This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json) Hash identifier: I420AkzZFE6lhGNrUCwWkPi5UrCSKmWOYzoLK6xrtH4= Subject key identifier: 30:19:64:AD:D9:49:AB:35:F9:D1:E7:07:34:2C:82:72:7C:1A:A6:42 Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06 Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306 Certificate serial: 019B42EE64EF121498F367C2C7E92DA1E53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft Manifest number: 070A Signing time: Sun 21 Dec 2025 22:01:18 +0000 Manifest this update: Sun 21 Dec 2025 22:01:18 +0000 Manifest next update: Mon 22 Dec 2025 22:01:18 +0000 Files and hashes: 1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=) 2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: wcRCqsnWjBMGAaQihjnHH+AP5rkazQUVDgyYuOKPrd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:64:ef:12:14:98:f3:67:c2:c7:e9:2d:a1:e5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306 Validity Not Before: Dec 21 22:01:18 2025 GMT Not After : Dec 22 22:01:18 2025 GMT Subject: CN=301964add949ab35f9d1e707342c82727c1aa642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:4c:f5:5e:4d:d6:d2:fa:6a:2b:d9:5d:3e: 6b:4b:c9:dd:50:64:4d:81:03:95:ab:cb:02:ba:80: 5d:66:b8:2f:98:87:76:a5:56:83:69:90:1f:21:59: ec:20:d4:21:27:f3:fc:1c:50:2a:19:99:a1:62:47: 27:9b:cd:23:f8:34:e6:d4:7f:19:ff:6e:6c:05:b7: 80:81:eb:b5:ee:7a:80:9d:a1:0f:93:dc:f3:3f:1e: 28:e5:ad:f5:9c:ed:ea:ba:7f:31:b1:bf:21:51:fb: d2:cc:fe:d5:c6:68:c5:c2:9e:7c:82:23:8a:fa:41: 41:43:6e:6e:bd:0a:2f:ca:b5:13:9a:d3:8f:f5:7b: 63:af:74:e9:91:66:e6:9e:6e:ac:e5:d2:6f:e1:d3: 51:52:a0:82:71:6a:58:5c:87:a3:21:e6:00:4b:1c: 6d:b6:86:39:89:b6:12:de:3c:89:40:61:24:32:03: 59:e6:50:a4:82:67:94:07:40:95:ab:e1:b2:b6:3c: 94:26:46:a4:cb:71:d0:6d:44:1c:e8:c7:21:c2:f9: bf:b1:14:b1:4d:33:14:d0:e2:49:b2:c9:de:27:16: c5:e8:66:55:00:45:1d:13:bc:a8:ff:54:76:e8:4d: 18:e0:39:c0:d2:70:98:f5:91:5e:45:01:0d:cd:9a: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:19:64:AD:D9:49:AB:35:F9:D1:E7:07:34:2C:82:72:7C:1A:A6:42 X509v3 Authority Key Identifier: keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a4:c7:55:3b:9e:b9:2c:ee:2c:e6:32:91:c7:77:3d:c2:87: 45:11:da:99:4f:d5:96:24:1f:bf:54:a0:1b:5d:53:d6:cb:90: 17:f0:e5:5c:99:ea:5c:0d:8c:36:0b:79:08:b6:23:43:79:86: ea:97:12:c7:c2:f9:6e:7c:a4:a1:da:24:36:f5:87:5c:ac:28: 6b:81:3e:71:45:f7:85:e1:db:d0:43:1a:cd:14:be:06:f0:87: 1b:99:a8:c2:e0:e4:78:e4:d9:3a:62:eb:cc:36:05:df:8c:0e: bd:27:a4:b9:f8:ec:6d:59:ea:e8:6a:1f:4a:38:f4:10:fe:7c: 00:d1:87:6b:e6:72:86:2e:43:5a:d5:46:8f:44:db:f9:ed:ac: 8c:64:5d:28:85:44:d8:5e:02:8f:f1:0a:4a:08:0b:b2:e0:36: be:5e:9b:b2:a5:ba:b9:a6:76:9a:83:5a:7d:6c:1a:09:58:a9: 92:12:41:18:e6:4b:6b:85:00:56:0a:6b:59:01:50:9f:c4:fa: 29:b4:eb:e2:84:eb:a5:75:5a:25:da:8b:e0:8d:01:c3:b4:7c: ce:cd:96:38:fc:02:b3:42:a8:95:26:e8:8c:4f:8d:dd:f4:e2: 0a:0c:a6:c5:44:b5:73:be:c4:2f:8b:40:c1:37:14:75:ad:c5: 60:15:7d:69 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtC7mTvEhSY82fCx+ktoeU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMDgwNGEwZWI3OTViODY4MmMyN2RhMjllOWZhMjI4ZjE3 MjgzMDYwHhcNMjUxMjIxMjIwMTE4WhcNMjUxMjIyMjIwMTE4WjAzMTEwLwYDVQQD EygzMDE5NjRhZGQ5NDlhYjM1ZjlkMWU3MDczNDJjODI3MjdjMWFhNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydxM9V5N1tL6aivZXT5rS8ndUGRN gQOVq8sCuoBdZrgvmId2pVaDaZAfIVnsINQhJ/P8HFAqGZmhYkcnm80j+DTm1H8Z /25sBbeAgeu17nqAnaEPk9zzPx4o5a31nO3qun8xsb8hUfvSzP7VxmjFwp58giOK +kFBQ25uvQovyrUTmtOP9Xtjr3TpkWbmnm6s5dJv4dNRUqCCcWpYXIejIeYASxxt toY5ibYS3jyJQGEkMgNZ5lCkgmeUB0CVq+GytjyUJkaky3HQbUQc6Mchwvm/sRSx TTMU0OJJssneJxbF6GZVAEUdE7yo/1R26E0Y4DnA0nCY9ZFeRQENzZppiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDAZZK3ZSas1+dHnBzQsgnJ8GqZCMB8GA1UdIwQY MBaAFPoIBKDreVuGgsJ9op6foijxcoMGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1nZ0VvT3Q1VzRhQ3duMmlucC1pS1BGeWd3WS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMjdmYWI4LTBkMjUtNGRiZS05Zjhh LTQyNmE4Y2RjOGU0OS8xLzEtZ2dFb090NVc0YUN3bjJpbnAtaUtQRnlnd1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RjLzI3ZmFiOC0wZDI1LTRkYmUtOWY4YS00MjZhOGNkYzhl NDkvMS8xLWdnRW9PdDVXNGFDd24yaW5wLWlLUEZ5Z3dZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKTH VTueuSzuLOYykcd3PcKHRRHamU/VliQfv1SgG11T1suQF/DlXJnqXA2MNgt5CLYj Q3mG6pcSx8L5bnykodokNvWHXKwoa4E+cUX3heHb0EMazRS+BvCHG5mowuDkeOTZ OmLrzDYF34wOvSekufjsbVnq6GofSjj0EP58ANGHa+Zyhi5DWtVGj0Tb+e2sjGRd KIVE2F4Cj/EKSggLsuA2vl6bsqW6uaZ2moNafWwaCVipkhJBGOZLa4UAVgprWQFQ n8T6KbTr4oTrpXVaJdqL4I0Bw7R8zs2WOPwCs0KolSbojE+N3fTiCgymxUS1c77E L4tAwTcUda3FYBV9aQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:03:36 2025 by rpki-client