuG/IuWTEtqz4Oiajoam1MB8GA1UdIwQY MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0MsakOWv ZNsD7hgFHoTGqNfjINrvXl9UUqKwc8SwL5UzStCE2ARpV6CWKvzjdHr6ed0K/1Tn 1Kba/lSUNRfMfa2AyMbsAiGJsTwozVTW87zkM0HSmeMchI1uDvoM4syj5OcL3/ri 9cMujpntlMdX85qCUZ3qMTyFajYd6udD7hwH9ZqrjW9J2BwluhzplW7UZsRzFEkS dI4QA2ArUtNAuvFksHT8EVfh+GjgOBZHQLpduzy2lg/rvrg5qt9sgu6jwy+X2p1p l5hPd0YVQzVTB3JBz5uOVV7tYJwoj3IEvOIhrCde+QITJyOnfnxpVV8o10BeqKse Xrq33vYCvQMrUA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:23 2025 by rpki-client