This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json) Hash identifier: dEdrGStBeGboOH2q9iUM3ZFITVeO0jNu9ElOLER22Qk= Subject key identifier: D0:82:11:A3:10:9E:20:98:20:FA:1F:3C:B3:C4:27:7E:71:31:B4:8A Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44 Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44 Certificate serial: 019B19BC3C19DF93D74BE0146B78758E2376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft Manifest number: 1709 Signing time: Sat 13 Dec 2025 22:02:05 +0000 Manifest this update: Sat 13 Dec 2025 22:02:05 +0000 Manifest next update: Sun 14 Dec 2025 22:02:05 +0000 Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: +SgETOBNJISElhUwwyZQqrOKh4JaYqJ2uqVEtedYVyg=) 2: pucl_qoNJsFNHYReBDscEGdx2N0.roa (hash: SiJfUuqs3fjKSI6Mo6WtKDUOtA0gOnKfbqvupwDeWPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:3c:19:df:93:d7:4b:e0:14:6b:78:75:8e:23:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44 Validity Not Before: Dec 13 22:02:05 2025 GMT Not After : Dec 14 22:02:05 2025 GMT Subject: CN=d08211a3109e209820fa1f3cb3c4277e7131b48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:0f:c3:51:14:3e:25:22:3e:5c:1d:eb:86: 74:a2:b1:22:fa:fd:cc:fb:9d:a2:77:73:49:e2:a0: e8:64:87:ba:c9:be:59:2d:70:28:c1:4c:55:94:d9: 4c:07:b2:03:bd:3d:5a:36:00:0d:9e:23:fc:c0:5a: fc:60:78:30:a3:e3:ff:a2:e0:40:57:61:1f:1d:94: 0e:8a:d8:57:21:01:62:aa:5f:0f:69:56:0c:fd:05: fc:0b:6f:db:d8:10:fe:88:5c:1c:58:1d:9a:af:be: 2f:db:71:fd:1d:84:af:1d:77:53:07:2a:36:f0:16: 97:1c:f3:9b:03:0e:33:b6:c7:e1:d8:b5:9b:25:f0: 72:32:23:4c:ee:84:58:e7:cb:1c:1a:00:0e:f3:4f: d7:da:8a:05:4c:2f:f4:22:1e:28:1e:b5:18:bb:64: cc:e1:32:8e:ab:f0:2b:b9:b5:9f:cd:d9:29:be:8b: f0:3f:b3:62:42:97:23:5f:01:0b:02:e2:89:83:1b: 39:a0:ca:c2:45:c9:e5:c8:51:fa:9c:e5:d8:dd:93: 3e:72:b8:9c:33:b9:a0:85:67:92:36:63:88:be:c0: 6c:29:4d:7d:78:ee:83:d2:a4:62:a0:91:c8:46:05: d5:b0:0e:7b:89:3a:dd:d1:43:08:9b:7a:fb:b8:ad: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:82:11:A3:10:9E:20:98:20:FA:1F:3C:B3:C4:27:7E:71:31:B4:8A X509v3 Authority Key Identifier: keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cd:6b:63:dd:b1:12:a0:6d:b6:9c:4c:49:b0:00:8c:be:7a: 59:fc:a8:83:50:5a:f1:b2:34:9a:ef:a7:bc:7d:23:f0:d6:10: f2:dc:01:5d:9d:d7:69:0a:7e:a5:5b:1e:02:86:94:1f:9e:9d: 49:56:cc:f3:20:25:73:e6:c3:45:70:03:cb:b4:5d:87:a4:8d: 25:bb:d8:d3:e0:85:91:0b:27:a4:9c:a6:64:5e:ce:8e:9c:c3: 35:f2:cc:45:c4:82:d2:6e:60:41:35:9e:70:8f:b7:42:f7:9d: 68:1f:1e:1b:5e:06:30:a0:14:79:46:3c:4c:97:3e:32:26:25: b6:f8:8e:47:57:b2:ff:73:ab:73:5b:38:a3:83:42:ac:3d:d8: 12:61:62:19:da:2d:54:2c:5e:73:d1:6c:50:ef:df:25:6b:9d: 90:b6:9b:e0:5c:b2:78:48:5c:56:9b:0c:15:e1:1c:33:b2:97: 8e:57:a4:5b:40:e8:48:20:d9:cc:f7:b0:af:69:b6:16:7f:ed: 82:fc:8b:83:d9:8e:73:66:99:bf:be:93:73:f7:8d:cc:66:fb: 73:ce:3c:51:77:f9:fc:46:13:66:44:9e:2c:27:17:97:ae:59: bb:11:fe:1f:4f:84:12:b8:9f:98:2f:76:9f:ec:4a:34:b9:5f: fb:45:32:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvDwZ35PXS+AUa3h1jiN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDRlNDllOTI4MzA1YWJjYjhmMzJkZWYzZmVmYzAzZWJi Y2RlNDQwHhcNMjUxMjEzMjIwMjA1WhcNMjUxMjE0MjIwMjA1WjAzMTEwLwYDVQQD EyhkMDgyMTFhMzEwOWUyMDk4MjBmYTFmM2NiM2M0Mjc3ZTcxMzFiNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4sPw1EUPiUiPlwd64Z0orEi+v3M +52id3NJ4qDoZIe6yb5ZLXAowUxVlNlMB7IDvT1aNgANniP8wFr8YHgwo+P/ouBA V2EfHZQOithXIQFiql8PaVYM/QX8C2/b2BD+iFwcWB2ar74v23H9HYSvHXdTByo2 8BaXHPObAw4ztsfh2LWbJfByMiNM7oRY58scGgAO80/X2ooFTC/0Ih4oHrUYu2TM 4TKOq/ArubWfzdkpvovwP7NiQpcjXwELAuKJgxs5oMrCRcnlyFH6nOXY3ZM+cric M7mghWeSNmOIvsBsKU19eO6D0qRioJHIRgXVsA57iTrd0UMIm3r7uK1ZEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCCEaMQniCYIPofPLPEJ35xMbSKMB8GA1UdIwQY MBaAFNYE5J6SgwWry48y3vP+/APrvN5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgt MDNjODIxNTc0MjFhLzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgtMDNjODIxNTc0MjFh LzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc1rY92x EqBttpxMSbAAjL56Wfyog1Ba8bI0mu+nvH0j8NYQ8twBXZ3XaQp+pVseAoaUH56d SVbM8yAlc+bDRXADy7Rdh6SNJbvY0+CFkQsnpJymZF7OjpzDNfLMRcSC0m5gQTWe cI+3QvedaB8eG14GMKAUeUY8TJc+MiYltviOR1ey/3Orc1s4o4NCrD3YEmFiGdot VCxec9FsUO/fJWudkLab4FyyeEhcVpsMFeEcM7KXjlekW0DoSCDZzPewr2m2Fn/t gvyLg9mOc2aZv76Tc/eNzGb7c848UXf5/EYTZkSeLCcXl65ZuxH+H0+EErifmC92 n+xKNLlf+0Uy/g== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:32 2025 by rpki-client