This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json) Hash identifier: xc75sgt/PDp/e5DTooeVP2hpwQefhHxomHpxwL6BgAU= Subject key identifier: 85:7A:2F:48:45:E2:BC:7D:93:B8:38:7C:6B:AB:20:37:CC:F9:D7:A7 Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc Certificate serial: 019B446EB20DD44CA63C4BA8733502834866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft Manifest number: 0C95 Signing time: Mon 22 Dec 2025 05:01:03 +0000 Manifest this update: Mon 22 Dec 2025 05:01:03 +0000 Manifest next update: Tue 23 Dec 2025 05:01:03 +0000 Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: 7Vf08u5++6qGm9fHo3gTdfL4oQ7IwUHSJQ+/2j1y984=) 2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:b2:0d:d4:4c:a6:3c:4b:a8:73:35:02:83:48:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc Validity Not Before: Dec 22 05:01:03 2025 GMT Not After : Dec 23 05:01:03 2025 GMT Subject: CN=857a2f4845e2bc7d93b8387c6bab2037ccf9d7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:ff:7a:dc:de:c5:95:cc:27:1b:ae:50:2b: b9:3f:47:24:3c:d8:e8:31:63:5c:94:dd:60:4e:82: eb:ba:2d:cb:fb:22:a7:62:34:64:1b:88:ae:af:8f: 35:e7:f6:b2:bd:5d:be:5a:73:10:2a:95:95:de:c5: 89:34:b8:3b:77:33:b5:5d:e4:70:0f:ec:96:81:5e: fd:94:97:d4:e4:8a:2f:de:13:97:78:c9:97:cd:80: ae:fd:8b:e6:1a:73:01:29:29:0e:11:82:28:b2:65: 23:7b:c1:fc:17:f8:82:47:9c:89:35:52:ec:bf:75: 62:49:e9:ff:ef:23:94:4f:79:ed:b1:ae:18:1e:2e: 27:ac:ad:86:2a:1c:66:cd:bc:9e:d8:a9:32:c7:0f: df:e8:e1:5a:ac:b7:22:fc:cc:8a:8c:c6:99:3b:e5: 0b:fb:0d:c9:e0:1c:c9:b4:68:08:d6:2a:52:fd:d5: 83:2d:92:68:4b:f0:aa:55:1b:e0:f3:85:c0:12:1f: f2:ba:16:f8:75:e0:88:a2:07:b7:4c:af:e7:f1:4e: 6c:cc:27:e8:71:ab:c0:be:51:71:1d:55:cf:b6:e1: d3:fe:f8:00:79:d3:08:a2:87:41:56:b9:8d:ee:87: 88:a6:db:91:95:58:68:04:c0:5c:4a:d4:4c:03:ec: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7A:2F:48:45:E2:BC:7D:93:B8:38:7C:6B:AB:20:37:CC:F9:D7:A7 X509v3 Authority Key Identifier: keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fa:f8:90:72:f4:06:44:da:d6:7c:21:5d:67:b6:fc:77:71: 05:9a:99:e5:d8:87:d9:bf:8f:1a:79:7b:ba:50:be:98:ba:3a: 27:59:3c:b9:81:1a:4f:bf:e5:97:b5:9e:c5:f0:21:32:fe:62: 66:e7:06:2a:43:6c:2d:ef:72:86:27:b7:1f:50:8a:64:b1:6f: e7:b3:e5:c4:f8:30:60:f4:33:6c:3d:ca:7e:28:20:cd:49:ba: e3:bd:94:ae:5b:4b:9c:8e:2a:08:e2:51:49:4f:e0:f8:3c:6b: 34:4b:1c:5d:18:34:c4:67:38:ef:d8:1a:5c:a0:cc:50:d9:ab: 08:9f:ea:39:b3:1f:c2:38:66:09:39:df:03:de:bb:c4:12:3b: 85:f3:d7:ff:f8:e1:c7:b1:06:a0:e6:de:cf:a7:aa:ae:3c:6d: ad:ad:78:7b:d9:ae:7a:92:ae:06:31:eb:81:62:07:66:ad:9c: 0a:27:52:97:02:0b:e7:e5:04:71:db:0d:d1:b4:d2:5c:ab:f0: 84:f7:26:2f:3e:b8:95:f4:11:83:e1:7f:c0:15:fd:6b:e1:b6: 51:cd:6c:1f:69:46:25:1d:3e:8b:1e:45:fd:97:fd:26:53:44: 21:e3:39:4f:43:d9:ec:4c:32:72:61:d6:55:9b:23:1e:91:20: 50:a8:11:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEbrIN1EymPEuoczUCg0hmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWQzOWU1YjY4OTBhNDZjOGNlNWM5MDM3ZTZkMjYzNjVl ODU3YmMwHhcNMjUxMjIyMDUwMTAzWhcNMjUxMjIzMDUwMTAzWjAzMTEwLwYDVQQD Eyg4NTdhMmY0ODQ1ZTJiYzdkOTNiODM4N2M2YmFiMjAzN2NjZjlkN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaD/etzexZXMJxuuUCu5P0ckPNjo MWNclN1gToLrui3L+yKnYjRkG4iur4815/ayvV2+WnMQKpWV3sWJNLg7dzO1XeRw D+yWgV79lJfU5Iov3hOXeMmXzYCu/YvmGnMBKSkOEYIosmUje8H8F/iCR5yJNVLs v3ViSen/7yOUT3ntsa4YHi4nrK2GKhxmzbye2Kkyxw/f6OFarLci/MyKjMaZO+UL +w3J4BzJtGgI1ipS/dWDLZJoS/CqVRvg84XAEh/yuhb4deCIoge3TK/n8U5szCfo cavAvlFxHVXPtuHT/vgAedMIoodBVrmN7oeIptuRlVhoBMBcStRMA+ysFwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIV6L0hF4rx9k7g4fGurIDfM+denMB8GA1UdIwQY MBaAFPldOeW2iQpGyM5ckDfm0mNl6Fe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WMDU1YmFKQ2tiSXpseVFOLWJTWTJYb1Y3dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYzMyMDZhLTljMTYtNDUyNy04Yjg5 LTZlOGRjYmFlYWY3Zi8xLzEtVjA1NWJhSkNrYkl6bHlRTi1iU1kyWG9WN3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU3L2MzMjA2YS05YzE2LTQ1MjctOGI4OS02ZThkY2JhZWFm N2YvMS8xLVYwNTViYUpDa2JJemx5UU4tYlNZMlhvVjd3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvr4 kHL0BkTa1nwhXWe2/HdxBZqZ5diH2b+PGnl7ulC+mLo6J1k8uYEaT7/ll7WexfAh Mv5iZucGKkNsLe9yhie3H1CKZLFv57PlxPgwYPQzbD3KfiggzUm6472UrltLnI4q COJRSU/g+DxrNEscXRg0xGc479gaXKDMUNmrCJ/qObMfwjhmCTnfA967xBI7hfPX //jhx7EGoObez6eqrjxtra14e9muepKuBjHrgWIHZq2cCidSlwIL5+UEcdsN0bTS XKvwhPcmLz64lfQRg+F/wBX9a+G2Uc1sH2lGJR0+ix5F/Zf9JlNEIeM5T0PZ7Ewy cmHWVZsjHpEgUKgRzQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:57 2025 by rpki-client