This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json) Hash identifier: pB7mU6jrkSClgfOGfydfaP8/GBwG+WGQAucy+JOdULo= Subject key identifier: A8:78:B8:98:89:CF:2B:C3:94:49:27:51:29:D5:F1:FC:0C:A5:F2:D0 Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2 Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2 Certificate serial: 019B2EF9CBE4572065EA86FD3A1AD3989D10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:01:21 +0000 Manifest this update: Thu 18 Dec 2025 01:01:21 +0000 Manifest next update: Fri 19 Dec 2025 01:01:21 +0000 Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=) 2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: qHV4ImzfuBiMaqbGu9G+fJTL4wYh+rvCGbifehVvQvM=) 3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:cb:e4:57:20:65:ea:86:fd:3a:1a:d3:98:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2 Validity Not Before: Dec 18 01:01:21 2025 GMT Not After : Dec 19 01:01:21 2025 GMT Subject: CN=a878b89889cf2bc39449275129d5f1fc0ca5f2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:20:f7:c6:f3:ad:74:89:47:e3:51:c4:93: 25:a1:ab:00:f4:c7:3a:75:fa:c0:80:33:18:47:0c: 93:f5:ae:8a:f1:02:04:2c:e8:33:9f:3e:89:e9:89: f3:2b:88:58:ad:86:d2:f8:71:d5:af:34:f8:a5:b8: 36:e7:68:53:0a:5f:b0:bd:fc:dd:9c:52:c7:ed:63: bf:52:36:96:58:bf:41:61:ba:7f:b4:e7:68:5c:b7: 1f:9b:d6:fd:49:2b:d5:52:30:77:80:14:bc:28:ed: e4:55:eb:ba:0f:62:d8:4b:be:7b:ae:88:8a:d3:5f: c3:16:37:fe:2a:a0:b3:26:9a:56:7f:3f:24:91:84: ed:d1:66:e5:8a:91:ea:62:17:03:1c:6b:02:30:b8: 29:14:ad:96:9c:00:1f:89:f8:d0:7a:6c:0d:21:ce: 09:df:cd:65:38:22:2a:e1:cf:ea:b0:3a:7f:75:a9: 6d:f9:97:3d:c9:ce:5f:0b:a6:65:bf:b2:8d:4e:1e: a5:79:f3:d8:a1:3d:18:9f:cb:52:2d:d1:53:f0:41: ea:42:fb:67:27:f8:83:3f:62:06:2b:31:46:fc:70: 5c:e2:e0:cd:6d:3d:bb:45:c3:57:35:b5:41:b5:6f: d7:e7:24:4f:78:26:f6:df:a7:53:b2:05:e8:c8:3d: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:B8:98:89:CF:2B:C3:94:49:27:51:29:D5:F1:FC:0C:A5:F2:D0 X509v3 Authority Key Identifier: keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:47:d7:f6:92:b6:d4:6b:3f:f7:2c:ee:c4:f6:a8:c7:92:a9: 8e:55:ef:58:27:b1:2b:af:19:1a:40:8d:6a:79:d5:ac:89:2b: 3a:69:36:98:e2:fd:2a:da:60:4f:72:a5:61:cd:4e:e1:f0:98: e8:ef:3a:11:51:57:17:de:27:81:16:11:bc:e7:bc:96:53:3c: c0:fe:81:fc:76:76:5f:7b:7c:d7:36:ee:a8:8a:c5:58:d0:d1: 53:75:94:43:e7:85:3f:03:ce:75:ab:63:09:de:6d:0a:fc:c1: e3:c8:7f:0a:d8:f8:13:1a:f9:75:55:51:86:3c:c0:27:41:12: a5:d1:41:7f:27:fb:7b:de:fb:94:e2:02:69:16:46:a7:c9:3e: a3:d5:12:77:2f:08:c6:7e:35:c7:86:7d:1e:8f:8e:97:16:bb: 4a:c5:e6:5c:4c:d9:2d:3c:4a:3e:9b:3c:86:3d:38:c7:17:67: f3:04:96:9a:fd:46:b3:2e:d4:4b:23:3c:4a:c2:35:38:24:ef: 39:57:a8:92:5c:e7:f7:2b:ae:3f:af:8c:b0:c0:d6:44:77:19: 1c:59:8c:0c:fb:d7:85:95:f5:41:c7:97:bd:2e:62:55:bf:85: 65:06:7c:0b:dc:98:0f:06:b9:1a:a6:1c:c9:ff:f0:67:19:8a: 9a:bf:b7:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+cvkVyBl6ob9OhrTmJ0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy YjAzYzIwHhcNMjUxMjE4MDEwMTIxWhcNMjUxMjE5MDEwMTIxWjAzMTEwLwYDVQQD EyhhODc4Yjg5ODg5Y2YyYmMzOTQ0OTI3NTEyOWQ1ZjFmYzBjYTVmMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOog98bzrXSJR+NRxJMloasA9Mc6 dfrAgDMYRwyT9a6K8QIELOgznz6J6YnzK4hYrYbS+HHVrzT4pbg252hTCl+wvfzd nFLH7WO/UjaWWL9BYbp/tOdoXLcfm9b9SSvVUjB3gBS8KO3kVeu6D2LYS757roiK 01/DFjf+KqCzJppWfz8kkYTt0WblipHqYhcDHGsCMLgpFK2WnAAfifjQemwNIc4J 381lOCIq4c/qsDp/dalt+Zc9yc5fC6Zlv7KNTh6lefPYoT0Yn8tSLdFT8EHqQvtn J/iDP2IGKzFG/HBc4uDNbT27RcNXNbVBtW/X5yRPeCb236dTsgXoyD0XIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh4uJiJzyvDlEknUSnV8fwMpfLQMB8GA1UdIwQY MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt Y2U4ZmM5M2FkYjIxLzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEfX9pK2 1Gs/9yzuxPaox5KpjlXvWCexK68ZGkCNannVrIkrOmk2mOL9KtpgT3KlYc1O4fCY 6O86EVFXF94ngRYRvOe8llM8wP6B/HZ2X3t81zbuqIrFWNDRU3WUQ+eFPwPOdatj Cd5tCvzB48h/Ctj4Exr5dVVRhjzAJ0ESpdFBfyf7e977lOICaRZGp8k+o9USdy8I xn41x4Z9Ho+Olxa7SsXmXEzZLTxKPps8hj04xxdn8wSWmv1Gsy7USyM8SsI1OCTv OVeoklzn9yuuP6+MsMDWRHcZHFmMDPvXhZX1QceXvS5iVb+FZQZ8C9yYDwa5GqYc yf/wZxmKmr+3Hg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:21 2025 by rpki-client