This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft File: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json) Hash identifier: w+MsKdNt2lxQ+/1GfyDNaNuyZAGA/2qldZTEobXC1zw= Subject key identifier: 98:75:CA:D7:B3:EC:A5:F3:BD:B2:B8:87:1F:CE:83:6E:90:7F:61:6D Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Certificate serial: 019B3D59A41AC47944B6EA4E3B301478F4E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft Manifest number: 15F8 Signing time: Sat 20 Dec 2025 20:00:43 +0000 Manifest this update: Sat 20 Dec 2025 20:00:43 +0000 Manifest next update: Sun 21 Dec 2025 20:00:43 +0000 Files and hashes: 1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: Axyqo+q5xdHPBPVDV0912f9RlaE268ZAt58loSHZUuM=) 2: B0cXI8R5Jkebb1b4_AZX0QkItTI.roa (hash: qU3eVg9ZrPWSREJWyOFSPkiCSojLDzpwNgzDMrBwxd0=) 3: LOHHuqh5utbV1sVMvLXO9x4HEv0.roa (hash: zlFj/WpL6Qd/ZD0zeyPqhzWIhhj8Nvvt5witl0z9Yic=) 4: ndH6JM8LGw_-a86HEW7P-1qV0gM.roa (hash: PbblUtc0vHojXJBh5Iy7RwAYCiNyZajL5DEQ2efa9es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:a4:1a:c4:79:44:b6:ea:4e:3b:30:14:78:f4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Validity Not Before: Dec 20 20:00:43 2025 GMT Not After : Dec 21 20:00:43 2025 GMT Subject: CN=9875cad7b3eca5f3bdb2b8871fce836e907f616d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:a5:08:61:7b:e3:ec:25:06:bc:e1:db:3c: 38:d3:82:3b:58:12:0a:e5:8d:5a:f0:1f:cd:3a:ec: 57:88:3d:e0:ca:82:1a:1a:67:44:f5:39:00:d1:b2: 7a:1d:49:19:ca:86:bd:67:17:45:64:07:26:23:87: fd:d5:bf:5a:a2:01:cc:38:1c:82:85:6b:c9:59:00: 54:07:56:92:a9:a9:25:6f:c2:86:34:05:ef:1a:55: dc:91:82:ef:5b:b4:22:69:ec:36:88:37:d0:cd:37: 63:21:7a:e3:4e:ab:ec:94:76:3b:85:45:e7:93:3b: 51:a7:c6:3a:d4:2f:58:d3:f7:34:c6:dc:38:67:0c: 02:7f:5c:bc:10:7e:58:c0:f4:58:59:79:1f:7b:5f: 91:08:4d:10:eb:aa:ab:60:f4:ae:77:0e:4d:48:fd: 49:32:5d:29:13:4c:66:e5:96:74:a0:df:7d:7a:b0: 37:ec:f4:e3:d2:8e:52:dc:4b:5c:8f:68:0d:25:8c: d6:fd:e5:0a:24:7f:5a:e7:c5:a5:58:17:b2:51:7c: 9f:8a:1e:a6:3e:bc:8f:63:8a:b8:8e:a6:fe:7f:3f: 94:f7:ae:b7:3c:87:cb:50:eb:04:69:8f:17:09:31: ea:2b:9d:8f:f4:51:68:4d:ba:cd:fe:12:ac:57:da: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:CA:D7:B3:EC:A5:F3:BD:B2:B8:87:1F:CE:83:6E:90:7F:61:6D X509v3 Authority Key Identifier: keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:00:e9:19:f0:f0:ef:c5:0c:c4:22:bb:f7:43:51:59:0f: f0:37:15:5a:2a:5f:71:43:21:c3:ec:ee:83:02:3f:52:32:cf: 85:5c:5f:c1:40:bd:fc:7b:af:74:46:e4:cb:25:cf:23:0b:b6: 45:9c:ca:74:20:84:ad:cd:21:54:f2:3f:17:da:ea:55:a0:1f: 2e:a2:99:68:a5:35:ea:f1:93:87:d5:55:17:a2:57:12:e6:ed: 8d:ec:ff:38:3d:d0:b5:23:72:d9:12:c8:a7:cf:ec:84:2e:e7: 92:f6:1d:bb:ee:e1:76:4a:6d:25:67:12:39:bd:5a:a5:d1:03: 3d:5a:37:4e:bd:99:0d:fc:94:79:a5:33:1f:23:5a:80:9b:d0: ba:4e:a4:0b:48:ec:cf:d0:71:bd:e0:96:7c:62:eb:58:57:29: 56:14:82:9e:f7:5f:3a:3a:da:d4:56:d7:c3:cf:3f:f6:56:df: 79:9e:c5:9f:2c:ea:06:99:ea:48:27:1f:c3:d2:ec:df:f0:3d: 15:ba:3d:3f:92:83:c4:28:82:3b:c1:d7:d7:bb:b7:e2:8d:4b: 5f:3a:e2:32:7a:06:40:1c:7d:7b:4a:43:5e:9c:9d:04:72:01: 33:8e:0d:55:53:c1:5c:da:44:a2:66:ac:1e:90:83:48:fc:02: f0:6a:2d:03 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9WaQaxHlEtupOOzAUePTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1 NTc2ODYwHhcNMjUxMjIwMjAwMDQzWhcNMjUxMjIxMjAwMDQzWjAzMTEwLwYDVQQD Eyg5ODc1Y2FkN2IzZWNhNWYzYmRiMmI4ODcxZmNlODM2ZTkwN2Y2MTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/ilCGF74+wlBrzh2zw404I7WBIK 5Y1a8B/NOuxXiD3gyoIaGmdE9TkA0bJ6HUkZyoa9ZxdFZAcmI4f91b9aogHMOByC hWvJWQBUB1aSqaklb8KGNAXvGlXckYLvW7Qiaew2iDfQzTdjIXrjTqvslHY7hUXn kztRp8Y61C9Y0/c0xtw4ZwwCf1y8EH5YwPRYWXkfe1+RCE0Q66qrYPSudw5NSP1J Ml0pE0xm5ZZ0oN99erA37PTj0o5S3Etcj2gNJYzW/eUKJH9a58WlWBeyUXyfih6m PryPY4q4jqb+fz+U9663PIfLUOsEaY8XCTHqK52P9FFoTbrN/hKsV9rKrQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJh1ytez7KXzvbK4hx/Og26Qf2FtMB8GA1UdIwQY MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk LWZhYWM5MDgwMjkwOC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU3LzZhYzRkYS1mNTZhLTRjMWItYjViZC1mYWFjOTA4MDI5 MDgvMS8xLTBocUM2bTVzSjlONUhsaTRzS3VRZnhWZG9ZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW4A 6Rnw8O/FDMQiu/dDUVkP8DcVWipfcUMhw+zugwI/UjLPhVxfwUC9/HuvdEbkyyXP Iwu2RZzKdCCErc0hVPI/F9rqVaAfLqKZaKU16vGTh9VVF6JXEubtjez/OD3QtSNy 2RLIp8/shC7nkvYdu+7hdkptJWcSOb1apdEDPVo3Tr2ZDfyUeaUzHyNagJvQuk6k C0jsz9BxveCWfGLrWFcpVhSCnvdfOjra1FbXw88/9lbfeZ7FnyzqBpnqSCcfw9Ls 3/A9Fbo9P5KDxCiCO8HX17u34o1LXzriMnoGQBx9e0pDXpydBHIBM44NVVPBXNpE omasHpCDSPwC8GotAw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:32 2025 by rpki-client