This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: dnUGmpZoGmnRZ17PTlEHQFb5/H9K6OVvyAeNtOy63SE= Subject key identifier: CB:E3:2D:63:7C:E6:92:96:17:63:F5:24:FC:6E:FE:39:0F:6E:E8:F6 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B4926BD7A6E1C0AA86404950A98977BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1794 Signing time: Tue 23 Dec 2025 03:00:34 +0000 Manifest this update: Tue 23 Dec 2025 03:00:34 +0000 Manifest next update: Wed 24 Dec 2025 03:00:34 +0000 Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=) 2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: UsDEvjm+dehlttE1o6RGZY1j9+WENdh5wMrQm7+ZgPo=) 3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=) 4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=) 5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=) 6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=) 7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=) 8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=) 9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:bd:7a:6e:1c:0a:a8:64:04:95:0a:98:97:7b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Dec 23 03:00:34 2025 GMT Not After : Dec 24 03:00:34 2025 GMT Subject: CN=cbe32d637ce692961763f524fc6efe390f6ee8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:2a:b3:26:85:bb:53:a7:b6:bd:f5:ef:90: 55:75:94:c5:a5:9e:7a:23:0e:ca:ee:00:34:30:70: 0b:eb:1a:c4:62:3d:59:71:61:e5:9d:ae:b4:d7:cb: 48:2e:44:66:83:71:70:44:a7:d0:1f:d4:86:b9:f1: 4a:5e:c4:38:30:53:9e:a3:6f:a4:4b:d6:64:17:2b: c3:49:c4:24:aa:20:12:6f:7e:a3:a8:76:aa:8b:ed: 4a:10:b1:5b:49:6f:57:72:16:4e:bd:cd:19:bc:0b: bd:e6:a7:a2:22:43:b2:47:e4:fb:0e:df:78:6c:61: 1f:ca:b5:32:22:31:79:35:d8:1c:5d:6a:b9:8d:f2: aa:11:c7:55:07:4f:ad:1b:ab:3a:f5:05:26:98:34: 05:fb:99:94:38:85:f0:a2:74:e3:fe:ea:e2:61:70: 5b:a3:12:e2:2a:67:77:21:ca:28:09:69:9d:27:06: 21:c4:dd:0a:c5:17:99:e1:be:bc:07:fa:ec:4a:0a: 28:0e:c7:e1:9e:97:71:0f:d5:de:69:9b:50:f2:30: ea:f6:bb:c1:74:83:94:27:b1:f2:a0:9b:18:dc:dd: a0:d7:e6:81:39:b3:e4:92:54:99:db:52:08:eb:21: d8:5f:36:40:58:3b:81:e4:39:38:40:65:6a:d1:61: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:2D:63:7C:E6:92:96:17:63:F5:24:FC:6E:FE:39:0F:6E:E8:F6 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6c:e2:10:03:49:6b:0d:73:16:18:47:f2:3d:19:71:c5:cf: fd:4f:c3:0d:3b:2e:df:df:78:31:d6:d4:5c:23:6d:7d:7b:fa: a5:b8:8c:ee:d1:d7:f4:2a:ef:56:3d:48:33:09:0b:c6:d6:99: 18:21:8f:44:37:7f:3d:9b:24:eb:e2:af:bd:71:58:98:46:6c: 86:a6:1e:1d:52:60:e1:46:f3:d4:87:2b:b4:3f:5f:1c:2c:dd: 9f:a9:96:ce:da:54:d7:7c:61:16:f8:2a:e1:4c:4a:b1:2e:fe: b5:89:fa:78:20:19:9a:57:00:c2:9a:93:16:e5:55:a3:6a:09: b5:83:91:9a:11:5d:e4:2e:52:2d:e3:bc:bc:0d:30:04:33:e3: b3:34:b4:48:97:19:ea:c0:e0:1c:5a:95:39:26:a9:06:2a:39: 81:2b:35:37:fe:0e:61:de:2b:91:3d:b3:51:2a:93:17:a9:76: 11:c1:74:4d:f2:bc:7c:fa:c4:d0:4f:02:ba:a0:29:38:2d:36: 91:dd:3c:4e:a8:22:a7:ee:e1:a5:9c:25:0c:8d:28:3e:ef:7c: 65:a8:22:b0:5f:c8:2f:04:6f:4f:5b:41:43:0b:11:3b:40:5b: 9d:1b:35:0a:52:86:e2:5a:29:28:c5:8d:82:e1:63:99:bc:70: ca:96:19:cc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtJJr16bhwKqGQElQqYl3uzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjUxMjIzMDMwMDM0WhcNMjUxMjI0MDMwMDM0WjAzMTEwLwYDVQQD EyhjYmUzMmQ2MzdjZTY5Mjk2MTc2M2Y1MjRmYzZlZmUzOTBmNmVlOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgMqsyaFu1Ontr3175BVdZTFpZ56 Iw7K7gA0MHAL6xrEYj1ZcWHlna6018tILkRmg3FwRKfQH9SGufFKXsQ4MFOeo2+k S9ZkFyvDScQkqiASb36jqHaqi+1KELFbSW9XchZOvc0ZvAu95qeiIkOyR+T7Dt94 bGEfyrUyIjF5NdgcXWq5jfKqEcdVB0+tG6s69QUmmDQF+5mUOIXwonTj/uriYXBb oxLiKmd3IcooCWmdJwYhxN0KxReZ4b68B/rsSgooDsfhnpdxD9XeaZtQ8jDq9rvB dIOUJ7HyoJsY3N2g1+aBObPkklSZ21II6yHYXzZAWDuB5Dk4QGVq0WH87wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMvjLWN85pKWF2P1JPxu/jkPbuj2MB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmzi EANJaw1zFhhH8j0ZccXP/U/DDTsu3994MdbUXCNtfXv6pbiM7tHX9CrvVj1IMwkL xtaZGCGPRDd/PZsk6+KvvXFYmEZshqYeHVJg4Ubz1IcrtD9fHCzdn6mWztpU13xh Fvgq4UxKsS7+tYn6eCAZmlcAwpqTFuVVo2oJtYORmhFd5C5SLeO8vA0wBDPjszS0 SJcZ6sDgHFqVOSapBio5gSs1N/4OYd4rkT2zUSqTF6l2EcF0TfK8fPrE0E8CuqAp OC02kd08Tqgip+7hpZwlDI0oPu98ZagisF/ILwRvT1tBQwsRO0BbnRs1ClKG4lop KMWNguFjmbxwypYZzA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:52:23 2025 by rpki-client