This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json) Hash identifier: oPNM3aJuvnWuj1hOVtnOp9MpjrK4Mx66X4PYPMQn6Hg= Subject key identifier: 34:4D:0C:30:59:40:96:71:1D:C9:7F:80:BB:20:63:CD:32:7F:10:4E Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Certificate serial: 019B42EE592D476D363BDA59881CFD94D856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft Manifest number: 0CAC Signing time: Sun 21 Dec 2025 22:01:15 +0000 Manifest this update: Sun 21 Dec 2025 22:01:15 +0000 Manifest next update: Mon 22 Dec 2025 22:01:15 +0000 Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: OXcEA8585ju6yCsiUvcKfhNIE2ffEdl2HjuI+bod02Y=) 2: 6Z4b57MPwkhXcs7J77Og5ggNHxk.roa (hash: dJBszKW/oW+tRw8WTxNJkgV8kHFKswAFFpUPQ986IzE=) 3: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:59:2d:47:6d:36:3b:da:59:88:1c:fd:94:d8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Validity Not Before: Dec 21 22:01:15 2025 GMT Not After : Dec 22 22:01:15 2025 GMT Subject: CN=344d0c30594096711dc97f80bb2063cd327f104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:91:7a:65:a4:c1:56:0c:90:2f:7c:d6:5c: 56:ce:69:69:1e:62:d6:20:89:64:c0:c5:c3:19:41: f0:bc:2f:08:11:0d:13:6c:e0:a5:38:d1:14:75:9e: 0d:ef:5a:58:b9:71:2d:81:e4:8f:b7:4e:06:6f:68: f2:a8:a2:f7:04:e9:ee:3d:a3:ee:a9:f7:c1:eb:81: 3e:70:86:df:22:bd:5f:bc:3b:e9:d9:41:80:7d:50: 9f:e7:ac:b5:fe:b3:ca:b9:e6:cb:76:c3:2d:41:e1: dd:4c:fc:f9:01:9b:74:44:6c:ca:53:9c:95:2a:fa: 72:01:81:ac:2d:67:f9:da:7d:93:58:f9:b5:ea:3a: f9:1e:5a:b6:ce:59:da:b5:11:60:a3:bf:eb:31:34: c2:3e:fd:08:91:ad:05:15:dc:1e:6e:c6:73:7f:c7: 8e:3b:f3:0d:68:b0:e1:1d:b0:23:a0:3d:b1:ec:d2: b7:5a:c6:21:c1:51:9e:c7:f7:53:56:4c:ce:3d:21: e3:35:a2:8d:d6:cf:b4:d4:7a:4f:23:be:c9:58:d3: 0c:68:83:bf:01:ac:8f:48:45:e4:63:43:ae:b5:67: 89:0b:0e:12:a0:4e:3c:6b:5b:b3:08:ea:24:18:26: df:fd:b1:fe:84:ef:de:18:43:44:4f:7a:f9:b1:b8: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:0C:30:59:40:96:71:1D:C9:7F:80:BB:20:63:CD:32:7F:10:4E X509v3 Authority Key Identifier: keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:34:a2:e5:90:6e:43:53:fa:76:43:c3:42:68:d7:23:98:89: c3:f5:32:22:96:da:e7:83:bf:37:56:0b:1c:7b:27:31:74:63: d1:92:93:e9:e5:63:0b:8a:b8:e8:74:62:b4:39:f1:eb:f4:a0: 57:c5:ef:47:11:96:3e:31:f5:09:a7:18:41:66:52:82:5a:fa: 7e:13:e8:f1:48:ce:6f:c3:7d:54:1c:a3:e6:00:e1:be:7d:6b: 3f:a2:09:1a:6c:44:7b:0e:40:b6:4f:62:14:b5:cc:44:ed:2c: 60:c4:c5:3f:d3:58:92:97:9a:e7:40:87:ef:43:50:ac:c5:35: 70:f9:5f:0f:25:3a:98:2a:2b:52:ff:23:5d:7c:c3:80:83:17: 67:6c:87:6c:0c:c3:9a:c1:4f:ea:b8:e7:44:94:1a:2c:dc:6d: 25:c6:4c:d8:41:7f:f9:08:a3:81:49:78:f7:c9:4f:89:6b:3f: 41:a2:d6:49:a4:7a:75:ac:9f:81:03:82:00:ba:ce:94:25:42: d9:e1:94:0b:3b:97:e0:d7:48:e8:f4:20:17:5d:73:b8:ac:cb: c4:5c:cf:13:b6:9a:c5:49:50:88:7b:e4:b8:e7:d7:4a:db:40: e2:fa:ad:3d:9f:30:ec:62:2b:58:0c:7f:55:f9:98:3f:f7:d1: 3e:21:41:96 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtC7lktR202O9pZiBz9lNhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3 YmMyMDgwHhcNMjUxMjIxMjIwMTE1WhcNMjUxMjIyMjIwMTE1WjAzMTEwLwYDVQQD EygzNDRkMGMzMDU5NDA5NjcxMWRjOTdmODBiYjIwNjNjZDMyN2YxMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgmRemWkwVYMkC981lxWzmlpHmLW IIlkwMXDGUHwvC8IEQ0TbOClONEUdZ4N71pYuXEtgeSPt04Gb2jyqKL3BOnuPaPu qffB64E+cIbfIr1fvDvp2UGAfVCf56y1/rPKuebLdsMtQeHdTPz5AZt0RGzKU5yV KvpyAYGsLWf52n2TWPm16jr5Hlq2zlnatRFgo7/rMTTCPv0Ika0FFdwebsZzf8eO O/MNaLDhHbAjoD2x7NK3WsYhwVGex/dTVkzOPSHjNaKN1s+01HpPI77JWNMMaIO/ AayPSEXkY0OutWeJCw4SoE48a1uzCOokGCbf/bH+hO/eGENET3r5sbjbdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDRNDDBZQJZxHcl/gLsgY80yfxBOMB8GA1UdIwQY MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDSi 5ZBuQ1P6dkPDQmjXI5iJw/UyIpba54O/N1YLHHsnMXRj0ZKT6eVjC4q46HRitDnx 6/SgV8XvRxGWPjH1CacYQWZSglr6fhPo8UjOb8N9VByj5gDhvn1rP6IJGmxEew5A tk9iFLXMRO0sYMTFP9NYkpea50CH70NQrMU1cPlfDyU6mCorUv8jXXzDgIMXZ2yH bAzDmsFP6rjnRJQaLNxtJcZM2EF/+QijgUl498lPiWs/QaLWSaR6dayfgQOCALrO lCVC2eGUCzuX4NdI6PQgF11zuKzLxFzPE7aaxUlQiHvkuOfXSttA4vqtPZ8w7GIr WAx/VfmYP/fRPiFBlg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:39 2025 by rpki-client