This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft File: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json) Hash identifier: CCheRNrs+cBPK3tBVgqtxp2YxFVcg2WeGmk1T5v2BXc= Subject key identifier: C7:01:70:C7:2E:CB:57:60:7E:09:80:70:5B:78:42:02:3F:1D:56:0E Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C Certificate issuer: /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c Certificate serial: 019B5ABF7FF84FC05744D188E76E8C418E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft Manifest number: 164A Signing time: Fri 26 Dec 2025 13:00:58 +0000 Manifest this update: Fri 26 Dec 2025 13:00:58 +0000 Manifest next update: Sat 27 Dec 2025 13:00:58 +0000 Files and hashes: 1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=) 2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: 1l4YocdRwM8ajTYgKOrTTcSPpF3DzQ8X90UzLbNVG6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:7f:f8:4f:c0:57:44:d1:88:e7:6e:8c:41:8e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c Validity Not Before: Dec 26 13:00:58 2025 GMT Not After : Dec 27 13:00:58 2025 GMT Subject: CN=c70170c72ecb57607e0980705b7842023f1d560e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:75:20:de:90:b2:9f:12:85:ee:45:79:42: 3d:ae:dc:0d:a4:ce:eb:fe:5b:35:89:d1:c8:b5:a7: a4:b3:b4:25:5d:16:6d:66:eb:2a:5b:fe:83:27:e3: bf:cb:25:e9:55:b9:54:f9:ce:1e:5c:b6:92:0d:de: de:70:9b:09:6f:57:0b:da:a5:1e:a7:19:bb:3a:c7: a1:04:21:cf:ab:00:58:d4:80:12:4f:72:af:c7:6f: cb:60:5f:21:3a:50:44:ee:c6:cb:15:93:2f:3c:68: d6:8d:84:bb:60:09:6d:82:a7:f2:e0:06:fa:6b:8b: d7:f3:8b:84:5e:a7:2e:ff:37:50:9b:3d:dd:1b:b4: c0:c5:b2:00:6a:e5:97:d8:9c:88:05:ba:16:c9:0b: e0:b4:72:49:9b:6c:df:e4:b4:e4:30:e6:93:2c:7e: 4e:c1:51:d0:94:64:bb:0d:c2:5a:93:56:49:2e:db: 60:77:6e:43:a1:38:d6:1b:08:cc:d0:63:cb:2d:7f: 1d:f8:7d:98:ac:98:51:06:19:8d:22:2e:76:c8:b1: 90:f4:17:fc:ec:9d:11:ad:c2:04:02:8e:93:f0:9d: 08:0f:61:f9:b9:64:4f:16:86:8b:75:7a:51:96:4a: 3f:7f:32:57:94:a8:ab:7f:1e:d5:96:dc:eb:4a:02: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:01:70:C7:2E:CB:57:60:7E:09:80:70:5B:78:42:02:3F:1D:56:0E X509v3 Authority Key Identifier: keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c0:63:a8:f4:1f:ce:d1:af:51:d9:9f:87:ce:33:cb:5c:ea: f8:80:22:08:e8:75:87:cd:a4:dd:0c:51:e9:b3:0f:18:0e:f4: ba:7f:0a:cf:51:53:d2:bf:40:a7:3d:c8:9d:85:65:79:f8:83: 9b:cd:cc:00:07:2a:1f:f3:1d:b8:b7:24:53:52:3f:8b:95:1e: fe:b9:56:73:39:59:00:f7:1a:67:24:0c:b7:66:ad:0b:d2:3a: f2:1f:8a:1a:11:0f:df:6a:55:cf:be:9a:28:48:e4:8f:77:01: 2a:64:ab:1c:e8:a8:7a:d3:90:b7:45:b9:78:6c:64:40:bc:bd: 24:30:08:41:05:fb:cf:05:12:8e:b7:01:3e:d3:0f:1a:97:85: 93:6d:57:ce:79:c0:76:14:82:59:43:2b:34:e6:4d:f0:1d:5c: 0c:28:f8:6f:2b:d7:4b:04:e8:ba:8c:80:fd:40:ca:9c:dd:54: e1:fa:4a:6c:44:d3:c1:2d:2a:ab:c5:b6:65:27:52:12:c7:99: 70:64:71:d1:27:3d:f8:3f:12:71:e2:68:e1:3b:e3:41:6d:a5: b2:23:28:96:53:71:11:32:08:49:f0:1d:53:c7:0a:95:4c:38: a7:5b:b5:ce:5a:6b:96:32:bc:8c:b8:4a:8f:bb:21:d5:d9:fc: d4:ae:8c:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtav3/4T8BXRNGI526MQY5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYjZiYTBhNjYwYWE4OGZhNTRlZjhkNzQ2ZWE3ZTUyNzc4 MWZjM2MwHhcNMjUxMjI2MTMwMDU4WhcNMjUxMjI3MTMwMDU4WjAzMTEwLwYDVQQD EyhjNzAxNzBjNzJlY2I1NzYwN2UwOTgwNzA1Yjc4NDIwMjNmMWQ1NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDl1IN6Qsp8She5FeUI9rtwNpM7r /ls1idHItaeks7QlXRZtZusqW/6DJ+O/yyXpVblU+c4eXLaSDd7ecJsJb1cL2qUe pxm7OsehBCHPqwBY1IAST3Kvx2/LYF8hOlBE7sbLFZMvPGjWjYS7YAltgqfy4Ab6 a4vX84uEXqcu/zdQmz3dG7TAxbIAauWX2JyIBboWyQvgtHJJm2zf5LTkMOaTLH5O wVHQlGS7DcJak1ZJLttgd25DoTjWGwjM0GPLLX8d+H2YrJhRBhmNIi52yLGQ9Bf8 7J0RrcIEAo6T8J0ID2H5uWRPFoaLdXpRlko/fzJXlKirfx7VltzrSgKriQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMcBcMcuy1dgfgmAcFt4QgI/HVYOMB8GA1UdIwQY MBaAFPq2ugpmCqiPpU7410bqflJ3gfw8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1yYTZDbVlLcUktbFR2alhSdXAtVW5lQl9Edy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMTU3NzNlLWZmMWMtNDBlZS1iYTBi LTJhMWJhNDg4OTYzNS8xLzEtcmE2Q21ZS3FJLWxUdmpYUnVwLVVuZUJfRHcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFhLzE1NzczZS1mZjFjLTQwZWUtYmEwYi0yYTFiYTQ4ODk2 MzUvMS8xLXJhNkNtWUtxSS1sVHZqWFJ1cC1VbmVCX0R3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8Bj qPQfztGvUdmfh84zy1zq+IAiCOh1h82k3QxR6bMPGA70un8Kz1FT0r9Apz3InYVl efiDm83MAAcqH/MduLckU1I/i5Ue/rlWczlZAPcaZyQMt2atC9I68h+KGhEP32pV z76aKEjkj3cBKmSrHOioetOQt0W5eGxkQLy9JDAIQQX7zwUSjrcBPtMPGpeFk21X znnAdhSCWUMrNOZN8B1cDCj4byvXSwTouoyA/UDKnN1U4fpKbETTwS0qq8W2ZSdS EseZcGRx0Sc9+D8SceJo4TvjQW2lsiMollNxETIISfAdU8cKlUw4p1u1zlprljK8 jLhKj7sh1dn81K6MOw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:54 2025 by rpki-client