This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json) Hash identifier: FMALyA973Mpj1Qob/mZCtE1YidOEd4vQFHyDzgrvoUk= Subject key identifier: 57:ED:EC:7B:EB:8D:D8:5A:E3:27:54:50:33:85:50:56:C4:13:60:5B Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B Certificate issuer: /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b Certificate serial: 019B2EF91DA5C757B2C8B82A9FDBA6C2ED38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft Manifest number: 0461 Signing time: Thu 18 Dec 2025 01:00:36 +0000 Manifest this update: Thu 18 Dec 2025 01:00:36 +0000 Manifest next update: Fri 19 Dec 2025 01:00:36 +0000 Files and hashes: 1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: m4XTBuUaMPp8g1UAOvRaVusHHfRiRojqPtAucanR6SM=) 2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:1d:a5:c7:57:b2:c8:b8:2a:9f:db:a6:c2:ed:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b Validity Not Before: Dec 18 01:00:36 2025 GMT Not After : Dec 19 01:00:36 2025 GMT Subject: CN=57edec7beb8dd85ae327545033855056c413605b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:b6:fb:38:81:c2:60:3f:8c:26:ba:f6:92: 4a:9f:a9:79:b6:78:85:f0:ba:ef:5e:29:8b:b3:d7: 54:f7:9f:05:a4:a9:6c:8e:14:e0:2c:8c:1b:24:d9: 27:1d:55:58:86:9d:66:9f:f1:54:80:d1:ca:90:8a: 48:a7:58:a9:cb:e4:15:9d:6e:45:f4:1d:01:66:54: e1:0e:fe:13:34:49:75:09:e4:2b:09:48:78:c9:eb: cd:02:d9:43:76:e4:3c:5c:24:4e:f2:8a:81:af:61: 69:d4:14:b7:06:03:09:7a:af:7b:d0:3f:46:a3:c4: 20:a5:d5:bb:f5:71:06:42:5e:98:db:e8:8a:a6:d0: ae:b0:3f:71:68:48:5e:c4:be:42:d0:d4:b6:20:8f: c9:b5:66:82:e3:97:ea:b2:af:38:59:c2:ea:5f:aa: ea:52:b0:a8:af:e4:fd:00:99:4a:47:b6:6d:c8:68: 99:6d:b2:1c:a0:6c:b7:64:04:0e:41:0e:3b:fe:ad: 9c:2d:9e:45:da:4e:47:ac:59:91:fe:aa:43:e0:5c: f3:f9:1e:c3:f0:07:d5:25:14:4e:50:e0:7f:a3:37: 30:e2:86:df:6c:86:8f:7c:53:d3:7b:ed:55:0c:a8: 7d:7d:64:9a:ae:1a:19:ca:6c:55:b2:4e:a4:c7:81: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:ED:EC:7B:EB:8D:D8:5A:E3:27:54:50:33:85:50:56:C4:13:60:5B X509v3 Authority Key Identifier: keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:44:b5:2e:d5:77:12:a1:8a:61:a9:c6:5b:5e:20:e7:f9:35: 09:ca:f9:e1:fb:8d:e8:f5:66:1d:4d:99:24:d9:0c:1c:cf:d8: da:a1:b5:af:90:6a:06:18:0f:21:01:c8:bc:24:e4:86:24:51: 6f:a7:65:0a:3c:32:44:cc:92:e0:42:2f:b8:fd:e4:2d:7a:f7: dd:9d:76:3f:f2:d9:bd:d8:71:6d:a9:20:94:f0:49:07:19:91: c4:11:cf:c9:ae:79:91:ea:60:29:da:17:83:94:88:58:2c:1a: 84:9b:38:26:7e:99:45:88:93:59:18:03:5e:8c:38:4a:82:7e: 33:40:cd:0e:66:4c:ea:8a:ea:57:d6:1c:31:e7:ef:6b:9c:6a: d8:d0:ee:5c:a3:cc:4a:3c:93:e0:f1:a3:3b:18:b6:54:7f:9b: 9d:dd:d6:3c:04:a4:42:19:aa:73:87:af:3f:8c:a8:9a:39:d7: 12:a7:4b:4b:4d:2b:94:7b:6e:e1:68:f6:52:a1:6b:a2:83:3a: 47:31:c8:de:6f:46:7e:f5:e2:8c:e9:47:b6:78:7d:d1:24:04: 8d:d1:de:10:0c:d0:a8:06:86:07:6c:8a:f2:85:7f:66:fe:0f: 46:72:ec:16:02:99:80:65:36:e8:63:a9:3d:f8:89:f2:04:4b: fa:2a:a2:c4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsu+R2lx1eyyLgqn9umwu04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMDg5NmNmMTgyM2M3NGJmY2I3ZDYyM2UyYzQzODc4N2I5 ZjE2N2IwHhcNMjUxMjE4MDEwMDM2WhcNMjUxMjE5MDEwMDM2WjAzMTEwLwYDVQQD Eyg1N2VkZWM3YmViOGRkODVhZTMyNzU0NTAzMzg1NTA1NmM0MTM2MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYK2+ziBwmA/jCa69pJKn6l5tniF 8LrvXimLs9dU958FpKlsjhTgLIwbJNknHVVYhp1mn/FUgNHKkIpIp1ipy+QVnW5F 9B0BZlThDv4TNEl1CeQrCUh4yevNAtlDduQ8XCRO8oqBr2Fp1BS3BgMJeq970D9G o8QgpdW79XEGQl6Y2+iKptCusD9xaEhexL5C0NS2II/JtWaC45fqsq84WcLqX6rq UrCor+T9AJlKR7ZtyGiZbbIcoGy3ZAQOQQ47/q2cLZ5F2k5HrFmR/qpD4Fzz+R7D 8AfVJRROUOB/ozcw4obfbIaPfFPTe+1VDKh9fWSarhoZymxVsk6kx4HKcQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFft7Hvrjdha4ydUUDOFUFbEE2BbMB8GA1UdIwQY MBaAFPoIls8YI8dL/LfWI+LEOHh7nxZ7MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1naVd6eGdqeDB2OHQ5WWo0c1E0ZUh1ZkZucy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYTI3NjIwLWQzMmQtNGU5OC1hZWM0 LWJmNmE5N2E1NmYxMC8xLzEtZ2lXenhnangwdjh0OVlqNHNRNGVIdWZGbnMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzc5L2EyNzYyMC1kMzJkLTRlOTgtYWVjNC1iZjZhOTdhNTZm MTAvMS8xLWdpV3p4Z2p4MHY4dDlZajRzUTRlSHVmRm5zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkS1 LtV3EqGKYanGW14g5/k1Ccr54fuN6PVmHU2ZJNkMHM/Y2qG1r5BqBhgPIQHIvCTk hiRRb6dlCjwyRMyS4EIvuP3kLXr33Z12P/LZvdhxbakglPBJBxmRxBHPya55kepg KdoXg5SIWCwahJs4Jn6ZRYiTWRgDXow4SoJ+M0DNDmZM6orqV9YcMefva5xq2NDu XKPMSjyT4PGjOxi2VH+bnd3WPASkQhmqc4evP4yomjnXEqdLS00rlHtu4Wj2UqFr ooM6RzHI3m9GfvXijOlHtnh90SQEjdHeEAzQqAaGB2yK8oV/Zv4PRnLsFgKZgGU2 6GOpPfiJ8gRL+iqixA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:29:23 2025 by rpki-client