This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json) Hash identifier: +krFR7OQo4NGE+d1yl2NEsjvTG+Q70UIGZXD47ePZts= Subject key identifier: 4A:A7:B7:62:86:AF:EF:4B:ED:5A:0F:EE:98:95:18:69:A5:03:E9:76 Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0 Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0 Certificate serial: 019B1871C60E4A7B9AC57BF5BBE65D8F6C53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft Manifest number: 0BC6 Signing time: Sat 13 Dec 2025 16:01:08 +0000 Manifest this update: Sat 13 Dec 2025 16:01:08 +0000 Manifest next update: Sun 14 Dec 2025 16:01:08 +0000 Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: uaGzsxf9evogZXMWLErneqIdrO/fowFyNLesSuTY16I=) 2: D9KqMTAksNO2iOKAwulZkRCL4Fw.roa (hash: x9me+db9iBftpJ/9nLLqbm0SGnpLl+KbaGJCrguqqhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:c6:0e:4a:7b:9a:c5:7b:f5:bb:e6:5d:8f:6c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0 Validity Not Before: Dec 13 16:01:08 2025 GMT Not After : Dec 14 16:01:08 2025 GMT Subject: CN=4aa7b76286afef4bed5a0fee98951869a503e976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:a4:68:bb:d4:42:07:43:1e:49:2d:c7:04: c9:16:55:f8:7f:49:97:f8:ba:2b:ee:61:fa:47:d2: 94:06:f6:d1:2b:a9:e5:a9:d0:8e:e6:54:1c:f3:bd: e8:a9:c7:3d:3c:f6:27:4c:4d:32:82:d1:fc:82:f3: d2:5d:57:25:ae:16:b0:dc:fe:78:39:7f:8b:5b:13: 96:b7:b1:c1:2d:50:d5:67:ce:f1:65:ed:b3:e1:45: 72:85:1c:7c:23:8a:ca:7e:94:ea:f8:5e:0c:0b:05: e2:68:7a:75:23:87:a4:e8:59:ee:70:be:ba:88:b6: 2d:d9:8b:d0:2d:50:c5:e1:e4:88:06:00:32:7e:f4: 2f:9a:b7:c1:98:55:ef:fa:fd:04:dc:b3:08:76:90: db:bf:df:94:0a:e8:2d:c9:3f:2d:51:1c:ab:20:7d: 97:af:1f:9d:33:77:11:e9:4f:64:9e:05:37:fb:ca: f2:f6:44:6d:86:90:f2:8f:25:71:ea:8c:b7:c0:4c: 9b:45:cc:69:c8:ed:1f:00:eb:2d:3f:c2:a1:cb:6b: eb:eb:7b:1e:24:f6:8e:49:bd:35:3c:da:50:0f:83: 10:69:44:50:e4:05:c8:79:8f:58:3a:66:9f:e2:f3: 40:60:e4:c6:9a:5f:4b:16:6d:e0:e1:89:84:6c:eb: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A7:B7:62:86:AF:EF:4B:ED:5A:0F:EE:98:95:18:69:A5:03:E9:76 X509v3 Authority Key Identifier: keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a6:c6:46:a1:ba:65:62:e6:e9:28:2b:37:e4:7e:42:ff:55: d5:18:9a:22:e0:62:07:6a:f6:8b:30:47:37:73:59:19:9e:ca: 1c:51:d5:4c:40:69:40:d3:4a:40:b0:8c:f3:e5:e5:78:0b:21: 3b:cf:5f:f7:73:6e:e7:9a:59:33:74:13:96:91:11:e1:67:8f: 53:a0:0c:b8:7b:89:05:5e:ff:71:b0:13:d0:c7:99:80:ad:74: dc:43:9f:86:cd:89:4a:83:83:13:e1:2a:ce:70:09:4a:4e:22: f0:e9:15:dd:ab:c8:38:4d:ac:52:af:c9:3e:0d:a1:fe:92:bf: 46:59:7d:92:b6:63:f8:5b:36:43:66:2e:c4:14:60:ca:5c:08: 96:73:c2:76:e7:c7:79:61:8f:fd:d0:b8:51:07:b6:bf:f3:0c: de:1d:ed:67:fe:ff:79:c9:80:44:2c:a3:ec:bb:cb:13:f6:fc: b2:34:56:b1:ec:25:a8:66:71:8b:05:1b:ea:6f:d8:6c:a4:69: 48:a9:3f:4e:7d:6e:b3:85:b2:15:27:5b:89:03:f8:53:48:21: 3f:23:45:2b:be:a6:f9:1c:e5:7b:45:15:ef:de:69:3c:48:06: b9:3c:53:7a:eb:69:df:b8:23:cc:30:9f:ce:45:52:45:d8:66: 1a:05:8e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYccYOSnuaxXv1u+Zdj2xTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1Zjk0Nzg2ZDAzNjY4NTQ0MDkwMWEzZGNlNWEzMzRjZjEz MjcyYTAwHhcNMjUxMjEzMTYwMTA4WhcNMjUxMjE0MTYwMTA4WjAzMTEwLwYDVQQD Eyg0YWE3Yjc2Mjg2YWZlZjRiZWQ1YTBmZWU5ODk1MTg2OWE1MDNlOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hykaLvUQgdDHkktxwTJFlX4f0mX +Lor7mH6R9KUBvbRK6nlqdCO5lQc873oqcc9PPYnTE0ygtH8gvPSXVclrhaw3P54 OX+LWxOWt7HBLVDVZ87xZe2z4UVyhRx8I4rKfpTq+F4MCwXiaHp1I4ek6FnucL66 iLYt2YvQLVDF4eSIBgAyfvQvmrfBmFXv+v0E3LMIdpDbv9+UCugtyT8tURyrIH2X rx+dM3cR6U9kngU3+8ry9kRthpDyjyVx6oy3wEybRcxpyO0fAOstP8Khy2vr63se JPaOSb01PNpQD4MQaURQ5AXIeY9YOmaf4vNAYOTGml9LFm3g4YmEbOs3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqnt2KGr+9L7VoP7piVGGmlA+l2MB8GA1UdIwQY MBaAFNX5R4bQNmhUQJAaPc5aM0zxMnKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3Njkt YzlhNjk2ODNhOGU4LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3NjktYzlhNjk2ODNhOGU4 LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJabGRqG6 ZWLm6SgrN+R+Qv9V1RiaIuBiB2r2izBHN3NZGZ7KHFHVTEBpQNNKQLCM8+XleAsh O89f93Nu55pZM3QTlpER4WePU6AMuHuJBV7/cbAT0MeZgK103EOfhs2JSoODE+Eq znAJSk4i8OkV3avIOE2sUq/JPg2h/pK/Rll9krZj+Fs2Q2YuxBRgylwIlnPCdufH eWGP/dC4UQe2v/MM3h3tZ/7/ecmARCyj7LvLE/b8sjRWsewlqGZxiwUb6m/YbKRp SKk/Tn1us4WyFSdbiQP4U0ghPyNFK76m+Rzle0UV795pPEgGuTxTeutp37gjzDCf zkVSRdhmGgWOjg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:18 2025 by rpki-client