This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json) Hash identifier: Ev07gHn6FoI6FuA1d/SKEws5NneVZpKe/5ZUQB8w200= Subject key identifier: 69:BB:57:D9:D4:F9:62:20:0C:43:F4:53:22:73:07:32:33:57:E9:01 Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a Certificate serial: 019B5A51C681C56D0D78AE5E77C10673A212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:07 +0000 Manifest this update: Fri 26 Dec 2025 11:01:07 +0000 Manifest next update: Sat 27 Dec 2025 11:01:07 +0000 Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: MPkpzNi+RtBFlKgwuMiWJn9UlX1biVcToQM1ZnF2SWY=) 2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=) 3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c6:81:c5:6d:0d:78:ae:5e:77:c1:06:73:a2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a Validity Not Before: Dec 26 11:01:07 2025 GMT Not After : Dec 27 11:01:07 2025 GMT Subject: CN=69bb57d9d4f962200c43f453227307323357e901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:23:b8:0a:b0:6f:93:bc:44:37:63:bd:3e: 52:00:e9:69:08:a2:d9:86:41:33:0b:a4:af:ed:68: 1b:63:d1:06:58:61:ba:e0:60:07:47:07:23:35:32: 63:63:78:4d:1f:64:a0:8a:83:49:0c:4d:7e:74:b6: cd:73:17:67:f3:2d:af:de:68:a5:6d:da:a5:a4:85: c6:d8:25:99:f3:f4:a1:7b:03:9b:ef:a9:75:73:a7: 03:ec:b4:71:bd:48:2e:d9:d4:09:7e:f8:72:17:09: a0:d9:12:99:f0:93:16:61:a5:34:3d:ed:48:42:49: 82:21:eb:cf:d9:fe:9d:0f:95:82:ec:a2:63:c3:6c: cb:23:aa:0a:7d:31:a6:4a:ac:0e:17:98:df:4c:06: 9f:11:48:a7:94:8d:ca:0c:75:13:73:00:f4:55:3c: 68:ce:ce:24:f0:3c:7b:68:c6:27:d1:77:6f:44:50: ae:65:28:db:2a:32:02:4f:75:e4:d0:ae:dc:e9:b8: c6:66:3b:8c:2b:be:ef:10:7c:da:8d:79:98:0f:82: d3:f7:f0:da:5f:a3:3a:96:4c:ca:67:60:3b:ed:6f: 60:98:2e:af:81:df:64:81:73:cd:1a:99:ea:30:af: 22:c7:0a:75:4e:0c:14:de:4f:03:70:a7:14:7d:f8: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:57:D9:D4:F9:62:20:0C:43:F4:53:22:73:07:32:33:57:E9:01 X509v3 Authority Key Identifier: keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:42:51:2b:53:3f:47:fe:f8:5b:36:c1:57:6d:fc:ce:02:56: c4:57:b8:87:b7:ea:e3:bd:de:18:1a:da:c6:60:05:57:f8:e9: 84:c4:d7:15:9a:78:c8:8a:cd:d6:87:a8:64:ef:30:36:52:ca: c3:8f:f3:77:f8:30:9b:b5:78:b3:59:10:40:b9:ba:44:5b:e9: ca:7f:ab:ca:da:ba:15:29:07:32:00:0b:89:bc:35:b2:e5:b9: 28:2c:c3:94:58:a4:2a:a6:c4:06:cd:40:53:0a:7b:95:6f:39: 5c:ce:22:93:57:98:1b:e9:af:65:c2:03:56:4f:0d:6a:fc:f7: 23:14:9f:69:dd:91:45:da:c5:f2:7e:20:bc:2c:51:d7:f0:f6: a6:d7:05:fd:f9:74:19:ed:60:b5:fd:94:81:a3:dc:5e:10:ab: 74:70:00:9d:8b:a5:c6:16:d3:e3:ad:ca:e1:8f:2f:95:a2:6d: f9:42:93:9e:4e:0c:e3:1f:a9:6f:c0:bd:8d:20:2e:e8:1f:0a: bb:12:af:55:69:a7:78:41:12:4b:08:b0:ff:13:77:4d:ff:37: 21:2a:1b:4b:1b:bd:8a:2f:00:f5:65:21:3f:dc:41:20:06:f3: 32:a6:ec:dd:64:19:77:97:cc:50:d8:35:4b:f0:84:9d:34:c2: 77:6d:92:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcaBxW0NeK5ed8EGc6ISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDNjZWFjOTA2ZDA3Zjc0Y2E5NGM0NDYzMDNkOTU0NjY2 YjU4M2EwHhcNMjUxMjI2MTEwMTA3WhcNMjUxMjI3MTEwMTA3WjAzMTEwLwYDVQQD Eyg2OWJiNTdkOWQ0Zjk2MjIwMGM0M2Y0NTMyMjczMDczMjMzNTdlOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAgjuAqwb5O8RDdjvT5SAOlpCKLZ hkEzC6Sv7WgbY9EGWGG64GAHRwcjNTJjY3hNH2SgioNJDE1+dLbNcxdn8y2v3mil bdqlpIXG2CWZ8/ShewOb76l1c6cD7LRxvUgu2dQJfvhyFwmg2RKZ8JMWYaU0Pe1I QkmCIevP2f6dD5WC7KJjw2zLI6oKfTGmSqwOF5jfTAafEUinlI3KDHUTcwD0VTxo zs4k8Dx7aMYn0XdvRFCuZSjbKjICT3Xk0K7c6bjGZjuMK77vEHzajXmYD4LT9/Da X6M6lkzKZ2A77W9gmC6vgd9kgXPNGpnqMK8ixwp1TgwU3k8DcKcUffgzswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm7V9nU+WIgDEP0UyJzBzIzV+kBMB8GA1UdIwQY MBaAFNcDzqyQbQf3TKlMRGMD2VRma1g6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdQT3JKQnRCX2RNcVV4RVl3UFpWR1pyV0RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNmM3MzQtMDlhMS00ZGEzLTg5OTIt YmQ0ZDU0NDQ1YTk1LzEvMXdQT3JKQnRCX2RNcVV4RVl3UFpWR1pyV0RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNmM3MzQtMDlhMS00ZGEzLTg5OTItYmQ0ZDU0NDQ1YTk1 LzEvMXdQT3JKQnRCX2RNcVV4RVl3UFpWR1pyV0RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0JRK1M/ R/74WzbBV238zgJWxFe4h7fq473eGBraxmAFV/jphMTXFZp4yIrN1oeoZO8wNlLK w4/zd/gwm7V4s1kQQLm6RFvpyn+rytq6FSkHMgALibw1suW5KCzDlFikKqbEBs1A Uwp7lW85XM4ik1eYG+mvZcIDVk8Navz3IxSfad2RRdrF8n4gvCxR1/D2ptcF/fl0 Ge1gtf2UgaPcXhCrdHAAnYulxhbT463K4Y8vlaJt+UKTnk4M4x+pb8C9jSAu6B8K uxKvVWmneEESSwiw/xN3Tf83ISobSxu9ii8A9WUhP9xBIAbzMqbs3WQZd5fMUNg1 S/CEnTTCd22SpA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:52 2025 by rpki-client