This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json) Hash identifier: VGeG7O6KCEm5vhzXhNqEiJGIbZ79vaHY5yV9MLsoago= Subject key identifier: 06:CB:5B:5D:5B:55:07:08:51:A0:C4:8E:2C:FC:AE:4C:37:15:F2:EB Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56 Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956 Certificate serial: 019B5B63F4D8B7F5A0FE912761D0DFD7B07A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft Manifest number: 0AC7 Signing time: Fri 26 Dec 2025 16:00:35 +0000 Manifest this update: Fri 26 Dec 2025 16:00:35 +0000 Manifest next update: Sat 27 Dec 2025 16:00:35 +0000 Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: grs7+Yjlu7YExCJ/SGcQ5NG/TP6VRELTbrOmZOZ8d58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:63:f4:d8:b7:f5:a0:fe:91:27:61:d0:df:d7:b0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956 Validity Not Before: Dec 26 16:00:35 2025 GMT Not After : Dec 27 16:00:35 2025 GMT Subject: CN=06cb5b5d5b55070851a0c48e2cfcae4c3715f2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:59:00:c0:66:a6:61:14:34:d5:1f:d4:30:0f: 0a:9a:85:2a:43:74:78:87:f3:65:bc:1a:d2:b8:18: c9:67:e5:cf:e1:50:1b:14:61:09:ba:c2:6d:6f:8c: 7a:d8:6d:46:fa:6e:00:26:0a:63:3d:e9:c8:55:db: 22:b2:d9:8f:58:2f:1d:7f:4d:52:02:54:94:99:b1: 29:42:9b:81:55:4a:94:a8:a7:67:91:a2:2b:8e:14: a1:9f:e5:56:df:b3:bc:14:81:11:53:50:a5:c2:8e: 74:fc:28:9e:88:84:7c:6e:7c:c8:db:5c:3c:99:01: fc:4f:8d:bf:d7:5c:f1:72:e9:14:0e:d0:9b:41:d2: bb:8c:bb:3f:59:9f:64:5f:a7:41:ab:a4:87:3b:49: 33:fc:39:a9:a9:a6:f8:8d:8c:74:ab:31:b4:1a:14: 1f:b9:6f:61:72:3b:8b:db:52:ad:c3:0c:1f:e8:bc: 64:99:07:c3:ad:b6:e5:5f:9e:b8:57:ae:0d:bb:c2: 5b:c8:48:f7:6a:3d:b8:1c:42:51:6f:1f:79:39:cc: be:8c:be:2a:9f:6c:98:8c:93:7e:87:a2:05:c5:e8: a5:6b:16:0c:e5:ac:ac:81:13:66:7d:36:00:e2:34: 04:a6:ab:c9:ee:d2:05:f1:c7:f3:71:67:a3:6c:a1: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CB:5B:5D:5B:55:07:08:51:A0:C4:8E:2C:FC:AE:4C:37:15:F2:EB X509v3 Authority Key Identifier: keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:21:fa:54:60:df:53:09:1d:35:f0:5b:db:a0:b0:a7:18:29: 7d:17:01:4e:a4:58:03:7b:7e:5e:5c:ee:8f:6e:53:9d:0e:37: 1b:62:69:81:75:1a:34:fe:53:95:81:a4:fc:9f:a9:4a:a3:c3: 4e:7d:9e:82:40:7d:36:02:ec:01:35:30:5a:64:41:f6:d9:34: 1c:57:1c:6e:1e:a0:d6:06:ce:d2:7e:87:bf:e6:94:0e:30:36: 97:9e:e7:4d:03:ad:f2:78:65:c9:44:73:eb:04:fa:a1:87:32: e1:b1:e1:f7:4e:cd:f4:10:01:b5:d2:fe:70:67:25:11:08:f3: e7:27:4b:09:d1:c2:a3:d4:51:f2:80:c9:94:2b:0e:4c:b6:c4: 76:16:87:66:14:27:5b:02:71:f7:a3:8c:9a:a0:9d:cd:9d:7d: ed:93:99:84:f5:5c:34:b6:db:2f:45:67:42:8a:ca:ac:ff:7b: 87:ac:1c:2f:d3:df:55:fe:1a:66:09:60:6d:b0:91:79:34:75: 68:c8:06:a6:b2:ba:11:a5:8c:ad:a8:52:e0:3f:69:ba:01:86: f0:fb:8e:51:6e:a1:43:5b:d8:8e:71:86:5f:86:89:14:f3:85: 44:4a:9d:cc:e5:08:67:ff:ff:15:b9:42:a6:29:61:6a:f1:28: b5:94:97:ab -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtbY/TYt/Wg/pEnYdDf17B6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTZiNzliMDM5N2ViNDVlZTgyN2E0ZDYzZGNhNzQ3Njk1 NTI5NTYwHhcNMjUxMjI2MTYwMDM1WhcNMjUxMjI3MTYwMDM1WjAzMTEwLwYDVQQD EygwNmNiNWI1ZDViNTUwNzA4NTFhMGM0OGUyY2ZjYWU0YzM3MTVmMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VkAwGamYRQ01R/UMA8KmoUqQ3R4 h/NlvBrSuBjJZ+XP4VAbFGEJusJtb4x62G1G+m4AJgpjPenIVdsistmPWC8df01S AlSUmbEpQpuBVUqUqKdnkaIrjhShn+VW37O8FIERU1Clwo50/CieiIR8bnzI21w8 mQH8T42/11zxcukUDtCbQdK7jLs/WZ9kX6dBq6SHO0kz/Dmpqab4jYx0qzG0GhQf uW9hcjuL21Ktwwwf6LxkmQfDrbblX564V64Nu8JbyEj3aj24HEJRbx95Ocy+jL4q n2yYjJN+h6IFxeilaxYM5aysgRNmfTYA4jQEpqvJ7tIF8cfzcWejbKG3GwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAbLW11bVQcIUaDEjiz8rkw3FfLrMB8GA1UdIwQY MBaAFPimt5sDl+tF7oJ6TWPcp0dpVSlWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LYTNtd09YNjBYdWducE5ZOXluUjJsVktWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYjkzN2ZhLWVmNTUtNGU0NS04NGMw LTlmNTAyZGY0ZmY2NS8xLzEtS2EzbXdPWDYwWHVnbnBOWTl5blIybFZLVlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk0L2I5MzdmYS1lZjU1LTRlNDUtODRjMC05ZjUwMmRmNGZm NjUvMS8xLUthM213T1g2MFh1Z25wTlk5eW5SMmxWS1ZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCH6 VGDfUwkdNfBb26CwpxgpfRcBTqRYA3t+Xlzuj25TnQ43G2JpgXUaNP5TlYGk/J+p SqPDTn2egkB9NgLsATUwWmRB9tk0HFccbh6g1gbO0n6Hv+aUDjA2l57nTQOt8nhl yURz6wT6oYcy4bHh907N9BABtdL+cGclEQjz5ydLCdHCo9RR8oDJlCsOTLbEdhaH ZhQnWwJx96OMmqCdzZ197ZOZhPVcNLbbL0VnQorKrP97h6wcL9PfVf4aZglgbbCR eTR1aMgGprK6EaWMrahS4D9pugGG8PuOUW6hQ1vYjnGGX4aJFPOFREqdzOUIZ/// FblCpilhavEotZSXqw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:35 2025 by rpki-client