This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json) Hash identifier: dqGc4LNl2R5UZtP8lEO8rEAPQc7lpXHvj31/n/ta7rI= Subject key identifier: C8:61:4B:1F:A3:19:F0:A2:B6:BE:87:A4:C0:F9:2D:B9:AF:EB:05:1F Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf Certificate serial: 019B46262FAA1982372583377A473BD4DFEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft Manifest number: 14C8 Signing time: Mon 22 Dec 2025 13:01:06 +0000 Manifest this update: Mon 22 Dec 2025 13:01:06 +0000 Manifest next update: Tue 23 Dec 2025 13:01:06 +0000 Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: Bo0C8TJIYttHStMGC0pqObhUuvDpAZvfCjNTxzKV4dM=) 2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:2f:aa:19:82:37:25:83:37:7a:47:3b:d4:df:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf Validity Not Before: Dec 22 13:01:06 2025 GMT Not After : Dec 23 13:01:06 2025 GMT Subject: CN=c8614b1fa319f0a2b6be87a4c0f92db9afeb051f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:aa:61:3c:5c:81:30:d5:ed:f4:eb:b3:2a: 5a:09:4b:5d:c5:49:78:e9:77:bd:16:dc:28:8d:6e: d8:53:63:2a:ae:76:04:e9:d6:39:fb:26:35:bb:c8: d8:1d:78:ca:38:db:a1:e2:79:b5:19:7c:63:0e:c1: b9:e6:c0:c3:fb:6c:74:e5:a4:1a:d7:72:c2:f2:00: 54:a1:e6:c5:e6:36:24:49:cb:ed:0a:52:72:05:f2: 86:47:67:95:09:79:a8:08:e2:40:e0:43:60:bc:22: 0a:8d:90:b2:95:7e:2c:c3:07:c7:05:e1:25:78:93: 29:34:bb:38:17:41:8c:c5:9b:dd:87:06:a5:3b:d3: 12:44:8b:2d:12:83:f0:9c:6f:99:09:a5:20:99:b7: 55:63:f6:d5:88:d2:c1:dd:5b:02:bb:36:53:50:b2: aa:ab:87:a9:29:76:79:85:47:d4:24:c7:3b:50:51: 08:38:34:95:10:ce:85:b7:d6:03:fb:d7:51:50:51: 36:1d:3f:2b:3d:51:fe:05:c1:d0:8c:c5:19:7c:8d: f3:72:c5:9a:64:ca:5b:e4:15:26:68:5e:2d:f0:9e: 95:5a:ae:d8:c7:85:5f:61:3f:a7:8c:88:6e:63:a8: b5:d4:50:b3:0f:2b:91:71:0c:28:bd:d0:93:a6:96: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:4B:1F:A3:19:F0:A2:B6:BE:87:A4:C0:F9:2D:B9:AF:EB:05:1F X509v3 Authority Key Identifier: keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:82:23:7f:11:bc:6b:41:9b:73:67:ba:ac:00:78:44:ba:c5: 48:44:be:fe:e0:05:64:fe:de:73:4f:22:69:b2:20:1c:36:63: f4:cb:c1:f8:d6:7a:01:31:06:e3:df:cb:7a:8c:1f:90:12:d4: a8:7c:36:0d:67:51:6d:48:8f:fd:c5:e6:da:17:a6:00:81:7b: 0e:a0:1e:f9:db:00:15:f1:48:d3:da:56:8a:02:31:92:d8:5d: 6d:92:82:2d:2f:25:c6:b7:dd:ea:32:fb:77:68:04:81:81:0d: f9:ff:1c:34:4e:72:65:d9:1b:e5:13:bc:c1:e7:6d:4a:b6:b4: 77:4f:d5:25:bd:e1:88:68:74:0a:d2:0f:61:e2:e2:38:ae:21: 64:c0:89:49:49:2e:7a:4a:11:5b:48:81:64:ac:38:5d:30:d9: d2:10:cf:1a:4b:98:ef:e2:fa:ed:7a:df:08:fc:a0:75:39:2f: 5d:f7:fc:d2:f5:7f:c6:00:26:79:c1:d7:2d:23:1b:91:42:83: 04:ae:f8:39:de:d0:01:f5:5e:b3:c2:2b:d1:27:79:5a:e0:90: ec:92:98:2e:b9:fd:a6:63:b9:5d:bf:65:17:a4:27:25:ee:8f: 7d:c5:f8:93:81:d0:9b:ce:c4:7c:08:79:51:65:ab:8e:5a:4c: fb:01:c6:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJi+qGYI3JYM3ekc71N/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTYzNWRkMzgwMjE1YTAzYzkzMDdkYTU2MjA2YzU2NmIz OGEzY2YwHhcNMjUxMjIyMTMwMTA2WhcNMjUxMjIzMTMwMTA2WjAzMTEwLwYDVQQD EyhjODYxNGIxZmEzMTlmMGEyYjZiZTg3YTRjMGY5MmRiOWFmZWIwNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLeqYTxcgTDV7fTrsypaCUtdxUl4 6Xe9FtwojW7YU2MqrnYE6dY5+yY1u8jYHXjKONuh4nm1GXxjDsG55sDD+2x05aQa 13LC8gBUoebF5jYkScvtClJyBfKGR2eVCXmoCOJA4ENgvCIKjZCylX4swwfHBeEl eJMpNLs4F0GMxZvdhwalO9MSRIstEoPwnG+ZCaUgmbdVY/bViNLB3VsCuzZTULKq q4epKXZ5hUfUJMc7UFEIODSVEM6Ft9YD+9dRUFE2HT8rPVH+BcHQjMUZfI3zcsWa ZMpb5BUmaF4t8J6VWq7Yx4VfYT+njIhuY6i11FCzDyuRcQwovdCTppYtuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhhSx+jGfCitr6HpMD5Lbmv6wUfMB8GA1UdIwQY MBaAFGtWNd04AhWgPJMH2lYgbFZrOKPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYzE3MzgtNmM2Ny00MjA0LTg5MDEt NzQ3NDhiYzkzYmNhLzEvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hYzE3MzgtNmM2Ny00MjA0LTg5MDEtNzQ3NDhiYzkzYmNh LzEvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIIjfxG8 a0Gbc2e6rAB4RLrFSES+/uAFZP7ec08iabIgHDZj9MvB+NZ6ATEG49/LeowfkBLU qHw2DWdRbUiP/cXm2hemAIF7DqAe+dsAFfFI09pWigIxkthdbZKCLS8lxrfd6jL7 d2gEgYEN+f8cNE5yZdkb5RO8wedtSra0d0/VJb3hiGh0CtIPYeLiOK4hZMCJSUku ekoRW0iBZKw4XTDZ0hDPGkuY7+L67XrfCPygdTkvXff80vV/xgAmecHXLSMbkUKD BK74Od7QAfVes8Ir0Sd5WuCQ7JKYLrn9pmO5Xb9lF6QnJe6PfcX4k4HQm87EfAh5 UWWrjlpM+wHGCw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:47 2025 by rpki-client