This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: ffDjuB2HzeHNAMaSZSba5djD4QQ8OTBBYUPnfGY1b5E= Subject key identifier: 4D:EB:3D:25:D2:71:3E:EF:07:FF:8C:C5:04:77:43:F1:36:B8:05:CD Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B12A6AC04342ED92C20F41BF368D1D110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 13:01:11 +0000 Manifest this update: Fri 12 Dec 2025 13:01:11 +0000 Manifest next update: Sat 13 Dec 2025 13:01:11 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: Xlm0UwR+TxPpuR4hSHck3UntLZgxl0cGck8Yjnh+PUg=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 7: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 8: lv4HmOqEkoJhmZ694ZcdnLwYlAM.roa (hash: jNXlLdUizmlPS7y4NkIFg6Z2F2lK4SSREn91C27cUCo=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:ac:04:34:2e:d9:2c:20:f4:1b:f3:68:d1:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Dec 12 13:01:11 2025 GMT Not After : Dec 13 13:01:11 2025 GMT Subject: CN=4deb3d25d2713eef07ff8cc5047743f136b805cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:9c:92:8c:33:01:77:6e:63:70:63:7f:52: 40:77:80:4b:73:c4:4f:08:42:3b:50:65:96:09:35: e2:a9:34:7c:bd:24:4a:eb:c2:1a:4e:56:88:c1:f7: 51:9f:66:9e:8b:eb:10:77:27:78:a4:b7:b0:39:72: 73:c9:ff:0f:9f:01:fe:d1:1f:2f:47:d1:ea:f4:9e: 4a:72:23:74:85:1f:1e:87:d8:58:65:76:71:81:b3: fe:f0:3f:f1:18:8f:61:a2:ad:d2:46:2b:2b:31:b5: 99:6c:41:d9:17:d0:44:4e:0d:c4:ce:44:d7:8c:3b: 0c:43:2e:8b:86:35:5d:a5:8b:cb:09:c7:e5:81:18: a1:64:7b:f0:4f:ad:70:67:f8:31:b7:e9:f3:03:1f: d0:bf:75:f2:b8:6f:ba:d7:f4:0f:ed:48:86:d4:0c: 5e:6d:62:e2:d6:34:c5:f2:e8:4d:45:58:10:39:b9: 01:6a:bb:0c:7d:af:9d:d3:82:23:03:e5:c0:b3:2c: b2:79:b3:b9:ed:f4:e9:eb:51:e1:c9:58:e7:38:b3: 73:b3:a4:f7:26:a7:8c:39:6b:c3:cd:ff:f0:10:21: 7f:a9:a6:61:9a:28:a6:0e:38:b2:20:e9:8d:76:d4: 6a:58:ee:39:fe:3d:a3:fc:e5:44:81:5a:6e:ee:f5: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EB:3D:25:D2:71:3E:EF:07:FF:8C:C5:04:77:43:F1:36:B8:05:CD X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:95:20:9d:d9:88:e3:6a:5d:5f:22:7f:8e:c5:b6:05:02:d4: 37:d9:0e:9f:3d:29:d9:50:42:59:98:09:d0:05:44:3e:50:ba: a1:35:53:ca:ac:6a:15:c7:27:3f:de:8a:00:50:8a:77:2e:c0: 1c:d8:1d:39:36:ca:d3:de:08:1b:18:6d:fd:c5:8e:31:a2:3c: 94:23:94:25:68:00:56:cd:86:c5:3b:0e:c9:c9:ef:a6:e0:65: 7b:c9:ee:39:9c:91:1c:5b:2d:ec:b7:52:57:b2:70:5c:22:d2: 1b:cb:c6:5e:23:6a:e7:31:c0:cb:79:e6:9b:eb:92:3e:36:d0: 18:2c:7e:2d:16:6b:1c:89:d9:8d:d3:6f:f9:b9:94:3b:14:c3: 43:59:ed:1f:8e:a7:a8:97:ee:07:15:67:a5:bb:0c:1f:b1:2e: d9:28:82:a8:68:97:ea:aa:3c:6f:33:09:18:7e:4f:66:c6:06: 98:c1:b5:73:17:b5:cc:0b:0f:7b:39:ae:33:ca:90:eb:c6:17: 0d:cb:0a:ee:74:1d:8a:19:5f:95:ed:10:d0:df:80:3f:ae:cf: 16:38:8e:b8:97:30:ed:e1:a8:94:98:96:03:0d:b8:20:59:e5: 20:ff:60:d0:b2:76:4c:88:82:c9:58:11:a7:59:85:03:70:ed: 60:d7:d5:8f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsSpqwENC7ZLCD0G/No0dEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUxMjEyMTMwMTExWhcNMjUxMjEzMTMwMTExWjAzMTEwLwYDVQQD Eyg0ZGViM2QyNWQyNzEzZWVmMDdmZjhjYzUwNDc3NDNmMTM2YjgwNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvqckowzAXduY3Bjf1JAd4BLc8RP CEI7UGWWCTXiqTR8vSRK68IaTlaIwfdRn2aei+sQdyd4pLewOXJzyf8PnwH+0R8v R9Hq9J5KciN0hR8eh9hYZXZxgbP+8D/xGI9hoq3SRisrMbWZbEHZF9BETg3EzkTX jDsMQy6LhjVdpYvLCcflgRihZHvwT61wZ/gxt+nzAx/Qv3XyuG+61/QP7UiG1Axe bWLi1jTF8uhNRVgQObkBarsMfa+d04IjA+XAsyyyebO57fTp61HhyVjnOLNzs6T3 JqeMOWvDzf/wECF/qaZhmiimDjiyIOmNdtRqWO45/j2j/OVEgVpu7vXkIQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE3rPSXScT7vB/+MxQR3Q/E2uAXNMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpUg ndmI42pdXyJ/jsW2BQLUN9kOnz0p2VBCWZgJ0AVEPlC6oTVTyqxqFccnP96KAFCK dy7AHNgdOTbK094IGxht/cWOMaI8lCOUJWgAVs2GxTsOycnvpuBle8nuOZyRHFst 7LdSV7JwXCLSG8vGXiNq5zHAy3nmm+uSPjbQGCx+LRZrHInZjdNv+bmUOxTDQ1nt H46nqJfuBxVnpbsMH7Eu2SiCqGiX6qo8bzMJGH5PZsYGmMG1cxe1zAsPezmuM8qQ 68YXDcsK7nQdihlfle0Q0N+AP67PFjiOuJcw7eGolJiWAw24IFnlIP9g0LJ2TIiC yVgRp1mFA3DtYNfVjw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:40 2025 by rpki-client