This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json) Hash identifier: VETEgxE6KFc9cDP1nnDxkkKIaXFmcJdIVVxbn3mHOZ4= Subject key identifier: D1:16:29:7C:DD:D3:9B:E3:AC:82:D4:73:DC:C7:27:78:FB:06:4A:8F Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019B3532C596B686BDBE6E5C8E097A8B4E8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 06:01:18 +0000 Manifest this update: Fri 19 Dec 2025 06:01:18 +0000 Manifest next update: Sat 20 Dec 2025 06:01:18 +0000 Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: 9+V0Mf1UGoARGrjkm/lgzwD8bdJIhVRKk+MzoNPbjtA=) 2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:c5:96:b6:86:bd:be:6e:5c:8e:09:7a:8b:4e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Dec 19 06:01:18 2025 GMT Not After : Dec 20 06:01:18 2025 GMT Subject: CN=d116297cddd39be3ac82d473dcc72778fb064a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:1e:67:da:c0:cf:fc:bc:e4:ac:ae:4a:00: e3:ff:b7:9f:c1:d3:14:3c:2a:af:93:0c:73:5c:ae: 8f:42:2d:5d:71:07:d0:fb:36:80:af:7d:93:40:d6: a7:62:6f:0a:73:47:14:29:07:d6:13:a8:55:d1:05: 61:e1:6a:15:e2:72:1e:9e:3c:cd:d1:d0:21:6b:f2: 78:d3:53:ac:66:f9:1d:c8:4f:18:0f:5d:a6:1a:ad: 2a:a2:e5:e3:d5:15:9e:06:a7:9f:73:37:e5:60:86: 22:98:90:35:74:a4:ef:ec:b3:89:a0:5c:56:5b:a9: 4d:ac:92:5b:4c:d8:0a:5a:97:a6:f8:c0:0b:8a:d1: dd:5e:2b:b6:8a:8b:3e:3d:09:bf:93:18:c8:d9:cd: fb:b5:70:51:ac:09:59:4a:db:ef:eb:a4:da:8c:69: d4:9b:d6:d9:5e:a2:7b:3c:1e:95:1d:37:a8:7e:ca: db:06:12:b6:90:63:45:74:91:ee:c4:34:f2:17:c5: fa:6d:ef:cc:da:49:a8:4e:78:f7:f4:51:d4:7f:a8: bc:94:c4:9c:0f:54:c4:33:33:15:00:8a:af:04:e0: 4d:a9:1d:ef:5e:b1:54:43:6e:d6:80:7b:6e:8b:95: c7:62:56:c5:d8:6a:9a:85:d5:83:43:72:3b:37:ad: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:16:29:7C:DD:D3:9B:E3:AC:82:D4:73:DC:C7:27:78:FB:06:4A:8F X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6d:71:73:da:85:bc:18:4e:c3:2b:5a:6c:32:84:45:8e:2c: 33:0c:52:66:e0:dc:a5:c3:24:46:ed:0e:ed:c2:5b:73:94:7c: 2f:96:0c:df:e3:b2:5b:37:c2:a4:49:43:40:9e:8a:13:cb:30: 76:bd:21:ab:91:d1:7e:2c:7a:c7:ae:64:7b:86:f7:61:18:9a: 0f:dd:f2:e5:8c:2e:df:64:78:06:d6:05:9d:dc:28:14:a2:29: e8:88:40:bd:21:3f:05:a9:b9:62:ac:90:63:b9:cd:b7:dd:d3: f1:9a:42:c5:6e:92:c5:3b:2a:59:06:e0:22:56:5a:08:8d:5b: 84:80:79:e5:5b:1a:38:52:16:dd:0b:24:90:78:2b:a8:d6:1c: a8:4f:40:5d:53:43:6a:a9:e6:8a:77:0c:a6:88:ca:6c:3c:bd: 98:dd:42:91:fd:59:48:b7:fb:bf:ec:88:c1:54:b1:8e:c9:b6: a6:1a:0c:d0:26:2e:83:ca:f7:4d:b9:ec:58:c2:5f:87:29:8f: f0:a2:24:28:98:23:82:e1:5c:89:7a:ad:6f:37:58:1a:4e:d0: 7c:3f:db:0d:4e:37:d6:b7:39:b3:63:af:ec:e7:b1:95:19:33: 5e:2f:f7:76:4a:62:a0:de:ad:eb:38:49:8f:89:1d:15:d3:09: 32:53:b3:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MsWWtoa9vm5cjgl6i06NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjUxMjE5MDYwMTE4WhcNMjUxMjIwMDYwMTE4WjAzMTEwLwYDVQQD EyhkMTE2Mjk3Y2RkZDM5YmUzYWM4MmQ0NzNkY2M3Mjc3OGZiMDY0YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyroeZ9rAz/y85KyuSgDj/7efwdMU PCqvkwxzXK6PQi1dcQfQ+zaAr32TQNanYm8Kc0cUKQfWE6hV0QVh4WoV4nIenjzN 0dAha/J401OsZvkdyE8YD12mGq0qouXj1RWeBqefczflYIYimJA1dKTv7LOJoFxW W6lNrJJbTNgKWpem+MALitHdXiu2ios+PQm/kxjI2c37tXBRrAlZStvv66TajGnU m9bZXqJ7PB6VHTeofsrbBhK2kGNFdJHuxDTyF8X6be/M2kmoTnj39FHUf6i8lMSc D1TEMzMVAIqvBOBNqR3vXrFUQ27WgHtui5XHYlbF2GqahdWDQ3I7N60JvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEWKXzd05vjrILUc9zHJ3j7BkqPMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW1xc9qF vBhOwytabDKERY4sMwxSZuDcpcMkRu0O7cJbc5R8L5YM3+OyWzfCpElDQJ6KE8sw dr0hq5HRfix6x65ke4b3YRiaD93y5Ywu32R4BtYFndwoFKIp6IhAvSE/Bam5YqyQ Y7nNt93T8ZpCxW6SxTsqWQbgIlZaCI1bhIB55VsaOFIW3QskkHgrqNYcqE9AXVND aqnmincMpojKbDy9mN1Ckf1ZSLf7v+yIwVSxjsm2phoM0CYug8r3TbnsWMJfhymP 8KIkKJgjguFciXqtbzdYGk7QfD/bDU431rc5s2Ov7OexlRkzXi/3dkpioN6t6zhJ j4kdFdMJMlOzSw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:41:39 2025 by rpki-client