This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json) Hash identifier: BkGh+VK+aBRyXZGTcdPiQuMQG74XEefKs8hTj+wuO2s= Subject key identifier: CA:08:F8:2F:04:69:F4:B7:EB:4A:63:A7:0C:89:8D:49:06:16:F1:E2 Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be Certificate serial: 019B2F66E1BA45996EEB8E4F64F6CFFB4168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft Manifest number: 12AE Signing time: Thu 18 Dec 2025 03:00:30 +0000 Manifest this update: Thu 18 Dec 2025 03:00:30 +0000 Manifest next update: Fri 19 Dec 2025 03:00:30 +0000 Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: vt5Napvs44uXzV2/Mskmw1LhaZLtQiXiuGwhdGc8P2o=) 2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:e1:ba:45:99:6e:eb:8e:4f:64:f6:cf:fb:41:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be Validity Not Before: Dec 18 03:00:30 2025 GMT Not After : Dec 19 03:00:30 2025 GMT Subject: CN=ca08f82f0469f4b7eb4a63a70c898d490616f1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:ef:7f:2c:7e:a6:4b:69:b1:68:7e:ec:6a: cf:a9:b8:27:3d:00:6c:1a:24:a5:6a:ef:87:52:00: f8:2c:e1:c3:36:d3:37:0a:f8:0f:86:78:25:e1:02: 0b:22:b3:a6:18:ea:02:16:24:f3:1e:1e:63:88:6a: 7f:d7:bf:f9:77:fd:7e:98:2b:88:74:63:db:07:4e: ec:6d:38:7c:bc:ff:e5:f4:df:af:65:43:95:93:54: 3f:80:27:09:00:e0:43:e8:ec:e8:44:79:bc:e1:00: 4f:f1:57:8a:7e:62:fd:87:6a:e5:7c:2d:87:42:87: 65:7e:74:c6:36:c3:84:50:f7:c4:cd:a7:4f:ce:59: 8d:22:e7:d5:33:57:0d:63:d6:3c:72:95:a2:e5:85: 87:70:6b:3d:cd:a5:c8:39:42:61:f7:39:2b:c3:7a: a0:44:f3:31:cf:9e:96:c1:05:f3:d4:7d:59:e7:0f: 39:96:1c:17:6b:f7:57:80:7c:46:25:38:9e:55:1e: 85:66:03:35:c3:7a:e8:63:f8:78:b2:d5:04:8b:d9: 60:d2:69:58:a8:c3:bc:58:ea:fe:05:e4:3b:c0:81: a2:bd:d6:0e:5a:eb:c9:f6:f2:38:e3:44:9a:64:ac: ac:56:be:ad:10:ee:dd:eb:e2:7a:19:54:52:c1:78: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:F8:2F:04:69:F4:B7:EB:4A:63:A7:0C:89:8D:49:06:16:F1:E2 X509v3 Authority Key Identifier: keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:50:d3:93:b8:6a:db:93:3b:af:d5:9a:fd:ae:a1:95:47:a1: 24:ea:c9:a9:2b:62:c0:8a:e2:c2:90:00:61:85:87:be:eb:82: fd:94:52:70:ff:8e:3c:59:56:e3:35:f4:bd:91:21:bc:6d:c3: b1:12:94:4e:f1:1f:4f:5a:c5:09:67:a3:93:00:27:45:9b:ea: 36:03:42:33:1e:34:32:3d:8c:77:2a:47:cd:7a:95:96:78:6e: 9d:5d:31:80:2a:5f:4b:4c:6d:68:23:15:ae:73:c5:f6:87:55: d7:bf:1d:97:9b:c7:14:a7:62:67:bd:25:44:64:6d:c7:92:09: f7:3c:03:2d:20:42:07:68:c7:40:cb:14:29:9e:44:0d:7e:20: b9:16:7e:fe:99:60:16:bb:2f:31:9e:c6:31:a3:1c:31:ae:60: a0:68:c2:13:64:66:54:93:e1:0f:5a:2b:b1:59:74:11:c2:03: 11:1a:28:ba:ba:c4:47:49:6c:4f:5b:99:e3:f2:dd:35:dc:e3: 70:3a:b3:4e:43:1d:13:99:20:b5:43:3d:59:e4:41:a5:61:74: 17:78:45:f8:93:f2:b9:3e:23:d3:4e:15:f0:0d:f9:57:8a:60: 4d:45:c1:48:9e:40:1d:58:e9:fe:54:79:4b:8e:03:6f:cf:af: 93:90:04:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsvZuG6RZlu645PZPbP+0FoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Y2FhNzk3YjkwMGZjMzU1ZmMyNDEyNDY3NzUxZWViMmMx YzY0YmUwHhcNMjUxMjE4MDMwMDMwWhcNMjUxMjE5MDMwMDMwWjAzMTEwLwYDVQQD EyhjYTA4ZjgyZjA0NjlmNGI3ZWI0YTYzYTcwYzg5OGQ0OTA2MTZmMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKHvfyx+pktpsWh+7GrPqbgnPQBs GiSlau+HUgD4LOHDNtM3CvgPhngl4QILIrOmGOoCFiTzHh5jiGp/17/5d/1+mCuI dGPbB07sbTh8vP/l9N+vZUOVk1Q/gCcJAOBD6OzoRHm84QBP8VeKfmL9h2rlfC2H QodlfnTGNsOEUPfEzadPzlmNIufVM1cNY9Y8cpWi5YWHcGs9zaXIOUJh9zkrw3qg RPMxz56WwQXz1H1Z5w85lhwXa/dXgHxGJTieVR6FZgM1w3roY/h4stUEi9lg0mlY qMO8WOr+BeQ7wIGivdYOWuvJ9vI440SaZKysVr6tEO7d6+J6GVRSwXjKBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMoI+C8EafS360pjpwyJjUkGFvHiMB8GA1UdIwQY MBaAFPjKp5e5APw1X8JBJGd1HussHGS+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1NcW5sN2tBX0RWZndrRWtaM1VlNnl3Y1pMNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWI1NWNmLWJlOTQtNDlhZC05ZWI4 LTlkYjNkNDRjNmQyZi8xLzEtTXFubDdrQV9EVmZ3a0VrWjNVZTZ5d2NaTDQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ3LzFiNTVjZi1iZTk0LTQ5YWQtOWViOC05ZGIzZDQ0YzZk MmYvMS8xLU1xbmw3a0FfRFZmd2tFa1ozVWU2eXdjWkw0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVDT k7hq25M7r9Wa/a6hlUehJOrJqStiwIriwpAAYYWHvuuC/ZRScP+OPFlW4zX0vZEh vG3DsRKUTvEfT1rFCWejkwAnRZvqNgNCMx40Mj2MdypHzXqVlnhunV0xgCpfS0xt aCMVrnPF9odV178dl5vHFKdiZ70lRGRtx5IJ9zwDLSBCB2jHQMsUKZ5EDX4guRZ+ /plgFrsvMZ7GMaMcMa5goGjCE2RmVJPhD1orsVl0EcIDERoourrER0lsT1uZ4/Ld NdzjcDqzTkMdE5kgtUM9WeRBpWF0F3hF+JPyuT4j004V8A35V4pgTUXBSJ5AHVjp /lR5S44Db8+vk5AEzQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:25:50 2025 by rpki-client