This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json) Hash identifier: kOFJ36tMB88Az1T0KtUuIVuSsAt4Yn59oTguMI3wwcw= Subject key identifier: 25:96:6B:D3:19:41:5E:19:88:BA:CD:4C:EF:C7:E2:6A:6D:7A:8C:F9 Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Certificate serial: 019B3D59EF6BDDC0511B13B0B814362634BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=) 2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=) 3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: oUOABTH1ZvrLPrjf1ciAWjc1faS2GLQ4QQY2HfA+nYc=) 4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ef:6b:dd:c0:51:1b:13:b0:b8:14:36:26:34:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=25966bd319415e1988bacd4cefc7e26a6d7a8cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:7b:28:74:04:b9:df:9e:13:e2:f9:95:5a: 2e:58:70:d9:b5:8b:d0:43:6b:00:09:99:39:32:ff: 17:68:a8:f5:18:8a:0d:1e:eb:31:6d:c8:a6:98:08: 4e:41:04:c3:4f:06:57:b9:1d:50:33:62:76:fd:f2: be:c4:d7:f5:34:74:c1:1f:1c:9e:4f:d1:48:05:04: b3:a5:c4:51:95:52:9d:55:78:73:df:50:85:7e:b7: 8b:77:db:30:6c:ab:8f:f0:6b:44:5e:91:a4:e2:a7: a1:97:aa:32:54:93:cb:22:e0:32:b0:94:e9:0d:ad: ec:16:7d:c9:88:05:4a:1e:86:61:04:82:b9:3f:ff: 2e:6a:b6:cb:a7:0c:7e:bd:bf:8e:8e:59:99:9a:dc: b0:a9:7b:3c:bd:32:9b:77:df:a2:04:28:88:81:eb: 37:3c:06:8c:2f:4a:83:63:2f:0d:a6:41:da:77:b8: dc:07:88:cc:3b:54:98:e1:85:18:e2:a7:89:1b:90: d6:d6:dc:a5:b0:b7:96:ee:b0:e2:56:dd:d1:cc:7b: 5b:df:ba:a0:60:02:6f:d8:ab:15:3f:70:dd:f9:e8: 2b:12:b6:3b:86:d2:30:57:c7:aa:43:de:de:c6:2d: 8f:bb:5c:0c:63:ee:ea:9b:26:11:36:86:4c:3c:d6: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:6B:D3:19:41:5E:19:88:BA:CD:4C:EF:C7:E2:6A:6D:7A:8C:F9 X509v3 Authority Key Identifier: keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:e9:73:0a:2b:d3:64:49:b8:36:a9:76:0e:aa:7b:9b:07: 96:40:fa:76:ed:63:6a:6f:59:94:88:4c:88:db:f8:c8:cb:97: d7:60:d9:af:00:ed:6d:1d:21:6c:03:1e:f4:0b:de:a9:41:30: 74:c4:c7:e7:47:d6:8c:74:83:c8:40:c6:1d:b9:3a:32:77:d5: 4f:75:02:6d:4e:ec:dc:b7:21:05:c2:bd:59:b1:68:a3:af:0e: c2:ad:b5:4e:0b:54:e3:c8:af:7c:a5:92:ee:de:98:11:b6:71: cc:1d:e2:5e:e5:31:ff:de:3a:e2:57:f5:11:ef:cd:2a:c7:72: fb:5a:64:f4:55:27:87:21:b4:e0:d9:31:ce:56:98:ac:29:35: ad:b0:f4:63:e5:86:61:c0:0e:02:46:4d:dd:7d:de:85:87:78: 4b:31:b0:52:ec:be:9c:16:75:26:20:65:5b:c7:5e:30:89:91: c5:f5:b5:74:2b:ce:3b:30:ad:c2:73:c0:d5:4e:45:58:97:6b: ad:41:94:0a:97:cf:30:9c:98:ab:51:07:76:28:20:12:b6:c4: 5f:fb:60:d3:40:b4:4f:eb:b5:ac:90:cf:a4:9f:3b:72:13:1a: 80:00:b0:df:e4:6b:e4:64:2c:16:d3:c2:17:6b:a5:23:4e:ce: 8e:4c:a2:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9We9r3cBRGxOwuBQ2JjS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk ZGYyM2QwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD EygyNTk2NmJkMzE5NDE1ZTE5ODhiYWNkNGNlZmM3ZTI2YTZkN2E4Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbt7KHQEud+eE+L5lVouWHDZtYvQ Q2sACZk5Mv8XaKj1GIoNHusxbcimmAhOQQTDTwZXuR1QM2J2/fK+xNf1NHTBHxye T9FIBQSzpcRRlVKdVXhz31CFfreLd9swbKuP8GtEXpGk4qehl6oyVJPLIuAysJTp Da3sFn3JiAVKHoZhBIK5P/8uarbLpwx+vb+OjlmZmtywqXs8vTKbd9+iBCiIges3 PAaML0qDYy8NpkHad7jcB4jMO1SY4YUY4qeJG5DW1tylsLeW7rDiVt3RzHtb37qg YAJv2KsVP3Dd+egrErY7htIwV8eqQ97exi2Pu1wMY+7qmyYRNoZMPNadqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWWa9MZQV4ZiLrNTO/H4mpteoz5MB8GA1UdIwQY MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct M2M1ZTE3NDRhY2RkLzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHbpcwor 02RJuDapdg6qe5sHlkD6du1jam9ZlIhMiNv4yMuX12DZrwDtbR0hbAMe9AveqUEw dMTH50fWjHSDyEDGHbk6MnfVT3UCbU7s3LchBcK9WbFoo68Owq21TgtU48ivfKWS 7t6YEbZxzB3iXuUx/9464lf1Ee/NKsdy+1pk9FUnhyG04NkxzlaYrCk1rbD0Y+WG YcAOAkZN3X3ehYd4SzGwUuy+nBZ1JiBlW8deMImRxfW1dCvOOzCtwnPA1U5FWJdr rUGUCpfPMJyYq1EHdiggErbEX/tg00C0T+u1rJDPpJ87chMagACw3+Rr5GQsFtPC F2ulI07Ojkyicw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:31:28 2025 by rpki-client