This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json) Hash identifier: ut4zmKvAK/TZ63UYNUx0V17fjrvp4tzcPbQqCXEmzKY= Subject key identifier: A7:67:CF:2F:8A:0D:EC:10:0C:3F:F9:26:A5:B3:86:23:BF:EF:34:8C Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Certificate serial: 019B3B34F67D210A546DF8EC03339A819CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft Manifest number: 0747 Signing time: Sat 20 Dec 2025 10:01:25 +0000 Manifest this update: Sat 20 Dec 2025 10:01:25 +0000 Manifest next update: Sun 21 Dec 2025 10:01:25 +0000 Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: oDlv3J5MTn8VhRW+dClhAe/g41TVsvs65IaAt6Pd6QY=) 2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:f6:7d:21:0a:54:6d:f8:ec:03:33:9a:81:9c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Validity Not Before: Dec 20 10:01:25 2025 GMT Not After : Dec 21 10:01:25 2025 GMT Subject: CN=a767cf2f8a0dec100c3ff926a5b38623bfef348c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:52:3d:3f:02:84:eb:07:ed:ca:cd:7a:59: 5c:49:e8:fc:63:55:d5:67:57:6c:e3:3e:c8:9a:4f: 1a:34:32:e8:c0:bc:45:ec:bd:b6:16:c2:fb:32:76: c5:64:8b:33:f0:9f:a4:ca:51:b5:40:b6:e3:35:47: a6:e1:58:bf:07:02:96:2d:21:58:27:3a:1c:3c:b3: 58:bf:3c:bb:09:1b:f5:d8:d7:f6:8f:26:e3:f3:58: 5d:bf:1d:64:d9:e6:34:a9:a3:e7:2f:88:4c:a2:60: ca:99:53:25:54:3b:a0:bf:10:3f:e0:19:a5:7e:8c: b8:03:9e:27:6a:48:23:1c:4e:dd:a0:63:c4:2c:fb: 1e:f1:5e:32:0a:8a:ad:bb:67:5d:98:0d:da:e3:1c: 15:33:38:61:ff:89:68:89:82:68:19:ec:93:da:a3: 43:9d:cf:60:5a:c4:f1:8e:10:1f:34:58:9e:14:5a: 0b:5b:45:b3:e4:0e:7b:d3:83:c9:c2:9a:eb:df:f2: 2e:1c:e5:f0:7d:95:a3:2c:d2:2a:55:fc:05:88:26: ea:87:ab:34:95:e0:3b:79:00:16:bb:8a:b1:58:d4: 5b:14:65:1b:64:59:93:7c:57:7a:b3:93:f8:6f:10: a1:b4:21:fd:39:31:7f:64:73:c4:ba:18:38:2d:43: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:67:CF:2F:8A:0D:EC:10:0C:3F:F9:26:A5:B3:86:23:BF:EF:34:8C X509v3 Authority Key Identifier: keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c8:f6:9e:7d:07:c9:9b:96:b6:c7:b2:41:91:d5:01:8f:6f: 05:2e:96:dd:53:b7:c0:2c:39:60:8e:21:f6:1d:dc:aa:ad:36: b8:3a:65:3c:aa:87:f7:f8:20:0d:45:3e:39:3d:05:0f:bb:07: 1c:37:90:5c:e9:da:6a:d8:7d:e8:dd:37:f8:9d:30:d6:c4:ce: a8:fc:7b:71:48:95:d8:72:7c:05:46:51:a2:46:c0:42:07:79: 14:30:9e:ec:04:c6:ec:d9:44:73:34:bb:f1:6e:c6:35:46:26: 9d:9e:95:32:6a:71:1e:55:fc:e2:26:e0:24:93:64:13:2a:e7: 82:d5:29:3e:68:c0:a1:a5:45:1b:99:3b:2b:a0:ec:a9:8e:bb: 98:d8:24:66:a8:1b:81:3b:21:6f:f6:8b:34:92:7a:f7:38:de: 9e:97:ca:fc:9b:97:d0:7b:4c:94:60:29:ab:d2:35:3c:d9:d0: 76:bd:ba:bb:35:30:b9:76:af:06:f4:9e:c6:98:a8:5f:6b:e4: 42:41:45:9f:5e:3f:3e:a8:52:a8:a5:f1:19:03:2b:c3:be:d1: 4e:82:64:d4:2b:7b:e8:0a:c3:ac:e6:04:71:51:d7:0d:04:87: d4:47:72:ad:95:83:d7:1d:96:31:dc:6a:0b:77:ff:ea:84:3c: 56:de:6e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NPZ9IQpUbfjsAzOagZzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy ZjMyMWIwHhcNMjUxMjIwMTAwMTI1WhcNMjUxMjIxMTAwMTI1WjAzMTEwLwYDVQQD EyhhNzY3Y2YyZjhhMGRlYzEwMGMzZmY5MjZhNWIzODYyM2JmZWYzNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAualSPT8ChOsH7crNellcSej8Y1XV Z1ds4z7Imk8aNDLowLxF7L22FsL7MnbFZIsz8J+kylG1QLbjNUem4Vi/BwKWLSFY JzocPLNYvzy7CRv12Nf2jybj81hdvx1k2eY0qaPnL4hMomDKmVMlVDugvxA/4Bml foy4A54nakgjHE7doGPELPse8V4yCoqtu2ddmA3a4xwVMzhh/4loiYJoGeyT2qND nc9gWsTxjhAfNFieFFoLW0Wz5A5704PJwprr3/IuHOXwfZWjLNIqVfwFiCbqh6s0 leA7eQAWu4qxWNRbFGUbZFmTfFd6s5P4bxChtCH9OTF/ZHPEuhg4LUP4BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdnzy+KDewQDD/5JqWzhiO/7zSMMB8GA1UdIwQY MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8j2nn0H yZuWtseyQZHVAY9vBS6W3VO3wCw5YI4h9h3cqq02uDplPKqH9/ggDUU+OT0FD7sH HDeQXOnaath96N03+J0w1sTOqPx7cUiV2HJ8BUZRokbAQgd5FDCe7ATG7NlEczS7 8W7GNUYmnZ6VMmpxHlX84ibgJJNkEyrngtUpPmjAoaVFG5k7K6DsqY67mNgkZqgb gTshb/aLNJJ69zjenpfK/JuX0HtMlGApq9I1PNnQdr26uzUwuXavBvSexpioX2vk QkFFn14/PqhSqKXxGQMrw77RToJk1Ct76ArDrOYEcVHXDQSH1EdyrZWD1x2WMdxq C3f/6oQ8Vt5ukg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:59:04 2025 by rpki-client