This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft File: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json) Hash identifier: MG2/obplFFGsw6HzdF9tWsoRSdcIVZxpPco1pXRgxCI= Subject key identifier: 5F:83:9F:9F:AF:BA:6E:BA:4A:D1:A1:A4:E3:AD:61:87:78:03:F8:2F Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc Certificate serial: 019B65E79B0D69DF5BF73347EC5C1285B141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft Manifest number: 0512 Signing time: Sun 28 Dec 2025 17:00:35 +0000 Manifest this update: Sun 28 Dec 2025 17:00:35 +0000 Manifest next update: Mon 29 Dec 2025 17:00:35 +0000 Files and hashes: 1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: YTb4Pt35cgFsoSBrjRzaG/ZnDuaNuByExwkMVFqPppY=) 2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:9b:0d:69:df:5b:f7:33:47:ec:5c:12:85:b1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc Validity Not Before: Dec 28 17:00:35 2025 GMT Not After : Dec 29 17:00:35 2025 GMT Subject: CN=5f839f9fafba6eba4ad1a1a4e3ad61877803f82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:6e:a9:71:77:68:e0:45:e0:4b:15:dd:2d: 52:25:a7:1c:b7:9b:ac:d5:84:e1:d4:65:fe:34:f7: 21:0c:03:35:61:ed:7b:42:27:43:93:90:b6:17:33: 5e:bb:d0:e5:7b:9e:d9:d7:25:44:78:85:ec:76:47: 09:3f:c5:ef:be:a1:df:f0:5c:c6:58:92:25:87:de: e2:83:f1:4e:d2:76:62:83:82:ef:8c:d8:e3:fe:c5: d8:0e:78:40:5c:bc:e7:d9:09:5f:f0:da:34:b3:76: f9:6c:f9:d9:50:00:69:ad:b4:bb:da:db:8c:28:45: 10:e1:e5:2a:5f:28:ca:8f:b1:66:4b:58:4a:6a:64: 42:10:24:b3:97:95:de:96:bb:d6:d4:c6:6e:c4:b1: dc:4f:6c:e7:7f:f0:6e:35:4d:62:ff:1e:62:26:e8: 13:5b:e5:26:e1:bc:db:96:af:32:c3:b9:9e:f2:26: 0d:5c:d5:15:f8:af:ca:87:fe:c8:ad:c7:84:1c:0b: 5d:9b:ce:e2:19:26:9b:b5:ce:15:33:b8:a7:f5:8a: 92:08:3d:ee:1e:ca:43:c8:e0:cd:53:6b:fd:49:8f: 01:06:ea:56:e4:4c:c4:14:6c:54:f6:04:54:d8:48: c2:b3:52:76:c0:15:ce:19:0b:f2:43:dd:1a:f7:07: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:9F:9F:AF:BA:6E:BA:4A:D1:A1:A4:E3:AD:61:87:78:03:F8:2F X509v3 Authority Key Identifier: keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:f8:0a:66:46:1a:df:33:ef:8b:d4:9e:fa:e5:b6:74:d2:38: a5:79:c7:c4:1e:6a:f9:fc:d1:89:58:ef:8b:b1:5d:62:cb:51: 9d:3a:72:75:ba:83:3d:7b:0a:c4:92:54:92:24:7e:a1:e8:5c: 0e:db:b8:e0:bd:40:d3:2a:9b:48:56:67:4e:13:0d:db:16:82: 76:af:d2:c8:16:f9:7c:93:51:33:21:ec:5a:e0:01:17:2c:e1: 42:24:15:f6:91:46:24:b4:f5:8d:bb:6f:83:5a:55:de:61:83: 0c:df:02:1e:6d:f7:12:06:ff:7c:f7:51:fb:e5:89:8b:ce:fd: db:c2:3d:08:2f:66:83:63:3f:06:7a:ff:1f:c0:d5:3b:28:97: 3a:8d:65:23:54:26:a0:0e:c6:db:58:40:6c:2a:1d:32:87:4b: a0:84:fc:8e:05:0b:16:82:3c:c6:7c:24:09:18:46:f1:f7:ab: 5a:7e:42:75:1c:67:92:c8:28:a8:c4:95:a9:af:b6:36:ab:61: c2:22:67:1e:10:fe:4b:c4:4d:50:32:8f:3a:c0:2c:9a:1d:80: 8c:4e:70:f5:24:f1:0e:2a:dc:35:de:c8:42:33:9a:d1:3a:94: 2d:0c:67:67:e2:1e:c2:5e:9a:a6:e1:69:5b:a2:68:70:f0:b0: 8f:5b:17:2c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtl55sNad9b9zNH7FwShbFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNmE1YzdlZWJiOGQ1ODhmMmZmMjJjNzc1YzFjMWExNDRj MjJkYmMwHhcNMjUxMjI4MTcwMDM1WhcNMjUxMjI5MTcwMDM1WjAzMTEwLwYDVQQD Eyg1ZjgzOWY5ZmFmYmE2ZWJhNGFkMWExYTRlM2FkNjE4Nzc4MDNmODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2huqXF3aOBF4EsV3S1SJacct5us 1YTh1GX+NPchDAM1Ye17QidDk5C2FzNeu9Dle57Z1yVEeIXsdkcJP8XvvqHf8FzG WJIlh97ig/FO0nZig4LvjNjj/sXYDnhAXLzn2Qlf8No0s3b5bPnZUABprbS72tuM KEUQ4eUqXyjKj7FmS1hKamRCECSzl5XelrvW1MZuxLHcT2znf/BuNU1i/x5iJugT W+Um4bzblq8yw7me8iYNXNUV+K/Kh/7IrceEHAtdm87iGSabtc4VM7in9YqSCD3u HspDyODNU2v9SY8BBupW5EzEFGxU9gRU2EjCs1J2wBXOGQvyQ90a9wd4CQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF+Dn5+vum66StGhpOOtYYd4A/gvMB8GA1UdIwQY MBaAFPtqXH7ruNWI8v8ix3XBwaFEwi28MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0ycGNmdXU0MVlqeV95TEhkY0hCb1VUQ0xidy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhl LTk0NGNkOTJjMGMwZi8xLzEtMnBjZnV1NDFZanlfeUxIZGNIQm9VVENMYncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q1LzUzNmYwYi05Zjc5LTRkNTYtYWY4ZS05NDRjZDkyYzBj MGYvMS8xLTJwY2Z1dTQxWWp5X3lMSGRjSEJvVVRDTGJ3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2fgK ZkYa3zPvi9Se+uW2dNI4pXnHxB5q+fzRiVjvi7FdYstRnTpydbqDPXsKxJJUkiR+ oehcDtu44L1A0yqbSFZnThMN2xaCdq/SyBb5fJNRMyHsWuABFyzhQiQV9pFGJLT1 jbtvg1pV3mGDDN8CHm33Egb/fPdR++WJi87928I9CC9mg2M/Bnr/H8DVOyiXOo1l I1QmoA7G21hAbCodModLoIT8jgULFoI8xnwkCRhG8ferWn5CdRxnksgoqMSVqa+2 NqthwiJnHhD+S8RNUDKPOsAsmh2AjE5w9STxDircNd7IQjOa0TqULQxnZ+Iewl6a puFpW6JocPCwj1sXLA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:00 2025 by rpki-client