This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json) Hash identifier: uaHw/T2PeZ3q6o+QI/CtOC6w4CR+OgnqoxbJtzlwMbg= Subject key identifier: 7E:97:C0:9D:AF:D7:1E:C7:DC:99:AB:9E:9C:71:16:DD:00:5F:7B:17 Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51 Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051 Certificate serial: 019B20CFC632D693D4E5A4C311A68C46478A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft Manifest number: 13D1 Signing time: Mon 15 Dec 2025 07:00:46 +0000 Manifest this update: Mon 15 Dec 2025 07:00:46 +0000 Manifest next update: Tue 16 Dec 2025 07:00:46 +0000 Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: MTy3kdDX7AjduZUnqcUdb1TT1iZ4+JE/09ZaET9la/Y=) 2: igBGcaK6I-04bslxB8dvdsYLHhw.roa (hash: FBSMg/oDiupeLPZD+Uq2Nknq3gqPFPRMj+3j0Pt7jOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:c6:32:d6:93:d4:e5:a4:c3:11:a6:8c:46:47:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051 Validity Not Before: Dec 15 07:00:46 2025 GMT Not After : Dec 16 07:00:46 2025 GMT Subject: CN=7e97c09dafd71ec7dc99ab9e9c7116dd005f7b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:b4:bc:e2:c1:b1:11:53:bb:14:ae:80:49: 50:b7:3b:26:e1:c2:16:c0:48:8b:b8:9c:89:99:39: f5:50:c7:28:12:2e:c0:4b:12:b2:a7:84:33:52:68: 56:85:17:c1:4b:57:bc:e6:d7:95:4a:f0:9d:9e:02: 81:e3:0e:75:61:3d:03:0f:db:dc:ce:14:80:55:bc: 1a:2c:26:3b:1a:f3:17:34:e4:7d:1f:aa:5b:bd:22: 4f:55:a6:20:f4:94:93:79:3c:0b:d1:07:cd:72:db: 4b:0b:d9:e6:5f:02:76:fa:45:c9:a3:37:48:e6:84: be:85:a0:21:49:a8:50:76:02:4a:e8:59:90:76:6e: 9c:b3:bf:38:13:b3:a8:11:e8:3e:9f:3f:00:0f:96: 48:c9:32:42:29:b8:af:94:50:8b:b6:25:2c:ca:33: b6:e0:54:75:11:01:a7:41:c3:0e:40:cd:c1:46:ca: f1:d2:fa:16:4c:80:a1:32:f4:e2:75:3a:58:48:45: 1e:60:57:fd:72:d1:a7:77:82:81:a2:30:38:12:08: 7e:4c:4b:1a:39:57:2a:23:f8:6e:54:62:7a:ef:28: 25:5f:2d:cd:7c:80:68:a0:0d:43:92:d7:69:af:29: 9d:cb:61:b1:b7:cf:47:32:28:12:1d:bb:7c:fd:2b: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:C0:9D:AF:D7:1E:C7:DC:99:AB:9E:9C:71:16:DD:00:5F:7B:17 X509v3 Authority Key Identifier: keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4e:00:39:33:ca:dc:e5:7b:56:b2:7d:6b:68:f7:35:e9:b9: 2b:01:02:1a:0d:ef:70:24:c7:99:c8:f4:63:10:42:94:76:bd: 9c:84:9c:49:11:1b:d8:71:79:2c:de:be:56:63:1d:d0:84:f4: ad:86:c9:ff:77:c0:b1:57:83:3a:7c:1b:ca:ba:33:10:51:62: 10:a3:a8:41:54:50:92:bd:d6:c4:f4:cc:ad:17:d8:db:d0:89: ab:24:26:27:d8:84:41:71:7d:c0:6b:80:6a:b7:1f:e3:c4:ca: e4:38:e9:f2:bb:32:64:28:21:9e:4a:42:7f:6e:35:b8:64:fb: 36:c3:3d:d3:01:e9:3d:85:e4:a9:12:e4:95:c5:27:dd:23:4d: 3d:c0:3f:ca:9f:34:fb:6c:49:3d:e2:58:6a:f3:ff:89:6b:06: d2:bc:88:e0:17:c5:eb:67:ce:90:b0:e8:1a:09:1f:c0:c9:3e: 95:ad:8e:c3:2a:aa:71:fe:33:d2:eb:19:14:6e:41:62:60:d1: b8:37:3d:e2:60:ab:75:a1:f4:0d:22:17:e4:0c:d2:fe:00:ce: 89:5c:a7:9b:9a:1c:c6:c4:e1:fb:f5:38:84:75:32:d1:da:dd: 13:11:e4:1f:0c:2b:a4:a0:ee:66:c7:fd:fd:fe:2a:14:4e:3a: 9d:5d:1d:41 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsgz8Yy1pPU5aTDEaaMRkeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDJiYWM3Yjc5YTMxMDllOWJlM2RmZTRmMDZkNTg1YmI5 ZjkwNTEwHhcNMjUxMjE1MDcwMDQ2WhcNMjUxMjE2MDcwMDQ2WjAzMTEwLwYDVQQD Eyg3ZTk3YzA5ZGFmZDcxZWM3ZGM5OWFiOWU5YzcxMTZkZDAwNWY3YjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBa0vOLBsRFTuxSugElQtzsm4cIW wEiLuJyJmTn1UMcoEi7ASxKyp4QzUmhWhRfBS1e85teVSvCdngKB4w51YT0DD9vc zhSAVbwaLCY7GvMXNOR9H6pbvSJPVaYg9JSTeTwL0QfNcttLC9nmXwJ2+kXJozdI 5oS+haAhSahQdgJK6FmQdm6cs784E7OoEeg+nz8AD5ZIyTJCKbivlFCLtiUsyjO2 4FR1EQGnQcMOQM3BRsrx0voWTIChMvTidTpYSEUeYFf9ctGnd4KBojA4Egh+TEsa OVcqI/huVGJ67yglXy3NfIBooA1Dktdprymdy2Gxt89HMigSHbt8/StxawIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH6XwJ2v1x7H3JmrnpxxFt0AX3sXMB8GA1UdIwQY MBaAFPsCuse3mjEJ6b49/k8G1YW7n5BRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13SzZ4N2VhTVFucHZqMy1Ud2JWaGJ1ZmtGRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjAwZTJiLWQzYTQtNDU1Ny05NzM1 LTQ5NTBmODZjYmI1Yi8xLzEtd0s2eDdlYU1RbnB2ajMtVHdiVmhidWZrRkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFkLzIwMGUyYi1kM2E0LTQ1NTctOTczNS00OTUwZjg2Y2Ji NWIvMS8xLXdLNng3ZWFNUW5wdmozLVR3YlZoYnVma0ZFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE4A OTPK3OV7VrJ9a2j3Nem5KwECGg3vcCTHmcj0YxBClHa9nIScSREb2HF5LN6+VmMd 0IT0rYbJ/3fAsVeDOnwbyrozEFFiEKOoQVRQkr3WxPTMrRfY29CJqyQmJ9iEQXF9 wGuAarcf48TK5Djp8rsyZCghnkpCf241uGT7NsM90wHpPYXkqRLklcUn3SNNPcA/ yp80+2xJPeJYavP/iWsG0ryI4BfF62fOkLDoGgkfwMk+la2Owyqqcf4z0usZFG5B YmDRuDc94mCrdaH0DSIX5AzS/gDOiVynm5ocxsTh+/U4hHUy0drdExHkHwwrpKDu Zsf9/f4qFE46nV0dQQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:22:00 2025 by rpki-client