This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json) Hash identifier: D4RKuvXeq/rJYJfrqvfQVYyxkhHlPzbepxqcz8T2UQE= Subject key identifier: B7:CA:40:1B:7E:A3:4B:E4:62:27:1D:C6:69:04:51:2A:53:D9:C3:36 Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Certificate serial: 019B4136FB9F67F67CBA1B2A1D140DDEF90A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 14:01:20 +0000 Manifest this update: Sun 21 Dec 2025 14:01:20 +0000 Manifest next update: Mon 22 Dec 2025 14:01:20 +0000 Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=) 2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=) 3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: ytyjkn0JR1Xt0u/CSAQOZRxyB1adUil8/g7Ar7PcxxQ=) 4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:fb:9f:67:f6:7c:ba:1b:2a:1d:14:0d:de:f9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d Validity Not Before: Dec 21 14:01:20 2025 GMT Not After : Dec 22 14:01:20 2025 GMT Subject: CN=b7ca401b7ea34be462271dc66904512a53d9c336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:12:91:e9:a5:e4:8f:03:dd:63:dc:c0:02: 6c:a9:27:85:3c:2f:b9:4c:4d:10:74:45:b7:3d:1e: ba:65:14:76:22:41:05:55:d5:6f:6e:7b:81:f4:51: ed:84:3e:81:9c:d7:69:d7:78:67:38:63:21:f7:e0: b6:5f:f4:04:31:eb:16:26:22:39:14:d5:d5:98:f0: 3e:a3:0b:56:a0:12:1a:d2:25:03:20:81:8f:2e:41: 83:93:d7:c8:f2:fc:04:47:73:5b:22:22:32:55:f7: 6b:74:d5:b4:77:b3:7e:38:50:46:5c:e4:37:61:6c: 35:12:d8:13:b8:ec:30:78:47:48:9c:87:5c:12:61: 1e:2e:ae:52:92:14:de:3d:7e:6e:2e:d6:22:5f:fe: e0:0f:be:b5:5d:1f:11:e8:72:2f:07:0c:8e:72:a0: eb:96:de:82:94:a0:3e:cd:b4:f8:ea:0d:6c:04:be: ff:2d:ed:dd:83:df:f2:cb:94:75:af:74:cb:30:83: d6:71:42:51:a8:ce:30:0d:31:1b:60:44:d3:4b:ae: c0:4d:b8:9c:7b:2b:48:88:05:84:09:86:0b:89:56: a7:a5:9c:b1:38:3f:c5:03:50:50:57:8d:09:3a:b6: 38:66:7f:ed:59:eb:82:8e:05:95:2c:40:e2:07:f5: 3a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:40:1B:7E:A3:4B:E4:62:27:1D:C6:69:04:51:2A:53:D9:C3:36 X509v3 Authority Key Identifier: keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:44:fa:67:6e:e6:53:8c:cf:cb:f7:32:e9:34:4e:d9:62:ac: 3a:db:96:9b:a2:09:a1:81:27:ef:e4:70:42:11:89:4c:a2:04: d9:f8:a7:6b:ab:47:5c:e2:4c:6f:6f:27:8a:e9:2b:49:2d:09: 30:ca:61:25:54:89:ee:21:fc:77:d7:19:17:4f:8a:f7:3f:b6: f2:4c:73:dd:3e:c2:47:3c:31:bf:93:2e:87:fa:95:f4:54:f2: 2c:02:b3:4f:ba:60:48:73:62:8e:8b:6e:10:77:2b:b1:2a:bc: 70:26:f6:98:d3:20:67:13:72:d3:38:8a:70:26:1b:c3:9e:6e: bb:6f:ae:c5:de:ba:0c:06:b6:9a:94:3e:19:19:2b:32:65:80: 2f:d1:92:1b:c1:d9:f6:b2:6f:d4:a4:11:63:7e:d8:af:32:8b: 75:ba:6f:e8:cd:6b:2f:14:b2:36:0e:35:e8:2e:6d:fd:a2:0c: 5f:34:af:ad:ed:f7:53:7d:66:d6:fa:1d:1b:9f:8a:fc:2c:be: 5f:48:c8:e0:6d:8d:a3:a7:9e:17:4d:02:28:df:4e:67:87:6f: 11:1e:96:4a:6e:3a:2d:43:ab:e4:55:bb:fd:53:a7:31:fd:2d: 38:be:43:0e:41:37:38:f3:f4:04:b8:0f:52:d3:60:6b:1b:49: eb:b3:bf:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvufZ/Z8uhsqHRQN3vkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk ZGYyM2QwHhcNMjUxMjIxMTQwMTIwWhcNMjUxMjIyMTQwMTIwWjAzMTEwLwYDVQQD EyhiN2NhNDAxYjdlYTM0YmU0NjIyNzFkYzY2OTA0NTEyYTUzZDljMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrESkeml5I8D3WPcwAJsqSeFPC+5 TE0QdEW3PR66ZRR2IkEFVdVvbnuB9FHthD6BnNdp13hnOGMh9+C2X/QEMesWJiI5 FNXVmPA+owtWoBIa0iUDIIGPLkGDk9fI8vwER3NbIiIyVfdrdNW0d7N+OFBGXOQ3 YWw1EtgTuOwweEdInIdcEmEeLq5SkhTePX5uLtYiX/7gD761XR8R6HIvBwyOcqDr lt6ClKA+zbT46g1sBL7/Le3dg9/yy5R1r3TLMIPWcUJRqM4wDTEbYETTS67ATbic eytIiAWECYYLiVanpZyxOD/FA1BQV40JOrY4Zn/tWeuCjgWVLEDiB/U6awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfKQBt+o0vkYicdxmkEUSpT2cM2MB8GA1UdIwQY MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct M2M1ZTE3NDRhY2RkLzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkT6Z27m U4zPy/cy6TRO2WKsOtuWm6IJoYEn7+RwQhGJTKIE2fina6tHXOJMb28niukrSS0J MMphJVSJ7iH8d9cZF0+K9z+28kxz3T7CRzwxv5Muh/qV9FTyLAKzT7pgSHNijotu EHcrsSq8cCb2mNMgZxNy0ziKcCYbw55uu2+uxd66DAa2mpQ+GRkrMmWAL9GSG8HZ 9rJv1KQRY37YrzKLdbpv6M1rLxSyNg416C5t/aIMXzSvre33U31m1vodG5+K/Cy+ X0jI4G2No6eeF00CKN9OZ4dvER6WSm46LUOr5FW7/VOnMf0tOL5DDkE3OPP0BLgP UtNgaxtJ67O/OA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:19:03 2025 by rpki-client