This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json) Hash identifier: FwGcXknGoBEj1b3i1TmeEqzqTMv/w9doljqwIkPHbiA= Subject key identifier: 17:9F:AA:41:04:08:40:D2:6C:22:56:B8:1D:AA:A9:AB:7B:BB:1B:A3 Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Certificate serial: 019B3569986641594972143C299ADCFEBB38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft Manifest number: 0744 Signing time: Fri 19 Dec 2025 07:01:11 +0000 Manifest this update: Fri 19 Dec 2025 07:01:11 +0000 Manifest next update: Sat 20 Dec 2025 07:01:11 +0000 Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: WdWy07jpJfb+w5HzNMnNzgxOMgotdujptRHeLkNZ9v8=) 2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:98:66:41:59:49:72:14:3c:29:9a:dc:fe:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Validity Not Before: Dec 19 07:01:11 2025 GMT Not After : Dec 20 07:01:11 2025 GMT Subject: CN=179faa41040840d26c2256b81daaa9ab7bbb1ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:0c:b3:bc:b6:34:e1:b3:82:14:b6:e2:00: 57:46:82:7f:96:15:9c:7f:d7:1b:9e:d5:3c:7d:01: 67:38:c1:25:39:c0:ba:cb:9e:55:bd:14:0c:bf:42: 29:f5:d7:aa:be:b7:96:49:69:9b:cc:97:05:1c:a5: 91:5d:97:5a:b7:34:f2:5e:4e:1f:52:d5:c5:80:cc: 8c:6b:b5:f5:74:12:20:32:00:1e:af:59:58:0f:7b: af:cf:b4:89:de:e1:05:80:a0:5f:44:8c:5f:37:9f: 1e:33:32:2c:e1:7a:46:d1:2e:2e:c0:36:ce:1d:f1: 4f:7b:a3:36:fb:a3:a7:aa:74:7a:6a:ec:83:d5:05: 05:de:f3:f3:24:f9:80:7a:d0:1b:09:d4:cc:44:c1: 37:bf:0a:d2:ea:cb:24:a2:bc:f2:7c:73:2b:75:28: de:0e:05:3c:6c:96:9d:5a:07:3c:f8:02:e4:68:b9: b2:a9:44:2c:b7:dd:a1:f9:8d:a0:86:ae:49:8c:cf: 45:22:60:73:61:3d:11:67:2c:7c:a9:da:80:e0:a6: 17:b8:3e:2a:d4:24:8f:21:29:0d:9a:00:85:a9:07: 58:26:cf:af:8d:4c:f2:eb:42:71:ba:53:d4:61:e8: ad:8a:9c:f7:0c:b8:1e:8b:56:bd:f5:58:8f:3b:aa: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9F:AA:41:04:08:40:D2:6C:22:56:B8:1D:AA:A9:AB:7B:BB:1B:A3 X509v3 Authority Key Identifier: keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:aa:32:3a:83:4b:c2:86:16:a7:c0:bd:91:c9:f1:e6:d2:cc: d5:fe:44:4b:e4:24:f2:ae:6a:c9:25:51:65:b5:d1:1c:8a:9d: 43:5c:49:aa:2b:a9:db:42:8b:e1:d8:fd:ab:21:3b:36:35:8c: 25:67:c1:7e:70:8e:3e:a7:5a:a0:ad:ba:29:69:b6:98:3f:75: 3e:b6:fa:85:af:3e:8d:0c:a9:e9:f5:2a:cb:5d:67:91:54:39: 3e:66:66:1a:cf:df:58:4d:c8:b5:02:0a:4d:30:4d:f8:e0:9f: f0:d5:38:b3:e3:36:18:c2:97:ca:69:ad:c3:40:93:09:56:55: 41:1e:35:20:9a:8b:46:8b:d8:76:3b:68:bc:7c:77:03:5c:44: 82:0f:0d:a5:aa:82:fc:d0:39:db:1b:44:72:3e:61:d9:8d:30: 6c:f9:87:38:a0:db:87:4a:f4:b5:de:8a:2a:47:74:96:24:4d: a4:d4:f4:a4:89:56:00:75:46:d9:a4:ee:6c:77:b7:74:39:0d: cb:7d:ed:8c:dc:2c:44:50:b1:a6:21:b5:b9:87:2c:63:f1:0c: 59:c4:44:b1:96:e7:54:cd:d3:73:35:3c:28:46:3a:0d:01:ea: ee:c4:98:84:0c:83:cc:cc:5b:31:a4:bb:48:65:4d:3a:97:2f: 5b:f9:c6:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZhmQVlJchQ8KZrc/rs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy ZjMyMWIwHhcNMjUxMjE5MDcwMTExWhcNMjUxMjIwMDcwMTExWjAzMTEwLwYDVQQD EygxNzlmYWE0MTA0MDg0MGQyNmMyMjU2YjgxZGFhYTlhYjdiYmIxYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcwMs7y2NOGzghS24gBXRoJ/lhWc f9cbntU8fQFnOMElOcC6y55VvRQMv0Ip9deqvreWSWmbzJcFHKWRXZdatzTyXk4f UtXFgMyMa7X1dBIgMgAer1lYD3uvz7SJ3uEFgKBfRIxfN58eMzIs4XpG0S4uwDbO HfFPe6M2+6OnqnR6auyD1QUF3vPzJPmAetAbCdTMRME3vwrS6sskorzyfHMrdSje DgU8bJadWgc8+ALkaLmyqUQst92h+Y2ghq5JjM9FImBzYT0RZyx8qdqA4KYXuD4q 1CSPISkNmgCFqQdYJs+vjUzy60JxulPUYeitipz3DLgei1a99ViPO6qX3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBefqkEECEDSbCJWuB2qqat7uxujMB8GA1UdIwQY MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6oyOoNL woYWp8C9kcnx5tLM1f5ES+Qk8q5qySVRZbXRHIqdQ1xJqiup20KL4dj9qyE7NjWM JWfBfnCOPqdaoK26KWm2mD91Prb6ha8+jQyp6fUqy11nkVQ5PmZmGs/fWE3ItQIK TTBN+OCf8NU4s+M2GMKXymmtw0CTCVZVQR41IJqLRovYdjtovHx3A1xEgg8NpaqC /NA52xtEcj5h2Y0wbPmHOKDbh0r0td6KKkd0liRNpNT0pIlWAHVG2aTubHe3dDkN y33tjNwsRFCxpiG1uYcsY/EMWcREsZbnVM3TczU8KEY6DQHq7sSYhAyDzMxbMaS7 SGVNOpcvW/nGmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:35 2025 by rpki-client