This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json) Hash identifier: Gq6rOeiH3SpWKLVzyGkb+7HjwBCwTCM4uYpN8QPG52o= Subject key identifier: 46:30:25:BF:84:7E:CB:58:8D:92:93:97:C4:B0:7E:40:AC:20:07:DA Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb Certificate serial: 019B53AA9675ECA677E7E468ED2B1B8E5CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft Manifest number: 06F3 Signing time: Thu 25 Dec 2025 04:00:47 +0000 Manifest this update: Thu 25 Dec 2025 04:00:47 +0000 Manifest next update: Fri 26 Dec 2025 04:00:47 +0000 Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: H7elS/qzChAPOnWkFkvlBRIhoY1mXgQYx2oXqzC6uXQ=) 2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:96:75:ec:a6:77:e7:e4:68:ed:2b:1b:8e:5c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb Validity Not Before: Dec 25 04:00:47 2025 GMT Not After : Dec 26 04:00:47 2025 GMT Subject: CN=463025bf847ecb588d929397c4b07e40ac2007da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:03:90:b5:e1:e7:c6:d3:c5:60:72:e4:a8: ae:9c:6f:4a:91:03:e9:64:1d:af:8a:0d:6f:7f:ca: 1b:d8:c8:35:ea:cf:31:d9:ed:8b:06:a2:59:2c:5a: 59:92:fe:e6:de:c3:6c:b3:bf:49:01:48:65:35:5d: e2:1e:de:cd:e0:94:02:76:74:74:41:bd:3a:a3:b6: 30:44:4b:25:e1:fc:6a:f2:95:7a:f2:82:8f:0e:5f: 35:b3:93:34:18:92:80:de:2b:d0:a0:0f:58:4e:eb: 82:8d:4b:1d:fb:e8:a3:07:d1:0c:ad:46:5e:44:d8: f7:27:f4:46:ef:1e:bf:75:cc:bc:6c:00:96:ef:b4: 03:25:4a:6c:c5:dc:78:3f:0e:94:08:cc:2f:92:13: 19:98:ed:33:65:f5:b2:e8:56:10:96:2c:f1:8d:76: 9a:6d:fd:f0:eb:03:0c:7f:ff:44:0f:30:74:7f:40: 91:9d:2b:e4:c7:35:c8:8e:77:ff:3f:18:a1:e6:3b: 53:b1:c1:01:b2:61:16:44:09:f2:4a:20:bf:d2:2f: fa:26:1b:57:a5:6a:a7:de:a4:c4:f8:87:9d:dc:63: 94:dc:6e:05:b0:2d:f8:d3:0e:05:bc:96:14:01:5b: b6:3c:92:ce:16:f6:3e:dd:a2:b6:ef:73:74:66:4b: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:25:BF:84:7E:CB:58:8D:92:93:97:C4:B0:7E:40:AC:20:07:DA X509v3 Authority Key Identifier: keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bb:20:1a:f3:6a:2b:cd:1c:52:74:12:d3:6d:0a:ce:d9:a4: a0:05:94:ff:75:7b:27:bc:95:e2:1a:fc:16:05:60:51:bf:c7: f0:7c:9f:d9:94:d4:ff:03:44:5d:ab:a0:41:1f:a8:c8:de:c2: 26:b9:d0:25:df:df:04:58:45:b9:08:da:c6:db:85:9b:d0:b8: 94:7e:b0:f2:96:c1:05:bb:01:0a:29:c5:b8:04:df:2b:7e:ac: 56:54:11:28:38:91:a3:40:55:16:af:f9:06:54:8e:f6:28:f5: cd:0c:5a:3b:29:9c:d8:3a:8e:ef:f9:5e:60:f4:19:c5:e0:df: d5:1a:cb:e2:48:80:a4:89:90:7d:e8:8f:77:e9:36:62:8f:a7: a7:af:5c:1e:ac:18:11:bf:34:54:a7:d8:6b:ba:50:d7:3c:38: e2:b4:27:ab:9e:03:7b:7a:09:58:17:78:5b:d1:f4:6e:04:07: 2d:36:4c:a9:8e:4e:40:3f:0a:0f:9a:71:63:e0:5b:c7:65:8f: ae:31:52:70:b0:24:54:5f:87:5d:f0:ce:ef:65:b3:5e:74:c7: 80:32:55:fc:fb:35:2d:ae:08:ea:8a:cf:cf:2d:84:c3:0c:6a: 41:9f:8a:db:2f:d2:b5:64:6d:9d:62:a2:27:01:91:39:ec:31: 7b:e5:5f:6d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtTqpZ17KZ35+Ro7Ssbjlz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzliYWE4OWUyMTQxMzNjY2Y2NDYwZjI0MjA2YWQyYzg2 NjcwZWIwHhcNMjUxMjI1MDQwMDQ3WhcNMjUxMjI2MDQwMDQ3WjAzMTEwLwYDVQQD Eyg0NjMwMjViZjg0N2VjYjU4OGQ5MjkzOTdjNGIwN2U0MGFjMjAwN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQEDkLXh58bTxWBy5KiunG9KkQPp ZB2vig1vf8ob2Mg16s8x2e2LBqJZLFpZkv7m3sNss79JAUhlNV3iHt7N4JQCdnR0 Qb06o7YwREsl4fxq8pV68oKPDl81s5M0GJKA3ivQoA9YTuuCjUsd++ijB9EMrUZe RNj3J/RG7x6/dcy8bACW77QDJUpsxdx4Pw6UCMwvkhMZmO0zZfWy6FYQlizxjXaa bf3w6wMMf/9EDzB0f0CRnSvkxzXIjnf/Pxih5jtTscEBsmEWRAnySiC/0i/6JhtX pWqn3qTE+Ied3GOU3G4FsC340w4FvJYUAVu2PJLOFvY+3aK273N0Zkuw3wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEYwJb+EfstYjZKTl8SwfkCsIAfaMB8GA1UdIwQY MBaAFPh5uqieIUEzzPZGDyQgatLIZnDrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbTZxSjRoUVRQTTlrWVBKQ0JxMHNobWNPcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNGNlZmFiLTQ3NzUtNDI1OC1iOTcx LTRmY2Y4NGM4NWI2My8xLzEtSG02cUo0aFFUUE05a1lQSkNCcTBzaG1jT3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E3LzRjZWZhYi00Nzc1LTQyNTgtYjk3MS00ZmNmODRjODVi NjMvMS8xLUhtNnFKNGhRVFBNOWtZUEpDQnEwc2htY09zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrsg GvNqK80cUnQS020KztmkoAWU/3V7J7yV4hr8FgVgUb/H8Hyf2ZTU/wNEXaugQR+o yN7CJrnQJd/fBFhFuQjaxtuFm9C4lH6w8pbBBbsBCinFuATfK36sVlQRKDiRo0BV Fq/5BlSO9ij1zQxaOymc2DqO7/leYPQZxeDf1RrL4kiApImQfeiPd+k2Yo+np69c HqwYEb80VKfYa7pQ1zw44rQnq54De3oJWBd4W9H0bgQHLTZMqY5OQD8KD5pxY+Bb x2WPrjFScLAkVF+HXfDO72WzXnTHgDJV/Ps1La4I6orPzy2EwwxqQZ+K2y/StWRt nWKiJwGROewxe+VfbQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:06 2025 by rpki-client