This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json) Hash identifier: bNAUp6DfkB0rlCcrtZFkuZfKnRrv+UyhSiYAyF8cCVE= Subject key identifier: 84:70:54:8A:F4:49:1E:71:EE:5B:54:82:02:FC:AB:39:A4:13:17:D2 Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439 Certificate serial: 019B49270603C102AD5FCC76129DBEA5526A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft Manifest number: 0ABE Signing time: Tue 23 Dec 2025 03:00:52 +0000 Manifest this update: Tue 23 Dec 2025 03:00:52 +0000 Manifest next update: Wed 24 Dec 2025 03:00:52 +0000 Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: 7vou+L/rYBAE0ZxfOAY6ZEeC9BxSKGjj+f+NbQKXeW4=) 2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=) 3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:06:03:c1:02:ad:5f:cc:76:12:9d:be:a5:52:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439 Validity Not Before: Dec 23 03:00:52 2025 GMT Not After : Dec 24 03:00:52 2025 GMT Subject: CN=8470548af4491e71ee5b548202fcab39a41317d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:01:c1:96:46:c6:af:a6:21:84:14:8d:d4: 45:b9:3f:4f:12:1d:ea:af:2d:d4:bb:7f:03:c8:66: f6:9b:ca:23:06:9e:33:3a:bc:6b:46:a9:eb:be:fa: 71:a3:bd:22:f1:1c:63:92:cd:4d:f8:60:9a:76:1c: 68:45:c3:96:61:47:d4:0c:4e:2d:a6:d0:87:8a:c2: 5f:46:a6:18:90:f8:93:8c:d2:56:5c:d9:6f:2e:fe: 95:9a:ef:1d:fa:e1:5b:d4:bb:be:27:65:35:f4:5e: 19:7c:4e:f9:c1:7e:0c:d9:c4:29:37:da:55:b5:d5: c4:ab:50:94:32:40:a1:c2:d3:1c:31:4b:20:04:75: 63:03:2d:5c:9e:67:cb:1b:3b:08:06:ea:97:a7:9d: e0:97:7e:25:b9:e8:d2:30:77:b8:dd:bb:23:52:c7: 0b:2a:5d:96:ca:14:8f:03:31:33:72:da:e3:aa:5a: e7:96:95:27:51:cc:2e:1e:30:ff:46:32:60:d8:1f: a6:a5:2e:2d:e6:1d:53:c3:1e:46:c2:a2:dd:21:b6: 32:87:29:1c:61:41:27:e9:b0:1a:3e:ac:7e:d0:f0: b9:29:ae:25:13:b5:b6:33:c8:9c:b0:8c:a6:2b:91: f1:c7:d6:4e:cd:a1:18:ea:d9:6e:86:ae:ca:d4:be: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:70:54:8A:F4:49:1E:71:EE:5B:54:82:02:FC:AB:39:A4:13:17:D2 X509v3 Authority Key Identifier: keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d1:b6:0c:d2:4d:9b:a9:34:c8:6b:69:5f:90:64:e0:0b:67: 25:57:12:33:4e:ee:80:22:18:8f:ff:aa:ab:d7:91:17:c9:6b: 13:5e:42:0e:dc:09:04:62:4d:bc:22:10:a5:2a:4b:d4:5d:58: 4d:7f:63:47:a9:12:0c:4a:1e:a5:93:65:b8:a5:71:6f:8c:19: 8c:94:72:1c:39:b3:01:a4:94:40:23:81:45:d9:d8:7d:05:5a: 06:e6:d1:32:75:fd:ee:f9:99:81:e6:16:4c:f4:cd:67:3f:18: 64:54:12:d8:b2:bb:91:ef:0d:50:74:ec:c5:7e:1a:7a:14:10: 36:25:1e:68:81:68:98:6e:32:ea:47:12:c4:34:f2:a9:42:4d: 7f:55:26:13:c3:08:44:93:79:c3:e5:c2:51:a0:9d:ce:35:c8: 7a:a7:b5:2e:f1:35:1b:fb:2b:21:91:af:31:cb:85:e0:e0:ac: 66:b7:e8:ea:b4:91:1f:aa:ae:82:70:f8:d3:ee:72:a8:c7:58: fb:84:be:bb:f2:b2:05:2a:c2:f2:d4:c3:4b:b4:08:31:e8:90: 66:e5:e9:4a:b6:58:bf:7a:5c:51:11:16:d5:ff:9f:d8:0e:90: d2:18:46:3d:03:27:8c:bb:a0:f6:e8:b5:c7:a0:64:bd:1f:14: da:4a:35:2a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtJJwYDwQKtX8x2Ep2+pVJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0 YTA0MzkwHhcNMjUxMjIzMDMwMDUyWhcNMjUxMjI0MDMwMDUyWjAzMTEwLwYDVQQD Eyg4NDcwNTQ4YWY0NDkxZTcxZWU1YjU0ODIwMmZjYWIzOWE0MTMxN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz50BwZZGxq+mIYQUjdRFuT9PEh3q ry3Uu38DyGb2m8ojBp4zOrxrRqnrvvpxo70i8Rxjks1N+GCadhxoRcOWYUfUDE4t ptCHisJfRqYYkPiTjNJWXNlvLv6Vmu8d+uFb1Lu+J2U19F4ZfE75wX4M2cQpN9pV tdXEq1CUMkChwtMcMUsgBHVjAy1cnmfLGzsIBuqXp53gl34luejSMHe43bsjUscL Kl2WyhSPAzEzctrjqlrnlpUnUcwuHjD/RjJg2B+mpS4t5h1Twx5GwqLdIbYyhykc YUEn6bAaPqx+0PC5Ka4lE7W2M8icsIymK5Hxx9ZOzaEY6tluhq7K1L4gWQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIRwVIr0SR5x7ltUggL8qzmkExfSMB8GA1UdIwQY MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9G2 DNJNm6k0yGtpX5Bk4AtnJVcSM07ugCIYj/+qq9eRF8lrE15CDtwJBGJNvCIQpSpL 1F1YTX9jR6kSDEoepZNluKVxb4wZjJRyHDmzAaSUQCOBRdnYfQVaBubRMnX97vmZ geYWTPTNZz8YZFQS2LK7ke8NUHTsxX4aehQQNiUeaIFomG4y6kcSxDTyqUJNf1Um E8MIRJN5w+XCUaCdzjXIeqe1LvE1G/srIZGvMcuF4OCsZrfo6rSRH6qugnD40+5y qMdY+4S+u/KyBSrC8tTDS7QIMeiQZuXpSrZYv3pcUREW1f+f2A6Q0hhGPQMnjLug 9ui1x6BkvR8U2ko1Kg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:32 2025 by rpki-client