This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: YKsUtby8mzzPeqs8sIhIN8JBSDfBAACtWC9i42lNXOE= Subject key identifier: 22:C6:A5:EE:2E:78:00:D6:F5:0A:56:E0:98:96:43:12:E9:A6:C8:99 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B077DC40EB401A4074E3B87E078469963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1772 Signing time: Wed 10 Dec 2025 09:00:41 +0000 Manifest this update: Wed 10 Dec 2025 09:00:41 +0000 Manifest next update: Thu 11 Dec 2025 09:00:41 +0000 Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=) 2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: fzZvs10sVYdzyAOmSgXuhjbFhtjveNuSyDqhA31Dch4=) 3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=) 4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=) 5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=) 6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=) 7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=) 8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=) 9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:c4:0e:b4:01:a4:07:4e:3b:87:e0:78:46:99:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Dec 10 09:00:41 2025 GMT Not After : Dec 11 09:00:41 2025 GMT Subject: CN=22c6a5ee2e7800d6f50a56e098964312e9a6c899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:fb:6f:98:42:f0:42:0e:1c:e7:d6:ee:0c: 22:75:bf:7a:bc:e7:1f:0a:50:a1:13:83:ae:e1:ba: 1d:93:b6:24:25:79:68:25:d9:d0:d5:b8:b8:86:dd: 8d:af:c3:7b:cf:2b:4f:1f:b5:0e:8a:cc:94:1b:39: fa:09:f4:27:f8:2e:43:ed:29:b3:8a:6e:71:4c:94: 34:39:46:b5:8f:37:71:a8:a2:4c:9b:c9:7c:b3:76: 83:13:a7:de:03:44:ce:9e:87:4d:82:c3:fd:7b:7c: 61:5e:78:96:0d:d6:ed:29:2b:e9:33:d9:6a:64:9b: 97:fa:0c:d5:c6:71:a1:04:16:d5:c0:bb:be:da:9f: 8b:e2:8d:86:12:e2:ba:28:70:f9:b2:da:e0:4f:1c: 7a:f0:58:23:2d:8a:00:a4:e2:42:44:bf:c5:cd:d6: 7b:15:23:9d:95:b0:23:22:f2:4d:94:f8:6c:b6:b7: ec:6c:22:91:2b:75:fe:9c:1d:1d:9c:31:ea:64:1f: 34:bf:78:e1:17:55:92:cd:cd:d0:3d:d0:d0:64:f1: ab:be:d8:56:6e:28:c3:f4:f4:c9:c2:94:f9:dc:2b: 73:cb:02:90:71:6e:a3:c5:ea:af:e9:ca:46:ee:7e: 99:e8:df:f3:85:b8:0e:3b:0f:a8:73:27:4b:b0:9c: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:A5:EE:2E:78:00:D6:F5:0A:56:E0:98:96:43:12:E9:A6:C8:99 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ed:cf:3f:7b:c8:a6:53:ae:3f:75:70:31:2e:70:82:ce:f1: bb:8f:b4:21:20:51:95:d2:04:d6:39:ba:26:8c:b7:7f:9c:d3: 2d:ed:a8:fa:5d:60:e9:e1:3b:a1:8a:a7:dd:da:bf:ae:18:b8: c5:a8:a3:8f:f8:7e:a9:f5:96:08:ba:13:02:97:59:1e:21:b0: 93:24:b9:c5:11:c6:e9:50:13:bf:7f:e5:80:84:aa:45:39:1a: a2:66:c0:91:0b:50:69:46:c5:d4:9e:4a:d0:d5:cd:d8:ad:e4: c8:bb:6b:eb:35:7e:55:76:c1:ea:42:2e:7c:12:9f:a7:c3:a5: c2:98:93:0b:25:4e:d8:dd:87:09:11:61:b0:86:71:30:2f:f3: 74:2b:06:64:b8:21:56:22:bf:02:5e:01:9f:16:0f:2a:7c:9a: a8:bd:43:8e:5d:74:d7:0e:76:17:99:79:38:a3:51:43:fe:9e: ce:9e:7e:49:66:66:98:74:cc:ab:d2:f4:62:e7:83:35:c0:f3: 73:40:32:d9:16:3f:64:78:63:20:fa:68:35:c3:57:a8:2c:cd: 5d:c3:06:d5:02:a4:26:ec:65:39:f2:9d:2b:36:4b:11:8d:9c: 4b:eb:95:4d:5a:ae:fc:c2:45:4f:45:42:91:fb:c7:aa:18:7c: e8:fd:d7:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsHfcQOtAGkB047h+B4RpljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjUxMjEwMDkwMDQxWhcNMjUxMjExMDkwMDQxWjAzMTEwLwYDVQQD EygyMmM2YTVlZTJlNzgwMGQ2ZjUwYTU2ZTA5ODk2NDMxMmU5YTZjODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/7b5hC8EIOHOfW7gwidb96vOcf ClChE4Ou4bodk7YkJXloJdnQ1bi4ht2Nr8N7zytPH7UOisyUGzn6CfQn+C5D7Smz im5xTJQ0OUa1jzdxqKJMm8l8s3aDE6feA0TOnodNgsP9e3xhXniWDdbtKSvpM9lq ZJuX+gzVxnGhBBbVwLu+2p+L4o2GEuK6KHD5strgTxx68FgjLYoApOJCRL/FzdZ7 FSOdlbAjIvJNlPhstrfsbCKRK3X+nB0dnDHqZB80v3jhF1WSzc3QPdDQZPGrvthW bijD9PTJwpT53CtzywKQcW6jxeqv6cpG7n6Z6N/zhbgOOw+ocydLsJxulQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCLGpe4ueADW9QpW4JiWQxLppsiZMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATu3P P3vIplOuP3VwMS5wgs7xu4+0ISBRldIE1jm6Joy3f5zTLe2o+l1g6eE7oYqn3dq/ rhi4xaijj/h+qfWWCLoTApdZHiGwkyS5xRHG6VATv3/lgISqRTkaombAkQtQaUbF 1J5K0NXN2K3kyLtr6zV+VXbB6kIufBKfp8OlwpiTCyVO2N2HCRFhsIZxMC/zdCsG ZLghViK/Al4BnxYPKnyaqL1Djl101w52F5l5OKNRQ/6ezp5+SWZmmHTMq9L0YueD NcDzc0Ay2RY/ZHhjIPpoNcNXqCzNXcMG1QKkJuxlOfKdKzZLEY2cS+uVTVqu/MJF T0VCkfvHqhh86P3XLg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:18:23 2025 by rpki-client