This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json) Hash identifier: krrjVBTTcIZghYDNBdW4gMwHysccWtCzQaSdE8PiF50= Subject key identifier: 74:E5:B1:F0:8A:B7:FC:CB:90:01:7A:8D:EC:0B:07:7D:3A:DC:CF:4D Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Certificate serial: 019B3E6C8BA09DAA22EFB10257A95A8CB170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft Manifest number: 023E Signing time: Sun 21 Dec 2025 01:00:59 +0000 Manifest this update: Sun 21 Dec 2025 01:00:59 +0000 Manifest next update: Mon 22 Dec 2025 01:00:59 +0000 Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: E7atElJbW6X+Ro8UcvdhPZrofHnsXeZW5bR26IA4/gY=) 2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:8b:a0:9d:aa:22:ef:b1:02:57:a9:5a:8c:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Validity Not Before: Dec 21 01:00:59 2025 GMT Not After : Dec 22 01:00:59 2025 GMT Subject: CN=74e5b1f08ab7fccb90017a8dec0b077d3adccf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:66:4f:29:2b:38:ee:e3:a1:34:be:ce:a3: 22:67:58:56:57:ef:c0:9d:2e:0d:db:9e:a9:6f:7b: 79:ce:f8:b2:63:28:9a:9a:f0:de:e5:0f:f3:72:44: 02:c6:6f:bb:2c:e6:7e:0b:8b:83:b9:06:ac:3a:d4: e6:8b:90:78:1f:12:ac:a0:a5:03:56:32:1d:2f:4d: 26:67:94:f7:46:b8:d5:07:d5:89:e5:e7:37:91:ed: 49:61:a9:bf:bd:bc:61:92:03:d4:6a:d6:a0:29:d3: 57:5c:40:9f:f2:f5:03:d8:1d:88:c3:53:99:a8:35: 2f:cc:48:f8:ae:4d:5e:2e:a3:8c:45:fb:4a:0b:6c: 4d:9f:c5:a4:b4:3e:1c:5c:20:d8:9b:83:7e:62:db: a6:bd:d4:8a:8b:64:fb:9e:7a:a8:4e:3b:90:ec:16: 8a:db:af:eb:e2:11:4e:dd:d3:7b:43:47:b3:0a:60: d6:6f:63:6f:af:02:ec:23:08:58:10:68:92:17:7c: 0b:da:36:df:01:49:31:70:bd:43:4b:fc:79:b2:f1: f9:8b:89:60:df:18:02:5e:bd:25:75:dd:e8:62:fb: 6c:bb:60:ce:8d:ba:a2:81:b3:ef:48:a0:9e:2e:7c: b9:57:de:dd:5a:cc:39:0f:a2:44:ee:c9:0c:4b:25: 6b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:B1:F0:8A:B7:FC:CB:90:01:7A:8D:EC:0B:07:7D:3A:DC:CF:4D X509v3 Authority Key Identifier: keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:95:df:7b:b9:f5:28:8a:72:4f:20:21:36:b7:4e:a0:b6:3c: 8a:eb:30:7f:e3:ba:2b:31:1d:3d:ee:98:3a:fe:b9:f9:15:87: 31:71:eb:32:c7:f3:fb:d9:4b:16:c3:37:27:ff:55:65:17:64: 56:8b:45:47:1b:c7:62:65:cc:ad:b0:cd:79:75:1e:f5:7e:7d: 9f:89:b9:18:f6:c7:ea:1b:8f:fc:53:ae:77:7a:86:40:89:48: d6:65:c3:62:9a:55:11:b7:5a:cc:ad:95:a0:80:5e:7b:9b:f9: 8e:d5:41:e8:7d:5d:bb:83:11:ec:37:96:28:fe:21:29:36:40: 47:1b:2b:8d:04:23:c6:ec:a4:2a:c0:fe:a4:10:f4:ba:f0:fd: ce:f4:a5:b8:dc:2f:c1:f7:28:25:65:99:25:d8:dd:ea:43:88: 66:44:01:e5:45:e0:15:78:62:6b:54:8a:1b:07:a8:11:0f:ec: da:75:d5:a8:08:ff:46:e2:87:6d:49:97:db:ac:f2:b5:49:0b: a5:7a:f7:29:bc:6d:b4:98:36:c7:cb:39:0c:23:2e:54:bb:43: f1:45:56:2c:67:c3:fc:24:ac:28:0b:75:29:8c:ad:7d:1c:12: 15:82:6e:49:4d:44:13:ee:83:27:b2:76:bf:8b:a9:f4:8c:3d: 67:96:ca:0b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+bIugnaoi77ECV6lajLFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWQ1NGUxNTg1YWMwOTdjM2Y5MWRlZmMwMzNkZGE1NzIy ZWExZTYwHhcNMjUxMjIxMDEwMDU5WhcNMjUxMjIyMDEwMDU5WjAzMTEwLwYDVQQD Eyg3NGU1YjFmMDhhYjdmY2NiOTAwMTdhOGRlYzBiMDc3ZDNhZGNjZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuntmTykrOO7joTS+zqMiZ1hWV+/A nS4N256pb3t5zviyYyiamvDe5Q/zckQCxm+7LOZ+C4uDuQasOtTmi5B4HxKsoKUD VjIdL00mZ5T3RrjVB9WJ5ec3ke1JYam/vbxhkgPUatagKdNXXECf8vUD2B2Iw1OZ qDUvzEj4rk1eLqOMRftKC2xNn8WktD4cXCDYm4N+YtumvdSKi2T7nnqoTjuQ7BaK 26/r4hFO3dN7Q0ezCmDWb2NvrwLsIwhYEGiSF3wL2jbfAUkxcL1DS/x5svH5i4lg 3xgCXr0ldd3oYvtsu2DOjbqigbPvSKCeLny5V97dWsw5D6JE7skMSyVrfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHTlsfCKt/zLkAF6jewLB3063M9NMB8GA1UdIwQY MBaAFPodVOFYWsCXw/kd78Az3aVyLqHmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oMVU0Vmhhd0pmRC1SM3Z3RFBkcFhJdW9lWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNGQ3MDBlLTlmMWUtNDk1OS05Y2Zk LWIyYjU3MmUyNWFmZC8xLzEtaDFVNFZoYXdKZkQtUjN2d0RQZHBYSXVvZVkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E4LzRkNzAwZS05ZjFlLTQ5NTktOWNmZC1iMmI1NzJlMjVh ZmQvMS8xLWgxVTRWaGF3SmZELVIzdndEUGRwWEl1b2VZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpXf e7n1KIpyTyAhNrdOoLY8iuswf+O6KzEdPe6YOv65+RWHMXHrMsfz+9lLFsM3J/9V ZRdkVotFRxvHYmXMrbDNeXUe9X59n4m5GPbH6huP/FOud3qGQIlI1mXDYppVEbda zK2VoIBee5v5jtVB6H1du4MR7DeWKP4hKTZARxsrjQQjxuykKsD+pBD0uvD9zvSl uNwvwfcoJWWZJdjd6kOIZkQB5UXgFXhia1SKGweoEQ/s2nXVqAj/RuKHbUmX26zy tUkLpXr3KbxttJg2x8s5DCMuVLtD8UVWLGfD/CSsKAt1KYytfRwSFYJuSU1EE+6D J7J2v4up9Iw9Z5bKCw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:21:25 2025 by rpki-client