This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json) Hash identifier: QLEKf3ZsKxeHuc9VAg3HAzybslvJRde0Zit03NXfj7Q= Subject key identifier: 80:41:07:4C:73:9A:EC:16:A5:49:14:4D:D6:FF:21:AA:A6:58:CB:8B Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Certificate serial: 019B1F86FB384A13829F0AF61EF72E7C3C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 01:01:38 +0000 Manifest this update: Mon 15 Dec 2025 01:01:38 +0000 Manifest next update: Tue 16 Dec 2025 01:01:38 +0000 Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: S03LatRi+pNQWzxmKOgc9n1BhiYDb9wraWr3l3G8WCo=) 2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=) 3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:fb:38:4a:13:82:9f:0a:f6:1e:f7:2e:7c:3c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Validity Not Before: Dec 15 01:01:38 2025 GMT Not After : Dec 16 01:01:38 2025 GMT Subject: CN=8041074c739aec16a549144dd6ff21aaa658cb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:76:15:61:89:ed:04:16:04:57:79:95:5c: 54:bb:29:d1:f8:60:16:17:a6:47:26:0c:bd:6d:c3: 93:c9:17:c0:49:18:82:1f:ac:d1:1d:14:ce:80:30: 50:60:75:de:bc:00:2a:5c:fc:40:81:1a:57:6c:1c: 5d:81:69:f5:9d:2d:36:c5:86:71:18:15:58:0a:a8: 13:2c:24:e8:c1:a6:d2:29:6e:08:28:1e:f1:8d:39: 19:76:96:1a:b4:39:fb:67:b9:be:50:99:81:26:43: 0a:9b:98:5c:c6:24:fc:3c:e4:76:2c:b7:9d:a2:d6: 7e:c0:3e:36:96:36:e1:be:7a:60:53:64:ee:4e:38: 73:e6:76:ce:32:8d:9b:dc:81:00:a7:20:22:d4:43: 9a:17:81:74:37:e2:b8:a2:02:fa:88:ba:db:fc:2a: 1c:aa:1c:82:e8:fd:38:2c:fc:99:10:43:65:0e:95: a7:84:04:0c:74:73:37:17:fd:b0:0e:c1:d5:ea:cf: ed:c1:78:55:7d:89:72:38:55:d4:b4:4d:8f:c7:c6: f5:24:ce:12:15:4c:a6:ad:dd:c7:25:b7:ca:89:e3: 7c:27:b8:e4:09:14:25:38:7d:2f:75:d8:44:5e:c9: d7:2e:a0:15:c8:7a:c2:86:c6:f0:9d:67:c5:85:68: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:07:4C:73:9A:EC:16:A5:49:14:4D:D6:FF:21:AA:A6:58:CB:8B X509v3 Authority Key Identifier: keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:17:8b:a4:73:01:7a:39:8c:81:da:3a:ff:53:f4:fa:3e:fa: b5:6b:c8:9e:58:cb:1f:c4:2f:1d:32:87:e9:9a:c1:7f:d6:cd: b2:da:0e:4d:18:56:ee:b9:cf:c9:fe:c1:c7:bd:66:14:99:ad: 66:06:dc:87:b4:f3:7e:8a:98:9a:3b:75:7b:18:71:e6:03:f3: 0c:a0:1d:21:af:a0:3f:aa:4c:5a:91:44:3d:38:01:00:95:ba: 02:31:6f:d7:64:8c:0d:89:29:96:f3:bf:8f:3f:2a:d2:b8:48: 08:18:a1:18:3e:a7:fe:64:fe:52:1f:32:97:6c:4c:29:64:e4: b1:52:b5:7a:bc:65:d1:d0:1d:49:e6:09:89:53:56:ac:dd:c9: 16:43:53:f9:52:fd:3a:7f:23:b6:63:94:5b:7f:41:3b:2b:cb: 3e:3e:54:66:26:bb:84:90:e9:c5:55:bc:73:13:bb:1d:4a:5f: 1e:da:83:f2:50:fa:21:e1:28:3d:2a:4a:8f:86:da:7d:2f:42: 1b:1d:e1:8a:a2:0e:08:84:38:92:7a:d3:25:a2:a4:3f:38:cd: f9:4e:c5:06:8e:45:fc:d1:80:d9:7f:5f:32:06:5e:f4:53:69: 99:5b:d2:ef:89:56:a8:0e:1f:64:ed:f4:8c:88:7c:60:e6:dc: 0f:3b:2e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhvs4ShOCnwr2HvcufDx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz YjA0OGQwHhcNMjUxMjE1MDEwMTM4WhcNMjUxMjE2MDEwMTM4WjAzMTEwLwYDVQQD Eyg4MDQxMDc0YzczOWFlYzE2YTU0OTE0NGRkNmZmMjFhYWE2NThjYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZB2FWGJ7QQWBFd5lVxUuynR+GAW F6ZHJgy9bcOTyRfASRiCH6zRHRTOgDBQYHXevAAqXPxAgRpXbBxdgWn1nS02xYZx GBVYCqgTLCTowabSKW4IKB7xjTkZdpYatDn7Z7m+UJmBJkMKm5hcxiT8POR2LLed otZ+wD42ljbhvnpgU2TuTjhz5nbOMo2b3IEApyAi1EOaF4F0N+K4ogL6iLrb/Coc qhyC6P04LPyZEENlDpWnhAQMdHM3F/2wDsHV6s/twXhVfYlyOFXUtE2Px8b1JM4S FUymrd3HJbfKieN8J7jkCRQlOH0vddhEXsnXLqAVyHrChsbwnWfFhWhUNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBBB0xzmuwWpUkUTdb/IaqmWMuLMB8GA1UdIwQY MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBeLpHMB ejmMgdo6/1P0+j76tWvInljLH8QvHTKH6ZrBf9bNstoOTRhW7rnPyf7Bx71mFJmt Zgbch7TzfoqYmjt1exhx5gPzDKAdIa+gP6pMWpFEPTgBAJW6AjFv12SMDYkplvO/ jz8q0rhICBihGD6n/mT+Uh8yl2xMKWTksVK1erxl0dAdSeYJiVNWrN3JFkNT+VL9 On8jtmOUW39BOyvLPj5UZia7hJDpxVW8cxO7HUpfHtqD8lD6IeEoPSpKj4bafS9C Gx3hiqIOCIQ4knrTJaKkPzjN+U7FBo5F/NGA2X9fMgZe9FNpmVvS74lWqA4fZO30 jIh8YObcDzsuVw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:58 2025 by rpki-client