This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft File: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json) Hash identifier: OZb2eGbbVzEFQzPctctDf93OMMUki3ESmgbDlkijPXI= Subject key identifier: 56:D8:E5:2D:1E:15:C4:23:49:53:0A:28:8C:56:DD:C4:B9:AD:3B:CA Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Certificate serial: 019B3DC76E0364F62079AFE944B00CAF2E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 22:00:38 +0000 Manifest this update: Sat 20 Dec 2025 22:00:38 +0000 Manifest next update: Sun 21 Dec 2025 22:00:38 +0000 Files and hashes: 1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: QkosDSJCdkilKEdt1PmpUTAdGYdb52NVpo4tGcq8rr4=) 2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=) 3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=) 4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=) 5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=) 6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:6e:03:64:f6:20:79:af:e9:44:b0:0c:af:2e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Validity Not Before: Dec 20 22:00:38 2025 GMT Not After : Dec 21 22:00:38 2025 GMT Subject: CN=56d8e52d1e15c42349530a288c56ddc4b9ad3bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:11:db:29:43:40:9a:22:78:0c:22:d1:8e: d7:7f:8f:f2:8e:b3:c3:26:e0:dc:53:68:c1:8a:3c: 09:22:06:19:ce:87:82:b3:5a:c1:e5:94:7c:f4:1b: e5:7e:17:fe:e5:24:06:31:86:68:c2:81:39:03:c8: df:f0:d2:0e:ca:49:50:62:c1:32:37:05:a3:98:eb: 3d:f7:c4:b0:43:ca:43:27:60:fb:e8:e0:cd:bd:9f: 6a:8a:42:69:76:f4:c9:5d:0d:36:0d:23:cf:a3:6a: bb:35:48:64:57:d3:82:f7:20:8f:bc:27:1c:c5:2d: c6:4f:af:39:50:ce:d8:51:4c:35:12:22:ac:f4:93: 21:e5:57:de:c4:25:05:f1:e8:13:cd:e5:f8:54:96: 42:89:3a:d1:1a:a7:58:ae:74:a0:5c:3d:dd:a6:bd: ee:5f:a9:c2:be:dc:9b:03:31:2d:70:4c:ea:be:71: 5f:27:89:40:88:36:d1:73:2e:56:18:79:1c:66:62: f3:dc:8f:d0:40:63:93:e7:fd:79:98:0d:03:ab:1e: 8b:7e:09:73:85:ad:5c:15:6e:32:d4:35:e9:94:bb: d7:3f:22:1c:c5:68:3b:3c:7f:09:96:0b:38:c1:9f: 04:2e:b2:f8:1b:c8:a9:68:0c:a4:26:e1:e6:ba:0e: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:E5:2D:1E:15:C4:23:49:53:0A:28:8C:56:DD:C4:B9:AD:3B:CA X509v3 Authority Key Identifier: keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8a:59:1c:b5:07:7a:1e:92:86:8f:13:1e:6d:81:da:29:b1: 6c:d0:97:69:64:f8:54:f5:50:e2:93:94:38:bc:2b:76:79:72: f7:8d:e4:25:62:e2:59:1a:dd:ee:04:a6:e7:a5:9d:b3:cd:d5: 72:1d:c2:66:ab:e9:82:61:d9:9b:31:c9:67:c7:4f:c3:cf:45: d7:13:e9:7b:be:77:dd:66:8c:d8:1b:e0:6f:57:68:d1:ff:d9: f6:80:0f:b4:48:ea:7a:85:2c:3d:95:0b:77:67:d4:34:de:bd: cd:ac:5e:0e:bd:94:f2:3a:1b:54:3e:31:c6:1c:f9:cc:70:b0: 55:dc:3c:93:4a:48:13:fe:33:59:b8:d6:35:52:6b:4b:aa:d1: dc:15:66:8a:11:28:56:86:7c:96:27:1a:b3:d0:b2:e7:b0:bd: 3e:b8:d5:4e:58:4a:a7:4e:17:51:07:47:57:48:4b:9a:de:ab: 8c:a1:63:0a:5e:4d:ef:82:ed:44:27:42:c7:9a:3b:3f:03:65: 44:4b:50:7b:47:89:6f:1f:ce:5b:8b:20:f1:f6:c1:38:c1:13: dc:69:05:f2:ef:15:c1:d2:30:e0:e7:5d:ee:15:7d:03:6a:05: 4d:2d:43:e3:48:10:9b:04:dd:61:bb:9e:2f:f0:73:90:32:ec: 3c:b1:8d:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x24DZPYgea/pRLAMry5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3 OTI2MzgwHhcNMjUxMjIwMjIwMDM4WhcNMjUxMjIxMjIwMDM4WjAzMTEwLwYDVQQD Eyg1NmQ4ZTUyZDFlMTVjNDIzNDk1MzBhMjg4YzU2ZGRjNGI5YWQzYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uAR2ylDQJoieAwi0Y7Xf4/yjrPD JuDcU2jBijwJIgYZzoeCs1rB5ZR89Bvlfhf+5SQGMYZowoE5A8jf8NIOyklQYsEy NwWjmOs998SwQ8pDJ2D76ODNvZ9qikJpdvTJXQ02DSPPo2q7NUhkV9OC9yCPvCcc xS3GT685UM7YUUw1EiKs9JMh5VfexCUF8egTzeX4VJZCiTrRGqdYrnSgXD3dpr3u X6nCvtybAzEtcEzqvnFfJ4lAiDbRcy5WGHkcZmLz3I/QQGOT5/15mA0Dqx6Lfglz ha1cFW4y1DXplLvXPyIcxWg7PH8Jlgs4wZ8ELrL4G8ipaAykJuHmug6XOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbY5S0eFcQjSVMKKIxW3cS5rTvKMB8GA1UdIwQY MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt YjQyMzY0ODk1MDgzLzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYpZHLUH eh6Sho8THm2B2imxbNCXaWT4VPVQ4pOUOLwrdnly943kJWLiWRrd7gSm56Wds83V ch3CZqvpgmHZmzHJZ8dPw89F1xPpe7533WaM2Bvgb1do0f/Z9oAPtEjqeoUsPZUL d2fUNN69zaxeDr2U8jobVD4xxhz5zHCwVdw8k0pIE/4zWbjWNVJrS6rR3BVmihEo VoZ8licas9Cy57C9PrjVTlhKp04XUQdHV0hLmt6rjKFjCl5N74LtRCdCx5o7PwNl REtQe0eJbx/OW4sg8fbBOMET3GkF8u8VwdIw4Odd7hV9A2oFTS1D40gQmwTdYbue L/BzkDLsPLGN1g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:13:25 2025 by rpki-client