This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json) Hash identifier: Me5Vh4JjJC3uo6iMnhlgM4ZJtUTDKFDkUyFuOC7Z+J0= Subject key identifier: B2:3C:3E:3F:F0:A7:F5:46:F1:2A:B6:AF:A3:91:12:20:5E:C8:D7:07 Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34 Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34 Certificate serial: 019B526108D788DF691BA8C8083CC0000D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 22:00:49 +0000 Manifest this update: Wed 24 Dec 2025 22:00:49 +0000 Manifest next update: Thu 25 Dec 2025 22:00:49 +0000 Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: 8IV2fRMdxkU5UUt39DEkZYjbmjcQf9LVtR5N6MAPKeQ=) 2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:08:d7:88:df:69:1b:a8:c8:08:3c:c0:00:0d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34 Validity Not Before: Dec 24 22:00:49 2025 GMT Not After : Dec 25 22:00:49 2025 GMT Subject: CN=b23c3e3ff0a7f546f12ab6afa39112205ec8d707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:db:42:bb:d2:b9:ef:2b:50:96:99:74:0e: 02:69:6c:8b:13:a0:39:a5:8c:ef:9d:5d:3f:ea:7c: c3:24:e9:f1:5e:6e:c1:28:79:12:5a:a2:d6:5a:7a: 6f:0f:40:53:08:30:db:e0:0d:3b:2d:6a:f1:68:c8: e5:8c:f6:ac:0d:b8:02:3e:71:1b:d9:1d:75:8e:fc: d2:f4:33:90:38:59:0a:9c:f8:34:ff:69:3a:6b:19: 44:fc:d6:20:1c:12:9e:7d:10:f9:5b:f0:62:f6:d2: cf:25:a0:72:08:36:f8:02:25:0e:b0:be:63:14:96: a2:9a:7e:9f:16:c9:e5:b1:17:09:2d:46:b2:6c:d6: 81:70:e7:c6:71:85:5b:16:14:ff:8d:0c:a9:bd:09: 83:0e:4e:18:ee:c8:32:f1:5f:1f:1c:70:02:ca:86: 10:f2:34:9d:6c:7b:97:1f:7c:69:eb:18:02:83:d6: bc:b6:05:9f:29:bf:18:15:50:06:38:24:9e:61:db: f2:2a:60:9e:04:6d:6f:71:f2:61:40:eb:1c:02:cc: b7:6a:8f:af:60:9c:c5:bf:98:b2:1a:2a:24:be:a5: 9b:71:fe:5d:b0:36:34:9a:57:b9:65:b4:46:4d:a1: 2b:3f:ed:1e:df:f6:43:5f:c6:4a:31:7a:28:02:11: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:3E:3F:F0:A7:F5:46:F1:2A:B6:AF:A3:91:12:20:5E:C8:D7:07 X509v3 Authority Key Identifier: keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2f:6e:9d:c3:75:79:c0:93:03:37:d7:32:b9:ab:45:92:47: 70:75:d9:5f:95:ef:46:73:fe:5e:15:06:c7:e1:01:d9:0e:f9: 60:cd:be:dc:21:8a:c4:2b:3c:98:cc:da:35:29:b6:b5:84:7d: 4e:ab:86:7d:4a:58:9c:0a:c4:01:f0:d8:f6:da:43:57:0d:96: 8e:ba:a9:e5:21:77:8d:df:a5:04:bc:f3:53:6a:3a:22:8c:1a: b9:a0:33:c5:cf:bf:a4:e3:fc:61:31:87:be:3b:31:8d:a6:b1: 7d:51:bb:1f:6a:20:84:0b:e6:b5:eb:37:86:70:f0:d8:ca:b7: 5b:3a:f5:3d:1c:2c:f0:ca:33:fd:26:87:00:9b:b4:74:53:a3: 5f:86:54:87:f9:dd:7b:ae:53:61:d4:77:78:27:9a:44:ec:ff: f1:2e:95:3e:96:f6:9e:9d:7f:f5:a4:c0:ba:67:f7:cd:a7:75: df:57:84:fd:c6:ac:dd:dc:11:9b:14:f3:37:60:2d:71:99:b1: 03:24:a7:df:13:3f:de:03:6e:e3:f4:08:cd:80:e5:59:7b:ad: 20:53:59:e2:79:11:3e:bc:8d:78:61:93:03:be:5a:15:b0:d1: 38:da:0a:16:09:cb:5d:ef:7c:72:bc:55:41:38:3f:02:04:1c: 73:1f:d7:02 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtSYQjXiN9pG6jICDzAAA09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy Y2FjMzQwHhcNMjUxMjI0MjIwMDQ5WhcNMjUxMjI1MjIwMDQ5WjAzMTEwLwYDVQQD EyhiMjNjM2UzZmYwYTdmNTQ2ZjEyYWI2YWZhMzkxMTIyMDVlYzhkNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxvbQrvSue8rUJaZdA4CaWyLE6A5 pYzvnV0/6nzDJOnxXm7BKHkSWqLWWnpvD0BTCDDb4A07LWrxaMjljPasDbgCPnEb 2R11jvzS9DOQOFkKnPg0/2k6axlE/NYgHBKefRD5W/Bi9tLPJaByCDb4AiUOsL5j FJaimn6fFsnlsRcJLUaybNaBcOfGcYVbFhT/jQypvQmDDk4Y7sgy8V8fHHACyoYQ 8jSdbHuXH3xp6xgCg9a8tgWfKb8YFVAGOCSeYdvyKmCeBG1vcfJhQOscAsy3ao+v YJzFv5iyGiokvqWbcf5dsDY0mle5ZbRGTaErP+0e3/ZDX8ZKMXooAhHCiwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLI8Pj/wp/VG8Sq2r6OREiBeyNcHMB8GA1UdIwQY MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy9u ncN1ecCTAzfXMrmrRZJHcHXZX5XvRnP+XhUGx+EB2Q75YM2+3CGKxCs8mMzaNSm2 tYR9TquGfUpYnArEAfDY9tpDVw2Wjrqp5SF3jd+lBLzzU2o6IowauaAzxc+/pOP8 YTGHvjsxjaaxfVG7H2oghAvmtes3hnDw2Mq3Wzr1PRws8Moz/SaHAJu0dFOjX4ZU h/nde65TYdR3eCeaROz/8S6VPpb2np1/9aTAumf3zad131eE/cas3dwRmxTzN2At cZmxAySn3xM/3gNu4/QIzYDlWXutIFNZ4nkRPryNeGGTA75aFbDRONoKFgnLXe98 crxVQTg/AgQccx/XAg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:34:01 2025 by rpki-client